Langkah 1
Kita masukan rule di firewall untuk mendapatkan IP dari download server dan memasukan IP tersebut ke
dalam address list
/ip firewall filter add chain=forward \
src-address=192.168.10.0/24 protocol=tcp content=.mp3 \
action=add-dst-to-address-list address-list=downloads \
address-list-timeout=01:00:00
/ip firewall filter add chain=forward \
src-address=192.168.10.0/24 protocol=tcp content=.exe \
action=add-dst-to-address-list address-list=downloads \
address-list-timeout=01:00:00
Rule diatas akan menangkap semua traffic dengan content .mp3 dan .exe yang berasal dari blok IP LAN dan
memasukannya ke addres list downloads selama 1 jam.
Langkah 2
Kita lakukan mangle untuk marking paket yang berasal dari address list yang telah kita dapat dari
Langkah 1
/ip firewall mangle add chain=forward \
protocol=tcp src-address-list=downloads \
action=mark-packet new-packet-mark=download-paket
Mangle ini kita perlukan untuk melabeli paket sehingga simple queue dapat menangkap traffic dari IP-IP
yang telah terdapat pada address list "downloads"
Langkah 3
Langkah terakhir kita masukkan simple queue dari paket mark yang telah kita dapet dari langkah 2
/queue simple add name=download-files \
max-limit=64000/64000 packet-marks=download-paket
Letakan queue di urutan paling atas supaya dibaca dulu oleh mikortik
cara lainnya:
/ip firewall ma
add chain=forward protocol=tcp content=.exe \
action=mark-connection new-connection-mark=con-dowloader passthrough=yes \
comment="" disabled=no
add chain=output protocol=tcp content=.exe \
action=mark-connection new-connection-mark=con-dowloader passthrough=yes \
comment="" disabled=no
add chain=forward protocol=tcp content=.avi \
action=mark-connection new-connection-mark=con-dowloader passthrough=yes \
comment="" disabled=no
add chain=output protocol=tcp content=.avi \
action=mark-connection new-connection-mark=con-dowloader passthrough=yes \
comment="" disabled=no
add chain=forward protocol=tcp content=.zip \
action=mark-connection new-connection-mark=con-dowloader passthrough=yes \
comment="" disabled=no
add chain=output protocol=tcp content=.zip \
action=mark-connection new-connection-mark=con-dowloader passthrough=yes \
comment="" disabled=no
add chain=output connection-mark=con-dowloader action=mark-packet \
new-packet-mark=downloader-pkt passthrough=no comment="" disabled=no
add chain=forward connection-mark=con-dowloader action=mark-packet \
new-packet-mark=downloader-pkt passthrough=no comment="" disabled=no
*tambahin sendiri ext pa ja sampe puaas taro diatas
queuenya
Quote:
/queue simple
add name="downloader" dst-address=0.0.0.0/0 interface=all \
packet-marks=downloader-pkt direction=both priority=8 \
queue=default-small/default-small limit-at=0/64000 max-limit=0/64000 \
burst-limit=/128000 burst-threshold=/96000 burst-time=/10s \
total-queue=default-small disabled=no
0 comments:
Post a Comment