Jasa setting mikrotik warnet

Jasa Setting Mikrotik Warnet Multi Indo Media Sekadau Kalimantan Barat - Jasa setting mikrotik warnet. beberapa settingan saya dokumentasikan sendiri terkadang bisa juga sudah berubah dan tidak saya gunakan lagi, namun sebagai acuan saya kadang configurasi yang diposting disini masih di ambil sebagian serta menyesuaikannya terhadap ke inginan pelanggan.

Untuk rule yang-ada lebih baik di fahami dahulu sebelum menggunakannya karena disini saya tidak menyebutkan configurasi-mikrotik ini di gunakan untuk apa yang pasti setting-mikrotik-warnet.

Penangkap dan pengoleksi ip address game online indonesia. Atau bisa juga ambil list ipnya yang ada di address-list ip game online indonesia

/ip firewall filter
add action=add-dst-to-address-list address-list=FB-Game address-list-timeout=0s chain=forward disabled=no dst-port=843,9339,8291 in-interface=ether3 protocol=\
tcp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=\
1818,2001,3010,4300,5105,5121,5126,5171,5340-5352,6000-6152,7777 in-interface=ether3 protocol=tcp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=\
7341-7350,7451,8085,9600,9601-9602,9300,9376-9377,9400,9700,10001-10011 in-interface=ether3 protocol=tcp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=\
10402,11011-11041,12011,12110,13008,13413,15000-15002,16402-16502,16666,18901-18909,19000 in-interface=ether3 protocol=tcp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=\
19101,22100,27780,28012,29000,29200,39100,39110,39220,39190,40000,49100,4300 in-interface=ether3 protocol=tcp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=14009-14010,4300 in-interface=ether3 \
protocol=udp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=14009-14010 in-interface=ether3 \
protocol=udp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=\
1293,1479,6100-6152,7777-7977,8001,9401,9600-9602,12020-12080,30000,40000-40010 in-interface=ether3 protocol=udp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=42051-42052,11100-11125,11440-11460 \
in-interface=ether3 protocol=udp

Jasa setting mikrotik warnet. Layer 7 Setting-mikrotik Warnet Sekadau Kalimantan Barat

/ip firewall layer7-protocol
add name=youtube regexp="http/(0\\.9|1\\.0|1\\.1)[\\x09-\\x0d ][1-5][0-9][0-9][\\x09-\\x0d -~]*(content-type: video)"
add name=big regexp="^.*get.+\\.(exe|rar|zip|7z|cab|asf|mov|wmv|mpg|mpeg|mkv|avi|flv|pdf|wav|rm|mp3|mp4|ram|msu|msi|nup|vdf|rmvb|dat|daa|iso|nrg|bin|vcd|mp2|3gp\
|mpe|qt|raw|wma|ogg|doc|deb|tar|bzip|gzip|gzip2|0[0-9][0-9]).*\$"
add name=streaming regexp="a.youtube.com|d.youtube.com|e.youtube.com|f.youtube.com|g.youtube.com|h.youtube.com|i.youtube.com|j.youtube.com|l.youtube.com|c.youtu\
be.com|d.youtube.com|youtube|tube|dailymotion.com"

Untuk configurasi manglenya bisa seperti di bawah ini

/ip firewall mangle
add action=mark-packet chain=prerouting disabled=no dscp=12 new-packet-mark=hit-proxy passthrough=no protocol=tcp
add action=mark-packet chain=prerouting disabled=no new-packet-mark=icmp passthrough=no protocol=icmp
add action=mark-connection chain=prerouting comment=GAME disabled=no dst-address-list=game_online dst-port=\
1818,2001,3010,4300,5105,5121,5126,5171,5340-5352,6000-6152,7777 new-connection-mark=game_conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting disabled=no dst-address-list=game_online dst-port=\
7341-7350,7451,8085,9600,9601-9602,9300,9376-9377,9400,9700,10001-10011 new-connection-mark=game_conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting disabled=no dst-address-list=game_online dst-port=\
10402,11011-11041,12011,12110,13008,13413,15000-15002,16402-16502,16666,18901-18909,19000 new-connection-mark=game_conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting disabled=no dst-address-list=game_online dst-port=\
19101,22100,27780,28012,29000,29200,39100,39110,39220,39190,40000,49100 new-connection-mark=game_conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting disabled=no dst-address-list=game_online dst-port=14009-14010 new-connection-mark=game_conn passthrough=yes \
protocol=tcp
add action=mark-connection chain=prerouting disabled=no dst-address-list=game_online dst-port=14009-14010 new-connection-mark=game_conn passthrough=yes \
protocol=udp
add action=mark-connection chain=prerouting disabled=no dst-address-list=game_online dst-port=\
1293,1479,6100-6152,7777-7977,8001,9401,9600-9602,12020-12080,30000,40000-40010 new-connection-mark=game_conn passthrough=yes protocol=udp
add action=mark-connection chain=prerouting disabled=no dst-address-list=game_online dst-port=42051-42052,11100-11125,11440-11460 new-connection-mark=game_conn \
passthrough=yes protocol=udp
add action=mark-packet chain=prerouting connection-mark=game_conn disabled=no new-packet-mark=game_pkt passthrough=no
add action=mark-connection chain=prerouting comment="Update Game" disabled=no dscp=!12 dst-address-list=game_online dst-port=80,21 new-connection-mark=\
update-conn packet-mark=!hit-proxy passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting connection-mark=update-conn disabled=no dscp=!12 new-packet-mark=update packet-mark=!hit-proxy passthrough=no
add action=mark-connection chain=prerouting comment=Facebook disabled=no dst-address-list=FB-Game new-connection-mark=facebook-conn packet-mark=!hit-proxy \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=apps.facebook.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!hit-proxy \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=facebook.com/apps disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!hit-proxy \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=app.facebook.com/pool-live disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!hit-proxy \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=static.ak.connect.facebook.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=\
!hit-proxy passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=statics.poker.static.zynga.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=\
!hit-proxy passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=.ninjasaga.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!hit-proxy passthrough=\
yes protocol=tcp
add action=mark-connection chain=prerouting content=.castle.zgncdn.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!hit-proxy \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=.static.zynga.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!hit-proxy \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=.static.zgncdn.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!hit-proxy \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=.empire.zynga.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!hit-proxy \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=.poker.zynga.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!hit-proxy passthrough=\
yes protocol=tcp
add action=mark-connection chain=prerouting content=.castle.zynga.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!hit-proxy \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=.farmville.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!hit-proxy passthrough=\
yes protocol=tcp
add action=mark-connection chain=prerouting content=.farmville.zgncdn.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!hit-proxy \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=akamai.net disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!hit-proxy passthrough=yes \
protocol=tcp
add action=mark-connection chain=prerouting content=.channel.facebook.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!hit-proxy \
passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting connection-mark=facebook-conn disabled=no dscp=!12 new-packet-mark=facebook packet-mark=!hit-proxy passthrough=no
add action=mark-connection chain=prerouting comment=Streaming disabled=no dscp=!12 layer7-protocol=streaming new-connection-mark=streaming-conn packet-mark=\
!hit-proxy passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=dailymotion.com disabled=no dscp=!12 new-connection-mark=streaming-conn packet-mark=!hit-proxy passthrough=\
yes protocol=tcp
add action=mark-connection chain=prerouting content=mivo disabled=no dscp=!12 new-connection-mark=streaming-conn packet-mark=!hit-proxy passthrough=yes \
protocol=tcp
add action=mark-packet chain=prerouting connection-mark=streaming-conn disabled=no dscp=!12 new-packet-mark=streaming passthrough=no
add action=mark-connection chain=prerouting comment=Download disabled=no dscp=!12 dst-address-list=!game_online layer7-protocol=big new-connection-mark=\
down-conn packet-mark=!hit-proxy passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting connection-mark=down-conn disabled=no dscp=!12 new-packet-mark=download packet-mark=!hit-proxy passthrough=no
add action=mark-connection chain=prerouting comment=Mid connection-bytes=128000-256000 connection-mark=!facebook-conn disabled=no dscp=!12 dst-address-list=\
!game_online dst-port=!80 in-interface=ether3 new-connection-mark=mid-conn packet-mark=!game_pkt passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting connection-mark=mid-conn disabled=no dscp=!12 new-packet-mark=mid packet-mark=!hit-proxy passthrough=no
add action=mark-connection chain=prerouting comment=High connection-bytes=256000-4294967295 connection-mark=!facebook-conn disabled=no dscp=!12 \
dst-address-list=!game_online dst-port=80 new-connection-mark=high-conn packet-mark=!game_pkt passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting connection-mark=high-conn disabled=no dscp=!12 new-packet-mark=high packet-mark=!hit-proxy passthrough=no
add action=mark-connection chain=prerouting comment=Small connection-bytes=160000-256000 connection-mark=!facebook-conn disabled=no dscp=!12 dst-address-list=\
!game_online dst-port=80 new-connection-mark=small-conn packet-mark=!game_pkt passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting connection-mark=browse-conn disabled=no dscp=!12 new-packet-mark=browse packet-mark=!hit-proxy passthrough=no

Jasa setting mikrotik warnet

Jasa setting mikrotik warnet - begitu saja saya buat sebagai setting mikrotik, limit bandwidth yang saya gunakan dengan queue tree/queue simple.

Jasa setting mikrotik warnet  seluruh indonesia contact

Setting Mikrotik Warnet Azainet Rantau Parapat

Setting Mikrotik Warnet Azainet Rantau Parapat - setting-mikrotik-warnet-Rantau Parapat, beda lokasi beda selera pemilik warnetnya soal setting-mikrotik, berikut ini settingan-mikrotik sebuah warnet di Rantau Parapat, yang saya setting via remote dari Binjai.




Koneksi warnet yang di gunakan 3 line speedy, 1 mega untuk 15 unit komputer game, dan 2 mega untuk 15 unit komputer browsing dan download, tambah proxy external ubuntu. Berikut ini filter rule untuk menangkap ip game online kemudian di routing ke line speedy 1mbps.

/ip firewall filter
add action=add-dst-to-address-list address-list=ip-facebook address-list-timeout=0s chain=forward disabled=no dst-port=843,9339,8291 in-interface=ether5-HUB/SWITCH protocol=tcp

add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=1818,2001,3010,4300,5105,5121,5126,5171,5340-5352,6000-6152,7777,28900-28914 in-interface=ether5-HUB/SWITCH protocol=tcp

add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=7341-7350,7451,8085,9600,9601-9602,9300,9376-9377,9400,9700,10001-10011 in-interface=ether5-HUB/SWITCH protocol=tcp

add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=10402,11011-11041,12011,12110,13008,13413,15000-15002,16402-16502,16666,18901-18909,19000 in-interface=ether5-HUB/SWITCH protocol=tcp

add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=19101,22100,27780,28012,29000,29200,39100,39110,39220,39190,40000,49100,4300 in-interface=ether5-HUB/SWITCH protocol=tcp

add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=14009-14010,4300 in-interface=ether5-HUB/SWITCH protocol=udp

add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=14009-14010 in-interface=ether5-HUB/SWITCH protocol=udp

add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=1293,1479,6100-6152,7777-7977,8001,9401,9600-9602,12020-12080,30000,40000-40010 in-interface=ether5-HUB/SWITCH protocol=udp

add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=42051-42052,11100-11125,11440-11460in-interface=ether5-HUB/SWITCH protocol=udp

Layer 7 untuk limit download dan Streaming di mikrotiknya

/ip firewall layer7-protocol
add name=http-video regexp="http/(0\\.9|1\\.0|1\\.1)[\\x09-\\x0d ][1-5][0-9][0-9][\\x09-\\x0d -~]*(content-type: video)"

add name=youtube regexp="http/(0\\.9|1\\.0|1\\.1)[\\x09-\\x0d ][1-5][0-9][0-9][\\x09-\\x0d -~]*(content-type: video)"
add name=big regexp="^.*get.+\\.exe|rar|zip|7z|cab|asf|mov|wmv|mpg|mpeg|mkv|avi|flv|pdf|wav|rm|mp3|mp4|ram|msu|msi|nup|vdf|rmvb|dat|daa|iso|nrg|bin|vcd|mp2|3gp|mpe|qt|raw|wma|ogg|doc|deb|tar|bzip|gzip|gzip2|0[0-9][0-9]).*\$"

add name=streaming regexp="a.youtube.com|d.youtube.com|e.youtube.com|f.youtube.com|g.youtube.com|h.youtube.com|i.youtube.com|j.youtube.com|l.youtube.com|c.youtube.com|d.youtube.com|youtube|tube|dailymotion.com"

Mangle Routing mark-mikrotik untuk memisah jalur ke arah speedy 1m, sisanya yang 2mbps di routing-mark/ di alokasikan ke browsing dan download.

/ip firewall mangle
add action=mark-routing chain=prerouting comment="Routing Game" disabled=no dst-address-list=game_online dst-port=19101,22100,27780,28012,29000,29200,39100,39110,39220,39190,40000,49100 new-routing-mark=game passthrough=no protocol=tcp src-address-list=LAN

add action=mark-routing chain=prerouting disabled=no dst-address-list=game_online dst-port=1293,1479,6100-6152,7777-7977,8001,9401,9600-9602,12020-12080,30000,40000-40010 new-routing-mark=game passthrough=no protocol=udp src-address-list=LAN

add action=mark-routing chain=prerouting disabled=no dst-address-list=game_online dst-port=14000-14010 new-routing-mark=game passthrough=no protocol=udp src-address-list=LAN

add action=mark-routing chain=prerouting disabled=no dst-address-list=game_online dst-port=1818,2001,3010,4300,5105,5121,5126,5171,5340-5352,6000-6152,7777 new-routing-mark=game passthrough=no protocol=tcp src-address-list=LAN

add action=mark-routing chain=prerouting disabled=no dst-address-list=game_online dst-port=7341-7350,7451,8085,9600,9601-9602,9300,9376-9377,9400,9700,10001-10011 new-routing-mark=game passthrough=no protocol=tcp src-address-list=LAN

add action=mark-routing chain=prerouting disabled=no dst-address-list=game_online dst-port=10402,11011-11041,12011,12110,13008,13413,15000-15002,16402-16502,16666,18901-18909,19000 new-routing-mark=game passthrough=no protocol=tcp src-address-list=LAN

add action=mark-routing chain=prerouting disabled=no dst-address-list=game_online dst-port=14000-14010,28900-28914 new-routing-mark=game passthrough=no protocol=tcp src-address-list=LAN

add action=mark-routing chain=prerouting comment="Lineage 2" disabled=no dst-address-list=game_online dst-port=7777-7778 new-routing-mark=game passthrough=no protocol=tcp src-address-list=LAN

add action=mark-routing chain=prerouting disabled=no dst-address-list=game_online dst-port=2106 new-routing-mark=game passthrough=no protocol=tcp src-address-list=LAN

add action=mark-routing chain=prerouting comment=9Dragon disabled=no dst-address-list=game_online dst-port=!80,8080 new-routing-mark=game passthrough=no protocol=tcp src-address-list=LAN

add action=mark-routing chain=prerouting comment="Yulgang Online" disabled=no dst-address-list=game_online dst-port=19000-19001 new-routing-mark=game passthrough=no protocol=tcp src-address-list=LAN

Mangle Hit Proxy External dengan DSCP=12

/ip firewall mangle 
add action=mark-packet chain=prerouting comment=Proxy content="X-Cache: HIT" disabled=no new-packet-mark=proxy-hit passthrough=no protocol=tcp

add action=mark-packet chain=prerouting disabled=no dscp=12 new-packet-mark=proxy-hit passthrough=no protocol=tcp
add action=mark-packet chain=forward disabled=no dscp=12 in-interface=ether4-Proxy new-packet-mark=proxy-hit out-interface=ether5-HUB/SWITCH passthrough=no protocol=tcp

Mangle untuk Ping

/ip firewall mangle 
add action=mark-packet chain=prerouting comment=ping disabled=no new-packet-mark=icmp passthrough=no protocol=icmp

Mangle Update Game di berikan prioritas di queue tree mikrotik

/ip firewall mangle 
add action=mark-connection chain=prerouting comment="Update Game" disabled=no dscp=!12 dst-address-list=game_online dst-port=80,21 new-connection-mark=update-conn packet-mark=!hit passthrough=yes protocol=tcp

add action=mark-packet chain=prerouting connection-mark=update-conn disabled=no dscp=!12 new-packet-mark=update passthrough=no

Mangle untuk content youtube di berikan prioritas di queue tree mikrotik

/ip firewall mangle 
add action=mark-connection chain=prerouting comment=Facebook disabled=no dscp=!12 dst-address-list=ip-facebook new-connection-mark=facebook-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-connection chain=prerouting content=apps.facebook.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-connection chain=prerouting content=facebook.com/apps disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-connection chain=prerouting content=app.facebook.com/pool-live disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-connection chain=prerouting content=static.ak.connect.facebook.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-connection chain=prerouting content=statics.poker.static.zynga.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-connection chain=prerouting content=.ninjasaga.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-connection chain=prerouting content=.castle.zgncdn.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-connection chain=prerouting content=.static.zynga.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-connection chain=prerouting content=.static.zgncdn.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-connection chain=prerouting content=.empire.zynga.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-connection chain=prerouting content=.poker.zynga.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-connection chain=prerouting content=.castle.zynga.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-connection chain=prerouting content=.farmville.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-connection chain=prerouting content=.farmville.zgncdn.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-connection chain=prerouting content=akamai.net disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-connection chain=prerouting content=.channel.facebook.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-packet chain=prerouting connection-mark=facebook-conn disabled=no dscp=!12 new-packet-mark=facebook packet-mark=!proxy-hit passthrough=no

Mangle untuk melimit streaming youtube

/ip firewall mangle 
add action=mark-connection chain=prerouting comment=Streaming disabled=no dscp=!12 layer7-protocol=streaming new-connection-mark=streaming-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-connection chain=prerouting content=dailymotion.com disabled=no dscp=!12 new-connection-mark=streaming-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-connection chain=prerouting content=mivo disabled=no new-connection-mark=streaming-conn packet-mark=!proxy-hit passthrough=yes protocol=tcp

add action=mark-packet chain=prerouting connection-mark=streaming-conn disabled=no new-packet-mark=streaming passthrough=no

Mangle untuk melimit ip per client, seperti yang beliau inginkan.

/ip firewall mangle 
add action=mark-connection chain=forward comment="LUAR KE DALAM" disabled=no dscp=!12 new-connection-mark=all.post_conn out-interface=ether5-HUB/SWITCH packet-mark=!proxy-hit passthrough=yes src-address-list=!game_online

add action=mark-packet chain=forward connection-mark=all.post_conn disabled=no dscp=!12 dst-address=192.168.88.10 new-packet-mark=IP10 passthrough=no protocol=tcp src-address-list=!game_online

add action=mark-packet chain=forward connection-mark=all.post_conn disabled=no dscp=!12 dst-address=192.168.88.11 new-packet-mark=IP11 passthrough=no protocol=tcp src-address-list=!game_online

add action=mark-packet chain=forward connection-mark=all.post_conn disabled=no dscp=!12 dst-address=192.168.88.12 new-packet-mark=IP12 passthrough=no protocol=tcp src-address-list=!game_online

add action=mark-packet chain=forward connection-mark=all.post_conn disabled=no dscp=!12 dst-address=192.168.88.13 new-packet-mark=IP13 passthrough=no protocol=tcp src-address-list=!game_online

add action=mark-packet chain=forward connection-mark=all.post_conn disabled=no dscp=!12 dst-address=192.168.88.14 new-packet-mark=IP14 packet-mark=!proxy-hit passthrough=no protocol=tcp src-address-list=!game_online

add action=mark-packet chain=forward connection-mark=all.post_conn disabled=no dscp=!12 dst-address=192.168.88.15 new-packet-mark=IP15 passthrough=no protocol=tcp src-address-list=!game_online

add action=mark-packet chain=forward connection-mark=all.post_conn disabled=no dscp=!12 dst-address=192.168.88.16 new-packet-mark=IP16 passthrough=no protocol=tcp src-address-list=!game_online

add action=mark-packet chain=forward connection-mark=all.post_conn disabled=no dscp=!12 dst-address=192.168.88.17 new-packet-mark=IP17 passthrough=no protocol=tcp src-address-list=!game_online

add action=mark-packet chain=forward connection-mark=all.post_conn disabled=no dscp=!12 dst-address=192.168.88.18 new-packet-mark=IP18 passthrough=no protocol=tcp src-address-list=!game_online

add action=mark-packet chain=forward connection-mark=all.post_conn disabled=no dscp=!12 dst-address=192.168.88.19 new-packet-mark=IP19 passthrough=no protocol=tcp src-address-list=!game_online

add action=mark-packet chain=forward connection-mark=all.post_conn disabled=no dscp=!12 dst-address=192.168.88.20 new-packet-mark=IP20 passthrough=no protocol=tcp src-address-list=!game_online

add action=mark-packet chain=forward connection-mark=all.post_conn disabled=no dscp=!12 dst-address=192.168.88.21 new-packet-mark=IP21 passthrough=no protocol=tcp src-address-list=!game_online

add action=mark-packet chain=forward connection-mark=all.post_conn disabled=no dscp=!12 dst-address=192.168.88.22 new-packet-mark=IP22 passthrough=no protocol=tcp src-address-list=!game_online

add action=mark-packet chain=forward connection-mark=all.post_conn disabled=no dscp=!12 dst-address=192.168.88.23 new-packet-mark=IP23 passthrough=no protocol=tcp src-address-list=!game_online

add action=mark-packet chain=forward connection-mark=all.post_conn disabled=no dscp=!12 dst-address=192.168.88.24 new-packet-mark=IP24 passthrough=no protocol=tcp src-address-list=!game_online

add action=mark-packet chain=forward connection-mark=all.post_conn disabled=no dscp=!12 dst-address=192.168.88.25 new-packet-mark=IP25 passthrough=no protocol=tcp src-address-list=!game_online

Saya berikan queue tree tersendiri, dan begitupun rule, rule ini adalah hasil racikan yang saya kumpul dari berbagai sumber yang ada di internet.

Cara Setting Modem TP-LINK VLAN dengan Mikrotik

Jasa setting mikrotik Mandailing Natal - Cara setting VLAN TP-LINK Mikrotik - Cara Setting Modem TP-LINK VLAN dengan Mikrotik, cara setting vlan router mikrotik dengan modem speedy sudah lama saya tertarik mencobanya setelah membaca artikel di forum mikrotik, berkali-kali gagal dan terakhir kali saya coba lagi,ALHAMDULILLAH berjalan dengan baik.
Setting vlan modem tp-link dengan vlan router mikrotik dengan tujuan memisahkan network wireless modem dengan pppoe router, dimana wireless modem akan diamankan dengan usermanager mikrotik, sedangkan pppoe modem dial pada router mikrotik.  saya fungsikan untuk wireless untuk hotspot indoor di warnet, dengan tujuan hanya belajar menggunakan VLAN jadi tidak terlalu compleks apa yang saya lakukan.

Jasa Setting Mikrotik - cara setting vlan modem tplink dengan vlan router mikrotik

Buka Configurasi modem pilih  Interface Setup




pilih  Advanced Setup
pilih VLAN Function















Karena kabel ke modem wireless saya letak di hub, maka vlan di ambil dari ether mikrotik yang mengarah ke hub. Seperti gambar berikut



Cara membuat VLAN di Ether mikrotik




Begitu lah caranya....Untuk hotspotannya silahkan di cari sendiri ya ....!! cara buatnya hehehe.

Cara Mudah Blok Web Di Mikrotik

Jasa setting mikrotik - Cara Mudah Blok Web Di Mikrotik - cara mudah memblokir web dengan mikrotik menggunakan IP - FIREWALL - FILTER, beragam alasan kenapa filter rule dan memblok web di perlukan seorang administrator jaringan.

Kadang di suatu waktu mungkin kita di perlukan melakukan blokir web lewat router mikrotik, cara blokir web lewat router mikrotik bukan lah hal yang susah, misalnya ketika saya ingin memblok sebuah alamat web yang merupakan alamat web penyedia cheat game pointblank, saya ingin membloknya agar warnet terbebas dari cheat yang dapat menyebkan memory mengalami crash. Misalnya saja di jaringan warnet tidak boleh dibuka sebuah web, misalnya web yang ingin kita blok dengan mikrotik dengan alamat:  www.pekalongan-community.com/

Agar pelanggan warnet kita tidak menggunakan cheat atau mendownload cheat dari web pekalongan maka kita coba memblok web di mikrotik.

Cara mudah blog web di mikrotik, langkah memblok web di mikrotik adalah berikut:

Contoh alamat web yang akan kita blok di mikrotik adalahwww.pekalongan-community.com

Buka Menu

IP -> FIREWALL -> FILTER RULE 

Klik Tanda + (warna merah)

Chain :Forward
Protocol :tcp
tab ADVANCED




klik Content: isikan www.pekalongan-community.com <1>(web yang ingin di blok)
klik tab ACTION
Action : DROP




Klik Apply> -> OK

Selain cara mudah blok web di mikrotik diatas ada juga cara lain sebagai cara blok web dengan mikrotik yakni dengan memanfaatkan layer7, atau menangkap ip address dari content yang di buka, kemudian memindahkannya ke address-list kemudiaan kita lakukan blok ip tersebut di mikrotik sesuai keingina kita.

Untuk langkah-langkah cara blok web dengan mikrotik diatas silahkan di coba dan di tinggalkan komentar di bawah ini.Semoga cara mudah blog web di mikrotik ini bermanfaat.

Jasa Setting Mikrotik dan Jasa Setting Wireless / Hotspot Mikrotik Murah

Jasa Setting Mikrotik Kalimantan Selatan - BagusNET

Jasa Setting Mikrotik Kalimantan Selatan BAGUSNET - Jasa setting mikrotik Kalimantan Selatan via remote. beberapa client jasa setting mikrotik ada di bagian timur Indonesia yaitu di kalimantan, salah satu nama warnet yang saya setting bernama bagus-net.

Jasa setting mikrotik warnet. Warnet bagusnet ini menggunakan jasa setting mikrotik saya sudah beberapa tahun ini. Bahkan sering bergonta-ganti configurasinya, di karenakan kondisi koneksi disana yang tidak jelas. Bahkan sering bergonta-ganti bertambah atau berkurang koneksi yang di gunakannya.


Kadang saya menggunakan loadbalancing atau teknik lain untuk menjaga kualitas koneksi dari warnet di kalimantan selatan ini. Menggunakan limit bandwidth bahkan membuat routing khusus untuk gamenya, tentunya satu alasannya kepuasan pelanggan jasa setting mikrotik sendiri Bagi warnet yang membutuhkan jasa setting mikrotik di kalimantan selatan bisa menghubungi saya, untuk melakukan remote koneksi dan menconfigurasi mikrotiknya dari jauh, Insya Allah aman. Silahkan hubungi saya untuk jasa setting mikrotik baik game maupun jasa setting mikrotik untuk kantor.

Script Otomatic Flush Dns Cache Mikrotik

Jasa Setting Mikrotik Script Otomatic Flush Dns Cache Mikrotik - cara flush dns cache mikrotik, dns adalah domain name system yang berfungsi sebagai sistem yang menyimpan informasi tentang nama host ataupun nama domain dalam bentuk basis data tersebar (distributed database) (wikipedia)
DNS merupakan singkatan dari domain name system, pada siswa saya jurusan teknik komputer dan jaringan, saya sering menyebutkan dns ini adalah sebuah server yang berfungsi layaknya sebuah kamus, dimana dns ini berfungsi untuk menerjemahkan ip address kedalam bentuk host (domain) dan sebaliknya menerjemahkan domain(hostname) kedalam bentuk ip address.
Script Otomatic Flush Dns Cache Mikrotik - Dns yang sering saya ajarkan pada siswa saya, yaitu dns yang menggunakan operating system opensource yaitu BIND9.  Nah dns yang di flush dalam tulisan saya ini yang berjudul Script Otomatic Flush Dns Cache Mikrotik merupakan dns yang di gunakan oleh routerboard mikrotik.

Dns routerboard mikrotik juga tidak jauh beda dengan dns bind9, bedanya hanya saja kemudahan menggunakannya, dns pada routerboard mikrotik sudah terinstall secara buildin, sedangkan bind9 masih membutuhkan configurasi lebih lanjut.

Fungsi dari flush dns adalah untuk mengubah informasi yang telah disimpan dns cache, agar merecord informasi baru terhadap host dan domainnya, dan merecord data host dan domain yang telah terupdate.

Secara manual flush dns mikrotik bisa di lihat dari gambar berikut ini, panah-panah merah dalam gambar menunjukkan cara flush dns mikrotik secara manual, lewat gui routerboard mikrotik.

Kalau gambar diatas menjelaskan langkah-langkah flush dns cache mikrotik secara manual, dan cara berikutnya adalah dengan membuat script otomatis flush dns cache mikrotik, sehingga dengan script Script Otomatic Flush Dns Cache Mikrotik ini kita tidak perlu memplototi dns-cache mikrotik yang kepenuhan, karena script melakukannya secara otomatis.

Berikut cara membuat script otomatis flush dns cache mikrotik

/system script 
add name=dnsflush policy=ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api source="/ip dns cache flush"

Buat schedulenya di jalankan berapa jam sekali, saya buat di mikrotik yang saya setting mikrotiknya, 1 jam sekali flush dns cache.

/system scheduler
add disabled=no interval=1h name=dnsflush on-event=dnsflush policy=\
ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api \
start-time=startup

Jika schedule dns cache di clear dalam 1 hari set aja intervalnya jadi interval=1d 00:00:00 . Sciprt otomatis flush dns cache mikrotik. Semoga bermanfaat.

IP Address Game Online Indonesia

Address-list IP Address Game Online Indonesia - Beberapa list ip address Game Online Indonesia di bawah ini saya ambil dari berbagai sumber, dan melakukan penambahan secara otomatis menggunakan filter-rule mikrotik untuk menangkap ip yang berasal dari port-port game online indonesia.


Menambah otomatis ip address game online indonesia di address-list mikrotik, tanpa harus repot dengan menggunakan menu /ip filter mikrotik.

Berikut ini beberapa ip address game online indonesia yang saya koleksi secara otomatis di address-list mikrotik.

/ip firewall address-list
add address=49.50.7.0/24 disabled=no list=game_online
add address=203.209.190.35 disabled=no list=game_online
add address=180.178.110.82 disabled=no list=game_online
add address=64.211.145.89 disabled=no list=game_online
add address=64.211.145.91 disabled=no list=game_online
add address=64.211.145.104 disabled=no list=game_online
add address=64.233.181.97 disabled=no list=game_online
add address=64.233.189.113 disabled=no list=game_online
add address=65.54.82.164 disabled=no list=game_online
add address=65.55.162.26 disabled=no list=game_online
add address=66.220.146.25 disabled=no list=game_online
add address=69.63.181.11 disabled=no list=game_online
add address=69.63.181.16 disabled=no list=game_online
add address=69.63.186.30 disabled=no list=game_online
add address=74.125.153.138 disabled=no list=game_online
add address=75.125.122.98 disabled=no list=game_online
add address=116.12.45.2 disabled=no list=game_online
add address=119.110.77.1 disabled=no list=game_online
add address=119.110.77.2 disabled=no list=game_online
add address=119.110.77.3 disabled=no list=game_online
add address=119.110.77.4 disabled=no list=game_online
add address=119.110.77.5 disabled=no list=game_online
add address=119.110.77.6 disabled=no list=game_online
add address=119.110.77.7 disabled=no list=game_online
add address=119.160.200.173 disabled=no list=game_online
add address=119.160.200.166 disabled=no list=game_online
add address=119.160.200.168 disabled=no list=game_online
add address=122.102.49.0/24 disabled=no list=game_online
add address=122.102.48.0/24 disabled=no list=game_online
add address=122.102.50.0/24 disabled=no list=game_online
add address=122.102.51.0/24 disabled=no list=game_online
add address=122.102.52.0/24 disabled=no list=game_online
add address=122.102.53.0/24 disabled=no list=game_online
add address=122.102.54.0/24 disabled=no list=game_online
add address=122.102.55.0/24 disabled=no list=game_online
add address=122.144.2.38 disabled=no list=game_online
add address=122.144.2.132 disabled=no list=game_online
add address=122.144.2.137 disabled=no list=game_online
add address=125.160.17.181 disabled=no list=game_online
add address=125.160.17.182 disabled=no list=game_online
add address=124.195.18.122 disabled=no list=game_online
add address=125.56.199.10 disabled=no list=game_online
add address=125.56.199.16 disabled=no list=game_online
add address=125.56.199.27 disabled=no list=game_online
add address=125.160.173.26 disabled=no list=game_online
add address=125.163.212.218 disabled=no list=game_online
add address=173.194.0.148 disabled=no list=game_online
add address=202.43.161.117 disabled=no list=game_online
add address=202.43.161.120 disabled=no list=game_online
add address=202.43.161.121 disabled=no list=game_online
add address=202.43.167.70 disabled=no list=game_online
add address=202.43.171.131 disabled=no list=game_online
add address=202.43.171.130 disabled=no list=game_online
add address=202.43.171.133 disabled=no list=game_online
add address=202.43.171.134 disabled=no list=game_online
add address=202.57.118.35 disabled=no list=game_online
add address=202.57.118.54 disabled=no list=game_online
add address=202.58.163.204 disabled=no list=game_online
add address=202.67.15.34 disabled=no list=game_online
add address=202.70.134.34 disabled=no list=game_online
add address=202.70.134.35 disabled=no list=game_online
add address=202.70.134.37 disabled=no list=game_online
add address=202.74.73.98 disabled=no list=game_online
add address=202.78.197.83 disabled=no list=game_online
add address=202.78.197.85 disabled=no list=game_online
add address=202.89.208.61 disabled=no list=game_online
add address=202.93.17.0/24 disabled=no list=game_online
add address=202.93.18.0/24 disabled=no list=game_online
add address=202.93.19.0/24 disabled=no list=game_online
add address=202.93.20.0/24 disabled=no list=game_online
add address=202.93.21.0/24 disabled=no list=game_online
add address=202.93.22.0/24 disabled=no list=game_online
add address=202.93.23.0/24 disabled=no list=game_online
add address=202.93.24.0/24 disabled=no list=game_online
add address=202.93.25.0/24 disabled=no list=game_online
add address=202.93.26.0/24 disabled=no list=game_online
add address=202.93.27.0/24 disabled=no list=game_online
add address=202.93.28.0/24 disabled=no list=game_online
add address=202.93.29.0/24 disabled=no list=game_online
add address=202.93.30.0/24 disabled=no list=game_online
add address=202.93.31.0/24 disabled=no list=game_online
add address=202.162.207.111 disabled=no list=game_online
add address=202.138.226.22 disabled=no list=game_online
add address=202.138.226.19 disabled=no list=game_online
add address=202.149.65.139 disabled=no list=game_online
add address=202.149.65.142 disabled=no list=game_online
add address=202.149.65.160 disabled=no list=game_online
add address=202.93.16.0/24 disabled=no list=game_online
add address=203.77.212.20 disabled=no list=game_online
add address=203.89.146.0/24 disabled=no list=game_online
add address=203.89.147.12 disabled=no list=game_online
add address=203.89.147.13 disabled=no list=game_online
add address=204.2.171.27 disabled=no list=game_online
add address=204.2.171.154 disabled=no list=game_online
add address=204.2.171.97 disabled=no list=game_online
add address=204.2.171.112 disabled=no list=game_online
add address=204.117.211.2 disabled=no list=game_online
add address=204.117.211.3 disabled=no list=game_online
add address=204.117.211.4 disabled=no list=game_online
add address=209.190.9.202 disabled=no list=game_online
add address=209.51.218.170 disabled=no list=game_online
add address=211.43.208.219 disabled=no list=game_online
add address=211.233.43.45 disabled=no list=game_online
add address=212.58.226.79 disabled=no list=game_online
add address=202.67.9.252 disabled=no list=game_online
add address=49.128.179.6 disabled=no list=game_online
add address=49.128.179.8 disabled=no list=game_online
add address=203.89.146.172 disabled=no list=game_online
add address=49.128.179.0/24 disabled=no list=game_online
add address=92.51.171.95 disabled=no list=game_online
add address=49.50.7.0/24 disabled=no list=game_online

List ip address game online tersebut diatas masih jauh dari sempurna, karena ketika saya mengcapture ip ini dari mikrotik, warnet yang menggunakan mikrotik tersebut tidak memiliki semua game online indonesia, sehingga hanya beberapa ip game saja yang ada, termasuk ip game pointblank, lostsaga, atlantica.

Untuk mengcapture/menangkap ip game online yang melintas di port-port tertentu coba gunakan rule filter rule berikut, dan tambahkan port game online yang ingin di koleksi ipnya.

/ip firewall filter
add action=add-dst-to-address-list address-list=FB-Game address-list-timeout=0s chain=forward disabled=no dst-port=\
843,9339,8291 in-interface=ether3 protocol=tcp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=\
1818,2001,3010,4300,5105,5121,5126,5171,5340-5352,6000-6152,7777 in-interface=ether3 protocol=tcp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=\
7341-7350,7451,8085,9600,9601-9602,9300,9376-9377,9400,9700,10001-10011 in-interface=ether3 protocol=tcp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=\
10402,11011-11041,12011,12110,13008,13413,15000-15002,16402-16502,16666,18901-18909,19000 in-interface=ether3 \
protocol=tcp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=\
19101,22100,27780,28012,29000,29200,39100,39110,39220,39190,40000,49100,4300 in-interface=ether3 protocol=tcp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=\
14009-14010,4300 in-interface=ether3 protocol=udp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=\
14009-14010 in-interface=ether3 protocol=udp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=\
1293,1479,6100-6152,7777-7977,8001,9401,9600-9602,12020-12080,30000,40000-40010 in-interface=ether3 protocol=udp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=\
42051-42052,11100-11125,11440-11460 in-interface=ether3 protocol=udp

IP Address Game Online Indonesia - jasa setting mikrotik ip list game online indonesia.

Cara Memisahkan Browsing Dan Game 2 Line Speedy Mikrotik

Jasa Setting Mikrotik Cara Memisahkan Browsing Dan Game 2 Line Speedy Mikrotik - Cara Memisahkan Browsing Dan Game 2 Line Speedy /isp di Mikrotik. Kasus ini saya terapkan di sebuah warnet di lubuk dalam, kab. siak. Cara Memisahkan Browsing Dan Game 2 Line Speedy Mikrotik memisahkan line 2 isp speedy dalam satu jasa setting mikrotik, yang mana tujuannya tentu sudah jelas agar, browsing tidak mengganggu koneksi game online, prinsip yang sama bisa di terapkan jika salah satu isp merupakan isp iix. Untuk memisahkan game online dan browsing pada mikrotik menggunakan 2 isp yang berbeda saya contohkan seperti di bawah ini. Isp yang di gunakan adalah speedy.
Modem speedy sebelumnya saya bridge, yang tujuannya agar dialing koneksi dari speedy di lakukan di mikrotik, bukan di modem seperti defaultnya settingan teknisi speedy. Dalam gambar bisa di lihat seperti ini, yang mana :

Speedy1 = pppoe-out1 dan speedy2 = pppoe-out2

Pppoe-out1 di alihkan / di routing untuk game online seperti pointblank berdasar port dan ipnya.
pppoe-out2 di arahkan untuk jalur browsing



pada menu IP -> ADDRESS bisa di lihat seperti gambar di bawah ini



Jika telah berhasil membuat seperti diatas, saya anggap anda telah berhasil melakukannya.

Ether3= LAN
ether5 = proxy external ubuntu.
Buat address-list IP lan yang akan di arahkan ke game online, contohnya bisa di lihat pada gambar




Cara Memisahkan Browsing Dan Game 2 Line Speedy Mikrotik

 Ipnya silahkan di sesuikan dengan kondisi jaringan yang ada, dalam kasus ini ip yang saya gunakan bisa terlihat seperti pada screenshoot diatas. Selanjutnya saya lakukan penangkapan ip game online yang kelak akan di namai game_online dan di masukkan kedalam address-list

/ip firewall filter
add action=add-dst-to-address-list address-list=FB-Game address-list-timeout=\
0s chain=forward disabled=no dst-port=843,9339,8291 in-interface=ether3 \
protocol=tcp
add action=add-dst-to-address-list address-list=game_online \
address-list-timeout=1d chain=forward disabled=no dst-port=\
1818,2001,3010,4300,5105,5121,5126,5171,5340-5352,6000-6152,7777 \
in-interface=ether3 protocol=tcp
add action=add-dst-to-address-list address-list=game_online \
address-list-timeout=1d chain=forward disabled=no dst-port=\
7341-7350,7451,8085,9600,9601-9602,9300,9376-9377,9400,9700,10001-10011 \
in-interface=ether3 protocol=tcp
add action=add-dst-to-address-list address-list=game_online \
address-list-timeout=1d chain=forward disabled=no dst-port="10402,11011-11\
041,12011,12110,13008,13413,15000-15002,16402-16502,16666,18901-18909,1900\
0" in-interface=ether3 protocol=tcp
add action=add-dst-to-address-list address-list=game_online \
address-list-timeout=1d chain=forward disabled=no dst-port="19101,22100,27\
780,28012,29000,29200,39100,39110,39220,39190,40000,49100,4300" \
in-interface=ether3 protocol=tcp
add action=add-dst-to-address-list address-list=game_online \
address-list-timeout=1d chain=forward disabled=no dst-port=\
14009-14010,4300 in-interface=ether3 protocol=udp
add action=add-dst-to-address-list address-list=game_online \
address-list-timeout=1d chain=forward disabled=no dst-port=14009-14010 \
in-interface=ether3 protocol=udp
add action=add-dst-to-address-list address-list=game_online \
address-list-timeout=1d chain=forward disabled=no dst-port="1293,1479,6100\
-6152,7777-7977,8001,9401,9600-9602,12020-12080,30000,40000-40010" \
in-interface=ether3 protocol=udp
add action=add-dst-to-address-list address-list=game_online \
address-list-timeout=1d chain=forward disabled=no dst-port=\
42051-42052,11100-11125,11440-11460 in-interface=ether3 protocol=udp

Ip address-list telah di buat, langkah selanjutnya adalah mangle untuk port game onlinenya, agar bisa di routing. Berikut mangle game online yang saya buat.

add action=mark-routing chain=prerouting disabled=no dst-address-list=\
game_online dst-port=\
19101,22100,27780,28012,29000,29200,39100,39110,39220,39190,40000,49100 \
new-routing-mark=game passthrough=no protocol=tcp src-address-list=LAN
add action=mark-routing chain=prerouting disabled=no dst-address-list=\
game_online dst-port="1293,1479,6100-6152,7777-7977,8001,9401,9600-9602,12\
020-12080,30000,40000-40010" new-routing-mark=game passthrough=no \
protocol=udp src-address-list=LAN
add action=mark-routing chain=prerouting disabled=no dst-address-list=\
game_online dst-port=14000-14010 new-routing-mark=game passthrough=no \
protocol=udp src-address-list=LAN
add action=mark-routing chain=prerouting disabled=no dst-address-list=\
game_online dst-port=\
1818,2001,3010,4300,5105,5121,5126,5171,5340-5352,6000-6152,7777 \
new-routing-mark=game passthrough=no protocol=tcp src-address-list=LAN
add action=mark-routing chain=prerouting disabled=no dst-address-list=\
game_online dst-port=\
7341-7350,7451,8085,9600,9601-9602,9300,9376-9377,9400,9700,10001-10011 \
new-routing-mark=game passthrough=no protocol=tcp src-address-list=LAN
add action=mark-routing chain=prerouting disabled=no dst-address-list=\
game_online dst-port="10402,11011-11041,12011,12110,13008,13413,15000-1500\
2,16402-16502,16666,18901-18909,19000" new-routing-mark=game passthrough=\
no protocol=tcp src-address-list=LAN
add action=mark-routing chain=prerouting disabled=no dst-address-list=\
game_online dst-port=14000-14010 new-routing-mark=game passthrough=no \
protocol=tcp src-address-list=LAN

Ip LAN sudah di mangle menuju ke ip game online yang telah di masukkan ke ip-address-list. Langkah selanjutnya adalah routing. Untuk merouting ip game online ke line speedy1 yang saya set sebagai pppoe-out1

Gambaran route bisa di lihat seperti ini.



Dan scriptnya jika via terminal bisa di lihat seperti ini

/ip route
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=pppoe-out1 routing-mark=game scope=30 target-scope=10
add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0 gateway=pppoe-out2 routing-mark=game scope=30 target-scope=10
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=pppoe-out2 scope=30 target-scope=10
add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0 gateway=pppoe-out1 scope=30 target-scope=10

Nah kenapa ada routing mark game yang berwarna hijau, tujuan saya buat seperti itu, jikalau salah satu line yang ada terputus koneksinya, otomatis di pindah ke koneksi yang hidup.

Pada tahab ini sebenernya sudah selesai soal memisahkan jalur browsing dan game online 2line speedy/ isp dengan menggunakan mikrotik, untuk langkah selanjutnya anda bisa memberikan limit untuk jalur browsing anda, sehingga tidak ada yang di rugikan oleh client anda yang hobby browsing. Oh iya jangan lupa hit proxy nya anda hidupkan dan taruh mangle nya di bagian atas routing game online.

Silahkan di pikirkan dan di raba-raba cara pembuatannya tersebut. Mudah-mudahan cara memisahkan jalur game online dan jalur browsing 2 line speedy menggunakan mikrotik ini bermanfaat. Untuk ip list game online silahkan lihat disini -> http://www.mandailingnatal.com/2013/06/ip-address-game-online-indonesia.html

Silahkan di tambahi Cara Memisahkan Browsing Dan Game 2 Line Speedy Mikrotik  jikalau di rasa kurang lengkap. Teknik Cara Memisahkan Browsing Dan Game 2 Line Speedy Mikrotik ini bisa juga di gunakan untuk warnet game online yang menggunakan vpn, cara menggunakan vpn indonesia warnet game online di mikrotik

Layer7 Mikrotik Manage Bandwidth Youtube dan Download

Jasa setting mikrotik - Layer7 Mikrotik Manage Bandwidth Youtube dan Download - layer7 limit bandwidth youtube download mikrotik, sudah tak lagi di ragukan kemampuan mikrotik didalam memanage bandwidth warnet ataupun di gunakan sebagai manager bandwidth kantor.

Layer7 mikrotik dapat di gunakan untuk melimit bandwidth seperti streaming youtube, download dengan internet download manager maupun direct download lewat browser seperti mozilla.

Keampuhan layer7 mikrotik sangat luar biasa, namun sayang penggunaan layer7 sangat banyak menguras resource router mikrotik. Apalagi router mikrotik tersebut routerboard murah meriah, seperti rb750.

Tidak lagi berpanjang lebar soal layer7-mikrotik. Mari kita lihat contoh layer7-mikrotik seperti di bawah ini.

/ip firewall layer7-protocol
add name=youtube regexp="o-o.preferred.pttelkom-|a.youtube.com|b.youtube.com|c.youtube.com|d.youtube.com|e.youtube.c om|f.youtube.com|g.youtube.com|h.youtube.com|i.youtube.com|j.youtube.com|l.youtube.com"

Layer7 Untuk beberapa extensi

/ip firewall layer7-protocol
add comment="" name=layer regexp="^.*get.+\\.(exe|rar|iso|zip|7zip|0[0-9]1-9]|flv|mkv|avi|mp4|3gp|rmvb|mp3|img|dat|mov|zip|rar|7z|pdf|flv).*\$"

Untuk melimit bandwidth yang request client di pilah dengan layer7 mikrotik, kita harus membuat mangle, kemudian di eksekusi di queue tree maupun queue simple, saya membuat mangle layer7 untuk melimit bandwidth download dan streaming youtu seperti berikut :

/ip firewall mangle 

add action=mark-connection chain=prerouting comment=Streaming content=youtube.com disabled=no dscp=!12 \
    new-connection-mark=streaming-con passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=no dscp=!12 layer7-protocol=youtube2 new-connection-mark=\
    streaming-con passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=no dscp=!12 layer7-protocol=youtube new-connection-mark=\
    streaming-con passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" content=mivo.tv disabled=no dscp=!12 new-connection-mark=\
    streaming-con passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting comment="" connection-mark=streaming-con disabled=no dscp=!12 new-packet-mark=\
    streaming passthrough=no
add action=mark-connection chain=prerouting comment=idm disabled=no dscp=!12 layer7-protocol=layer new-connection-mark=\
    layer-conn passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting comment="" connection-mark=layer-conn disabled=no dscp=!12 new-packet-mark=layer \
    passthrough=no

Dan limit download atau streaming youtube menggunakan layer7 di queu tree atau queue simple, silahkan terserah sama - saja menurut saya.

Cara Install Unbound Di FreeBSD 9.1

Jasa seting Mikrotik - Cara Install Unbound. Cara install unbound di freebsd 9.1 - Unbound salah satu software opensource digunakan sebagai server dns. Layaknya bind9 unbound dapat di gunakan untuk pemetaan domain terhadap ip address.

cara install unbound freebsd di freebsd 9.1, step by step semoga unboundnya bermanfaat di padukan dengan mikrotik.

pkg_add -rv unbound
cd /usr/local/etc/unbound
fetch ftp://FTP.INTERNIC.NET/domain/named.cache
unbound-control-setup
chown unbound:wheel unbound_*
chmod 440 unbound_*
mkdir /usr/local/etc/unbound/dev
echo "devfs   /usr/local/etc/unbound/dev devfs rw 0 0"  >> /etc/fstab
echo 'unbound_enable="YES"' >> /etc/rc.conf
echo 'devfs_set_rulesets="/usr/local/etc/unbound/dev=unbound_ruleset"' >> /etc/rc.conf

edit /usr/local/etc/unbound/unbound.conf

ee /usr/local/etc/unbound/unbound.conf

Cara mudah menginstall unbound di freebsd 9.1
Kemudian isikan unbound.conf di bawah ini, namun ubah dulu ipnya sesuai configurasi ip proxy anda.

unbond config

server:
verbosity: 1
statistics-interval: 120
extended-statistics: yes
statistics-cumulative: yes
num-threads: 1
interface: 0.0.0.0

outgoing-range: 512
num-queries-per-thread: 1024

msg-cache-size: 16m
rrset-cache-size: 32m

msg-cache-slabs: 4
rrset-cache-slabs: 4

cache-max-ttl: 86400
infra-host-ttl: 60
infra-lame-ttl: 120

infra-cache-numhosts: 10000
infra-cache-lame-size: 10k

do-ip4: yes
do-ip6: no
do-udp: yes
do-tcp: yes
do-daemonize: yes
#ip yang boleh mengakses unbound
access-control: 0.0.0.0/0 refuse
access-control: 192.168.3.0/24 allow
access-control: 192.168.200.0/24 allow     
access-control: 192.168.100.0/24 allow
access-control: 192.168.168.0/24 allow      
chroot: "/usr/local/etc/unbound"
username: "unbound"
directory: "/usr/local/etc/unbound"
logfile: ""
use-syslog: no
root-hints: "/usr/local/etc/unbound/named.cache"
     
identity: "DNS"
version: "1.4"
hide-identity: yes
hide-version: yes
harden-glue: yes
do-not-query-address: 127.0.0.1/8
do-not-query-localhost: yes
module-config: "iterator"

#zone localhost
local-zone: "localhost." static
local-data: "localhost. 10800 IN NS localhost."
local-data: "localhost. 10800 IN SOA localhost. nobody.invalid. 1 3600 1200 604800 10800"
local-data: "localhost. 10800 IN A 127.0.0.1"

local-zone: "127.in-addr.arpa." static
local-data: "127.in-addr.arpa. 10800 IN NS localhost."
local-data: "127.in-addr.arpa. 10800 IN SOA localhost. nobody.invalid. 2 3600 1200 604800 10800"
local-data: "1.0.0.127.in-addr.arpa. 10800 IN PTR localhost."

#zone balaijaya.net (edit bagian ini sesuai ip proxy dan hostname
local-zone: "balaijaya.net." static
local-data: "balaijaya.net. 86400 IN NS ns1.balaijaya.net."
local-data: "balaijaya.net. 86400 IN SOA balaijaya.net. hostmaster.balaijaya.net.  3 3600 1200 604800 86400"
local-data: "balaijaya.net. 86400 IN A 172.17.18.2"
local-data: "www.balaijaya.net. 86400 IN A 172.17.18.2"
local-data: "ns1.balaijaya.net. 86400 IN A 172.17.18.2"

#isi dengan ip proxy server /dns server anda. 
local-zone: "18.17.172.in-addr.arpa." static
local-data: "18.17.172.in-addr.arpa. 10800 IN NS balaijaya.net."
local-data: "18.17.172.in-addr.arpa. 10800 IN SOA balaijaya.net. hostmaster.balaijaya.net. 4 3600 1200 604800 864000"
local-data: "2.18.17.172.in-addr.arpa. 10800 IN PTR balaijaya.net."

#seting untuk DNS Forward
forward-zone:
name: "."
forward-addr: 202.134.1.10
forward-addr: 202.134.0.155
forward-addr: 8.8.8.8
forward-addr: 8.8.4.4
forward-addr: 208.67.222.222
forward-addr: 208.67.220.220
forward-addr: 180.131.144.144
forward-addr: 180.131.145.145      
               
remote-control:
control-enable: yes
control-interface: 127.0.0.1
control-port: 953
server-key-file: "/usr/local/etc/unbound/unbound_server.key"
server-cert-file: "/usr/local/etc/unbound/unbound_server.pem"
control-key-file: "/usr/local/etc/unbound/unbound_control.key"
control-cert-file: "/usr/local/etc/unbound/unbound_control.pem"

set nameserver baru di file /etc/resolv.conf buat baris di bahah ini paling atas.

nameserver 127.0.0.1

Buat sebuah file bernama devfs.rules di /etc

#ee /etc/devfs.rules

[unbound_ruleset=20]
add hide
add path null unhide
add path zero unhide
add path crypto unhide
add path random unhide
add path urandom unhide

Simpan settingan unbound

devfs.rules

Lalu reboot server freebsd yang terinstall unbound didalamnya dengan perintah

reboot 

Chek apakah unbound sudah berjalan dengan baik, lakukan perintah chek unbound

unbound-control stats

Cara Install Unbound Di FreeBSD 9.1 . Semoga cara install unbound freebsd ini bermanfaat.

Jasa Setting Mikrotik dan Jasa Setting Proxy Gebang Tanjung Pura

Jasa Setting Mikrotik dan Jasa Setting Proxy Gebang Tanjung Pura - Jasa Setting Mikrotik dan Jasa Setting Proxy Gebang, Kec. Tanjung Pura, Kab.Langkat kemarin hari minggu, karena kondisi warnet yang koneksinya di tembakkan via wireless dari isp setempat, remote secara langsung tidak bisa saya lakukan di tambah minimnya pengetahuan pengelola warnet terhadap networking mikrotik dan proxy. Saya terpaksa turun langsung ke gebang, tanjung pura, langkat.


Routerboard menggunakan mikrotik rb750, dan proxy dengan pc terbaru high-end hardisk 500, dan alhamdulillah selesai dengan berjalan baik, menggunakan management bandwidth membagi trafik game browsing, streaming dan download pada satu line speed internet 2mbps.

Eh iya proxy terpaksa saya install ulang, karena ada kesalahan sedikit saat mengubah boot default proxy ubuntu, sehingga ketika booting proxynya menjalankan memori test tanpa bisa di cancel. Kasus ini terjadi karena kesalah tersebut untuk membuat ubuntu auto run saat listrik mati mendadak.

Untuk membuat ubuntu auto start ketika listrik mati mendadak.

Ubah file /etc/grub.d/00_header

Dengan cara perintah

sudo nano /etc/grub.d/00_header 

Kemudian cari tulisan seperti di bawah ini.

if [ "${recordfail}" = 1 ]; then
set timeout=-1

Ubah value -1 menjadi 0, kemudian simpan file 00_header nya,

Dan perintah update grup dengna perintah

sudo update-grub 

Insya ALLAH, ubuntu akan auto start jika terjadi listrik failure.

Jasa setting mikrotik dan jasa setting proxy lusca high_performance untuk daerah binjai, tanjung pura, langkat, pangkalan brandan aceh & seluruh indonesia, baik jasa setting mikrotik dan jasa setting proxy lusca secara langsung maupun remote. Jasa setting mikrotik dan proxy lusca.

Untuk jasa setting proxy saya tidak lagi membuka layanan.

Setting Mikrotik SevenStar Net Binjai Sumatera Utara

Setting Mikrotik SevenStart Net Binjai Sumatera Utara - Warnet SevenStart Net Binjai Sumatera Utara, sebenernya warnet ini sudah saya setting beberapa bulan lalu, namun ada keluhan sedikit soal game dan browsingnya, sehingga di restore kembali ke settingan awal. Dan saya setting ulang dengan limit browsing dan game online menggunakan queue tree. SevenStart menggunakan dua line speedy, sehingga butuh sedikit mangle load balancing untuk membagi paket data yang ada di kedua line tersebut.




Seperti di tulisan jasa setting mikrotik sebelumnya, saya mengumpulkan ip game di address-list yang kemudian di mangle untuk prioritas game, dan membagi bandwidth dengan browsing. Berikut mangle untuk menangkap ip game yang di kumpulkan di address-list mikrotik

/ip firewall filter
add action=drop chain=forward disabled=no in-interface=ether3 src-address-list=!IP
add action=add-dst-to-address-list address-list=FB-Game address-list-timeout=0s chain=forward disabled=no dst-port=843,9339,8291 in-interface=ether3 protocol=tcp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=\
1818,2001,3010,4300,5105,5121,5126,5171,5340-5352,6000-6152,7777 in-interface=ether3 protocol=tcp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=\
7341-7350,7451,8085,9600,9601-9602,9300,9376-9377,9400,9700,10001-10011 in-interface=ether3 protocol=tcp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=\
10402,11011-11041,12011,12110,13008,13413,15000-15002,16402-16502,16666,18901-18909,19000 in-interface=ether3 protocol=tcp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=\
19101,22100,27780,28012,29000,29200,39100,39110,39220,39190,40000,49100,4300 in-interface=ether3 protocol=tcp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=14009-14010,4300 in-interface=ether3 protocol=udp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=14009-14010 in-interface=ether3 protocol=udp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=\
1293,1479,6100-6152,7777-7977,8001,9401,9600-9602,12020-12080,30000,40000-40010 in-interface=ether3 protocol=udp
add action=add-dst-to-address-list address-list=game_online address-list-timeout=1d chain=forward disabled=no dst-port=42051-42052,11100-11125,11440-11460 in-interface=\
ether3 protocol=udp

Kemudian saya menggunakan layer7 untuk melimit download, yang mana limit bandwidth menggunakan extensi layer7 ini di beri prioritas terbawah. Berikut Layer7 untuk melimit bandwidth yang saya gunakan.

/ip firewall layer7-protocol
add name=youtube regexp="http/(0\\.9|1\\.0|1\\.1)[\\x09-\\x0d ][1-5][0-9][0-9][\\x09-\\x0d -~]*(content-type: video)"
add name=big regexp="^.*get.+\\.(exe|rar|zip|7z|cab|asf|mov|wmv|mpg|mpeg|mkv|avi|flv|pdf|wav|rm|mp3|mp4|ram|msu|msi|nup|vdf|rmvb|dat|daa|iso|nrg|bin|vcd|mp2|3gp|mpe|qt|raw|wma|ogg|doc|deb|tar|bzip|gzip|gzip2|0[0-9][0-9]).*\$"
add name=streaming regexp="a.youtube.com|d.youtube.com|e.youtube.com|f.youtube.com|g.youtube.com|h.youtube.com|i.youtube.com|j.youtube.com|l.youtube.com|c.youtube.com|d.youtube.com|youtube|tube|dailymotion.com"

Setelah ip game online indonesia di tangkap sesuai port yang ada pada mikrotik, lalu saya beri mangle untuk game ini, Berikut mangle untuk game online menggunakan mikrotik, yang saya buat.

/ip firewall mangle 
add action=mark-connection chain=prerouting comment=GAME disabled=no dst-address-list=game_online dst-port=\
1818,2001,3010,4300,5105,5121,5126,5171,5340-5352,6000-6152,7777 new-connection-mark=game_conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting disabled=no dst-address-list=game_online dst-port=7341-7350,7451,8085,9600,9601-9602,9300,9376-9377,9400,9700,10001-10011 \
new-connection-mark=game_conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting disabled=no dst-address-list=game_online dst-port=\
10402,11011-11041,12011,12110,13008,13413,15000-15002,16402-16502,16666,18901-18909,19000 new-connection-mark=game_conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting disabled=no dst-address-list=game_online dst-port=19101,22100,27780,28012,29000,29200,39100,39110,39220,39190,40000,49100 \
new-connection-mark=game_conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting disabled=no dst-address-list=game_online dst-port=14009-14010 new-connection-mark=game_conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting disabled=no dst-address-list=game_online dst-port=14009-14010 new-connection-mark=game_conn passthrough=yes protocol=udp
add action=mark-connection chain=prerouting disabled=no dst-address-list=game_online dst-port=\
1293,1479,6100-6152,7777-7977,8001,9401,9600-9602,12020-12080,30000,40000-40010 new-connection-mark=game_conn passthrough=yes protocol=udp
add action=mark-connection chain=prerouting disabled=no dst-address-list=game_online dst-port=42051-42052,11100-11125,11440-11460 new-connection-mark=game_conn \
passthrough=yes protocol=udp
add action=mark-packet chain=prerouting connection-mark=game_conn disabled=no new-packet-mark=game_pkt passthrough=no
add action=mark-connection chain=prerouting comment="Update Game" disabled=no dscp=!12 dst-address-list=game_online dst-port=80,21 new-connection-mark=update-conn \
packet-mark=!hit passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting connection-mark=update-conn disabled=no dscp=!12 new-packet-mark=update passthrough=no

Lalu saya buat mangle untuk, update game yang konon jika tidak lewat proxy agar di limit sesuai kebutuhan,

/ip firewall mangle 
add action=mark-connection chain=prerouting comment="Update Game" disabled=no dscp=!12 dst-address-list=game_online dst-port=80,21 new-connection-mark=update-conn \
packet-mark=!hit passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting connection-mark=update-conn disabled=no dscp=!12 new-packet-mark=update passthrough=no

Kemudian mangle untuk layer7 streaming, dan saya tambah dengan sedikit content di manglenya.

/ip firewall mangle 
add action=mark-connection chain=prerouting comment=Streaming disabled=no layer7-protocol=YOUTUBE new-connection-mark=streaming-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting disabled=no dscp=!12 layer7-protocol=streaming new-connection-mark=streaming-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=dailymotion.com disabled=no new-connection-mark=streaming-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=mivo disabled=no new-connection-mark=streaming-conn passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting connection-mark=streaming-conn disabled=no new-packet-mark=streaming passthrough=no

Kemudian saya set mangle untuk facebook, dan game online facebook.

/ip firewall mangle 
add action=mark-connection chain=prerouting comment=Facebook disabled=no dst-address-list=FB-Game new-connection-mark=facebook-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=apps.facebook.com disabled=no dscp=!12 new-connection-mark=facebook-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=facebook.com/apps disabled=no dscp=!12 new-connection-mark=facebook-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=app.facebook.com/pool-live disabled=no dscp=!12 new-connection-mark=facebook-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=static.ak.connect.facebook.com disabled=no dscp=!12 new-connection-mark=facebook-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=statics.poker.static.zynga.com disabled=no dscp=!12 new-connection-mark=facebook-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=.ninjasaga.com disabled=no dscp=!12 new-connection-mark=facebook-conn packet-mark=!hit passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=.castle.zgncdn.com disabled=no dscp=!12 new-connection-mark=facebook-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=.static.zynga.com disabled=no dscp=!12 new-connection-mark=facebook-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=.static.zgncdn.com disabled=no dscp=!12 new-connection-mark=facebook-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=.empire.zynga.com disabled=no dscp=!12 new-connection-mark=facebook-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=.poker.zynga.com disabled=no dscp=!12 new-connection-mark=facebook-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=.castle.zynga.com disabled=no dscp=!12 new-connection-mark=facebook-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=.farmville.com disabled=no dscp=!12 new-connection-mark=facebook-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=.farmville.zgncdn.com disabled=no dscp=!12 new-connection-mark=facebook-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=akamai.net disabled=no dscp=!12 new-connection-mark=facebook-conn passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting content=.channel.facebook.com disabled=no dscp=!12 new-connection-mark=facebook-conn passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting connection-mark=facebook-conn disabled=no dscp=!12 new-packet-mark=facebook passthrough=no

Untuk Browsingnya saya buat mangle seperti di bawah ini.

/ip firewall mangle 
add action=mark-connection chain=prerouting comment=browsing connection-bytes=100000-256 connection-mark=!facebook-conn disabled=no dscp=!12 dst-address-list=\
!game_online dst-port=80 new-connection-mark=browse-conn packet-mark=!game_pkt passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting connection-mark=browse-conn disabled=no dscp=!12 new-packet-mark=browse passthrough=no

Untuk loadbalancingnya silahkan di gunakan yang nth atau pcc, saya tidak sebut lagi rule-rule tersebut disini.
Untuk Queue Treenya silahkan di kreasikan sendiri..!
Thanks to ForumMikrotik dan segala sumber yang tak bisa disebutkan satu persatu, seperti rule mangle facebook, port game online, rule layer7, dan tak lupa serta connection-bytesnya.

Jasa setting mikrotik dan jasa setting proxy warnet

Jasa Setting Mikrotik Proxy External Ubuntu FreeBSD via Remote

Jasa Setting Mikrotik dan Proxy External Ubuntu FreeBSD via Remote - kami menyediakan Jasa Setting Mikrotik dan Proxy External Ubuntu FreeBSD via Remote untuk seluruh indonesia, beberapa client kami berada jauh di ujung indonesia, seperti papua dan aceh. Jasa setting proxy dan mikrotik dapat di lakukan dengan bantuan software kecil teamviewer, yang berfungsi untuk meremote komputer client, sehingga mikrotik dan client terkoneksi ke internet dengan benar.

Setelah koneksi internet tersambung dengan baik complit dengan management bandwidth yang memisahkan space bandwidth browsing dan game, baik di dalam 1mbps maupun 2mbps atau 3mbps, kemudian di lanjutkan dengan menginstall proxy, installasi proxy external dapat di lakukan via remote, tentunya seperti saya bilang tadi jika koneksi internet sudah terhubung dengan baik lewat mikrotik, meskipun setting dan installasi via teamviewer dapat di lakukan, namun rasanya lebih elegan dan mudah jika koneksi sudah lewat mikrotik.

Soal management bandwidth, bisa di pilih menggunakan queue tree atau menggunakan queue simple, pada prinsifnya queue simple dan tree memiliki kemampuan yang sama, yakni memanagement bandwidth, bedanya hanya mudah dan rumitnya, dalam menconfigurasinya. Jika menggunakan queue tree mungkin bisa menggunakan rule yang panjang lebar, meskipun rule yang sama dapat di gunakan di queue simple.

Jika anda bertanya apa bedanya queue simple dan queue tree, bedanya tak jauh, hanya soal expert dan tidak expertnya, soal mudah dan tidak mudahnya. Warnet - warnet di indonesia umumnya sudah menggunakan proxy external untuk membantu koneksi yang didapat dari penyedia jasa internet seperti telkomspeedy.

Fungsinya seperti di beberapa posting yang saya buat, adalah untuk menghemat bandwidth internet, artinya setiap content yang di cache dan di simpan oleh proxy, jika di access ulang oleh user yang berbeda, koneksi internet tidak lagi di sibukkan request ke isp, tapi langsung mengembalikan paket yang di ambil dari proxy. Simplenya proxy adalah media penyimpanan content yang pernah di kunjungi oleh user, tentunya  

TIDAK SEMUA CONTENT BISA - BOLEH DI CACHE OLEH PROXY

Alasannya tentu sangat banyak dan berpariasi, ada alasan security, ada alasan update, dan berbagai macam alasan lainnya yang menyebabkan proxy tidak boleh mencache semua conten, simplenya bayangkan jika hacksield point blank di cache oleh proxy, tentu anda akan di sibukkan oleh pesan bahwa di computer anda ada cheat atau beragam alasan lainnya yang menyebabkan point blank tidak bisa berjalan dengan semestinya. Misal kata saja ada program ilegal di computernya, hanya di karenakan upate hacksield tidak lagi relevan dengan game yang ada.

Tapi umumnya hal-hal seperti itu ada baiknya tidak di cache. Mudah-mudahan tulisan singkat ini, memberikan sedikit pencarahan bagi anda dalam management warnet anda, atau koneksi wireless milik anda. Agar lebih optimal, dengan bantuan dan settingan proxy external ubuntu dan Freebsd, tentu saja LUSCA yang saya install adalah LUSCA_HEAD.

Contact
Jasa Setting Mikrotik
Jasa Setting Proxy External Ubuntu / FreeBSD Warnet