/ip firewall address-list

add address=192.168.0.0/16 list=private_IPv4

add address=172.16.0.0/12 list=private_IPv4
add address=10.0.0.0/8 list=private_IPv4
/ip firewall layer7-protocol
add name=EXE regexp="\\x4d\\x5a(\\x90\\x03|\\x50\\x02)\\x04"
add name=ZIP regexp="pk\\x03\\x04\\x14"
add name=MP4 regexp="\\x18\\x66\\x74\\x79\\x70"
add name=RAR regexp="Rar\\x21\\x1a\\x07"
add name=youtube regexp="r[0-9]+---[a-z]+-+[a-z0-9-]+\\.googlevideo\\.com"
/ip firewall mangle
add action=accept chain=prerouting comment="Bypass Local Traffic" dst-address-
list=private_IPv4 src-address-list=private_IPv4
add action=accept chain=forward dst-address-list=private_IPv4 src-address-
list=private_IPv4
add action=mark-connection chain=forward comment="STEAM GAMES" dst-port=27000-27100
new-connection-mark=games passthrough=yes protocol=tcp src-address-
list=private_IPv4
add action=mark-connection chain=forward dst-port=27000-27100 new-connection-
mark=games passthrough=yes protocol=udp src-address-list=private_IPv4
add action=mark-connection chain=forward dst-port=27000-28998 new-connection-
mark=games passthrough=yes protocol=tcp src-address-list=private_IPv4
add action=mark-connection chain=forward dst-port=27000-28998 new-connection-
mark=games passthrough=yes protocol=udp src-address-list=private_IPv4
add action=mark-connection chain=forward comment="PUBG" dst-port=39190-39200 new-
connection-mark=games passthrough=yes protocol=udp src-address-list=private_IPv4
add action=mark-connection chain=forward comment="PALADINS" dst-port=9000-9999 new-
connection-mark=games passthrough=yes protocol=tcp src-address-list=private_IPv4
add action=mark-connection chain=forward dst-port=9002-9999 new-connection-
mark=games passthrough=yes protocol=udp src-address-list=private_IPv4
add action=mark-connection chain=forward comment="BLACKRETRIBUTION" dst-port=7020-
7050,8200-8220,9000-9020 new-connection-mark=games passthrough=yes protocol=udp
src-address-list=private_IPv4
add action=mark-connection chain=forward comment="LEFT4DEAD 2" dst-port=4360-4390
new-connection-mark=games passthrough=yes protocol=udp src-address-
list=private_IPv4
add action=mark-connection chain=forward comment="WARFRAME" dst-port=6695-6699 new-
connection-mark=games passthrough=yes protocol=tcp src-address-list=private_IPv4
add action=mark-connection chain=forward dst-port=4950-4955 new-connection-
mark=games passthrough=yes protocol=udp src-address-list=private_IPv4
add action=mark-connection chain=forward comment="LAST MAN STANDING" dst-
port=34000-34025,3500 new-connection-mark=games passthrough=yes protocol=udp src-
address-list=private_IPv4
add action=mark-connection chain=forward comment="PB Garena" dst-port=39190-39200
new-connection-mark=games passthrough=yes protocol=tcp src-address-
list=private_IPv4
add action=mark-connection chain=forward dst-port=40000-40010 new-connection-
mark=games passthrough=yes protocol=udp src-address-list=private_IPv4
add action=mark-connection chain=forward comment="FIFA ONLINE 3" dst-port=7770-7790
new-connection-mark=games passthrough=yes protocol=tcp src-address-
list=private_IPv4
add action=mark-connection chain=forward dst-port=16300-16350 new-connection-
mark=games passthrough=yes protocol=udp src-address-list=private_IPv4
add action=mark-connection chain=forward comment="LOL GARENA" dst-port=2080-2100
new-connection-mark=games passthrough=yes protocol=tcp src-address-
list=private_IPv4
add action=mark-connection chain=forward dst-port=5100 new-connection-mark=games
passthrough=yes protocol=udp src-address-list=private_IPv4
add action=mark-connection chain=forward comment="HON" dst-port=11031 new-
connection-mark=games passthrough=yes protocol=tcp src-address-list=private_IPv4
add action=mark-connection chain=forward dst-port=11100-11125,11440-11460 new-
connection-mark=games passthrough=yes protocol=udp src-address-list=private_IPv4
add action=mark-connection chain=forward comment="ROE – Ring of Elysium Indonesia"
dst-port=10000-10015 new-connection-mark=games passthrough=yes protocol=tcp src-
address-list=private_IPv4
add action=mark-connection chain=forward comment="DRAGON NEST INDONESIA" dst-
port=14300-15512 new-connection-mark=games passthrough=yes protocol=tcp src-
address-list=private_IPv4
add action=mark-connection chain=forward dst-port=15000-15500 new-connection-
mark=games passthrough=yes protocol=udp src-address-list=private_IPv4
add action=mark-connection chain=forward comment="LOST SAGA" dst-port=14000-14050
new-connection-mark=games passthrough=yes protocol=tcp src-address-
list=private_IPv4
add action=mark-connection chain=forward dst-port=14000-14050 new-connection-
mark=games passthrough=yes protocol=udp src-address-list=private_IPv4
add action=mark-connection chain=forward comment="BLACK SQUAD" dst-port=61000,62000
new-connection-mark=games passthrough=yes protocol=tcp src-address-
list=private_IPv4
add action=mark-connection chain=forward dst-port=50000-50100 new-connection-
mark=games passthrough=yes protocol=udp src-address-list=private_IPv4
add action=mark-connection chain=forward comment="ECHO OF SOUL (EOS)" dst-port=7800
new-connection-mark=games passthrough=yes protocol=tcp src-address-
list=private_IPv4
add action=mark-connection chain=forward dst-port=5355 new-connection-mark=games
passthrough=yes protocol=udp src-address-list=private_IPv4
add action=mark-connection chain=forward comment="CF INDONESIA" dst-
port=10009,13008,16666,28012 new-connection-mark=games passthrough=yes protocol=tcp
src-address-list=private_IPv4
add action=mark-connection chain=forward dst-port=12000-12080,13000-13080 new-
connection-mark=games passthrough=yes protocol=udp src-address-list=private_IPv4
add action=mark-connection chain=forward comment="IDOL STREET" dst-port=2001-2010
new-connection-mark=games passthrough=yes protocol=tcp src-address-
list=private_IPv4
add action=mark-connection chain=forward comment="RF ONLINE" dst-port=27780 new-
connection-mark=games passthrough=yes protocol=tcp src-address-list=private_IPv4
add action=mark-connection chain=forward comment="ROHAN ONLINE" dst-port=22100 new-
connection-mark=games passthrough=yes protocol=tcp src-address-list=private_IPv4
add action=mark-connection chain=forward comment="PERFECT WORLD" dst-port=29000
new-connection-mark=games passthrough=yes protocol=tcp src-address-
list=private_IPv4
add action=mark-connection chain=forward comment="AYODANCE" dst-port=18900-18910
new-connection-mark=games passthrough=yes protocol=tcp src-address-
list=private_IPv4
add action=mark-connection chain=forward comment="Counter Strike Online" dst-
port=47611,8000-8010,36567 new-connection-mark=games passthrough=yes protocol=tcp
src-address-list=private_IPv4
add action=mark-connection chain=forward dst-port=27005-27015,8000-8010 new-
connection-mark=games passthrough=yes protocol=udp src-address-list=private_IPv4
add action=mark-connection chain=forward comment="Ayo Oke" dst-port=28001-28010
new-connection-mark=games passthrough=yes protocol=tcp src-address-
list=private_IPv4
add action=mark-connection chain=forward dst-port=26001-26010 new-connection-
mark=games passthrough=yes protocol=udp src-address-list=private_IPv4
add action=mark-connection chain=forward comment="SPECIAL FORCE" dst-port=27920-
27940 new-connection-mark=games passthrough=yes protocol=tcp src-address-
list=private_IPv4
add action=mark-connection chain=forward dst-port=30000-30030 new-connection-
mark=games passthrough=yes protocol=udp src-address-list=private_IPv4
add action=mark-connection chain=forward comment="X-SHOT" dst-port=7320-7350 new-
connection-mark=games passthrough=yes protocol=tcp src-address-list=private_IPv4
add action=mark-connection chain=forward dst-port=7800-7850,30000 new-connection-
mark=games passthrough=yes protocol=udp src-address-list=private_IPv4
add action=mark-connection chain=forward comment="MERCENARY OPS" dst-port=6000-6125
new-connection-mark=games passthrough=yes protocol=tcp src-address-
list=private_IPv4
add action=mark-connection chain=forward comment="PORT GAME ROBLOX" dst-port=56849-
57729,60275-64632 new-connection-mark=games passthrough=yes protocol=udp src-
address-list=private_IPv4
add action=mark-connection chain=forward comment="FORNITE – EPIC GAME" dst-
port=9001-9025 new-connection-mark=games passthrough=yes protocol=udp src-address-
list=private_IPv4
add action=mark-connection chain=forward comment="RULES OF SURVIVAL" dst-
port=24000-24050 new-connection-mark=games passthrough=yes protocol=udp src-
address-list=private_IPv4
add action=mark-connection chain=forward comment="MOBILE LEGENDS: BANG BANG" dst-
port=30097-30147 new-connection-mark=games passthrough=yes protocol=tcp src-
address-list=private_IPv4
add action=mark-packet chain=forward comment="Games Traffic" connection-mark=games
in-interface="ether1-internet" new-packet-mark=games_down passthrough=no
add action=mark-packet chain=forward connection-mark=games in-interface="ether2-
lokal" new-packet-mark=games_up passthrough=no
add action=mark-connection chain=forward comment="ICMP Traffic" new-connection-
mark=icmp passthrough=yes protocol=icmp src-address-list=private_IPv4
add action=mark-packet chain=forward connection-mark=icmp in-interface="ether1-
internet" new-packet-mark=icmp_down passthrough=no protocol=icmp
add action=mark-packet chain=forward connection-mark=icmp in-interface="ether2-
lokal" new-packet-mark=icmp_up passthrough=no protocol=icmp
add action=mark-connection chain=forward comment="DNS Traffic" dst-port=53 new-
connection-mark=dns passthrough=yes protocol=udp src-address-list=private_IPv4
add action=mark-packet chain=forward connection-mark=dns in-interface="ether1-
internet" new-packet-mark=dns_down passthrough=no protocol=udp
add action=mark-packet chain=forward connection-mark=dns in-interface="ether2-
lokal" new-packet-mark=dns_up passthrough=no protocol=udp
add action=mark-connection chain=forward comment="Remote Traffic" dst-
port=22,23,8291,5938,4899 new-connection-mark=remote passthrough=yes protocol=tcp
src-address-list=private_IPv4
add action=mark-packet chain=forward connection-mark=remote in-interface="ether1-
internet" new-packet-mark=remote_down passthrough=no
add action=mark-packet chain=forward connection-mark=remote in-interface="ether2-
lokal" new-packet-mark=remote_up passthrough=no
add action=mark-connection chain=forward comment="YouTube Traffic" layer7-
protocol=youtube new-connection-mark=youtube passthrough=yes src-address-
list=private_IPv4
add action=mark-packet chain=forward connection-mark=youtube in-interface="ether1-
internet" new-packet-mark=youtube_down passthrough=no
add action=mark-packet chain=forward connection-mark=youtube in-interface="ether2-
lokal" new-packet-mark=youtube_up passthrough=no
add action=mark-connection chain=forward comment="Extension Layer7" layer7-
protocol=EXE new-connection-mark=extensi passthrough=yes
add action=mark-connection chain=forward layer7-protocol=ZIP new-connection-
mark=extensi passthrough=yes
add action=mark-connection chain=forward layer7-protocol=MP3 new-connection-
mark=extensi passthrough=yes
add action=mark-connection chain=forward layer7-protocol=RAR new-connection-
mark=extensi passthrough=yes
add action=mark-packet chain=forward connection-mark=extensi in-interface="ether1-
internet" new-packet-mark=extensi_down passthrough=no
add action=mark-packet chain=forward connection-mark=extensi in-interface="ether2-
lokal" new-packet-mark=extensi_up passthrough=no
add action=mark-connection chain=forward comment="Browsing Traffic" connection-
mark=!heavy_traffic new-connection-mark=browsing passthrough=yes src-address-
list=private_IPv4
add action=mark-connection chain=forward comment="Heavy Traffic" connection-
bytes=1024000-0 connection-mark=browsing connection-rate=256k-102400k new-
connection-mark=heavy_traffic passthrough=yes protocol=tcp
add action=mark-connection chain=forward connection-bytes=1024000-0 connection-
mark=browsing connection-rate=256k-102400k new-connection-mark=heavy_traffic
passthrough=yes protocol=udp
add action=mark-packet chain=forward connection-mark=heavy_traffic in-
interface="ether1-internet" new-packet-mark=heavy_browsing_down passthrough=no
add action=mark-packet chain=forward connection-mark=heavy_traffic in-
interface="ether2-lokal" new-packet-mark=heavy_browsing_up passthrough=no
add action=mark-packet chain=forward connection-mark=browsing in-interface="ether1-
internet" new-packet-mark=small_browsing_down passthrough=no
add action=mark-packet chain=forward connection-mark=browsing in-interface="ether2-
lokal" new-packet-mark=small_browsing_up passthrough=no