Carasaya

/interface bridge
add name=bridge
/queue tree
add limit-at=100M max-limit=100M name=DOWNLOAD parent=global queue=default
add bucket-size=0 limit-at=22M max-limit=25M name=1.VIP packet-mark=vip-down \
parent=DOWNLOAD priority=1 queue=default
add bucket-size=0 limit-at=15M max-limit=20M name=2.GAMES packet-mark=\
games-down parent=DOWNLOAD priority=2 queue=default
add bucket-size=3 limit-at=28M max-limit=35M name=3.NORMAL parent=DOWNLOAD \
priority=4 queue=default
add limit-at=8M max-limit=12M name=3.2.BROWSING packet-mark=browsing-down \
parent=3.NORMAL priority=5 queue=pcq-download-default
add limit-at=12M max-limit=15M name=3.3.MIDDLE packet-mark=midle-down parent=\
3.NORMAL priority=7 queue=pcq-download-default
add bucket-size=3 limit-at=20M max-limit=22M name=3.4.HIGH packet-mark=\
high-down parent=3.NORMAL queue=pcq-download-default
add bucket-size=6 limit-at=22M max-limit=25M name=4.GOOGLE packet-mark=\
ggc-telkom-down parent=DOWNLOAD queue=pcq-download-default
add limit-at=4M max-limit=5M name=UPLOAD parent=global queue=default
add limit-at=64k max-limit=4M name=1.U-VIP packet-mark=vip-up parent=UPLOAD \
priority=1 queue=default
add limit-at=2M max-limit=4M name=2.U-GAMES packet-mark=games-up parent=\
UPLOAD priority=3 queue=default
add limit-at=3M max-limit=4M name=3.U-NORMAL parent=UPLOAD queue=default
add limit-at=512k max-limit=2M name=3.2.U-BROWSING packet-mark=browsing-up \
parent=3.U-NORMAL priority=5 queue=pcq-upload-default
add limit-at=512k max-limit=3M name=3.3.U-MIDDLE packet-mark=midle-up parent=\
3.U-NORMAL priority=7 queue=pcq-upload-default
add limit-at=1M max-limit=2M name=3.4.U-HIGH packet-mark=high-up parent=\
3.U-NORMAL queue=pcq-upload-default
add limit-at=200k max-limit=2M name=3.5.U-UNKNOWN packet-mark=unknown-up \
parent=3.U-NORMAL queue=pcq-upload-default
add limit-at=2800k max-limit=3M name=4.U-GOOGLE packet-mark=ggc-telkom-up \
parent=UPLOAD queue=pcq-upload-default
add bucket-size=3 limit-at=23M max-limit=25M name=3.1.SOSMED packet-mark=\
sosmed-down parent=3.NORMAL priority=2 queue=pcq-download-default
add limit-at=2048k max-limit=4M name=3.1.U-SOSMED packet-mark=sosmed-up \
parent=3.U-NORMAL priority=5 queue=pcq-upload-default
/ip dns
set allow-remote-requests=yes max-concurrent-queries=200 \
max-concurrent-tcp-sessions=50 query-server-timeout=5s servers=\
8.8.8.8,8.8.4.4
/ip dns static
add address=127.0.0.1 name=ads.pubmatic.com type=A
add address=127.0.0.1 name=adservice.google.com type=A
add address=127.0.0.1 name=pagead46.l.doubleclick.net type=A
add address=127.0.0.1 name=wzrkt.com type=A
add address=127.0.0.1 name=ad.doubleclick.net type=A
add address=127.0.0.1 regexp=googlesyndication* type=A
add address=127.0.0.1 name=cxp.emogi.com type=A
add address=127.0.0.1 name=shavar.prod.mozaws.net type=A
add address=127.0.0.1 name=cdn.branch.io type=A
add address=127.0.0.1 name=server.cpmstar.com type=A
add address=127.0.0.1 name=analytics.rayjump.com type=A
add address=127.0.0.1 name=stats.g.doubleclick.net type=A
add address=127.0.0.1 name=pagead.l.doubleclick.net type=A
add address=127.0.0.1 name=ads.mopub.com type=A
add address=127.0.0.1 name=googleads.g.doubleclick.net type=A
add address=127.0.0.1 disabled=yes name=211.152.129.21 type=A
add address=127.0.0.1 name=partnerad.l.doubleclick.net type=A
add address=127.0.0.1 name=ads.yahoo.com type=A
add address=127.0.0.1 name=www.googleadservices.com type=A
/ip firewall address-list
add address=0.0.0.0/8 list=private-lokal
add address=118.98.0.0/17 list=ggc-telkom
add address=157.240.217.60 list=sosmed
add address=100.21.81.80 list=games
/ip firewall mangle

add action=mark-connection chain=prerouting comment=private-lokal \
dst-address-list=private-lokal new-connection-mark=private-lokal \
passthrough=yes src-address-list=private-lokal
add action=accept chain=prerouting comment=private-lokal connection-mark=\
private-lokal dst-address-list=private-lokal src-address-list=\
private-lokal
add action=mark-connection chain=prerouting comment=vip dst-address-list=\
!private-lokal new-connection-mark=vip passthrough=yes protocol=icmp \
src-address-list=private-lokal
add action=mark-connection chain=prerouting comment=dns dst-address-list=\
!private-lokal dst-port=53,5353,123,1194 new-connection-mark=vip \
passthrough=yes protocol=tcp src-address-list=private-lokal
add action=mark-connection chain=prerouting comment=dns dst-address-list=\
!private-lokal dst-port=53,5353,123,1194 new-connection-mark=vip \
passthrough=yes protocol=udp src-address-list=private-lokal
add action=accept chain=prerouting comment=vip connection-mark=vip
add action=mark-connection chain=prerouting comment=games dst-address-list=\
games new-connection-mark=games passthrough=yes src-address-list=\
allowed_to_router
add action=accept chain=prerouting comment=games connection-mark=games
add action=mark-connection chain=prerouting comment=sosmed dst-address-list=\
sosmed new-connection-mark=sosmed passthrough=yes src-address-list=\
private-lokal
add action=accept chain=prerouting comment=sosmed connection-mark=sosmed
add action=mark-connection chain=prerouting comment=ggc-telkom \
dst-address-list=ggc-telkom new-connection-mark=ggc-redirector \
add action=accept chain=prerouting comment=ggc-redirector connection-mark=\
ggc-redirector
add action=mark-connection chain=prerouting comment=all-trafik \
dst-address-list=!private-lokal new-connection-mark=all-trafik \
add action=accept chain=prerouting comment=all-trafik connection-mark=\
all-trafik
add action=jump chain=forward in-interface=ether1 jump-target=qos-down
add action=mark-packet chain=qos-down comment=vip-down connection-mark=vip \
new-packet-mark=vip-down passthrough=no
add action=mark-packet chain=qos-down comment=games-down connection-mark=\
games new-packet-mark=games-down passthrough=no
add action=mark-packet chain=qos-down comment=sosmed-down connection-mark=\
sosmed new-packet-mark=sosmed-down passthrough=no
add action=mark-packet chain=qos-down comment=ggc-telkom-down \
connection-mark=ggc-redirector new-packet-mark=ggc-telkom-down \
passthrough=no
add action=mark-packet chain=qos-down comment=browsing-down connection-bytes=\
0-1000000 connection-mark=all-trafik new-packet-mark=browsing-down \
passthrough=no
add action=mark-packet chain=qos-down comment=midle-down connection-bytes=\
1000001-3000000 connection-mark=all-trafik new-packet-mark=midle-down \
passthrough=no
add action=mark-packet chain=qos-down comment=high-down connection-bytes=\
3000001-1000000000 connection-mark=all-trafik new-packet-mark=high-down \
passthrough=no
add action=mark-packet chain=qos-down comment=unknown-down connection-mark=\
all-trafik new-packet-mark=unknown-down passthrough=no
add action=mark-packet chain=qos-down comment=unknown-down new-packet-mark=\
unknown-down passthrough=no
add action=return chain=qos-down
add action=jump chain=forward jump-target=qos-up out-interface=ether1
add action=mark-packet chain=qos-up comment=vip-up connection-mark=vip \
new-packet-mark=vip-up passthrough=no
add action=mark-packet chain=qos-up comment=games-up connection-mark=games \
new-packet-mark=games-up passthrough=no
add action=mark-packet chain=qos-up comment=sosmed-up connection-mark=sosmed \
new-packet-mark=sosmed-up passthrough=no
add action=mark-packet chain=qos-up comment=ggc-telkom-up connection-mark=\
ggc-redirector new-packet-mark=ggc-telkom-up passthrough=no
add action=mark-packet chain=qos-up comment=browsing-up connection-bytes=\
0-500000 connection-mark=all-trafik new-packet-mark=browsing-up \
passthrough=no
add action=mark-packet chain=qos-up comment=midle-up connection-bytes=\
501000-1500000 connection-mark=all-trafik new-packet-mark=midle-up \
passthrough=no
add action=mark-packet chain=qos-up comment=high-up connection-bytes=\
1500001-1000000000 connection-mark=all-trafik new-packet-mark=high-up \
passthrough=no
add action=mark-packet chain=qos-up comment=unknown-up connection-mark=\
all-trafik new-packet-mark=unknown-up passthrough=no
add action=mark-packet chain=qos-up comment=unknown-up new-packet-mark=\
unknown-up passthrough=no
add action=return chain=qos-up
/ip firewall nat
add action=masquerade chain=srcnat ipsec-policy=out,none out-interface-list=\
WAN src-address-list=allowed_to_router
/ip firewall raw
add action=add-dst-to-address-list address-list=games address-list-timeout=\
none-static chain=prerouting comment=Vainglory dst-address-list=\
!private-lokal dst-port=7000-8020 protocol=tcp src-address-list=\
private-lokal
none-dynamic chain=prerouting comment=Vainglory content=.superevil.net \
dst-address-list=!private-lokal src-address-list=private-lokal
none-dynamic chain=prerouting comment="Mobile Legends" dst-address-list=\
!private-lokal dst-port=\
5000-5508,5551-5558,5601-5608,5651-5658,30097-30147 protocol=tcp \
none-dynamic chain=prerouting comment="Mobile Legends" content=\
.youngjoygame.com dst-address-list=!private-lokal src-address-list=\
private-lokal
none-dynamic chain=prerouting comment="Free Fire" dst-address-list=\
!private-lokal dst-port=396,983,900,339,779 protocol=tcp \
none-dynamic chain=prerouting comment="Fee Fire" dst-address-list=\
!private-lokal dst-port=10000-10007,7008 protocol=udp src-address-list=\
private-lokal
none-dynamic chain=prerouting comment="PUBG Mobile" dst-address-list=\
!private-lokal dst-port=10012,17500 protocol=tcp src-address-list=\
private-lokal
none-dynamic chain=prerouting comment="PUBG Mobile" dst-address-list=\
!private-lokal dst-port="10491,10010,10013,10612,20002,20001,20000,12235,1\
3748,13972,13894,11455,10096,10039" protocol=udp src-address-list=\
private-lokal
none-dynamic chain=prerouting comment="PUBG Mobile" content=.igamecj.com \
none-dynamic chain=prerouting comment="PUBG Mobile" content=\
tencentgames.helpshift.com dst-address-list=!private-lokal \
none-dynamic chain=prerouting comment=Garena content=.garenanow.com \
add action=add-dst-to-address-list address-list=sosmed address-list-timeout=\
none-dynamic chain=prerouting comment=ig content=.cdninstagram.com \
none-dynamic chain=prerouting comment=ig content=.instagram.com \
none-static chain=prerouting comment=WA content=.whatsapp.net \
none-static chain=prerouting comment=WA content=.whatsapp.com \
none-dynamic chain=prerouting comment=fb content=.facebook.com \
none-dynamic chain=prerouting comment=fb content=.facebook.net \
none-dynamic chain=prerouting comment=fb content=.fbcdn.net \
none-dynamic chain=prerouting comment=twitter content=.twitter.com \
none-dynamic chain=prerouting comment=twitter content=.twimg.com \
none-dynamic chain=prerouting comment=tiktok content=.tiktokv.com \
none-dynamic chain=prerouting comment=tiktok content=.amemv.com \
/ip firewall service-port

set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
set udplite disabled=yes
set dccp disabled=yes
set sctp disabled=yes

Carasaya

Загружено:

Сведения о документе

Оригинальное название

Авторское право

Доступные форматы

Поделиться этим документом

Поделиться или встроить документ

Параметры публикации

Этот документ был вам полезен?

Это неприемлемый материал?

Авторское право:

Доступные форматы

Carasaya

Загружено:

Авторское право:

Доступные форматы

/interface bridge

/ip firewall mangle

/ip firewall service-port

Вам также может понравиться