/interface ethernet
set [ find default-name=ether1 ] name=ether1-sinar-mas
set [ find default-name=ether2 ] name=ether2-r3
set [ find default-name=ether3 ] disabled=yes name=ether3-telkom6.1
set [ find default-name=ether4 ] loop-protect=on name=ether4-telkom4.1
set [ find default-name=ether5 ] disabled=yes loop-protect=on name=\
ether5-telkom2.1
set [ find default-name=ether9 ] name=ether9-monitoring
set [ find default-name=ether10 ] name=ether10-client
/interface list
add name=wan
add name=lan
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=192.168.222.1-192.168.222.253
add name=pool1 ranges=10.1.1.2-10.1.1.250
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=ether9-monitoring name=\
dhcp1
/ppp profile
add change-tcp-mss=yes dns-server=8.8.8.8 local-address=10.1.1.1 name=test \
remote-address=pool1 use-encryption=yes
/queue type
set 5 pcq-classifier=src-address,src-port
set 6 pcq-classifier=dst-address,dst-port
/queue tree
add name=all-browsing-down parent=global queue=pcq-download-default
add name=browsing-down-sinar-mas packet-mark=browsing-down-sinar-mas parent=\
all-browsing-down queue=pcq-download-default
add burst-limit=40M burst-threshold=35M burst-time=10s limit-at=25M \
max-limit=30M name=browsing-down-r3 packet-mark=browsing-down-r3 parent=\
all-browsing-down queue=pcq-download-default
add name=all-browsing-up parent=global queue=pcq-upload-default
add name=browsing-up-sinar-mas packet-mark=browsing-up-sinar-mas parent=\
all-browsing-up queue=pcq-upload-default
add name=browsing-up-r3 packet-mark=browsing-up-r3 parent=all-browsing-up \
queue=pcq-upload-default
add name=all-non-browsing-down parent=global priority=1 queue=\
pcq-download-default
add name=non-browsing-down-sinar-mas packet-mark=non-browsing-down-sinar-mas \
parent=all-non-browsing-down priority=1 queue=pcq-download-default
add name=non-browsing-down-r3 packet-mark=non-browsing-down-r3 parent=\
all-non-browsing-down priority=1 queue=pcq-download-default
add name=all-non-browsing-up parent=global priority=1 queue=\
pcq-upload-default
add name=non-browsing-up-sinar-mas packet-mark=non-browsing-up-sinar-mas \
parent=all-non-browsing-up priority=1 queue=pcq-upload-default
add name=non-browsing-up-r3 packet-mark=non-browsing-up-r3 parent=\
all-non-browsing-up priority=1 queue=pcq-upload-default
add name=browsing-down-telkom6.1 packet-mark=browsing-down-telkom6.1 parent=\
all-browsing-down queue=pcq-download-default
add name=browsing-up-telkom6.1 packet-mark=browsing-up-telkom6.1 parent=\
all-browsing-up queue=pcq-upload-default
add name=non-browsing-down-telkom6.1 packet-mark=non-browsing-down-telkom6.1 \
parent=all-non-browsing-down priority=1 queue=pcq-download-default
add name=non-browsing-up-telkom6.1 packet-mark=non-browsing-up-telkom6.1 \
parent=all-non-browsing-up priority=1 queue=pcq-upload-default
add name=browsing-down-telkom4.1 packet-mark=browsing-down-telkom4.1 parent=\
all-browsing-down queue=pcq-download-default
add name=browsing-down-telkom2.1 packet-mark=browsing-down-telkom2.1 parent=\
all-browsing-down queue=pcq-download-default
add name=browsing-up-telkom4.1 packet-mark=browsing-up-telkom4.1 parent=\
all-browsing-up queue=pcq-upload-default
add name=browsing-up-telkom2.1 packet-mark=browsing-up-telkom2.1 parent=\
all-browsing-up queue=pcq-upload-default
add name=non-browsing-down-telkom4.1 packet-mark=non-browsing-down-telkom4.1 \
parent=all-non-browsing-down priority=1 queue=pcq-download-default
add name=non-browsing-down-telkom2.1 packet-mark=non-browsing-down-telkom2.1 \
parent=all-non-browsing-down priority=1 queue=pcq-download-default
add name=non-browsing-up-telkom4.1 packet-mark=non-browsing-up-telkom4.1 \
parent=all-non-browsing-up priority=1 queue=pcq-upload-default
add name=non-browsing-up-telkom2.1 packet-mark=non-browsing-up-telkom2.1 \
parent=all-non-browsing-up priority=1 queue=pcq-upload-default
/interface list member
add interface=ether1-sinar-mas list=wan
add interface=ether2-r3 list=wan
add interface=ether9-monitoring list=lan
add interface=ether10-client list=lan
/interface pptp-server server
set authentication=pap,chap default-profile=test enabled=yes
/ip address
add address=192.168.110.2/24 interface=ether1-sinar-mas network=192.168.110.0
add address=103.254.126.202/30 interface=ether2-r3 network=103.254.126.200
add address=192.168.222.254/24 interface=ether9-monitoring network=\
192.168.222.0
add address=192.168.111.254/24 interface=ether10-client network=192.168.111.0
add address=192.168.205.53/29 interface=ether2-r3 network=192.168.205.48
add address=192.168.6.2/24 interface=ether3-telkom6.1 network=192.168.6.0
add address=192.168.4.2/24 interface=ether4-telkom4.1 network=192.168.4.0
add address=192.168.2.3/24 interface=ether5-telkom2.1 network=192.168.2.0
/ip dhcp-server network
add address=192.168.222.0/24 gateway=192.168.222.254
/ip dns
set allow-remote-requests=yes cache-size=4096KiB servers=\
8.8.8.8,8.8.4.4,103.254.126.18,208.67.220.220,208.67.222.222
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall address-list
add address=www.speedtest.net list=to-data
add address=speedtest.cbn.net.id list=to-data
add address=whatismyipaddress.com list=to-data
add address=www.facebook.com list=to-sinar-mas
add address=www.youtube.com list=to-sinar-mas
add address=www.instagram.com list=to-sinar-mas
add address=www.whatsapp.com list=to-sinar-mas
add address=play.google.com list=to-sinar-mas
add address=www.google.com list=to-sinar-mas
add address=www.google.co.id list=to-sinar-mas
add address=www.twitter.com list=to-sinar-mas
add address=www.path.com list=to-sinar-mas
add address=www.blogspot.com list=to-sinar-mas
add address=www.yahoo.com list=to-sinar-mas
add address=www.kaskus.co.id list=to-sinar-mas
add address=www.wordpress.com list=to-sinar-mas
add address=www.detik.com list=to-sinar-mas
add address=www.ask.com list=to-sinar-mas
add address=www.mediafire.com list=to-sinar-mas
add address=www.debian.org list=to-sinar-mas
add address=gensho.ftp.acc.umu.se list=to-sinar-mas
add address=kambing.ui.ac.id list=to-sinar-mas
add address=sourceforge.net list=to-sinar-mas
add address=amazonaws.com list=to-sinar-mas
add address=unetbootin.org list=to-sinar-mas
/ip firewall filter
add action=drop chain=input in-interface=ether2-r3 src-address=192.168.5.1
add action=drop chain=input comment="drop ftp brute forcers" dst-port=21 \
protocol=tcp src-address-list=ftp_blacklist
add action=accept chain=output content="530 Login incorrect" dst-limit=\
1/1m,9,dst-address/1m protocol=tcp
add action=add-dst-to-address-list address-list=ftp_blacklist \
address-list-timeout=3h chain=output content="530 Login incorrect" \
protocol=tcp
add action=drop chain=input comment="drop ssh brute forcers" dst-port=22-23 \
protocol=tcp src-address-list=ssh_blacklist
add action=add-src-to-address-list address-list=ssh_blacklist \
address-list-timeout=1w3d chain=input connection-state=new dst-port=22-23 \
protocol=tcp src-address-list=ssh_stage3
add action=add-src-to-address-list address-list=ssh_stage3 \
address-list-timeout=1m chain=input connection-state=new dst-port=22-23 \
protocol=tcp src-address-list=ssh_stage2
add action=add-src-to-address-list address-list=ssh_stage2 \
address-list-timeout=1m chain=input connection-state=new dst-port=22-23 \
protocol=tcp src-address-list=ssh_stage1
add action=add-src-to-address-list address-list=ssh_stage1 \
address-list-timeout=1m chain=input connection-state=new dst-port=22-23 \
protocol=tcp
add action=drop chain=forward comment="drop ssh brute downstream" dst-port=\
22-23 protocol=tcp src-address-list=ssh_blacklist
add action=drop chain=input dst-port=53 in-interface=ether1-sinar-mas \
protocol=udp
add action=drop chain=input dst-port=53 in-interface=ether2-r3 protocol=udp
add action=drop chain=input dst-port=53 in-interface=ether3-telkom6.1 \
protocol=udp
add action=drop chain=input dst-port=53 in-interface=ether4-telkom4.1 \
protocol=udp
add action=drop chain=input dst-port=53 in-interface=ether5-telkom2.1 \
protocol=udp
/ip firewall mangle
add action=accept chain=prerouting dst-address=192.168.110.0/24 in-interface=\
ether1-sinar-mas
add action=accept chain=prerouting dst-address=103.254.126.0/24 in-interface=\
ether2-r3
add action=accept chain=prerouting dst-address=192.168.205.0/24 in-interface=\
ether2-r3
add action=accept chain=prerouting dst-address=192.168.6.0/24 in-interface=\
ether3-telkom6.1
add action=accept chain=prerouting dst-address=192.168.4.0/24 in-interface=\
ether4-telkom4.1
add action=accept chain=prerouting dst-address=192.168.2.0/24 in-interface=\
ether5-telkom2.1
add action=mark-connection chain=input comment=\
"input-output interface yang sama" connection-state=new in-interface=\
ether1-sinar-mas new-connection-mark=conn-wan1 passthrough=yes
add action=mark-connection chain=input connection-state=new in-interface=\
ether2-r3 new-connection-mark=conn-wan2 passthrough=yes
add action=mark-connection chain=input connection-state=new in-interface=\
ether3-telkom6.1 new-connection-mark=conn-wan3 passthrough=yes
add action=mark-connection chain=input connection-state=new in-interface=\
ether4-telkom4.1 new-connection-mark=conn-wan4 passthrough=yes
add action=mark-connection chain=input connection-state=new in-interface=\
ether5-telkom2.1 new-connection-mark=conn-wan5 passthrough=yes
add action=mark-connection chain=prerouting connection-state=established \
in-interface=ether1-sinar-mas new-connection-mark=conn-wan1 passthrough=\
yes
add action=mark-connection chain=prerouting connection-state=established \
in-interface=ether2-r3 new-connection-mark=conn-wan2 passthrough=yes
add action=mark-connection chain=prerouting connection-state=established \
in-interface=ether3-telkom6.1 new-connection-mark=conn-wan3 passthrough=\
yes
add action=mark-connection chain=prerouting connection-state=established \
in-interface=ether4-telkom4.1 new-connection-mark=conn-wan4 passthrough=\
yes
add action=mark-connection chain=prerouting connection-state=established \
in-interface=ether5-telkom2.1 new-connection-mark=conn-wan5 passthrough=\
yes
add action=mark-connection chain=prerouting connection-state=related \
in-interface=ether1-sinar-mas new-connection-mark=conn-wan1 passthrough=\
yes
add action=mark-connection chain=prerouting connection-state=related \
in-interface=ether2-r3 new-connection-mark=conn-wan2 passthrough=yes
add action=mark-connection chain=prerouting connection-state=related \
in-interface=ether3-telkom6.1 new-connection-mark=conn-wan3 passthrough=\
yes
add action=mark-connection chain=prerouting connection-state=related \
in-interface=ether4-telkom4.1 new-connection-mark=conn-wan4 passthrough=\
yes
add action=mark-connection chain=prerouting connection-state=related \
in-interface=ether5-telkom2.1 new-connection-mark=conn-wan5 passthrough=\
yes
add action=mark-routing chain=output connection-mark=conn-wan1 \
new-routing-mark=to-wan1 passthrough=no
add action=mark-routing chain=output connection-mark=conn-wan2 \
new-routing-mark=to-wan2 passthrough=no
add action=mark-routing chain=output connection-mark=conn-wan3 \
new-routing-mark=to-wan3 passthrough=no
add action=mark-routing chain=output connection-mark=conn-wan4 \
new-routing-mark=to-wan4 passthrough=no
add action=mark-routing chain=output connection-mark=conn-wan5 \
new-routing-mark=to-wan5 passthrough=no
add action=mark-connection chain=prerouting comment=speedtest \
dst-address-list=to-data in-interface=ether10-client new-connection-mark=\
conn-speedtest passthrough=yes
add action=mark-routing chain=prerouting connection-mark=conn-speedtest \
in-interface=ether10-client new-routing-mark=to-wan2 passthrough=no
add action=mark-connection chain=prerouting comment=non-browsing dst-port=\
!80,443 in-interface=ether10-client new-connection-mark=conn-non-browsing \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting dst-port=!80,443 in-interface=\
ether10-client new-connection-mark=conn-non-browsing passthrough=yes \
protocol=udp
add action=mark-routing chain=prerouting connection-mark=conn-non-browsing \
in-interface=ether10-client new-routing-mark=to-non-browsing passthrough=\
no
add action=mark-packet chain=forward comment="mangle queue tree" \
in-interface=ether1-sinar-mas new-packet-mark=non-browsing-down-sinar-mas \
passthrough=no protocol=tcp src-port=!80,443
add action=mark-packet chain=forward in-interface=ether1-sinar-mas \
new-packet-mark=non-browsing-down-sinar-mas passthrough=no protocol=udp \
src-port=!80,443
add action=mark-packet chain=forward in-interface=ether2-r3 new-packet-mark=\
non-browsing-down-r3 passthrough=no protocol=tcp src-port=!80,443
add action=mark-packet chain=forward in-interface=ether2-r3 new-packet-mark=\
non-browsing-down-r3 passthrough=no protocol=udp src-port=!80,443
add action=mark-packet chain=forward in-interface=ether3-telkom6.1 \
new-packet-mark=non-browsing-down-telkom6.1 passthrough=no protocol=tcp \
src-port=!80,443
add action=mark-packet chain=forward in-interface=ether3-telkom6.1 \
new-packet-mark=non-browsing-down-telkom6.1 passthrough=no protocol=udp \
src-port=!80,443
add action=mark-packet chain=forward in-interface=ether4-telkom4.1 \
new-packet-mark=non-browsing-down-telkom4.1 passthrough=no protocol=tcp \
src-port=!80,443
add action=mark-packet chain=forward in-interface=ether4-telkom4.1 \
new-packet-mark=non-browsing-down-telkom4.1 passthrough=no protocol=udp \
src-port=!80,443
add action=mark-packet chain=forward in-interface=ether5-telkom2.1 \
new-packet-mark=non-browsing-down-telkom2.1 passthrough=no protocol=tcp \
src-port=!80,443
add action=mark-packet chain=forward in-interface=ether5-telkom2.1 \
new-packet-mark=non-browsing-down-telkom2.1 passthrough=no protocol=udp \
src-port=!80,443
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-sinar-mas out-interface=ether1-sinar-mas passthrough=no \
protocol=tcp
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-sinar-mas out-interface=ether1-sinar-mas passthrough=no \
protocol=udp
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-r3 out-interface=ether2-r3 passthrough=no protocol=tcp
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-r3 out-interface=ether2-r3 passthrough=no protocol=udp
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-telkom6.1 out-interface=ether3-telkom6.1 passthrough=no \
protocol=tcp
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-telkom6.1 out-interface=ether3-telkom6.1 passthrough=no \
protocol=udp
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-telkom4.1 out-interface=ether4-telkom4.1 passthrough=no \
protocol=tcp
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-telkom4.1 out-interface=ether4-telkom4.1 passthrough=no \
protocol=udp
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-telkom2.1 out-interface=ether5-telkom2.1 passthrough=no \
protocol=tcp
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-telkom2.1 out-interface=ether5-telkom2.1 passthrough=no \
protocol=udp
add action=mark-packet chain=forward in-interface=ether1-sinar-mas \
new-packet-mark=browsing-down-sinar-mas passthrough=no protocol=tcp \
src-port=80,443
add action=mark-packet chain=forward in-interface=ether1-sinar-mas \
new-packet-mark=browsing-down-sinar-mas passthrough=no protocol=udp \
src-port=80,443
add action=mark-packet chain=forward in-interface=ether2-r3 new-packet-mark=\
browsing-down-r3 passthrough=no protocol=tcp src-port=80,443
add action=mark-packet chain=forward in-interface=ether2-r3 new-packet-mark=\
browsing-down-r3 passthrough=no protocol=udp src-port=80,443
add action=mark-packet chain=forward in-interface=ether3-telkom6.1 \
new-packet-mark=browsing-down-telkom6.1 passthrough=no protocol=tcp \
src-port=80,443
add action=mark-packet chain=forward in-interface=ether3-telkom6.1 \
new-packet-mark=browsing-down-telkom6.1 passthrough=no protocol=udp \
src-port=80,443
add action=mark-packet chain=forward in-interface=ether4-telkom4.1 \
new-packet-mark=browsing-down-telkom4.1 passthrough=no protocol=tcp \
src-port=80,443
add action=mark-packet chain=forward in-interface=ether4-telkom4.1 \
new-packet-mark=browsing-down-telkom4.1 passthrough=no protocol=udp \
src-port=80,443
add action=mark-packet chain=forward in-interface=ether5-telkom2.1 \
new-packet-mark=browsing-down-telkom2.1 passthrough=no protocol=tcp \
src-port=80,443
add action=mark-packet chain=forward in-interface=ether5-telkom2.1 \
new-packet-mark=browsing-down-telkom2.1 passthrough=no protocol=udp \
src-port=80,443
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-sinar-mas out-interface=ether1-sinar-mas passthrough=no \
protocol=tcp
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-sinar-mas out-interface=ether1-sinar-mas passthrough=no \
protocol=udp
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-r3 out-interface=ether2-r3 passthrough=no protocol=tcp
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-r3 out-interface=ether2-r3 passthrough=no protocol=udp
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-telkom6.1 out-interface=ether3-telkom6.1 passthrough=no \
protocol=tcp
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-telkom6.1 out-interface=ether3-telkom6.1 passthrough=no \
protocol=udp
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-telkom4.1 out-interface=ether4-telkom4.1 passthrough=no \
protocol=tcp
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-telkom4.1 out-interface=ether4-telkom4.1 passthrough=no \
protocol=udp
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-telkom2.1 out-interface=ether5-telkom2.1 passthrough=no \
protocol=tcp
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-telkom2.1 out-interface=ether5-telkom2.1 passthrough=no \
protocol=udp
/ip firewall nat
add action=redirect chain=dstnat dst-port=53 protocol=tcp to-ports=53
add action=redirect chain=dstnat dst-port=53 protocol=udp to-ports=53
add action=masquerade chain=srcnat out-interface=ether1-sinar-mas \
to-addresses=192.168.4.1
add action=masquerade chain=srcnat out-interface=ether2-r3 to-addresses=\
192.168.5.1
add action=masquerade chain=srcnat out-interface=ether3-telkom6.1 \
to-addresses=192.168.5.1
add action=masquerade chain=srcnat out-interface=ether4-telkom4.1 \
to-addresses=192.168.5.1
add action=masquerade chain=srcnat out-interface=ether5-telkom2.1 \
to-addresses=192.168.5.1
add action=masquerade chain=srcnat
/ip route
add check-gateway=ping distance=1 gateway=192.168.110.1 routing-mark=to-wan1
add check-gateway=ping distance=1 gateway=103.254.126.201 routing-mark=\
to-wan2
add check-gateway=ping distance=1 gateway=192.168.6.1 routing-mark=to-wan3
add check-gateway=ping distance=1 gateway=192.168.4.1 routing-mark=to-wan4
add check-gateway=ping distance=1 gateway=192.168.2.1 routing-mark=to-wan5
add check-gateway=ping distance=1 gateway=103.254.126.201 routing-mark=\
to-non-browsing
add check-gateway=ping distance=2 gateway=192.168.110.1 routing-mark=\
to-non-browsing
add check-gateway=ping distance=3 gateway=192.168.6.1 routing-mark=\
to-non-browsing
add check-gateway=ping distance=4 gateway=192.168.4.1 routing-mark=\
to-non-browsing
add check-gateway=ping distance=5 gateway=192.168.2.1 routing-mark=\
to-non-browsing
add check-gateway=ping distance=1 gateway=\
192.168.110.1,103.254.126.201,192.168.4.1,192.168.2.1,192.168.6.1
/ppp aaa
set interim-update=1m use-circuit-id-in-nas-port-id=yes use-radius=yes
/radius
add address=47.75.230.175 secret=test service=ppp
/radius incoming
set accept=yes
/system clock
set time-zone-name=Asia/Jakarta
/system identity
set name=test
/system note
set note="Using nice.rsc from www.mikrotik.co.id, 25 April 2018 13:14:12 WIB, \
2394 lines."
/system scheduler
add interval=30m name=a on-event=ip policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
start-time=startup
/system script
add name=ip owner=fathayu policy=\
reboot,read,write,policy,test,password,sniff,sensitive source="{/tool fetc\
h url=(\"http://www.boss-ip.com/Core/Update.ashx\\\?key=85454d8bb84998fa&a\
ction=upload&sncode=B70DF530B466DA11401E79BF0E241048&dynamic=static\")}"
/tool netwatch
add host=192.168.4.1 interval=1s timeout=50ms
add host=192.168.2.1 interval=1s timeout=50ms
add host=192.168.6.1 interval=1s timeout=50ms
add host=192.168.110.1 interval=1s timeout=50ms
add host=103.254.126.201 interval=1s timeout=50ms
add host=192.168.205.50 interval=1s timeout=50ms
add host=192.168.205.51 interval=1s timeout=50ms
add host=192.168.110.21 interval=1s timeout=50ms
add host=192.168.110.22 interval=1s timeout=50ms
add host=8.8.8.8 interval=1s timeout=50ms
add host=8.8.4.4 interval=1s timeout=50ms
add host=208.67.220.220 interval=1s timeout=50ms
add host=208.67.222.222 interval=1s timeout=50ms
add host=192.168.110.23 interval=1s timeout=50ms
set [ find default-name=ether1 ] name=ether1-sinar-mas
set [ find default-name=ether2 ] name=ether2-r3
set [ find default-name=ether3 ] disabled=yes name=ether3-telkom6.1
set [ find default-name=ether4 ] loop-protect=on name=ether4-telkom4.1
set [ find default-name=ether5 ] disabled=yes loop-protect=on name=\
ether5-telkom2.1
set [ find default-name=ether9 ] name=ether9-monitoring
set [ find default-name=ether10 ] name=ether10-client
/interface list
add name=wan
add name=lan
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=192.168.222.1-192.168.222.253
add name=pool1 ranges=10.1.1.2-10.1.1.250
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=ether9-monitoring name=\
dhcp1
/ppp profile
add change-tcp-mss=yes dns-server=8.8.8.8 local-address=10.1.1.1 name=test \
remote-address=pool1 use-encryption=yes
/queue type
set 5 pcq-classifier=src-address,src-port
set 6 pcq-classifier=dst-address,dst-port
/queue tree
add name=all-browsing-down parent=global queue=pcq-download-default
add name=browsing-down-sinar-mas packet-mark=browsing-down-sinar-mas parent=\
all-browsing-down queue=pcq-download-default
add burst-limit=40M burst-threshold=35M burst-time=10s limit-at=25M \
max-limit=30M name=browsing-down-r3 packet-mark=browsing-down-r3 parent=\
all-browsing-down queue=pcq-download-default
add name=all-browsing-up parent=global queue=pcq-upload-default
add name=browsing-up-sinar-mas packet-mark=browsing-up-sinar-mas parent=\
all-browsing-up queue=pcq-upload-default
add name=browsing-up-r3 packet-mark=browsing-up-r3 parent=all-browsing-up \
queue=pcq-upload-default
add name=all-non-browsing-down parent=global priority=1 queue=\
pcq-download-default
add name=non-browsing-down-sinar-mas packet-mark=non-browsing-down-sinar-mas \
parent=all-non-browsing-down priority=1 queue=pcq-download-default
add name=non-browsing-down-r3 packet-mark=non-browsing-down-r3 parent=\
all-non-browsing-down priority=1 queue=pcq-download-default
add name=all-non-browsing-up parent=global priority=1 queue=\
pcq-upload-default
add name=non-browsing-up-sinar-mas packet-mark=non-browsing-up-sinar-mas \
parent=all-non-browsing-up priority=1 queue=pcq-upload-default
add name=non-browsing-up-r3 packet-mark=non-browsing-up-r3 parent=\
all-non-browsing-up priority=1 queue=pcq-upload-default
add name=browsing-down-telkom6.1 packet-mark=browsing-down-telkom6.1 parent=\
all-browsing-down queue=pcq-download-default
add name=browsing-up-telkom6.1 packet-mark=browsing-up-telkom6.1 parent=\
all-browsing-up queue=pcq-upload-default
add name=non-browsing-down-telkom6.1 packet-mark=non-browsing-down-telkom6.1 \
parent=all-non-browsing-down priority=1 queue=pcq-download-default
add name=non-browsing-up-telkom6.1 packet-mark=non-browsing-up-telkom6.1 \
parent=all-non-browsing-up priority=1 queue=pcq-upload-default
add name=browsing-down-telkom4.1 packet-mark=browsing-down-telkom4.1 parent=\
all-browsing-down queue=pcq-download-default
add name=browsing-down-telkom2.1 packet-mark=browsing-down-telkom2.1 parent=\
all-browsing-down queue=pcq-download-default
add name=browsing-up-telkom4.1 packet-mark=browsing-up-telkom4.1 parent=\
all-browsing-up queue=pcq-upload-default
add name=browsing-up-telkom2.1 packet-mark=browsing-up-telkom2.1 parent=\
all-browsing-up queue=pcq-upload-default
add name=non-browsing-down-telkom4.1 packet-mark=non-browsing-down-telkom4.1 \
parent=all-non-browsing-down priority=1 queue=pcq-download-default
add name=non-browsing-down-telkom2.1 packet-mark=non-browsing-down-telkom2.1 \
parent=all-non-browsing-down priority=1 queue=pcq-download-default
add name=non-browsing-up-telkom4.1 packet-mark=non-browsing-up-telkom4.1 \
parent=all-non-browsing-up priority=1 queue=pcq-upload-default
add name=non-browsing-up-telkom2.1 packet-mark=non-browsing-up-telkom2.1 \
parent=all-non-browsing-up priority=1 queue=pcq-upload-default
/interface list member
add interface=ether1-sinar-mas list=wan
add interface=ether2-r3 list=wan
add interface=ether9-monitoring list=lan
add interface=ether10-client list=lan
/interface pptp-server server
set authentication=pap,chap default-profile=test enabled=yes
/ip address
add address=192.168.110.2/24 interface=ether1-sinar-mas network=192.168.110.0
add address=103.254.126.202/30 interface=ether2-r3 network=103.254.126.200
add address=192.168.222.254/24 interface=ether9-monitoring network=\
192.168.222.0
add address=192.168.111.254/24 interface=ether10-client network=192.168.111.0
add address=192.168.205.53/29 interface=ether2-r3 network=192.168.205.48
add address=192.168.6.2/24 interface=ether3-telkom6.1 network=192.168.6.0
add address=192.168.4.2/24 interface=ether4-telkom4.1 network=192.168.4.0
add address=192.168.2.3/24 interface=ether5-telkom2.1 network=192.168.2.0
/ip dhcp-server network
add address=192.168.222.0/24 gateway=192.168.222.254
/ip dns
set allow-remote-requests=yes cache-size=4096KiB servers=\
8.8.8.8,8.8.4.4,103.254.126.18,208.67.220.220,208.67.222.222
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall address-list
add address=www.speedtest.net list=to-data
add address=speedtest.cbn.net.id list=to-data
add address=whatismyipaddress.com list=to-data
add address=www.facebook.com list=to-sinar-mas
add address=www.youtube.com list=to-sinar-mas
add address=www.instagram.com list=to-sinar-mas
add address=www.whatsapp.com list=to-sinar-mas
add address=play.google.com list=to-sinar-mas
add address=www.google.com list=to-sinar-mas
add address=www.google.co.id list=to-sinar-mas
add address=www.twitter.com list=to-sinar-mas
add address=www.path.com list=to-sinar-mas
add address=www.blogspot.com list=to-sinar-mas
add address=www.yahoo.com list=to-sinar-mas
add address=www.kaskus.co.id list=to-sinar-mas
add address=www.wordpress.com list=to-sinar-mas
add address=www.detik.com list=to-sinar-mas
add address=www.ask.com list=to-sinar-mas
add address=www.mediafire.com list=to-sinar-mas
add address=www.debian.org list=to-sinar-mas
add address=gensho.ftp.acc.umu.se list=to-sinar-mas
add address=kambing.ui.ac.id list=to-sinar-mas
add address=sourceforge.net list=to-sinar-mas
add address=amazonaws.com list=to-sinar-mas
add address=unetbootin.org list=to-sinar-mas
/ip firewall filter
add action=drop chain=input in-interface=ether2-r3 src-address=192.168.5.1
add action=drop chain=input comment="drop ftp brute forcers" dst-port=21 \
protocol=tcp src-address-list=ftp_blacklist
add action=accept chain=output content="530 Login incorrect" dst-limit=\
1/1m,9,dst-address/1m protocol=tcp
add action=add-dst-to-address-list address-list=ftp_blacklist \
address-list-timeout=3h chain=output content="530 Login incorrect" \
protocol=tcp
add action=drop chain=input comment="drop ssh brute forcers" dst-port=22-23 \
protocol=tcp src-address-list=ssh_blacklist
add action=add-src-to-address-list address-list=ssh_blacklist \
address-list-timeout=1w3d chain=input connection-state=new dst-port=22-23 \
protocol=tcp src-address-list=ssh_stage3
add action=add-src-to-address-list address-list=ssh_stage3 \
address-list-timeout=1m chain=input connection-state=new dst-port=22-23 \
protocol=tcp src-address-list=ssh_stage2
add action=add-src-to-address-list address-list=ssh_stage2 \
address-list-timeout=1m chain=input connection-state=new dst-port=22-23 \
protocol=tcp src-address-list=ssh_stage1
add action=add-src-to-address-list address-list=ssh_stage1 \
address-list-timeout=1m chain=input connection-state=new dst-port=22-23 \
protocol=tcp
add action=drop chain=forward comment="drop ssh brute downstream" dst-port=\
22-23 protocol=tcp src-address-list=ssh_blacklist
add action=drop chain=input dst-port=53 in-interface=ether1-sinar-mas \
protocol=udp
add action=drop chain=input dst-port=53 in-interface=ether2-r3 protocol=udp
add action=drop chain=input dst-port=53 in-interface=ether3-telkom6.1 \
protocol=udp
add action=drop chain=input dst-port=53 in-interface=ether4-telkom4.1 \
protocol=udp
add action=drop chain=input dst-port=53 in-interface=ether5-telkom2.1 \
protocol=udp
/ip firewall mangle
add action=accept chain=prerouting dst-address=192.168.110.0/24 in-interface=\
ether1-sinar-mas
add action=accept chain=prerouting dst-address=103.254.126.0/24 in-interface=\
ether2-r3
add action=accept chain=prerouting dst-address=192.168.205.0/24 in-interface=\
ether2-r3
add action=accept chain=prerouting dst-address=192.168.6.0/24 in-interface=\
ether3-telkom6.1
add action=accept chain=prerouting dst-address=192.168.4.0/24 in-interface=\
ether4-telkom4.1
add action=accept chain=prerouting dst-address=192.168.2.0/24 in-interface=\
ether5-telkom2.1
add action=mark-connection chain=input comment=\
"input-output interface yang sama" connection-state=new in-interface=\
ether1-sinar-mas new-connection-mark=conn-wan1 passthrough=yes
add action=mark-connection chain=input connection-state=new in-interface=\
ether2-r3 new-connection-mark=conn-wan2 passthrough=yes
add action=mark-connection chain=input connection-state=new in-interface=\
ether3-telkom6.1 new-connection-mark=conn-wan3 passthrough=yes
add action=mark-connection chain=input connection-state=new in-interface=\
ether4-telkom4.1 new-connection-mark=conn-wan4 passthrough=yes
add action=mark-connection chain=input connection-state=new in-interface=\
ether5-telkom2.1 new-connection-mark=conn-wan5 passthrough=yes
add action=mark-connection chain=prerouting connection-state=established \
in-interface=ether1-sinar-mas new-connection-mark=conn-wan1 passthrough=\
yes
add action=mark-connection chain=prerouting connection-state=established \
in-interface=ether2-r3 new-connection-mark=conn-wan2 passthrough=yes
add action=mark-connection chain=prerouting connection-state=established \
in-interface=ether3-telkom6.1 new-connection-mark=conn-wan3 passthrough=\
yes
add action=mark-connection chain=prerouting connection-state=established \
in-interface=ether4-telkom4.1 new-connection-mark=conn-wan4 passthrough=\
yes
add action=mark-connection chain=prerouting connection-state=established \
in-interface=ether5-telkom2.1 new-connection-mark=conn-wan5 passthrough=\
yes
add action=mark-connection chain=prerouting connection-state=related \
in-interface=ether1-sinar-mas new-connection-mark=conn-wan1 passthrough=\
yes
add action=mark-connection chain=prerouting connection-state=related \
in-interface=ether2-r3 new-connection-mark=conn-wan2 passthrough=yes
add action=mark-connection chain=prerouting connection-state=related \
in-interface=ether3-telkom6.1 new-connection-mark=conn-wan3 passthrough=\
yes
add action=mark-connection chain=prerouting connection-state=related \
in-interface=ether4-telkom4.1 new-connection-mark=conn-wan4 passthrough=\
yes
add action=mark-connection chain=prerouting connection-state=related \
in-interface=ether5-telkom2.1 new-connection-mark=conn-wan5 passthrough=\
yes
add action=mark-routing chain=output connection-mark=conn-wan1 \
new-routing-mark=to-wan1 passthrough=no
add action=mark-routing chain=output connection-mark=conn-wan2 \
new-routing-mark=to-wan2 passthrough=no
add action=mark-routing chain=output connection-mark=conn-wan3 \
new-routing-mark=to-wan3 passthrough=no
add action=mark-routing chain=output connection-mark=conn-wan4 \
new-routing-mark=to-wan4 passthrough=no
add action=mark-routing chain=output connection-mark=conn-wan5 \
new-routing-mark=to-wan5 passthrough=no
add action=mark-connection chain=prerouting comment=speedtest \
dst-address-list=to-data in-interface=ether10-client new-connection-mark=\
conn-speedtest passthrough=yes
add action=mark-routing chain=prerouting connection-mark=conn-speedtest \
in-interface=ether10-client new-routing-mark=to-wan2 passthrough=no
add action=mark-connection chain=prerouting comment=non-browsing dst-port=\
!80,443 in-interface=ether10-client new-connection-mark=conn-non-browsing \
passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting dst-port=!80,443 in-interface=\
ether10-client new-connection-mark=conn-non-browsing passthrough=yes \
protocol=udp
add action=mark-routing chain=prerouting connection-mark=conn-non-browsing \
in-interface=ether10-client new-routing-mark=to-non-browsing passthrough=\
no
add action=mark-packet chain=forward comment="mangle queue tree" \
in-interface=ether1-sinar-mas new-packet-mark=non-browsing-down-sinar-mas \
passthrough=no protocol=tcp src-port=!80,443
add action=mark-packet chain=forward in-interface=ether1-sinar-mas \
new-packet-mark=non-browsing-down-sinar-mas passthrough=no protocol=udp \
src-port=!80,443
add action=mark-packet chain=forward in-interface=ether2-r3 new-packet-mark=\
non-browsing-down-r3 passthrough=no protocol=tcp src-port=!80,443
add action=mark-packet chain=forward in-interface=ether2-r3 new-packet-mark=\
non-browsing-down-r3 passthrough=no protocol=udp src-port=!80,443
add action=mark-packet chain=forward in-interface=ether3-telkom6.1 \
new-packet-mark=non-browsing-down-telkom6.1 passthrough=no protocol=tcp \
src-port=!80,443
add action=mark-packet chain=forward in-interface=ether3-telkom6.1 \
new-packet-mark=non-browsing-down-telkom6.1 passthrough=no protocol=udp \
src-port=!80,443
add action=mark-packet chain=forward in-interface=ether4-telkom4.1 \
new-packet-mark=non-browsing-down-telkom4.1 passthrough=no protocol=tcp \
src-port=!80,443
add action=mark-packet chain=forward in-interface=ether4-telkom4.1 \
new-packet-mark=non-browsing-down-telkom4.1 passthrough=no protocol=udp \
src-port=!80,443
add action=mark-packet chain=forward in-interface=ether5-telkom2.1 \
new-packet-mark=non-browsing-down-telkom2.1 passthrough=no protocol=tcp \
src-port=!80,443
add action=mark-packet chain=forward in-interface=ether5-telkom2.1 \
new-packet-mark=non-browsing-down-telkom2.1 passthrough=no protocol=udp \
src-port=!80,443
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-sinar-mas out-interface=ether1-sinar-mas passthrough=no \
protocol=tcp
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-sinar-mas out-interface=ether1-sinar-mas passthrough=no \
protocol=udp
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-r3 out-interface=ether2-r3 passthrough=no protocol=tcp
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-r3 out-interface=ether2-r3 passthrough=no protocol=udp
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-telkom6.1 out-interface=ether3-telkom6.1 passthrough=no \
protocol=tcp
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-telkom6.1 out-interface=ether3-telkom6.1 passthrough=no \
protocol=udp
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-telkom4.1 out-interface=ether4-telkom4.1 passthrough=no \
protocol=tcp
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-telkom4.1 out-interface=ether4-telkom4.1 passthrough=no \
protocol=udp
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-telkom2.1 out-interface=ether5-telkom2.1 passthrough=no \
protocol=tcp
add action=mark-packet chain=forward dst-port=!80,443 new-packet-mark=\
non-browsing-up-telkom2.1 out-interface=ether5-telkom2.1 passthrough=no \
protocol=udp
add action=mark-packet chain=forward in-interface=ether1-sinar-mas \
new-packet-mark=browsing-down-sinar-mas passthrough=no protocol=tcp \
src-port=80,443
add action=mark-packet chain=forward in-interface=ether1-sinar-mas \
new-packet-mark=browsing-down-sinar-mas passthrough=no protocol=udp \
src-port=80,443
add action=mark-packet chain=forward in-interface=ether2-r3 new-packet-mark=\
browsing-down-r3 passthrough=no protocol=tcp src-port=80,443
add action=mark-packet chain=forward in-interface=ether2-r3 new-packet-mark=\
browsing-down-r3 passthrough=no protocol=udp src-port=80,443
add action=mark-packet chain=forward in-interface=ether3-telkom6.1 \
new-packet-mark=browsing-down-telkom6.1 passthrough=no protocol=tcp \
src-port=80,443
add action=mark-packet chain=forward in-interface=ether3-telkom6.1 \
new-packet-mark=browsing-down-telkom6.1 passthrough=no protocol=udp \
src-port=80,443
add action=mark-packet chain=forward in-interface=ether4-telkom4.1 \
new-packet-mark=browsing-down-telkom4.1 passthrough=no protocol=tcp \
src-port=80,443
add action=mark-packet chain=forward in-interface=ether4-telkom4.1 \
new-packet-mark=browsing-down-telkom4.1 passthrough=no protocol=udp \
src-port=80,443
add action=mark-packet chain=forward in-interface=ether5-telkom2.1 \
new-packet-mark=browsing-down-telkom2.1 passthrough=no protocol=tcp \
src-port=80,443
add action=mark-packet chain=forward in-interface=ether5-telkom2.1 \
new-packet-mark=browsing-down-telkom2.1 passthrough=no protocol=udp \
src-port=80,443
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-sinar-mas out-interface=ether1-sinar-mas passthrough=no \
protocol=tcp
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-sinar-mas out-interface=ether1-sinar-mas passthrough=no \
protocol=udp
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-r3 out-interface=ether2-r3 passthrough=no protocol=tcp
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-r3 out-interface=ether2-r3 passthrough=no protocol=udp
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-telkom6.1 out-interface=ether3-telkom6.1 passthrough=no \
protocol=tcp
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-telkom6.1 out-interface=ether3-telkom6.1 passthrough=no \
protocol=udp
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-telkom4.1 out-interface=ether4-telkom4.1 passthrough=no \
protocol=tcp
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-telkom4.1 out-interface=ether4-telkom4.1 passthrough=no \
protocol=udp
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-telkom2.1 out-interface=ether5-telkom2.1 passthrough=no \
protocol=tcp
add action=mark-packet chain=forward dst-port=80,443 new-packet-mark=\
browsing-up-telkom2.1 out-interface=ether5-telkom2.1 passthrough=no \
protocol=udp
/ip firewall nat
add action=redirect chain=dstnat dst-port=53 protocol=tcp to-ports=53
add action=redirect chain=dstnat dst-port=53 protocol=udp to-ports=53
add action=masquerade chain=srcnat out-interface=ether1-sinar-mas \
to-addresses=192.168.4.1
add action=masquerade chain=srcnat out-interface=ether2-r3 to-addresses=\
192.168.5.1
add action=masquerade chain=srcnat out-interface=ether3-telkom6.1 \
to-addresses=192.168.5.1
add action=masquerade chain=srcnat out-interface=ether4-telkom4.1 \
to-addresses=192.168.5.1
add action=masquerade chain=srcnat out-interface=ether5-telkom2.1 \
to-addresses=192.168.5.1
add action=masquerade chain=srcnat
/ip route
add check-gateway=ping distance=1 gateway=192.168.110.1 routing-mark=to-wan1
add check-gateway=ping distance=1 gateway=103.254.126.201 routing-mark=\
to-wan2
add check-gateway=ping distance=1 gateway=192.168.6.1 routing-mark=to-wan3
add check-gateway=ping distance=1 gateway=192.168.4.1 routing-mark=to-wan4
add check-gateway=ping distance=1 gateway=192.168.2.1 routing-mark=to-wan5
add check-gateway=ping distance=1 gateway=103.254.126.201 routing-mark=\
to-non-browsing
add check-gateway=ping distance=2 gateway=192.168.110.1 routing-mark=\
to-non-browsing
add check-gateway=ping distance=3 gateway=192.168.6.1 routing-mark=\
to-non-browsing
add check-gateway=ping distance=4 gateway=192.168.4.1 routing-mark=\
to-non-browsing
add check-gateway=ping distance=5 gateway=192.168.2.1 routing-mark=\
to-non-browsing
add check-gateway=ping distance=1 gateway=\
192.168.110.1,103.254.126.201,192.168.4.1,192.168.2.1,192.168.6.1
/ppp aaa
set interim-update=1m use-circuit-id-in-nas-port-id=yes use-radius=yes
/radius
add address=47.75.230.175 secret=test service=ppp
/radius incoming
set accept=yes
/system clock
set time-zone-name=Asia/Jakarta
/system identity
set name=test
/system note
set note="Using nice.rsc from www.mikrotik.co.id, 25 April 2018 13:14:12 WIB, \
2394 lines."
/system scheduler
add interval=30m name=a on-event=ip policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
start-time=startup
/system script
add name=ip owner=fathayu policy=\
reboot,read,write,policy,test,password,sniff,sensitive source="{/tool fetc\
h url=(\"http://www.boss-ip.com/Core/Update.ashx\\\?key=85454d8bb84998fa&a\
ction=upload&sncode=B70DF530B466DA11401E79BF0E241048&dynamic=static\")}"
/tool netwatch
add host=192.168.4.1 interval=1s timeout=50ms
add host=192.168.2.1 interval=1s timeout=50ms
add host=192.168.6.1 interval=1s timeout=50ms
add host=192.168.110.1 interval=1s timeout=50ms
add host=103.254.126.201 interval=1s timeout=50ms
add host=192.168.205.50 interval=1s timeout=50ms
add host=192.168.205.51 interval=1s timeout=50ms
add host=192.168.110.21 interval=1s timeout=50ms
add host=192.168.110.22 interval=1s timeout=50ms
add host=8.8.8.8 interval=1s timeout=50ms
add host=8.8.4.4 interval=1s timeout=50ms
add host=208.67.220.220 interval=1s timeout=50ms
add host=208.67.222.222 interval=1s timeout=50ms
add host=192.168.110.23 interval=1s timeout=50ms
Tidak ada komentar:
Posting Komentar