Kamis, 24 Oktober 2013

Menandai Paket-Paket Download Di MIKROTIK Dengan Layer7

Posted by pandu kusuma on 02.47

Assalamualaikum !!!!


Halo broooo...apa kabar ni.... Kembali lagi ke Blog saya ,dengan Admin Ganteng disini Pandu ,yak hari ini gua akan posting ni tentang itu-tu liat judul,panjang nulisnya hehe....

bahan bahan : -wajan .(lain lah bro...dikira mau masak nasi goreng...hehe...)

Bahan yg perlu seperti biasa yaitu :
-Laptop/PC
-Mikrotik RB751
-Kabel Straight
-Koneksi Internet

Sebelumnya ,ada nih Tutornya Video ,nih Link nya :   TUTOR VIDEO
Tapi bagi pengen yg Cerita,nih cara caranya :


Pertama ,tandai paket untuk video di layer7 dgn command :


/ip firewall layer7-protocol add name="http-video" regexp="http/(0\\.9|1\\.0|1\\.1)[\\x09-\\x0d ][1-5][0-9][0-9][\\x09-\\x0d -~]*(content-type: video)"



Kedua,Beri Ekstensi masing2 :


/ip firewall layer7-protocol add name="file-msi" regexp="\\.(msi)"
/ip firewall layer7-protocol add name="file-exe" regexp="\\.(exe)"
/ip firewall layer7-protocol add name="file-rar" regexp="\\.(rar)"
/ip firewall layer7-protocol add name="file-zip" regexp="\\.(zip)"
/ip firewall layer7-protocol add name="file-7z" regexp="\\.(7z)"



Ketiga,buat address untuk LAN pakai command :

/ip firewall address-list add address=192.168.83.0/24 list=client disabled=no

address : 192.168.83.0/24 adalah IP local




Keempat,Buat Mangel untuk http-video:

/ip firewall mangle add chain=forward protocol=tcp layer7-protocol=http-video dst-address-
list=client action=mark-packet new-packet-mark=download passthrough=no




Kelima buat mangel lagi,tapi ini buat file ekstensi,commandnya :

/ip firewall mangle add chain=forward protocol=tcp layer7-protocol=file-msi dst-address-list=client action=mark-packet new-packet-mark=download passthrough=no
/ip firewall mangle add chain=forward protocol=tcp layer7-protocol=file-exe dst-address-list=client action=mark-packet new-packet-mark=download passthrough=no
/ip firewall mangle add chain=forward protocol=tcp layer7-protocol=file-rar dst-address-list=client action=mark-packet new-packet-mark=download passthrough=no
/ip firewall mangle add chain=forward protocol=tcp layer7-protocol=file-zip dst-address-list=client action=mark-packet new-packet-mark=download passthrough=no
/ip firewall mangle add chain=forward protocol=tcp layer7-protocol=file-7z dst-address-list=client action=mark-packet new-packet-mark=download passthrough=no




Keenam,buat PCQ dan QueeTree :

/queue type add kind=pcq name=pcq-download pcq-classifier=dst-address



 /queue tree add name="total-download" parent=ether3-Lan packet-mark=download limit-at=128k queue=pcq-download priority=8 max-limit=384k burst-limit=0 burst-threshold=0 burst-time=0s


Kalau sudah semua,tinggal di Tes. contoh screenshot pada saat donload file :


Mungkin begitulah caranya,kalo ada yg salah di Kritik ya gan,
hehe... Bye bye bro .  :D

You can replace this text by going to "Layout" and then "Page Elements" section. Edit " About "

Followers

  • RSS
  • Delicious
  • Digg
  • Facebook
  • Twitter
  • Linkedin

Search Site