[ Tanya ] Masalah PB Terditeksi Prog Ilegal

Printable View

Show 40 post(s) from this thread on one page

13-04-2010, 16:42
buyungsandy

Quote:

Originally Posted by rj-45

hooh:D sementara gw juga pemecahan ip public kusus untuk pb nya :D

ato mungkin om :D

ato mungikin di tempat om remalanya yg kaco :D

mungkin lo om :D

trimenho itu gak masalah PB nya?
1 subnet sma om?
13-04-2010, 17:03
rj-45

Quote:

Originally Posted by buyungsandy

ato mungkin om :D

ato mungikin di tempat om remalanya yg kaco :D

mungkin lo om :D

trimenho itu gak masalah PB nya?
1 subnet sma om?

yapz dy cuma 1 ip di cilebut jga aman qo :D
13-04-2010, 18:03
buyungsandy

Quote:

Originally Posted by rj-45

yapz dy cuma 1 ip di cilebut jga aman qo :D

okh berarti emang 2 linenya :D

nubi cb nyumbang om :)
mangle

Quote:

Code:

add action=mark-connection chain=prerouting comment="Point Blank + poker" disabled=no dst-port=39190,49100,9339 new-connection-mark=games.c \ passthrough=yes protocol=tcp add action=mark-connection chain=prerouting comment="" disabled=no dst-port=40000-40010 new-connection-mark=games.c passthrough=yes protocol=udp add action=mark-packet chain=forward comment="" connection-mark=games.c disabled=no new-packet-mark=games.p passthrough=no routing-mark=pppoe_1

imer mana ini :mad:
13-04-2010, 18:52
imer

hehehe.... maap

Code:

http://apistech.wordpress.com/2010/04/05/pcc-balancing-untuk-non-http-dengan-external-proxy/

intinya cmn pisahin dulu new, related dan established nya untuk masing2 line LB nya biar ga loncat2 .... mungkin itu rumus utama untuk metode PCC

maap pemikiran nubi...
13-04-2010, 19:07
imer

anu.... maap baru mampir... :th_explain:

yang pake PCC coba dipisahin dulu new related dan established nya... baik dari interface public dan local nya untuk port selain http....

misalnya untuk interface public kek gini...

Quote:

Code:

add action=mark-connection chain=input comment="" connection-state=new \ disabled=no in-interface=pppoe_2 new-connection-mark=pppoe2_conn \ passthrough=yes add action=mark-connection chain=input comment="" connection-state=new \ disabled=no in-interface=pppoe_3 new-connection-mark=pppoe3_conn \ passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=\ established disabled=no in-interface=pppoe_1 new-connection-mark=\ pppoe1_conn passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=\ established disabled=no in-interface=pppoe_2 new-connection-mark=\ pppoe2_conn passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=\ established disabled=no in-interface=pppoe_3 new-connection-mark=\ pppoe3_conn passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=\ related disabled=no in-interface=pppoe_1 new-connection-mark=pppoe1_conn \ passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=\ related disabled=no in-interface=pppoe_2 new-connection-mark=pppoe2_conn \ passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=\ related disabled=no in-interface=pppoe_3 new-connection-mark=pppoe3_conn \ passthrough=yes add action=mark-routing chain=output comment="" connection-mark=pppoe1_conn \ disabled=no new-routing-mark=pppoe_1 passthrough=no add action=mark-routing chain=output comment="" connection-mark=pppoe2_conn \ disabled=no new-routing-mark=pppoe_2 passthrough=no add action=mark-routing chain=output comment="" connection-mark=pppoe3_conn \ disabled=no new-routing-mark=pppoe_3 passthrough=no add action=mark-connection chain=prerouting comment=\

nah lakukan hal yang sama untuk interface local port non-http baik di port udp dan tcp nya

Quote:

Code:

add action=mark-connection chain=prerouting comment="-ImeR- PCC RULE ---- MARK NON-HTTP CONN" connection-state=new disabled=no dst-address-type=!local dst-port=!80 in-interface=\ Local new-connection-mark=non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local dst-port=!80 in-interface=Local new-connection-mark=\ non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local dst-port=!80 in-interface=Local new-connection-mark=\ non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local dst-port=!80 in-interface=Local new-connection-mark=\ non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local dst-port=!80 in-interface=Local new-connection-mark=\ non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local dst-port=!80 in-interface=Local new-connection-mark=\ non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local dst-port=!80 in-interface=Local new-connection-mark=\ non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local dst-port=!80 in-interface=Local new-connection-mark=\ non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local dst-port=!80 in-interface=Local new-connection-mark=\ non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local in-interface=Local new-connection-mark=non.http_pppoe_1 \ passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local in-interface=Local new-connection-mark=non.http_pppoe_2 \ passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local in-interface=Local new-connection-mark=non.http_pppoe_3 \ passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local in-interface=Local new-connection-mark=non.http_pppoe_1 \ passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local in-interface=Local new-connection-mark=non.http_pppoe_2 \ passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local in-interface=Local new-connection-mark=non.http_pppoe_3 \ passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local in-interface=Local new-connection-mark=non.http_pppoe_1 \ passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local in-interface=Local new-connection-mark=non.http_pppoe_2 \ passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local in-interface=Local new-connection-mark=non.http_pppoe_3 \ passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=udp

abis itu mark routingnya deh....

semoga membantu... maap ini cmn pemikiran nubi.... selama pake cara diatas sampe skr ga pernah nemuin kasus terdeteksi program illegal... :th_explain:
13-04-2010, 19:58
tawa

kirain punya ku aja yg timbang LB ny
gara2 poker sama PB biar bisa conak buat 1 gateway :th_not_happy:
14-04-2010, 11:37
imer

hader..... :th_explain:

anu kemaren udah nyoba posting tapi ga keluar.... test lagi skr....

yang udah dicoba untuk PCC balancing disini markconn dari interface public untuk new, established dan related nya dulu...

Code:

add action=mark-connection chain=input comment="-ImeR- PCC RULE ---- MARK ALL PPPoE CONN" connection-state=new disabled=no in-interface=pppoe_1 \ new-connection-mark=pppoe1_conn passthrough=yes add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=pppoe_2 new-connection-mark=pppoe2_conn passthrough=yes add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=pppoe_3 new-connection-mark=pppoe3_conn passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no in-interface=pppoe_1 new-connection-mark=pppoe1_conn \ passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no in-interface=pppoe_2 new-connection-mark=pppoe2_conn \ passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no in-interface=pppoe_3 new-connection-mark=pppoe3_conn \ passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no in-interface=pppoe_1 new-connection-mark=pppoe1_conn \ passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no in-interface=pppoe_2 new-connection-mark=pppoe2_conn \ passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no in-interface=pppoe_3 new-connection-mark=pppoe3_conn \ passthrough=yes add action=mark-routing chain=output comment="" connection-mark=pppoe1_conn disabled=no new-routing-mark=pppoe_1 passthrough=no add action=mark-routing chain=output comment="" connection-mark=pppoe2_conn disabled=no new-routing-mark=pppoe_2 passthrough=no add action=mark-routing chain=output comment="" connection-mark=pppoe3_conn disabled=no new-routing-mark=pppoe_3 passthrough=no

kemudian markconn non-http baik tcp dan udp nya baik new, established dan related dari interface local

Code:

add action=mark-connection chain=prerouting comment="-ImeR- PCC RULE ---- MARK NON-HTTP CONN" connection-state=new disabled=no dst-address-type=!local \ dst-port=!80 in-interface=Local new-connection-mark=non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local in-interface=Local new-connection-mark=\ non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local in-interface=Local new-connection-mark=\ non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local in-interface=Local new-connection-mark=\ non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local in-interface=Local \ new-connection-mark=non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local in-interface=Local \ new-connection-mark=non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local in-interface=Local \ new-connection-mark=non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local in-interface=Local new-connection-mark=\ non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local in-interface=Local new-connection-mark=\ non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local in-interface=Local new-connection-mark=\ non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=udp

abis itu mark route nya deh...

Code:

add action=mark-routing chain=prerouting comment="-ImeR- PCC RULE ---- MARK NON-HTTP ROUTE" connection-mark=non.http_pppoe_1 disabled=no new-routing-mark=\ pppoe_1 passthrough=yes add action=mark-routing chain=prerouting comment="" connection-mark=non.http_pppoe_2 disabled=no new-routing-mark=pppoe_2 passthrough=yes add action=mark-routing chain=prerouting comment="" connection-mark=non.http_pppoe_3 disabled=no new-routing-mark=pppoe_3 passthrough=yes

pake cara diatas ga ada masalah terdeteksi program illegal disini....

moga2 postingan ini keluar....:th_explain:
14-04-2010, 11:46
rj-45

Quote:

Originally Posted by imer

hader..... :th_explain:

anu kemaren udah nyoba posting tapi ga keluar.... test lagi skr....

yang udah dicoba untuk PCC balancing disini markconn dari interface public untuk new, established dan related nya dulu...

Code:

add action=mark-connection chain=input comment="-ImeR- PCC RULE ---- MARK ALL PPPoE CONN" connection-state=new disabled=no in-interface=pppoe_1 \ new-connection-mark=pppoe1_conn passthrough=yes add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=pppoe_2 new-connection-mark=pppoe2_conn passthrough=yes add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=pppoe_3 new-connection-mark=pppoe3_conn passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no in-interface=pppoe_1 new-connection-mark=pppoe1_conn \ passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no in-interface=pppoe_2 new-connection-mark=pppoe2_conn \ passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no in-interface=pppoe_3 new-connection-mark=pppoe3_conn \ passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no in-interface=pppoe_1 new-connection-mark=pppoe1_conn \ passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no in-interface=pppoe_2 new-connection-mark=pppoe2_conn \ passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no in-interface=pppoe_3 new-connection-mark=pppoe3_conn \ passthrough=yes add action=mark-routing chain=output comment="" connection-mark=pppoe1_conn disabled=no new-routing-mark=pppoe_1 passthrough=no add action=mark-routing chain=output comment="" connection-mark=pppoe2_conn disabled=no new-routing-mark=pppoe_2 passthrough=no add action=mark-routing chain=output comment="" connection-mark=pppoe3_conn disabled=no new-routing-mark=pppoe_3 passthrough=no

kemudian markconn non-http baik tcp dan udp nya baik new, established dan related dari interface local

Code:

add action=mark-connection chain=prerouting comment="-ImeR- PCC RULE ---- MARK NON-HTTP CONN" connection-state=new disabled=no dst-address-type=!local \ dst-port=!80 in-interface=Local new-connection-mark=non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local in-interface=Local new-connection-mark=\ non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local in-interface=Local new-connection-mark=\ non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local in-interface=Local new-connection-mark=\ non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local in-interface=Local \ new-connection-mark=non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local in-interface=Local \ new-connection-mark=non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local in-interface=Local \ new-connection-mark=non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local in-interface=Local new-connection-mark=\ non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local in-interface=Local new-connection-mark=\ non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local in-interface=Local new-connection-mark=\ non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=udp

abis itu mark route nya deh...

Code:

add action=mark-routing chain=prerouting comment="-ImeR- PCC RULE ---- MARK NON-HTTP ROUTE" connection-mark=non.http_pppoe_1 disabled=no new-routing-mark=\ pppoe_1 passthrough=yes add action=mark-routing chain=prerouting comment="" connection-mark=non.http_pppoe_2 disabled=no new-routing-mark=pppoe_2 passthrough=yes add action=mark-routing chain=prerouting comment="" connection-mark=non.http_pppoe_3 disabled=no new-routing-mark=pppoe_3 passthrough=yes

pake cara diatas ga ada masalah terdeteksi program illegal disini....

moga2 postingan ini keluar....:th_explain:

udah kluar qo :)
14-04-2010, 18:06
buyungsandy

Quote:

Originally Posted by imer

hader..... :th_explain:

anu kemaren udah nyoba posting tapi ga keluar.... test lagi skr....

yang udah dicoba untuk PCC balancing disini markconn dari interface public untuk new, established dan related nya dulu...

Code:

add action=mark-connection chain=input comment="-ImeR- PCC RULE ---- MARK ALL PPPoE CONN" connection-state=new disabled=no in-interface=pppoe_1 \ new-connection-mark=pppoe1_conn passthrough=yes add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=pppoe_2 new-connection-mark=pppoe2_conn passthrough=yes add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=pppoe_3 new-connection-mark=pppoe3_conn passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no in-interface=pppoe_1 new-connection-mark=pppoe1_conn \ passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no in-interface=pppoe_2 new-connection-mark=pppoe2_conn \ passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no in-interface=pppoe_3 new-connection-mark=pppoe3_conn \ passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no in-interface=pppoe_1 new-connection-mark=pppoe1_conn \ passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no in-interface=pppoe_2 new-connection-mark=pppoe2_conn \ passthrough=yes add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no in-interface=pppoe_3 new-connection-mark=pppoe3_conn \ passthrough=yes add action=mark-routing chain=output comment="" connection-mark=pppoe1_conn disabled=no new-routing-mark=pppoe_1 passthrough=no add action=mark-routing chain=output comment="" connection-mark=pppoe2_conn disabled=no new-routing-mark=pppoe_2 passthrough=no add action=mark-routing chain=output comment="" connection-mark=pppoe3_conn disabled=no new-routing-mark=pppoe_3 passthrough=no

kemudian markconn non-http baik tcp dan udp nya baik new, established dan related dari interface local

Code:

add action=mark-connection chain=prerouting comment="-ImeR- PCC RULE ---- MARK NON-HTTP CONN" connection-state=new disabled=no dst-address-type=!local \ dst-port=!80 in-interface=Local new-connection-mark=non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local dst-port=!80 in-interface=Local \ new-connection-mark=non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=tcp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local in-interface=Local new-connection-mark=\ non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local in-interface=Local new-connection-mark=\ non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no dst-address-type=!local in-interface=Local new-connection-mark=\ non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local in-interface=Local \ new-connection-mark=non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local in-interface=Local \ new-connection-mark=non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=established disabled=no dst-address-type=!local in-interface=Local \ new-connection-mark=non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local in-interface=Local new-connection-mark=\ non.http_pppoe_1 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/0 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local in-interface=Local new-connection-mark=\ non.http_pppoe_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/1 protocol=udp add action=mark-connection chain=prerouting comment="" connection-state=related disabled=no dst-address-type=!local in-interface=Local new-connection-mark=\ non.http_pppoe_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:3/2 protocol=udp

abis itu mark route nya deh...

Code:

add action=mark-routing chain=prerouting comment="-ImeR- PCC RULE ---- MARK NON-HTTP ROUTE" connection-mark=non.http_pppoe_1 disabled=no new-routing-mark=\ pppoe_1 passthrough=yes add action=mark-routing chain=prerouting comment="" connection-mark=non.http_pppoe_2 disabled=no new-routing-mark=pppoe_2 passthrough=yes add action=mark-routing chain=prerouting comment="" connection-mark=non.http_pppoe_3 disabled=no new-routing-mark=pppoe_3 passthrough=yes

pake cara diatas ga ada masalah terdeteksi program illegal disini....

moga2 postingan ini keluar....:th_explain:

:beer:

semoga jadi pencerahan baru buat semuanya :)
14-04-2010, 18:21
trimendes

semua senpai ada disini :th_explain:
14-04-2010, 19:40
donipermono1982

numpang nyimak dan di praktekan ya om . thanks
14-04-2010, 22:13
buyungsandy

Quote:

Originally Posted by imer

anu.... maap baru mampir... :th_explain:

yang pake PCC coba dipisahin dulu new related dan established nya... baik dari interface public dan local nya untuk port selain http....

misalnya untuk interface public kek gini...

nah lakukan hal yang sama untuk interface local port non-http baik di port udp dan tcp nya

abis itu mark routingnya deh....

semoga membantu... maap ini cmn pemikiran nubi.... selama pake cara diatas sampe skr ga pernah nemuin kasus terdeteksi program illegal... :th_explain:

mastah turun gunung :beer:
14-04-2010, 23:01
m3tr0mini

[TESTI] dari Settingan Senpai ImeR

ikutan TESTI ajah....dari hasil pemikiran dan settingan "mirip" dengan diatas
maslah nge HOP IP tidak terjadi lagi....

Penjelasan :th_idea:
pada rule PCC biasa tiap koneksi akan di state mark sebagai new saja. tanpa memperhatikan koneksi yang tengah berlangsung atau yang sedang berhubungan
dengan memberikan koneksi state estabilished dan related pada port 80 dan !port 80 maka mikrotik akan mencoba mempertahankan koneksi tersebut sampai sesinya telah berakhir.
sedangkan seperti yang kita tahu, game PB menggunakan metode session aplication game.(artinya game tersebut mengecek kevalidan user berdasarkan session yang di gunakan oleh user game dengan host server PB, jika session user PB nge hop IP pada saat berlangsungnya game, maka user tersbut sudah dianggap illegal session atau tidak valid lagi)

yang jadi pertanyaan:
apakah pada metode Nth juga dapat diberlakukan metode yang sama....???
untuk mengatasi gejala HOP IP (ip-nya meloncat)
:th_explain:

PRO: YANG LAIN...TESTINYA DUNKK, baik yang pake nth maupun ecmp

CMIIW

Greetz to Senpai ImeR dan UburcumY yang telah bersedia telekonferensi , bertukar pikiran mengenai settingan tersebut..:th_yell::th_sleep::th_drop3:
I'll Show You My Great RESPECT by Saying THANKS
15-04-2010, 02:02
budihermanto

Quote:

Originally Posted by imer

hader..... :th_explain:

anu kemaren udah nyoba posting tapi ga keluar.... test lagi skr....

yang udah dicoba untuk PCC balancing disini markconn dari interface public untuk new, established dan related nya dulu...

............

pake cara diatas ga ada masalah terdeteksi program illegal disini....

moga2 postingan ini keluar....:th_explain:

di coba dulu yach bro ....
mo ke TKP dulu nich nyoba settingan

:th_explain: thx b4 :th_explain:
15-04-2010, 12:08
-dunia-

Quote:

Originally Posted by donipermono1982

Scan ip lewat port yg di pakai Point blank dan Poker

chain=forward action=add-dst-to-address-list protocol=tcp
address-list=Poker + PB address-list-timeout=0s dst-port=843
chain=forward action=add-dst-to-address-list protocol=tcp
address-list=Poker + PB address-list-timeout=0s dst-port=9339
chain=forward action=add-dst-to-address-list protocol=tcp
address-list=Poker + PB address-list-timeout=0s dst-port=39190
chain=forward action=add-dst-to-address-list protocol=udp
address-list=Poker + PB address-list-timeout=0s dst-port=40000-40010

http://www.forummikrotik.com/images/...rtscanpb-1.jpg

Hasil Tangkapan nya setelah beberapa hari

http://www.forummikrotik.com/images/...resslist-1.jpg

liat hasilnya di address list semakin banyak yg main semakin cepet ip yg terkumpul

;;; ROUTE CONNECTION GAME ONLINE
chain=prerouting action=mark-routing new-routing-mark=routing-PB
dst-address=Poker + PB passthrough=no in-interface=Lokal connection- mark=Game

ip route

add comment="" disabled=no distance=1 dst-address=0.0.0.0/0
gateway=Telkom routing-mark="Poker + PB" scope=30 target-scope=10

http://www.forummikrotik.com/images/...04/route-1.jpg

Sampe sekarang dah ga terdeteksi illegal lagi :o

cmiiw...:th_explain:

info :

Load balance NTH + Ext Proxy
Speedy 2 Mb + 1 Mb

saya sudah ikutin di sni mas, saya bingugng di ip route koq ada 2? dan saya sudah step by step seperti setingan punya mas, pb masi ilegal :(

Show 40 post(s) from this thread on one page