ip firewall nat :
0 chain=srcnat action=masquerade out-interface=pppoe-speedy ===> gimana maksud perintah dalam bahasa sehari-harinya...
1 chain=srcnat action=masquerade out-interface=ether 3 Winet
2 chain=dstnat action=redirect to-ports=53 protocol=tcp dst-port=53
3 ;;; DNS resolver
chain=dstnat action=redirect to-ports=53 protocol=udp dst-port=53
4 ;;; Untuk IP Cop
chain=dstnat action=dst-nat to-addresses=192.168.3.1 to-ports=81
protocol=tcp dst-port=81
5 chain=dstnat action=dst-nat to-addresses=192.168.3.1 to-ports=445
protocol=tcp dst-port=445
6 ;;; Redirect Mik to Squid
chain=dstnat action=dst-nat to-addresses=192.168.3.1 to-ports=878
protocol=tcp src-address=!192.168.3.0/24 dst-port=80
ip firewall mangle :
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; Mark Connection
chain=forward action=mark-connection new-connection-mark=con-iix
passthrough=yes dst-address-list=nice in-interface=ether 2 Lan
1 ;;; Mark Connection
chain=forward action=mark-connection new-connection-mark=con-lan
passthrough=yes dst-address-list=white-list in-interface=ether 2 Lan
2 ;;; Mark routing
chain=prerouting action=mark-routing
new-routing-mark=routing-winet passthrough=yes
src-address=192.168.0.0/24 connection-mark=con-iix
chain=prerouting action=mark-routing
new-routing-mark=routing-lan passthrough=yes
src-address=192.168.0.0/24 connection-mark=con-lan
3 chain=prerouting action=mark-routing new-routing-mark=routing-speedy
passthrough=yes src-address=192.168.0.0/24
connection-mark=!con-iix,con-lan
4 ;;; Packet IXX
chain=prerouting action=mark-packet new-packet-mark=packet-iix
passthrough=no connection-mark=con-iix
5 chain=output action=mark-packet new-packet-mark=packet-iix
passthrough=no connection-mark=con-iix
6 ;;; Packet Lan
chain=prerouting action=mark-packet new-packet-mark=packet-lan
passthrough=no connection-mark=con-lan
7 chain=output action=mark-packet new-packet-mark=packet-lan
passthrough=no connection-mark=con-lan
8 ;;; Packet INT
chain=prerouting action=mark-packet new-packet-mark=packet-int
passthrough=no connection-mark=!con-iix,con-lan
9 chain=output action=mark-packet new-packet-mark=packet-int
passthrough=no connection-mark=!con-iix,con-lan
10 ;;; Mangle Squid
chain=forward action=mark-connection new-connection-mark=squid_con
passthrough=yes content=X-Cache: HIT
11 chain=forward action=mark-packet new-packet-mark=squid_pkt passthrough=no
connection-mark=squid_con
12 chain=forward action=mark-packet new-packet-mark=http_pkt passthrough=no
protocol=tcp src-port=80 connection-mark=!squid_con
Route :
1 A S ;;; Normal [ Disable Jika Winet Down ]
0.0.0.0/0 r 116.197.88.1 1 e
2 X S ;;; Enable Jika Winet Down
0.0.0.0/0 110.137.88.1 1
3 X S ;;; Enable Jika Speedy Down
0.0.0.0/0 116.197.88.1 1
4 A S ;;; Normal [ Disable Jika Speedy Down ]
0.0.0.0/0 r 110.137.88.1 1 p
5 A S ;;; Normal [ Disable Jika Winet Down ]
0.0.0.0/0 r 116.197.88.1 1 e
6 A S 10.5.1.0/29 r 116.197.88.1 1 e
7 ADC 110.137.88.1/32 110.137.88.88 0 p
8 ADC 116.197.88.0/24 116.197.88.187 0 e
9 ADC 192.168.0.0/24 192.168.0.1 0 e
10 ADC 192.168.2.0/24 192.168.2.2 0 e
11 ADC 192.168.3.0/24 192.168.3.5 0 e
12 ADC 192.168.5.0/24 192.168.5.1 0 e
Queuesimple:
0 name="IIX" target-addresses=192.168.0.0/24 dst-address=0.0.0.0/0
interface=all parent=none packet-marks=packet-iix direction=both
priority=8 queue=default-small/default-small limit-at=0/0
max-limit=0/0 burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s total-queue=default-small
1 name="INT" target-addresses=192.168.0.0/24 dst-address=0.0.0.0/0
interface=all parent=none packet-marks=packet-int direction=both
priority=8 queue=default-small/default-small limit-at=0/0
max-limit=0/0 burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s total-queue=default-small
2 name="Billing-IIX" target-addresses=192.168.0.2/32
dst-address=0.0.0.0/0 interface=all parent=IIX
packet-marks=packet-iix direction=both priority=8
queue=default-small/default-small limit-at=0/0
max-limit=256k/256k burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s total-queue=default-small
3 name="Billing-INT" target-addresses=192.168.0.2/32
dst-address=0.0.0.0/0 interface=all parent=INT
packet-marks=packet-int direction=both priority=8
queue=default-small/default-small limit-at=0/0
max-limit=200k/200k burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s total-queue=default-small
4 name="PC-01-IIX" target-addresses=192.168.0.3/32
dst-address=0.0.0.0/0 interface=all parent=IIX
packet-marks=packet-iix direction=both priority=8
queue=default-small/default-small limit-at=0/0
max-limit=256k/256k burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s total-queue=default-small
5 name="PC-01-INT" target-addresses=192.168.0.3/32
dst-address=0.0.0.0/0 interface=all parent=INT
packet-marks=packet-int direction=both priority=8
queue=default-small/default-small limit-at=0/0
max-limit=200k/200k burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s total-queue=default-small
6 name="PC-02-IIX" target-addresses=192.168.0.4/32
dst-address=0.0.0.0/0 interface=all parent=IIX
packet-marks=packet-iix direction=both priority=8
queue=default-small/default-small limit-at=0/0
max-limit=256k/256k burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s total-queue=default-small
7 name="PC-02-INT" target-addresses=192.168.0.4/32
dst-address=0.0.0.0/0 interface=all parent=INT
packet-marks=packet-int direction=both priority=8
queue=default-small/default-small limit-at=0/0
max-limit=200k/200k burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s total-queue=default-small
8 name="PC-03-IIX" target-addresses=192.168.0.5/32
dst-address=0.0.0.0/0 interface=all parent=IIX
packet-marks=packet-iix direction=both priority=8
queue=default-small/default-small limit-at=0/0
max-limit=256k/256k burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s total-queue=default-small
9 name="PC-03-INT" target-addresses=192.168.0.5/32
dst-address=0.0.0.0/0 interface=all parent=INT
packet-marks=packet-int direction=both priority=8
queue=default-small/default-small limit-at=0/0
max-limit=200k/200k burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s total-queue=default-small
10 name="PC-04-IIX" target-addresses=192.168.0.6/32
dst-address=0.0.0.0/0 interface=all parent=IIX
packet-marks=packet-iix direction=both priority=8
queue=default-small/default-small limit-at=0/0
max-limit=256k/256k burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s total-queue=default-small
11 name="PC-04-INT" target-addresses=192.168.0.6/32
dst-address=0.0.0.0/0 interface=all parent=INT
packet-marks=packet-int direction=both priority=8
queue=default-small/default-small limit-at=0/0
max-limit=200k/200k burst-limit=0/0 burst-threshold=0/0
burst-time=0s/0s total-queue=default-small