Mikrotik | Forum Mikrotik Indonesia

Help me. cara mengatasi user nakal

Sueb Fahrizal — Thu, 02 Sep 2010 16:14:39 GMT

buat master2 disini..ane punya masalah dengan client nakal yg suka gandain voucher.. bukannya ngak mau buat ngebinding MAC addressnya.. beruhubung dia itu klien loyalku. tp skrg mulai suka main2 :th_Sunglasses:
saya pake user manager bawaan MT di RB 750G.

kasusnya :
ID voucher "asdac"
eh pas login di queque ada dua atw tiga "asdac" dan "asdac2" lalu "asdac3" berbaris rapi jali :th_cry1:
dengan berbeda MAC address kompienya..

padahal seting hotspot address per MAC sdh dibuat 1. shared user juga dibuat 1..
para master ada yg bisa bantu cara ngatasinnya?

rtrwnetku lemot....

JmPr — Thu, 02 Sep 2010 15:27:30 GMT

langsung aja..

topologi

router ---->> AP-eoc2610 --->> AP-eoc2610 sebagai wds/repeater ---->> klien 20an orang....

klo smua sedang online.. atau mgkin ada yg donload... ap wds klo di ping sering time out atau repli 2000an ms..

semua klien terhubung ke ap wds... wds berada di atas gunung..

buat yg udah expirience.. alat dan topologi yg bagus bagaimana? apa harus ganti mikrotik? kira2 mikrotik apa yg cocok..
dan kalo masih menggunakan AP tradisional kyk engenius, tplink, ubnt apa bisa diakalin?

terima kasih..

[Butuh Bantuan] blok akses pakai squid ??

upikbiru — Thu, 02 Sep 2010 15:22:45 GMT

dear ahli linux forum mikrotik

saya lagi kesulitan mau blok akses dengan ketentuan yang bertingkat, sebagai contoh :

-Pimpinan VVIP boleh akses kemana saja
-Manajer VIP hanya boleh akses di web tertentu
-Staff lebih terbatas lagi

tapi setelah saya buat ketentuannya seperti dibawah ini, kok yang VIP dan Staff tetep bisa browsing kemana aja ya ?? :th_cry1:

mestinya vip bisa akses gmail dan yahoo saja, dan staff cuma bisa akses gmail saja

pengaturannya dibawah ini :

acl apache rep_header Server ^Apache
acl Sosial-Network url_regex -i facebook twitter friendster meebo indowebster.com youtube.com
acl Waktu-kerja time MTWHF 05:30-23:30
acl Web-akses1 dstdom_regex -i google gmail yahoo id.yahoo.com
acl web-akses2 dstdom_regex -i gmail
#acl Waktu-kerja time MTWHF 11:31-23:50

acl VVIP src 192.168.70.1-192.168.70.4 192.168.70.6-192.168.70.10 192.168.70.16 192.168.70.249
acl All-Website dst 0.0.0.0/0.0.0.0
acl VIP src 192.168.70.5 192.168.70.12-192.168.70.13 192.168.70.17 192.168.70.22 192.168.70.27-192.168.70.28 192.168.70.40-192.168.70.41
acl Staff src 192.168.70.14-192.168.70.15 192.168.70.20 192.168.70.23-192.168.70.26 192.168.70.30
acl To-Lokal-Server dst 202.xx.xxx.226-202.xx.xxx.230 202.xxx.103.114-202.xxx.103.118

acl Webmin port 10000
acl File-Mutimedia url_regex -i \.3gp$ \.ac3$ \.aif$ \.aifc$ \.aiff$ \.asf$ \.au$ \.avi$ \.dat$ \.div$ \.divx$ \.dts$ \.dvr-ms$ \.flv$ \.m1v$ \.m2v$ \.mid$ \.midi$ \.mkv$ \.mp2$ \.mp2v$ \.mp3$ \.mp4$ \.mpa$ \.mpe$ \.mpeg$ \.mpg$ \.mpv2$ \.qt$ \.ram$ \.raw$ \.rm$ \.rmi$ \.rmvb$ \.snd$ \.vob$ \.vqf$ \.vro$ \.wav$ \.wma$ \.wmv$ \.rar$
acl File-Pics url_regex -i \.srf$ \.tga$ \.tif$ \.tiff$ \.tif$ \.ttf$ \.hdf$ \.wbmp$ \.wmf$ \.x3f$ \.xbm$ \.xpm$ \.cr2$ \.crw$ \.dcr$ \.djvu$ \.emf$ \.eps$ \.fpx$ \.icl$ \.icn$ \.iff$ \.jp2$ \.jpc$ \.mrw$ \.nef$ \.orf$ \.pbm$ \.pcd$ \.pcx$ \.pef$ \.pgm$ \.pic$ \.pict$ \.plp$ \.ppm$ \.psd$ \.psp$ \.raf$ \.ras$ \.raw$ \.rs$ \.sgi$
acl File-Execute url_regex -i \.exe$ \.msi$ \.rpm$ \.bin$
acl Web-Proxy dstdom_regex -i \.srf$ \.tga$ \.tif$ \.tiff$ \.tif$ \.ttf$ \.hdf$ \.wbmp$ \.wmf$ \.x3f$ \.xbm$ \.xpm$ \.cr2$ \.crw$ \.dcr$ \.djvu$ \.emf$ \.eps$ \.fpx$ \.icl$ \.icn$ \.iff$ \.jp2$ \.jpc$ \.mrw$ \.nef$ \.orf$ \.pbm$ \.pcd$ \.pcx$ \.pef$ \.pgm$ \.pic$ \.pict$ \.plp$ \.ppm$ \.psd$ \.psp$ \.raf$ \.ras$ \.raw$ \.rs$ \.sgi$
acl Web-Sering dstdom_regex -i my.mail.ru
acl Web-Refresh dstdom_regex -i facebook.com detik.com livescores.com
acl Streaming url_regex youtube
acl Other dstdom_regex -i livescore
acl Porn-url url_regex -i [hard|soft]core adult ^anal amateur bigdicks bigtits bisexual bizarre blonde blowjob bondage cumshot fetish fuck gangbang ^gay$ handjob hentai lesbian mature milf nude oral pissing porn pussy sex shemale teens wild xxx sleazydream.com youtube.com redtube

cache deny QUERY Web-Refresh

http_access allow VVIP
http_access deny Porn-url
http_access deny !Safe_ports
http_access deny File-Execute
http_access deny Web-Proxy
http_access deny Other
http_access allow !Waktu-kerja
http_access allow VIP
http_access allow Web-akses1
http_access allow Staff
http_access allow Web-akses2
#http_access deny !Waktu-kerja
http_access deny Streaming
http_access allow Webmin
http_access allow To-Lokal-Server
http_access deny All-Website
http_access deny all
broken_vary_encoding allow apache

semoga ada yang mau membantu

tks sebelumnya

ask..pertanyaan super newbie

bryend — Thu, 02 Sep 2010 15:21:01 GMT

hal;lo..para masta..masta mikrotik..
newbie mau nanya nih..

kalo pake Rb750 tuh ya..kita perlu nambah hub gak sih..secara rb750 udah punya 5port.

jadi..topologinya NS-->Rb750--->Pc 1(ini di colok ke port berapa)
|_____>pc 2(yg PC ke 2colok Port ke berapa juga):th_explain:

sebelum dan sesudahnya..thanks..yg udah kasih gambaran

Lupa password di rb750

nofear08 — Thu, 02 Sep 2010 14:06:21 GMT

Hallo guys.... sorry sebelumnya nih ane masih newbee di mikrotik... ane Ada masalah nih dengan rb750. Ane lupa password buat masuk winbox. ada cara lain ga yah selain mesti colok reset di rb nya? soalnya udah ada settingan mangle dll yang itu juga disetingin ama temen. Mungkin rekan2 ada yg bisa bantu???? Thx

[ask] website gamscool agar tdk lwat squid

w0ng_nde50 — Thu, 02 Sep 2010 14:03:13 GMT

gan mo nanya gimana ya caranya
supaya website nya gamscool gak di cache sama squid...

neh semenjak update pb semakin susah neh mau login ke web nya buat isi voucer...

selalu aja balik lagi ke halaman index :th_about_to_cry:

Help Tidak bisa login ke facebook...

iyou — Thu, 02 Sep 2010 13:49:14 GMT

salam agan2 semuanya....

mau tanya, dijaringan hotspot yang saya buat kenapa yah tidak bisa login ke facebook.....:th_cry1:

padahal di jaringan lokal bisa....

hotspot menggunakan ap bullet m2 hp + omni sebagai pemancar...

Mikrotik menggunakan PC dengan 3 eth
eth1 --- modem
eth2 --- switch local 192.168.10.254/24
eth3 --- bullet m2 hp 192.168.15.254/24 (dhcp)

pada bullet saya aktifkan fitur filter macc address...

firewal filter mikrotik

Quote:

chain=input protocol=tcp dst-port=22 src-address-list=ssh_blacklist action=drop

26 chain=input protocol=tcp dst-port=22 connection-state=new src-address-list=ssh_stage3 action=add-src-to-address-list
address-list=ssh_blacklist address-list-timeout=1w3d

27 chain=input protocol=tcp dst-port=22 connection-state=new src-address-list=ssh_stage2 action=add-src-to-address-list
address-list=ssh_stage3 address-list-timeout=1m

28 chain=input protocol=tcp dst-port=22 connection-state=new src-address-list=ssh_stage1 action=add-src-to-address-list
address-list=ssh_stage2 address-list-timeout=1m

29 chain=input protocol=tcp dst-port=22 connection-state=new action=add-src-to-address-list address-list=ssh_stage1
address-list-timeout=1m

30 ;;; Port Scanners to list
chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list address-list=port scanners
address-list-timeout=2w

31 chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg action=add-src-to-address-list
address-list=port scanners address-list-timeout=2w

32 chain=input protocol=tcp tcp-flags=fin,syn action=add-src-to-address-list address-list=port scanners
address-list-timeout=2w

33 chain=input protocol=tcp tcp-flags=syn,rst action=add-src-to-address-list address-list=port scanners
address-list-timeout=2w

34 chain=input protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack action=add-src-to-address-list
address-list=port scanners address-list-timeout=2w

35 chain=input protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg action=add-src-to-address-list address-list=port scanners
address-list-timeout=2w

36 chain=input protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg action=add-src-to-address-list
address-list=port scanners address-list-timeout=2w

37 chain=input src-address-list=port scanners action=drop

38 ;;; Filter FTP to Box
chain=input protocol=tcp dst-port=21 src-address-list=ftp_blacklist action=drop

39 chain=output protocol=tcp content=530 Login incorrect dst-limit=1/1m,9,dst-address/1m action=accept

40 chain=output protocol=tcp content=530 Login incorrect action=add-dst-to-address-list address-list=ftp_blacklist
address-list-timeout=3h

41 ;;; Separate Protocol into Chains
chain=forward protocol=tcp action=jump jump-target=tcp

42 chain=forward protocol=udp action=jump jump-target=udp

43 chain=forward protocol=icmp action=jump jump-target=icmp

44 ;;; Blocking UDP Packet
chain=udp protocol=udp dst-port=69 action=drop

45 chain=udp protocol=udp dst-port=111 action=drop

46 chain=udp protocol=udp dst-port=135 action=drop

47 chain=udp protocol=udp dst-port=137-139 action=drop

48 chain=udp protocol=udp dst-port=2049 action=drop

49 chain=udp protocol=udp dst-port=3133 action=drop

50 ;;; Bloking TCP Packet
chain=tcp protocol=tcp dst-port=69 action=drop

51 chain=tcp protocol=tcp dst-port=111 action=drop

52 chain=tcp protocol=tcp dst-port=119 action=drop

53 chain=tcp protocol=tcp dst-port=135 action=drop

54 chain=tcp protocol=tcp dst-port=137-139 action=drop

55 chain=tcp protocol=tcp dst-port=445 action=drop

56 chain=tcp protocol=tcp dst-port=2049 action=drop

57 chain=tcp protocol=tcp dst-port=12345-12346 action=drop

58 chain=tcp protocol=tcp dst-port=20034 action=drop

59 chain=tcp protocol=tcp dst-port=3133 action=drop

60 chain=tcp protocol=tcp dst-port=67-68 action=drop

61 ;;; Limited Ping Flood
chain=icmp protocol=icmp icmp-options=0:0-255 limit=5,5 action=accept

62 chain=icmp protocol=icmp icmp-options=3:3 limit=5,5 action=accept

63 chain=icmp protocol=icmp icmp-options=3:4 limit=5,5 action=accept

64 chain=icmp protocol=icmp icmp-options=8:0-255 limit=5,5 action=accept

65 chain=icmp protocol=icmp icmp-options=11:0-255 limit=5,5 action=accept

66 chain=icmp protocol=icmp action=drop

67 ;;; Allow Broadcast Traffic
chain=input dst-address-type=broadcast action=accept

68 ;;; Connection State
chain=input connection-state=established action=accept

69 chain=input connection-state=related action=accept

70 chain=input connection-state=invalid action=drop

71 ;;; Drop Ip
chain=forward src-mac-address=00:24:2C:4C:31:65 action=drop

72 ;;; Allow semua akses internet to client
chain=forward in-interface=publik out-interface=lokal dst-address=192.168.10.0/24 action=accept

73 ;;; Allow Remote winbox dari Publik
chain=input in-interface=publik protocol=tcp dst-port=8291 action=accept

74 ;;; Allow NTP Traffic
chain=input in-interface=publik protocol=udp src-port=123 action=accept

75 ;;; Allow DNS Traffic
chain=input in-interface=publik protocol=udp src-port=53 action=accept

76 ;;; Allow Ping Traceroute Traffic
chain=input in-interface=publik protocol=icmp action=accept

77 ;;; Log Ip Yang Di Tolak
chain=input in-interface=publik connection-state=new action=add-src-to-address-list address-list=spam
address-list-timeout=30m

78 ;;; Drop Semua Akses yang tidak di ijinkan
chain=input in-interface=publik action=drop

79 chain=forward in-interface=wan src-address=!192.168.33.196 src-mac-address=!1C:4B:D6:C1:0B:41 action=drop

80 chain=forward in-interface=wan src-address=!192.168.20.238 src-mac-address=!00:17:C4:9D:59:2F action=drop

81 chain=input protocol=icmp action=drop

82 ;;; Reject if in the 24-hour-list
chain=forward src-address-list=24-hour-list action=reject reject-with=icmp-network-unreachable

83 ;;; Check if dest is an open customer
chain=forward dst-address-list=open-customers action=jump jump-target=open-customers

84 ;;; Check Known Bad Hosts
chain=forward action=jump jump-target=bad-hosts

85 ;;; Reject if in the 24-hour-list
chain=forward src-address-list=24-hour-list action=reject reject-with=icmp-network-unreachable

86 ;;; Take no action on bogons
chain=bad-host-detection src-address-list=bogons action=return

87 ;;; Add to the 30 second list
chain=bad-host-detection action=add-src-to-address-list address-list=30-second-list address-list-timeout=30s

88 chain=bad-host-detection action=return

89 ;;; jump to the bad-host-detection chain
chain=forward src-address-list=!our-networks action=jump jump-target=bad-host-detection

90 ;;; jump to the bad-host-detection chain
chain=forward src-address-list=!our-networks action=jump jump-target=bad-host-detection

91 ;;; log and reject the rest
chain=forward action=log log-prefix=""

92 chain=forward action=reject reject-with=icmp-network-unreachable

please help....:th_cry1::th_cry1::th_cry1:

Super Proxy Dg Ubuntu + Lusca Head Proxy

teukurizal — Thu, 02 Sep 2010 10:33:13 GMT

Support online : teukurizal@yahoo.com.sg

SUPER PROXY
Ubuntu + Lusca Head Proxy
:th_angel: :th_angel:

Lusca Head Proxy merupakan pengembangan dari squid oleh developer squid Andrian cadd yg didekasikan terutama utk caching file2 dynamic (kayak youtube, google addssense, banner, iklan dll) file2 itu biasanya membuat penuh cache, tapi karena content dynamic oleh squid pasti akan dianggap miss dan akan mendownload lagi jadi bisa membuat posioning cache. Lusca sanggup mencache file2 tsb dan menjadi hit content.. banyaknya file dinamis ini tentu akan jauh menghemat bandwidth yg kita pakai.

1. Partisi HDD

Dari harddisk 80 Gb dibagi sebagai berikut:

/ 10 Gb ext4 System ( Flag Boot)
swap 1Gb swap Swap (catatan : besaran swap 1 x besaran fisik ram komputer)
/var 10Gb ext4 Variable
/squid-1 10 Gb ReiserFS
/squid-2 10 Gb ReiserFS
/squid-3 10 Gb ReiserFS
/home (sisanya) ext4

Catatan :
- Ip proxy 192.168.3.1
- Gatewai 192.168.3.254
- Ip mikrotik ke arah proxy 192.168.3.254/24

2. Insatall Paket

# sudo apt-get update
# sudo apt-get install squid
# sudo apt-get install squid squidclient squid-cgi
# sudo apt-get install gcc
# sudo apt-get install build-essential
# sudo apt-get install sharutils
# sudo apt-get install ccze

3. Mencari tahu info CPU Super Proxy

# Jalankan perintah berikut di terminal untuk melihat informasi CPU kamu

cat /proc/cpuinfo

# untuk pengguna AMD 64 bit bisa di lihat disini : http://en.gentoo-wiki.com/wiki/Safe_Cflags/AMD
# sedangkan pengguna Intel lihat di sini : http://en.gentoo-wiki.com/wiki/Safe_Cflags/Intel

Catat informasi CHOST dan CFLAGS nya (sesuai dengan informasi cpu kamu di ubuntu tadi), contoh saya menggunakan intel celeron M, maka saya memperoleh informasi CHOST dan CFLAGSnya

CHOST=�i686-pc-linux-gnu�
CFLAGS=�-march=pentium-m -O2 -pipe -fomit-frame-pointer�

4.Download dan Install Paket Lusca Head proxy dengan perintah ;

# "wget http://lusca-cache.googlecode.com/files/LUSCA_HEAD-r14733.tar.gz"

lalu ekstrak dan masuk ke foldernya

tar xvf LUSCA_HEAD-r14733.tar.gz
cd LUSCA_HEAD-r14733

ok sekarang dimulai tahap compile nya

CHOST=�i686-pc-linux-gnu� \
CFLAGS=�-march=pentium-m -O2 -pipe -fomit-frame-pointer� \
./configure �prefix=/usr �exec_prefix=/usr �bindir=/usr/sbin �sbindir=/usr/sbin �libexecdir=/usr/lib/squid �sysconfdir=/etc/squid \
�localstatedir=/var/spool/squid �datadir=/usr/share/squid �enable-async-io=24 �with-aufs-threads=24 �with-pthreads �enable-storeio=aufs \
�enable-linux-netfilter �enable-arp-acl �enable-epoll �enable-removal-policies=heap �with-aio �with-dl �enable-snmp \
�enable-delay-pools �enable-htcp �enable-cache-digests �disable-unlinkd �enable-large-cache-files �with-large-files \
�enable-err-languages=English �enable-default-err-language=English �with-maxfd=65536

selanjutnya, ketik perintah berikut di terminal
# make
# sudo make install

5. Edit squid.conf dapat di dw di sini : http://www.ziddu.com/download/11492003/3FiLeS.rar.html

# stop dulu squidnya dg perintah : sudo /etc/init.d/squid stop (ubuntu 9.10) atau squid stop (ubuntu 10.04 Lts)

# kemudian copy file squid.conf, tunning-ubuntu.conf dan storeurl-ubuntu.pl yg di download tadi kedalam folder /etc/squid kemudian edit squid.conf nya sesuai dg dir-cache dan ip network kamu

6. Langkah selanjutnya

# Memberikan permission pada folder cache

chown -R proxy.proxy /squid-1
chown -R proxy.proxy /squid-2
chown -R proxy.proxy /squid-3
chmod 755 /etc/squid/storeurl-ubuntu.pl
chown -R proxy.proxy /etc/squid/storeurl-ubuntu.pl

# Membuat folder-folder swap/cache di dalam folder cache yang telah ditentukan dg perintah :

squid -f /etc/squid/squid.conf -z

# Restart squid

sudo /etc/init.d/squid restart (ubuntu 9.10) atau squid restart (ubuntu 10.04)

Reboot CPU nya...

## Mohon Pencerahan Master-master jika seandainya tutorial ini punya kelemahan, tq ##

:th_angel::th_angel::th_angel:

[ask]time akses inet, allow ym

imanbross — Thu, 02 Sep 2010 07:33:50 GMT

dear para sesepuh, ane mnta tlong nget tuk setinga sperti jdul . . . ane dah bkin filter tuk blok inet pda jam kerja, tuk blok inet berhasil, email juga berhasil, tpi ym`y lom bisa2 conect pada saat filter kena pada time akses inet . . .ane dah cba sana sni kek ini

Code:

http://www.forummikrotik.com/general-networking/8823-hanya-allow-ym-di-mikrotik.html

tpi ym`y lom bisa juga, brikut seting filter ane

Code:

/ip firewall filter

add action=accept chain=forward comment="Send Mail" disabled=no \

    dst-port=25 protocol=tcp src-address=192.168.0.0/24

add action=accept chain=forward comment="Receive Mail" disabled=no \

    dst-port=110 protocol=tcp src-address=192.168.0.0/24

add action=drop chain=forward comment="Send Mail" disabled=no \

    dst-port=5000-6000 protocol=tcp src-address=192.168.0.0/24

add action=drop chain=forward comment=yuni-pagi disabled=no \

    in-interface=bridge1 src-address=192.168.0.16 time=\

    6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=pagi disabled=no \

    in-interface=bridge1 src-address=192.168.0.115 time=\

    6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=nurul-pagi disabled=no \

    in-interface=bridge1 src-address=192.168.0.212 time=\

    6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=fifi-pagi disabled=no \

    in-interface=bridge1 src-address=192.168.0.98 time=\

    6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=acen-pagi connection-state=\

    "(unknown)" disabled=no in-interface=bridge1 src-address=\

    192.168.0.172 time=6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=betha-pagi disabled=no \

    in-interface=bridge1 src-address=192.168.0.184 time=\

    6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=dedi-pagi disabled=no \

    in-interface=bridge1 src-address=192.168.0.230 time=\

    6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=juju-pagi disabled=no \

    in-interface=bridge1 src-address=192.168.0.192 time=\

    6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=ellys-pagi disabled=no \

    in-interface=bridge1 src-address=192.168.0.156 time=\

    6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=lena-pagi disabled=no \

    in-interface=bridge1 src-address=192.168.0.191 time=\

    6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=rini1-pagi disabled=no \

    in-interface=bridge1 src-address=192.168.0.228 time=\

    6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=wellem-pagi disabled=no \

    in-interface=bridge1 src-address=192.168.0.204 time=\

    6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=sore disabled=no \

    in-interface=bridge1 src-address=192.168.0.115 time=\

    13h-21h,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=yuni-sore disabled=no \

    in-interface=bridge1 src-address=192.168.0.16 time=\

    13h-21h,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=fifi-sore disabled=no \

    in-interface=bridge1 src-address=192.168.0.98 time=\

    13h-21h,sun,mon,tue,wed,thu,fri,sat

    "(unknown)" disabled=no in-interface=bridge1 src-address=\

    192.168.0.172 time=6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=betha-pagi disabled=no \

    in-interface=bridge1 src-address=192.168.0.184 time=\

    6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=dedi-pagi disabled=no \

    in-interface=bridge1 src-address=192.168.0.230 time=\

    6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=juju-pagi disabled=no \

    in-interface=bridge1 src-address=192.168.0.192 time=\

    6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=ellys-pagi disabled=no \

    in-interface=bridge1 src-address=192.168.0.156 time=\

    6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=lena-pagi disabled=no \

    in-interface=bridge1 src-address=192.168.0.191 time=\

    6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=rini1-pagi disabled=no \

    in-interface=bridge1 src-address=192.168.0.228 time=\

    6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=wellem-pagi disabled=no \

    in-interface=bridge1 src-address=192.168.0.204 time=\

    6h-11h44m,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=sore disabled=no \

    in-interface=bridge1 src-address=192.168.0.115 time=\

    13h-21h,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=yuni-sore disabled=no \

    in-interface=bridge1 src-address=192.168.0.16 time=\

    13h-21h,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=fifi-sore disabled=no \

    in-interface=bridge1 src-address=192.168.0.98 time=\

    13h-21h,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=acen-sore disabled=no \

    in-interface=bridge1 src-address=192.168.0.172 time=\

    13h-21h,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=betha-sore disabled=no \

    in-interface=bridge1 src-address=192.168.0.184 time=\

    13h-21h,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=dedi-sore disabled=no \

    in-interface=bridge1 src-address=192.168.0.230 time=\

    13h-21h,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=juju-sore disabled=no \

    in-interface=bridge1 src-address=192.168.0.192 time=\

    13h-21h,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=ellys-sore disabled=no \

    in-interface=bridge1 src-address=192.168.0.156 time=\

    13h-21h,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=lena-sore disabled=no \

    in-interface=bridge1 src-address=192.168.0.191 time=\

    13h-21h,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=rini1-sore disabled=no \

    in-interface=bridge1 src-address=192.168.0.228 time=\

    13h-21h,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=wellem-sore disabled=no \

    in-interface=bridge1 src-address=192.168.0.204 time=\

    13h-21h,sun,mon,tue,wed,thu,fri,sat

add action=drop chain=forward comment=nurul-sore disabled=no \

    in-interface=bridge1 src-address=192.168.0.212 time=\

    13h-21h,sun,mon,tue,wed,thu,fri,sat

mohon newbie prlu bnget pnjelasan . . . maap klo mang newbie selalu menyusahkan para sesepuh,,

Quote:

newbie bertnya ingin pintar bukan b`arti ingin menyusahkan

thanks all

(ask) Failed to save system configuration backup action failed (6)

junkist — Thu, 02 Sep 2010 04:10:06 GMT

para senior semua, saya menemui masalah ini ketika mencoba menyimpan settingan yang ada.
"Saving system configuration
Failed to save system configuration backup
action failed (6)"

dan tiba-tiba cache-nya menjadi 0 Kb :(

Saya menggunakan Mikrotik 3.30 on Celeron 1,8Gb, 1GB DDR2 dan 80Gb SATA, mobo Zotax G31

Mohon bantuannya.....Kenapa yaa ?

Field Report untuk RT/RW net yang padat

mgunawan — Thu, 02 Sep 2010 03:09:12 GMT

Spec hardware

1. RH433AH dengan minipci xr2 3 AP (sebagai ap-bridge)
2. RB750 (untuk router)
3. Antena Sectoral Kenbotong 120dgree 16dbi

Kondisi saat ini antena berada di atas rumah ketinggian sekitar 8 meter, dan posisi antena 5 derajat miring kebawah.

Cek kelapangan, penerimaan tidak begitu bagus di client jarak 500m, terkadang yang dekat pun tidak bagus jarak >30m <300m optimal 4bar.

client menggunakan laptop dan TP-Link 7200N

MT master, mohon pencerahan serta bimbingan setting yang bagus untuk outdoor RB433AH bagimana.

Ketinggian antena yang optimal dengan kondisi bayak rumah brapa, ketinggian rumah rata dibawah 12 meter. Apakah antena sectoralnya perlu di miringkan ke bawah ?

:th_explain: berharap ada yang ngasih :th_idea:

TK

Apakah ini bug V4.10???

spring — Thu, 02 Sep 2010 03:03:51 GMT

Gini mikrotikers sekalian...

kemarin sy set RT/RW punya org...
topologinya:

MT (gateway) = Eth1 (WAN), Eth2 (Ke AP-Bridge), eth3 (Proxy)

Autentikasi Client menggunakan PPPOE...
PPPOE server ada di eth2, tapi di eth2 tetap sy kasihkan IP untuk keperluan remote ke AP... tapi blok IP tersebut tidak saya NAT biar yang bisa go internet benar2 cuma blok IP dari client yang sudah ter-autentikasi dengan PPPOE dan blok ip untuk eth3 (proxy)...
tambahan: DHCP server juga jalan di eth2 biar di client gak muncul tanda warning "Limited Connection"

Kronologi nya gini:
Pas selesai nyetting saya jelaskan ke owner ttg metode autentikasi pppoe bahwa yang bisa ber-internet ria cuma client yang berhasil melakukan dial-up... jadi saya buktikan dengan Laptop si Owner... pas wifi nya udah berhasil konek trus kita dial.. dan berhasil terautentikasi, internet pun langsung jalan di Laptop tersebut... setelah itu kita coba Disconnect trus coba browsing lagi... awalnya mmg tidak bisa, tapi untuk menguatkan bukti, jadi saya coba sekitar 5 kali refresh halaman tadi dengan keadaan belum melakukan dial-up... ehhhh tau-tau halaman nya kebuka.. :th_cry1:

tapi krn penasaran sy coba lagi sekitar 10x refresh emang udah gak bisa, tapi bagaimanapun si Owner udah gak percaya... :th_explain:

rekan2 sekalian ada yg pernah ngalamain gak?? kira2 ini bug nya ROS atau bug-nya setingan sy??? :th_about_to_cry:

[ask] cara set dmz

andy-ch — Thu, 02 Sep 2010 01:32:52 GMT

Hi Mktikers, saya mo tanya, kalau saya punya PC yg di NAT sama mikrotik saya, dan PC tersebut mau saya DMZ, dan berikut adalah topologinya:

lan2 [WAN] \
= MKTIK
lan1 [LAN] /

saya ingin PC yg di LAN bisa dibawa naik ke publik (WAN) atau di-DMZ.

2 ISP Aktif bersamaan dalam 1 mikrotik

dafunk85 — Thu, 02 Sep 2010 00:13:36 GMT

Saya mau nanya, bisa ga kalau ada 2 isp nyala pada 1 mikrotik ? soal nya saya lagi bingung, gimana cara bikin mangle nya, jadi istilah ada 3 lantai , lantai 1 dan 2 pake ISP A, lantai 3 pake ISP B, nah semua lantai dan ke 2 ISP tersebut kecolok dalam satu RB , bisa ga ke 2 dua nya aktif tanpa bentrok?

need answer ASAP

thanks

>>>mohon Bantuanya<<<

bocahbuntet — Wed, 01 Sep 2010 19:29:34 GMT

bro n sis maaf ini tread saya yg pertama mohon bantuanya :th_angel:
saya mempunyai keluhan dan masalah tentang mikrotok di warnet saya
saya menggunakan speedy sebagai akses datanya dgn bandwitch 2 mb
saya gunakan untuk 11 komputer termasuk server(op)

karena pembagian tidak merata saya gunakan mikrotik untuk menyuplai
semua komputer di warnet dan winbox v2.9.27 mikrotiknya :th_victory:
setelah berhasil beberapa bulan internet saya malah jadi ngaco :th_bye:
mulai dari membuka akses web menjadi lama :th_sick1:
ngeping ke modem dan dns selalu besar dan lebih banyak rtonya dari pada reply :th_surprised2:
tetapi saya mengecek bandwitch ke speedtest selalu di atas 1koma mb trus :th_about_to_cry:

saya mohon untuk para pakar membimbing saya apakah ada konfigurasi yg salah :th_explain:
terimakasih sebelumnya untuk semuanya. :th_girl2::th_girl2::th_girl2: