Follow us on...
Follow us on G+ Follow us on Twitter Follow us on Facebook Watch us on YouTube
Register
Results 1 to 7 of 7
  1. #1
    Status
    Offline
    ga_konek's Avatar
    Baru Gabung
    Join Date
    Jan 2012
    Posts
    3
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0

    [ASK]Kapan harus pakai prerouting, forward, postrouting

    Buat para master mikrotik, saya mo tanya dikit nih berhubung baru sebulan ini mengakrabi mikrotik. Seputar mangle...kira2 kapan kita harus menggunakan chain2 yang dimilikinya seperti prerouting,forward,postrouting?? akibatnya apa jika kita tidak menggunakan chain yg sesuai??
    trims atas jawaban2 dan saya sngat menghargainya

  2. #2
    Status
    Offline
    fanatiCanz's Avatar
    Calon Member
    Join Date
    Sep 2007
    Location
    Jakarta, Indonesia, Indonesia
    Posts
    98
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Saya juga ga tau, tapi hasil test test saya untuk saat ini, mark packet buat download chain posrouting dst-address IP klien, tapi untuk mark packet upload chain forward src-address IP klien Click here to enlarge

    Efektif atau tidaknya saya kurang paham, tapi posisi saat ini semua ON. Click here to enlarge

  3. #3
    Status
    Offline
    dhopack's Avatar
    Forum Guru
    Join Date
    Dec 2010
    Location
    KUDUS
    Posts
    1,919
    Reviews
    Read 0 Reviews
    Downloads
    2
    Uploads
    0
    Feedback Score
    0
    coba ke sini om kyae udah lengkap disitu, dan tentunya kalo masih kurang manteb cari di aja Click here to enlarge

  4. #4
    Status
    Offline
    ga_konek's Avatar
    Baru Gabung
    Join Date
    Jan 2012
    Posts
    3
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    sip bro trims atas pengarahannya

  5. #5
    Status
    Offline
    m3tr0mini's Avatar
    Member Super Senior
    Join Date
    Sep 2007
    Posts
    660
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    DAM-DAM part 2 - kah???

  6. #6
    Status
    Offline
    atut's Avatar
    Member
    Join Date
    Aug 2012
    Posts
    154
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Saya bingung, kapan harus mark connection, kapan hanya cukup dengan mark packet tanpa mark connection.

    Dari salah satu pakar CNI, dikatakan mark connection digunakan jika traffic tersebut mempunyai request dan response.
    Request dan response berarti seperti
    1. Client download: client mengirim request bahwa lagu.mp3 ingin di download, kemudian server response dengan lagu.mp3 untuk traffic downloadnya
    2. Client browsing: client mengirim request untuk akses google.com, kemudian server google.com response http content nya kepada client
    3. Client icmp ping: client mengirim icmp ke google.com, kemudian google.com response icmp kembali ke client

    Dari pengertian diatas, jika saya ingin mangle client request icmp ping ke google.com, maka saya menggunakan rule ini
    Code:
    /ip firewall mangle chain=prerouting action=mark-connection new-connection-mark=cm-icmp-up passthrough=yes protocol=icmp src-address=192.168.0.0/23  in-interface=local
    /ip firewall mangle chain=prerouting action=mark-packet new-packet-mark=pm-icmp-up passthrough=no connection-mark=cm-icmp-up
    Dan jika saya ingin mangle response icmp ping dari google.com ke client, maka saya menggunakan rule dibawah ini
    Code:
    /ip firewall mangle chain=postrouting action=mark-connection new-connection-mark=cm-icmp-down passthrough=yes protocol=icmp dst-address=192.168.0.0/23 out-interface=Internet
    /ip firewall mangle chain=postrouting action=mark-packet new-packet-mark=pm-icmp-down passthrough=no connection-mark=cm-icmp-down
    Pertanyaan: untuk mangle response icmp ping dari google.com ke client, saya gunakan postrouting, berarti traffic ini tidak mengandung "client request", apakah boleh saya abaikan mark connection nya dan hanya cukup dengan mark packet tanpa mark connection?

  7. #7
    Status
    Offline
    atut's Avatar
    Member
    Join Date
    Aug 2012
    Posts
    154
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    untuk mangle download client dari internet, itu bagusnya pake chain forward atau postrouting?

 

 

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Antara Prerouting, postrouting dan forward;
    By choi in forum General Networking
    Replies: 9
    Last Post: 23-06-2015, 23:05
  2. Mengenai prerouting, forward, postrouting dan chain
    By d33cktr4zy in forum Beginner Basics
    Replies: 42
    Last Post: 25-04-2014, 17:49
  3. Perbedaan Mangle forward dan prerouting
    By kuromokuro in forum General Networking
    Replies: 8
    Last Post: 08-06-2012, 16:37
  4. [HELP] Bedanya prerouting dan postrouting ROuter.
    By tomisintara in forum Beginner Basics
    Replies: 9
    Last Post: 14-05-2011, 19:26
  5. Forward, Input, Output, Postrouting, Prerouting
    By unavailabled in forum Beginner Basics
    Replies: 4
    Last Post: 10-10-2009, 21:18

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •