Follow us on...
Follow us on G+ Follow us on Twitter Follow us on Facebook Watch us on YouTube
Register
Results 1 to 6 of 6
  1. #1
    Status
    Offline
    rendyka's Avatar
    Member
    Join Date
    Jul 2007
    Posts
    130
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0

    mangle gak jalan ?

    temen2...saya nanya nih...
    misal ada mangle seperti ini

    ---

    Flags: X - disabled, I - invalid, D - dynamic
    0 chain=prerouting in-interface=lan dst-address=202.93.20.1-202.93.20.254
    action=mark-packet new-packet-mark=lyto passthrough=no

    1 chain=prerouting in-interface=lan dst-address=202.93.17.1-202.93.17.254
    src-address-list=client action=mark-packet new-packet-mark=lyto
    passthrough=no

    2 chain=forward dst-address=202.93.20.1-202.93.20.254 action=mark-connectio>
    new-connection-mark=lyto-conn passthrough=yes

    3 chain=forward dst-address=202.93.17.1-202.93.17.254
    src-address-list=client action=mark-connection
    new-connection-mark=lyto-conn passthrough=yes

    4 chain=forward in-interface=Speedy connection-mark=lyto-conn
    action=mark-packet new-packet-mark=lyto passthrough=no

    5 chain=output out-interface=lan src-address=202.93.20.1-202.93.20.254
    action=mark-packet new-packet-mark=lyto passthrough=no

    6 chain=output out-interface=lan src-address=202.93.17.1-202.93.17.254
    action=mark-packet new-packet-mark=lyto passthrough=no

    7 ;;; rendy
    chain=prerouting in-interface=lan src-address=192.168.2.10
    action=mark-packet new-packet-mark=rendy-up passthrough=no

    8 chain=forward src-address=192.168.2.10 action=mark-connection
    new-connection-mark=rendy-conn passthrough=yes

    9 chain=forward in-interface=Speedy connection-mark=rendy-conn
    action=mark-packet new-packet-mark=rendy-down passthrough=no

    -----

    nah, kira2 mangle tersebut urutan & script nya udah bener blm yah ?
    karena misal si rendy ini mengakses IP2 tersebut (IP nya LYTO), connection marknya koq tetep kena rendy-conn yah ? bukan lyto-conn ?

    ada masalah apa yah kira2???

    thx...aku udah cb buat ulang mangle nya tapi koq tetep nggak bisa... Click here to enlarge Click here to enlarge

  2. #2
    Status
    Offline
    lini's Avatar
    Forum Guru
    Join Date
    Sep 2007
    Location
    Karawaci
    Posts
    1,961
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    2 (100%)
    Click here to enlarge Originally Posted by rendyka Click here to enlarge
    temen2...saya nanya nih...
    misal ada mangle seperti ini

    ---

    Flags: X - disabled, I - invalid, D - dynamic
    0 chain=prerouting in-interface=lan dst-address=202.93.20.1-202.93.20.254
    action=mark-packet new-packet-mark=lyto passthrough=no

    1 chain=prerouting in-interface=lan dst-address=202.93.17.1-202.93.17.254
    src-address-list=client action=mark-packet new-packet-mark=lyto
    passthrough=no

    2 chain=forward dst-address=202.93.20.1-202.93.20.254 action=mark-connectio>
    new-connection-mark=lyto-conn passthrough=yes

    3 chain=forward dst-address=202.93.17.1-202.93.17.254
    src-address-list=client action=mark-connection
    new-connection-mark=lyto-conn passthrough=yes

    4 chain=forward in-interface=Speedy connection-mark=lyto-conn
    action=mark-packet new-packet-mark=lyto passthrough=no

    5 chain=output out-interface=lan src-address=202.93.20.1-202.93.20.254
    action=mark-packet new-packet-mark=lyto passthrough=no

    6 chain=output out-interface=lan src-address=202.93.17.1-202.93.17.254
    action=mark-packet new-packet-mark=lyto passthrough=no

    7 ;;; rendy
    chain=prerouting in-interface=lan src-address=192.168.2.10
    action=mark-packet new-packet-mark=rendy-up passthrough=no

    8 chain=forward src-address=192.168.2.10 action=mark-connection
    new-connection-mark=rendy-conn passthrough=yes

    9 chain=forward in-interface=Speedy connection-mark=rendy-conn
    action=mark-packet new-packet-mark=rendy-down passthrough=no

    -----

    nah, kira2 mangle tersebut urutan & script nya udah bener blm yah ?
    karena misal si rendy ini mengakses IP2 tersebut (IP nya LYTO), connection marknya koq tetep kena rendy-conn yah ? bukan lyto-conn ?

    ada masalah apa yah kira2???

    thx...aku udah cb buat ulang mangle nya tapi koq tetep nggak bisa... Click here to enlarge Click here to enlarge
    "urutan" mangle itu penting...jadi dia diakses dari atas ke bawah....tinggal diurut ulang aja tuh

  3. #3
    Status
    Offline
    adeldian's Avatar
    Member Senior
    Join Date
    Nov 2007
    Posts
    411
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    2 (100%)
    perhatikan connection dulu baru paket
    kalo langsung packet maka tidak perlu con

    terima kasih

  4. #4
    Status
    Offline
    rendyka's Avatar
    Member
    Join Date
    Jul 2007
    Posts
    130
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by adeldian Click here to enlarge
    perhatikan connection dulu baru paket
    kalo langsung packet maka tidak perlu con

    terima kasih
    padahal untuk mangle yang lain jg urutannya gitu, tapi jalan semua tuh...tapi kenapa untuk ke IP lyto ini tidak mau ? gitu..

    thx...

    bro adeldian...IPCOP saya masih stuck trs nih ^_^

  5. #5
    Status
    Offline
    yosanpro's Avatar
    Co-Admin
    Join Date
    Nov 2007
    Location
    Bantul, Bantul, Yogyakarta
    Posts
    2,548
    Reviews
    Read 0 Reviews
    Downloads
    11
    Uploads
    4
    Feedback Score
    1 (100%)
    Terus terang aku agak bingung nih topologi gimana sama mau diatur gimana, mau jawab takut salah persepsi.

    Bener bro adeldian, udah di mark paketnya kok di mark koneksi lagi, di chain sesudahnya lagi (forward), sementara di sebelumnya passthrough=no, jadi aku nggak heran kalo rule no. 2 & 3 gak ada match.

  6. #6
    Status
    Offline
    adeldian's Avatar
    Member Senior
    Join Date
    Nov 2007
    Posts
    411
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    2 (100%)
    ok coba saja dibalik sesuai example mikrotiknya:

    Flags: X - disabled, I - invalid, D - dynamic
    2 chain=forward dst-address=202.93.20.1-202.93.20.254 action=mark-connectio>
    new-connection-mark=lyto-conn passthrough=yes

    3 chain=forward dst-address=202.93.17.1-202.93.17.254
    src-address-list=client action=mark-connection
    new-connection-mark=lyto-conn passthrough=no

    0 chain=prerouting in-interface=lan
    action=mark-packet new-packet-mark=lyto connection-mark=lyto-conn passthrough=no

    5 chain=output out-interface=lan action=mark-packet new-packet-mark=lyto connection-mark=lyto-conn passthrough=no


    8 ;;; rendy
    chain=forward src-address=192.168.2.10 action=mark-connection
    new-connection-mark=rendy-conn passthrough=yes

    7 chain=prerouting in-interface=lan connection-mark=rendy-conn
    action=mark-packet new-packet-mark=rendy-up passthrough=no

    9 chain=forward in-interface=Speedy connection-mark=rendy-conn
    action=mark-packet new-packet-mark=rendy-down passthrough=no

    10 chain=output out-interface=lan connection-mark=rendy-conn
    action=mark-packet new-packet-mark=rendy-down passthrough=no
    CMIIW

    yang lain tambahain Click here to enlarge

    semoga membantu
    terima kasih

 

 

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. kalau pakai web proxy , mangle nggak jalan ?
    By rendyka in forum Beginner Basics
    Replies: 9
    Last Post: 27-05-2010, 01:55
  2. browsing pake mikrotik ga bisa jalan, nge-ping jalan
    By bludab in forum Beginner Basics
    Replies: 14
    Last Post: 13-02-2010, 20:19
  3. tolong bantuin mangle plss
    By earthlink in forum General Networking
    Replies: 10
    Last Post: 30-06-2008, 19:19
  4. [Help] Newbie with firewall mangle
    By ataru in forum Beginner Basics
    Replies: 0
    Last Post: 13-05-2008, 08:02
  5. DNS ga jalan
    By locantop in forum General Networking
    Replies: 45
    Last Post: 28-07-2007, 10:32

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •