Follow us on...
Follow us on G+ Follow us on Twitter Follow us on Facebook Watch us on YouTube
Register
Results 1 to 15 of 15
  1. #1
    Status
    Offline
    kuraikun's Avatar
    Newbie
    Join Date
    Oct 2008
    Posts
    26
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0

    [ask] bagaimana setting hak akses internet per IP

    Dear all KK-KK senior..
    plis help...Click here to enlarge
    aku ada kasus, pengen bikin rule, beberapa IP hanya bisa buka satu situs tok. sedang IP yang lain nya bebas.
    apakah KK-KK sekalian ada yang bisa dan mau membantu saya??Click here to enlarge
    Terima kasih sebelum dan sesudah nya.

  2. #2
    Status
    Offline
    sum14rdi's Avatar
    VIP Member
    Join Date
    Sep 2007
    Location
    Tambun-Bekasi
    Posts
    860
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    1 (100%)
    silahkan anda manfaatkan fitur address-list yg ada di /ip firewall address-list trus setelah bikin address-list nanti tinggal digabung dengan /ip firewall filter
    klo nanya bagaimana cara memanfaatkannya...silahkan baca manualnya ...Click here to enlarge

    setelah jadi rule2nya dan masih belum bisa silahkan posting rulenya dan mungkin nanti ada yang bantu benerinnya...Click here to enlarge

  3. The Following User Says Thank You to sum14rdi For This Useful Post:


  4. #3
    Status
    Offline
    kuraikun's Avatar
    Newbie
    Join Date
    Oct 2008
    Posts
    26
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    masi blum bisa KK.Click here to enlarge
    ini rule nya.

    chain=forward src-address=192.168.0.2/24 protocol=tcp
    dst-address-list=!tes action=accept


    saya ud bikin list tes isinya ip situs itu.

    gmana ya? ada yang bisa bantu?Click here to enlarge

  5. #4
    Status
    Offline
    Akangage's Avatar
    Administrator
    Join Date
    Aug 2007
    Location
    Daerah Khusus Ibukota Jakarta, Indonesia
    Posts
    4,195
    Reviews
    Read 0 Reviews
    Downloads
    210
    Uploads
    87
    Feedback Score
    0
    Kekekekekekkekeke..... selamat berjuang brother Click here to enlarge

  6. The Following User Says Thank You to Akangage For This Useful Post:


  7. #5
    Status
    Offline
    yosanpro's Avatar
    Co-Admin
    Join Date
    Nov 2007
    Location
    Bantul, Bantul, Yogyakarta
    Posts
    2,548
    Reviews
    Read 0 Reviews
    Downloads
    11
    Uploads
    4
    Feedback Score
    1 (100%)
    Kalo rule gitu bacanya, selain yang terdaftar di address list "tes", terima aja...

    Padahal kita ingin yang selain terdaftar di address list "tes" ditolak, jadi rule tersebut harusnya action=drop.

    Alternatif:

    Kalo mau logika dibalik, bisa dibikin dst-address-list=tes (bukan !tes) action=accept, tetapi di bawah sendiri ditaruh drop all.
    Last edited by yosanpro; 02-11-2008 at 19:13.

  8. The Following User Says Thank You to yosanpro For This Useful Post:


  9. #6
    Status
    Offline
    y0nkru's Avatar
    Newbie
    Join Date
    Oct 2007
    Posts
    23
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    idem ma bro yosanproClick here to enlarge

  10. The Following User Says Thank You to y0nkru For This Useful Post:


  11. #7
    Status
    Offline
    kuraikun's Avatar
    Newbie
    Join Date
    Oct 2008
    Posts
    26
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Dear KK Yosanpro n KK yonkru serta KK-KK lain yg baik hatiClick here to enlarge

    Saya udah coba apa yg kk sarankan. tapi tetap belum berhasil.
    saya ud coba;
    chain=forward src-address=192.168.0.2 dst-address-list=tes action=accept comment="" disabled=no

    dan juga saya ud coba;
    chain=forward src-address=192.168.0.2 dst-address-list=!tes action=drop comment="" disabled=no

    Apa ada ide KK-KK semua?

  12. #8
    Status
    Offline
    sum14rdi's Avatar
    VIP Member
    Join Date
    Sep 2007
    Location
    Tambun-Bekasi
    Posts
    860
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    1 (100%)
    coba dua script diatas ditaruh diurutan paling atas jadi urutan 1 dan 2

  13. The Following User Says Thank You to sum14rdi For This Useful Post:


  14. #9
    Status
    Offline
    kuraikun's Avatar
    Newbie
    Join Date
    Oct 2008
    Posts
    26
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Tetap ga bisa untuk bikin 2 2 nya.
    tapi saya ud coba ngeblok pake web proxi dan syukurlah berhasil.
    di ambil ide nya di sini;



    Terima kasih untuk semua nyaaa....Click here to enlarge

  15. #10
    Status
    Offline
    yosanpro's Avatar
    Co-Admin
    Join Date
    Nov 2007
    Location
    Bantul, Bantul, Yogyakarta
    Posts
    2,548
    Reviews
    Read 0 Reviews
    Downloads
    11
    Uploads
    4
    Feedback Score
    1 (100%)
    Yups, kalo mo blokir berdasarkan nama enakan web proxy. Kalo mau address list musti masukin semua IP-nya karena satu situs biasanya pake lebih dari 1 IP, sehingga jika alamat yang diberikan DNS pas alamat yang gak ada di address list maka situs tidak bisa terbuka. Bisa sih pake NSLOOKUP buat liat IP nya, tapi tetep enakan web proxy.

  16. #11
    Status
    Offline
    kuraikun's Avatar
    Newbie
    Join Date
    Oct 2008
    Posts
    26
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Dear Mr. Yos
    akhir nya aku kebingungan juga. n kpikiran. gmana klo 1 ip harus hanya bisa buka 2 situs?!Click here to enlarge
    ga bisa pake web proxi kan tuh.
    emang si teori nya gampang kalo pake filter. bikin list, set ip destination, chain nya forward, destination listnya, n action nya.
    TAPI KENAPA TETEP BISA BUKA SITUS LAIN...??!!Click here to enlargeClick here to enlargeClick here to enlarge
    Click here to enlarge posisi rule juga ud ditaro dipaling atas, tetep ga ngaruh.

    Anybody?

  17. #12
    Status
    Offline
    chandragpln's Avatar
    Newbie
    Join Date
    Sep 2008
    Posts
    41
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    lookup ip situsnya (mungkin lebih dari 1)

    ip firewall nat> add chain=srcnat src-address=ip.client.yg.dibatasi dst-address=ip.website1 action=masquerade comment="" disabled=no
    ip firewall nat> add chain=srcnat src-address=ip.client.yg.dibatasi dst-address=ip.website2 action=masquerade comment="" disabled=no
    ip firewall nat> add chain=srcnat src-address=ip.client.yg.tidak.dibatasi action=masquerade comment="" disabled=no

  18. The Following User Says Thank You to chandragpln For This Useful Post:


  19. #13
    Status
    Offline
    maeru's Avatar
    Baru Gabung
    Join Date
    Aug 2008
    Posts
    1
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    salam master sekalian
    mo nanya nih "masih newbie mikrotik"
    gimana caranya memeberi akses internet hanya ke IP tertentu,jadi selain yg ga ada di list IP address ga bisa terhubung di internet....

    di tunggu pencerahannya..

    salam

  20. #14
    Status
    Offline
    chandragpln's Avatar
    Newbie
    Join Date
    Sep 2008
    Posts
    41
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by maeru Click here to enlarge
    salam master sekalian
    mo nanya nih "masih newbie mikrotik"
    gimana caranya memeberi akses internet hanya ke IP tertentu,jadi selain yg ga ada di list IP address ga bisa terhubung di internet....

    di tunggu pencerahannya..

    salam
    assume konek ke internet pake nat.

    masukin ip address yg mau dikasih akses di list=halal, misalnya ip 192.168.200.2 termasuk halal

    / ip firewall address-list
    add list=halal address=192.168.200.2 comment="" disabled=no

    bikin nat hanya utk yg halal :
    /ip firewall nat add chain=srcnat src-address-list=halal action
    =masquerade disabled=no

  21. #15
    Status
    Offline
    kuraikun's Avatar
    Newbie
    Join Date
    Oct 2008
    Posts
    26
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by chandragpln Click here to enlarge
    lookup ip situsnya (mungkin lebih dari 1)
    Maksudnya satu situs, tapi ip nya banyak ya?
    tapi yg saya maksud, lain situs lho. misal saya hanya ijinkan buka situs (ip nya 202.147.240.133) tapi ko masi bisa buka situs lain. seperti google.com, yahoo.. dll

    Click here to enlarge Originally Posted by chandragpln Click here to enlarge
    ip firewall nat> add chain=srcnat src-address=ip.client.yg.dibatasi dst-address=ip.website1 action=masquerade comment="" disabled=no
    ip firewall nat> add chain=srcnat src-address=ip.client.yg.dibatasi dst-address=ip.website2 action=masquerade comment="" disabled=no
    ip firewall nat> add chain=srcnat src-address=ip.client.yg.tidak.dibatasi action=masquerade comment="" disabled=no
    saya ud coba rule itu. tapi ip target tetap masi bisa buka situs yg lain, seperti yahoo, msn, dll
    ini rule nya;
    / ip firewall nat
    add chain=srcnat src-address=192.168.0.2 dst-address=202.147.240.133 action=masquerade comment="liputan6" disabled=no
    add chain=srcnat src-address=192.168.0.2 dst-address=74.125.19.83 action=masquerade comment="gmail" disabled=no

    apa ada yg salah?

 

 

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [VIP.net.id]--- Gebrakan Akses Internet Gratis ... ---
    By azca in forum ISP / Network Link
    Replies: 21
    Last Post: 19-08-2008, 09:54
  2. Internet Akses Murah Berkualitas
    By linkmedia in forum ISP / Network Link
    Replies: 2
    Last Post: 19-03-2008, 00:01
  3. Akses FTP Server MikroTik via Internet
    By bramand in forum General Networking
    Replies: 12
    Last Post: 07-01-2008, 22:59
  4. Block Akses Internet user
    By vxd_1986 in forum General Networking
    Replies: 3
    Last Post: 02-01-2008, 18:08
  5. Bagaimana Setting Mirc Di Microtik
    By aa_uwan in forum Beginner Basics
    Replies: 16
    Last Post: 14-08-2007, 18:04

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •