numpang tempatnya mas...., saya ingin menyumbang tutorial..semoga bermanfaat....!!
tutorial ini sdh saya setting di 5 warnet dan berjalan mulus selama 1 bulan ini blm ada keluhan...
ok kita langsung ke TKP.
1. MIKROTIK
- 192.168.88.1/24 interface lan
- 172.19.196.1/24 interface proxy
catatan : modem di set bridge dan di hubungkan ke ether1 dan ether2 di mikrotik
2. PROXY (UBUNTU)
- 172.19.196.100 interface eth0
SETTING SISI MIKROTIK :
/ip address
add address=192.168.88.1/24 broadcast=192.168.88.255 comment="" disabled=no \
interface=lan network=192.168.88.0
add address=172.19.196.1/24 broadcast=172.19.196.255 comment="" disabled=no \
interface=proxy network=172.19.196.0
/interface pppoe-client
add ac-name="" add-default-route=no allow=pap,chap,mschap1,mschap2 comment="" \
dial-on-demand=no disabled=no interface=modem1 max-mru=1480 max-mtu=1480 \
mrru=disabled name=pppoe_1 password=pass dari telkom profile=default \
service-name="" use-peer-dns=no user=login
11111112222@telkom.net
add ac-name="" add-default-route=no allow=pap,chap,mschap1,mschap2 comment="" \
dial-on-demand=no disabled=no interface=modem2 max-mru=1480 max-mtu=1480 \
mrru=disabled name=pppoe_2 password=pass dr telkom profile=default \
service-name="" use-peer-dns=no user=11111113333@telkom.net
/ip firewall mangle
add action=mark-packet chain=forward comment=proxy-HIT-DSCP-12 disabled=no \
dscp=12 new-packet-mark=proxy-hit passthrough=no
add action=mark-connection chain=input comment=\
"PCC-RULE----MARK ALL PPPoE CONN" connection-state=new disabled=no \
in-interface=pppoe_1 new-connection-mark=pppoe1_conn passthrough=yes
add action=mark-connection chain=input comment="" connection-state=new \
disabled=no in-interface=pppoe_2 new-connection-mark=pppoe2_conn \
passthrough=yes
add action=mark-connection chain=prerouting comment="" connection-state=\
established disabled=no in-interface=pppoe_1 new-connection-mark=\
pppoe1_conn passthrough=yes
add action=mark-connection chain=prerouting comment="" connection-state=\
established disabled=no in-interface=pppoe_2 new-connection-mark=\
pppoe2_conn passthrough=yes
add action=mark-connection chain=prerouting comment="" connection-state=\
related disabled=no in-interface=pppoe_1 new-connection-mark=pppoe1_conn \
passthrough=yes
add action=mark-connection chain=prerouting comment="" connection-state=\
related disabled=no in-interface=pppoe_2 new-connection-mark=pppoe2_conn \
passthrough=yes
add action=mark-routing chain=output comment="" connection-mark=pppoe1_conn \
disabled=no new-routing-mark=pppoe_1 passthrough=no
add action=mark-routing chain=output comment="" connection-mark=pppoe2_conn \
disabled=no new-routing-mark=pppoe_2 passthrough=no
/ip firewall mangle
add action=mark-connection chain=prerouting comment=\
"PCC-RULE---- MARK ALL HTTP CONN" connection-state=new disabled=no \
dst-address-type=!local dst-port=80 in-interface=proxy \
new-connection-mark=pr_pppoe_1 passthrough=yes per-connection-classifier=\
both-addresses-and-ports:2/0 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=new \
disabled=no dst-address-type=!local dst-port=80 in-interface=proxy \
new-connection-mark=pr_pppoe_2 passthrough=yes per-connection-classifier=\
both-addresses-and-ports:2/1 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=\
established disabled=no dst-address-type=!local dst-port=80 in-interface=\
proxy new-connection-mark=pr_pppoe_1 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/0 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=\
established disabled=no dst-address-type=!local dst-port=80 in-interface=\
proxy new-connection-mark=pr_pppoe_2 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/1 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=\
related disabled=no dst-address-type=!local dst-port=80 in-interface=\
proxy new-connection-mark=pr_pppoe_1 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/0 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=\
related disabled=no dst-address-type=!local dst-port=80 in-interface=\
proxy new-connection-mark=pr_pppoe_2 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/1 protocol=tcp
/ip firewall mangle
add action=mark-connection chain=prerouting comment=\
"PCC-RULE---- MARK ALL NON HTTP CONN" connection-state=new disabled=no \
dst-address-type=!local dst-port=!80 in-interface=lan \
new-connection-mark=pr_pppoe_11 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/0 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=new \
disabled=no dst-address-type=!local dst-port=!80 in-interface=lan \
new-connection-mark=pr_pppoe_21 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/1 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=\
established disabled=no dst-address-type=!local dst-port=!80 \
in-interface=lan new-connection-mark=pr_pppoe_11 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/0 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=\
established disabled=no dst-address-type=!local dst-port=!80 \
in-interface=lan new-connection-mark=pr_pppoe_21 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/1 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=\
related disabled=no dst-address-type=!local dst-port=!80 in-interface=lan \
new-connection-mark=pr_pppoe_11 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/0 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=\
related disabled=no dst-address-type=!local dst-port=!80 in-interface=lan \
new-connection-mark=pr_pppoe_21 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/1 protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-state=new \
disabled=no dst-address-type=!local in-interface=lan new-connection-mark=\
pr_pppoe_11 passthrough=yes per-connection-classifier=\
both-addresses-and-ports:2/0 protocol=udp
add action=mark-connection chain=prerouting comment="" connection-state=new \
disabled=no dst-address-type=!local in-interface=lan new-connection-mark=\
pr_pppoe_21 passthrough=yes per-connection-classifier=\
both-addresses-and-ports:2/1 protocol=udp
add action=mark-connection chain=prerouting comment="" connection-state=\
established disabled=no dst-address-type=!local in-interface=lan \
new-connection-mark=pr_pppoe_11 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/0 protocol=udp
add action=mark-connection chain=prerouting comment="" connection-state=\
established disabled=no dst-address-type=!local in-interface=lan \
new-connection-mark=pr_pppoe_21 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/1 protocol=udp
add action=mark-connection chain=prerouting comment="" connection-state=\
related disabled=no dst-address-type=!local in-interface=lan \
new-connection-mark=pr_pppoe_11 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/0 protocol=udp
add action=mark-connection chain=prerouting comment="" connection-state=\
related disabled=no dst-address-type=!local in-interface=lan \
new-connection-mark=pr_pppoe_21 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/1 protocol=udp
/ip firewall mangle
add action=mark-packet chain=forward comment="PCC-RULE---- MARK-HTTP" \
connection-mark=pr_pppoe_1 disabled=no new-packet-mark=http_pppoe1_pkt \
passthrough=no
add action=mark-packet chain=forward comment="" connection-mark=pr_pppoe_2 \
disabled=no new-packet-mark=http_pppoe2_pkt passthrough=no
add action=mark-routing chain=prerouting comment=\
"PCC-RULE----MARK HTTP ROUTE" connection-mark=pr_pppoe_1 disabled=no \
new-routing-mark=pppoe_1 passthrough=yes
add action=mark-routing chain=prerouting comment="" connection-mark=\
pr_pppoe_2 disabled=no new-routing-mark=pppoe_2 passthrough=yes
add action=mark-routing chain=prerouting comment=\
"PCC-RULE----MARK NON HTTP ROUTE" connection-mark=pr_pppoe_11 disabled=no \
new-routing-mark=pppoe_1 passthrough=yes
add action=mark-routing chain=prerouting comment="" connection-mark=\
pr_pppoe_21 disabled=no new-routing-mark=pppoe_2 passthrough=yes
/ip firewall mangle
add action=mark-connection chain=prerouting comment="POKER + POINT BLANK" \
disabled=no dst-address-list="Poker + PB" dst-port=49100 \
new-connection-mark="Trafik PB + POKER" passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=no \
dst-address-list="Poker + PB" dst-port=40000-40010 new-connection-mark=\
"Trafik PB + POKER" passthrough=yes protocol=udp
add action=mark-connection chain=prerouting comment="" disabled=no \
dst-address-list="Poker + PB" dst-port=39190 new-connection-mark=\
"Trafik PB + POKER" passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting comment="" connection-mark=\
"Trafik PB + POKER" disabled=no new-packet-mark="PB + Poker" passthrough=\
yes
add action=mark-routing chain=prerouting comment=\
"ROUTING POKER + POINT BLANK" connection-mark="Trafik PB + POKER" \
disabled=no dst-address-list="Poker + PB" in-interface=lan \
new-routing-mark="Poker + PB" passthrough=no src-address=192.168.88.0/24
add action=add-dst-to-address-list address-list="Poker + PB" \
address-list-timeout=0s chain=forward comment=\
"SCANNER POKER + POINT BLANK" disabled=no dst-port=843 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" \
address-list-timeout=0s chain=forward comment="" disabled=no dst-port=\
9339 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" \
address-list-timeout=0s chain=forward comment="" disabled=no dst-port=\
39190 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" \
address-list-timeout=0s chain=forward comment="" disabled=no dst-port=\
49100 protocol=tcp
add action=add-dst-to-address-list address-list="Poker + PB" \
address-list-timeout=0s chain=forward comment="" disabled=no dst-port=\
40000-40010 protocol=tcp
/ip firewall nat
add action=masquerade chain=srcnat comment=MASQUERADE1 disabled=no \
out-interface=pppoe_1
add action=masquerade chain=srcnat comment=MASQUERADE2 disabled=no \
out-interface=pppoe_2
add action=masquerade chain=srcnat comment=MASQUERADE3 disabled=no \
out-interface=proxy
add action=dst-nat chain=dstnat comment=TRANSPARENT-DNS disabled=no dst-port=\
53 in-interface=lan protocol=udp to-ports=53
add action=dst-nat chain=dstnat comment="" disabled=no dst-port=53 \
in-interface=lan protocol=tcp to-ports=53
add action=dst-nat chain=dstnat comment="" disabled=no dst-port=53 \
in-interface=proxy protocol=udp to-ports=53
add action=dst-nat chain=dstnat comment="" disabled=no dst-port=53 \
in-interface=proxy protocol=tcp to-ports=53
add action=dst-nat chain=dstnat comment=TRANSPARENT-proxy disabled=no \
dst-address-list=!proxyNET dst-port=80,8080,3128 in-interface=lan \
protocol=tcp to-addresses=172.19.196.100 to-ports=3128
/ip firewall address-list
add address=192.168.88.0/24 disabled=no list=lanNET
add address=172.19.196.0/24 disabled=no list=proxyNET
/ip route
add check-gateway=ping comment="" disabled=no distance=1 dst-address=\
0.0.0.0/0 gateway=pppoe_1 routing-mark=pppoe_1 scope=30 target-scope=10
add check-gateway=ping comment="" disabled=no distance=2 dst-address=\
0.0.0.0/0 gateway=pppoe_1 routing-mark=pppoe_1 scope=30 target-scope=10
add check-gateway=ping comment="" disabled=no distance=1 dst-address=\
0.0.0.0/0 gateway=pppoe_2 routing-mark=pppoe_2 scope=30 target-scope=10
add check-gateway=ping comment="" disabled=no distance=2 dst-address=\
0.0.0.0/0 gateway=pppoe_2 routing-mark=pppoe_2 scope=30 target-scope=10
add check-gateway=ping comment="" disabled=no distance=1 dst-address=\
0.0.0.0/0 gateway=pppoe_1 routing-mark="Poker + PB" scope=30 \
target-scope=10
add check-gateway=ping comment="" disabled=no distance=2 dst-address=\
0.0.0.0/0 gateway=pppoe_2 routing-mark="Poker + PB" scope=30 \
target-scope=10
add check-gateway=ping comment=Default-Route-pppoe1-Distance-1 disabled=no \
distance=1 dst-address=0.0.0.0/0 gateway=pppoe_1 scope=30 target-scope=10
add check-gateway=ping comment=Default-Route-pppoe2-Distance-2 disabled=no \
distance=2 dst-address=0.0.0.0/0 gateway=pppoe_2 scope=30 target-scope=10
ok....kita lanjut pada sesi ubuntu nya