Thread: Sample Load Balancing Di Game Center buat yang pakai speedy

modem 1
192.168.1.1
|
|
192.168.1.2
MIkrotik Load Balancingâ€â€�–192.168.0.254–hubà ¢â‚¬â€�â€â€�-Client
192.168.2.1
|
|
modem 2
192.168.2.1

Pc-Router Speknya

PIII -1Ghz-Memory 256Mhz -Hardisk 40 Gb

Konfigurasinya

1. Interface Konfigurasi

/ interface ethernet
set Modem1 name=â€Â�Modem1″ mtu=1500 mac-address=00:10:4B:0D:95:02 arp=enabled \
disable-running-check=yes auto-negotiation=yes full-duplex=yes \
cable-settings=default speed=100Mbps comment=�" disabled=no
set Lan name=�Lan� mtu=1500 mac-address=00:0D:88:B2:7D:50 arp=enabled \
disable-running-check=yes auto-negotiation=yes full-duplex=yes \
cable-settings=default speed=100Mbps comment=�" disabled=no
set Modem2 name=â€Â�Modem2″ mtu=1500 mac-address=00:13:46:2CE:13 arp=enabled \
disable-running-check=yes auto-negotiation=yes full-duplex=yes \
cable-settings=default speed=100Mbps comment=�" disabled=no
2. Ip Address Konfigurasi

/ ip address
add address=192.168.0.254/24 network=192.168.0.0 broadcast=192.168.0.255 \
interface=Lan comment=�" disabled=no
add address=192.168.1.2/24 network=192.168.1.0 broadcast=192.168.1.255 \
interface=Modem1 comment=�" disabled=no
add address=192.168.2.2/24 network=192.168.2.0 broadcast=192.168.2.255 \
interface=Modem2 comment=�" disabled=no

3. Routing IP

/ ip route
add dst-address=0.0.0.0/0 gateway=192.168.2.1 scope=255 target-scope=10 \
routing-mark=odd comment=�" disabled=no
add dst-address=0.0.0.0/0 gateway=192.168.1.1 scope=255 target-scope=10 \
routing-mark=even comment=�" disabled=no
add dst-address=0.0.0.0/0 gateway=192.168.1.1 scope=255 target-scope=10 \
comment=�" disabled=no

4. Mangle Marking Paket

/ ip firewall mangle

a. Load Balancing
add chain=prerouting in-interface=Lan connection-state=new nth=1,1,0 \
action=mark-connection new-connection-mark=odd passthrough=yes \
comment=�Load Balancing� disabled=no
add chain=prerouting in-interface=Lan connection-mark=odd action=mark-routing \
new-routing-mark=odd passthrough=no comment=�" disabled=no
add chain=prerouting in-interface=Lan connection-state=new nth=1,1,1 \
action=mark-connection new-connection-mark=even passthrough=yes comment=�" \
disabled=no
add chain=prerouting in-interface=Lan connection-mark=even action=mark-routing \
new-routing-mark=even passthrough=no comment=�" disabled=no

b. Turunin latensy ( ping ke dns )

add chain=prerouting src-address=192.168.0.0/24 protocol=icmp \
action=mark-connection new-connection-mark=ICMP-CM passthrough=yes \
comment=�ToS� disabled=no
add chain=prerouting connection-mark=ICMP-CM action=mark-packet \
new-packet-mark=ICMP-PM passthrough=yes comment=�" disabled=no
add chain=prerouting packet-mark=ICMP-PM action=change-tos new-tos=min-delay \
comment=�" disabled=no
add chain=prerouting src-address=192.168.0.0/24 protocol=tcp dst-port=53 \
action=mark-connection new-connection-mark=DNS-CM passthrough=yes \
comment=�" disabled=no
add chain=prerouting src-address=192.168.0.0/24 protocol=udp dst-port=53 \
action=mark-connection new-connection-mark=DNS-CM passthrough=yes \
comment=�" disabled=no
add chain=prerouting connection-mark=DNS-CM action=mark-packet \
new-packet-mark=DNS-PM passthrough=yes comment=�" disabled=no
add chain=prerouting packet-mark=DNS-PM action=change-tos new-tos=min-delay \
comment=�" disabled=no

c. Tandain Services Yang mau di prioritykan
add chain=prerouting protocol=tcp dst-port=80 action=mark-connection \
new-connection-mark=http_conn passthrough=yes comment=�Tandai Service� \
disabled=no
add chain=prerouting connection-mark=http_conn action=mark-packet \
new-packet-mark=http passthrough=no comment=�" disabled=no
add chain=prerouting protocol=tcp dst-port=6000-7000 action=mark-connection \
new-connection-mark=irc_conn passthrough=yes comment=�" disabled=no
add chain=prerouting connection-mark=irc_conn action=mark-packet \
new-packet-mark=irc passthrough=no comment=�" disabled=no
add chain=prerouting protocol=tcp dst-port=5050-5061 action=mark-connection \
new-connection-mark=ym_conn passthrough=yes comment=�" disabled=no
add chain=prerouting connection-mark=ym_conn action=mark-packet \
new-packet-mark=ym passthrough=no comment=�" disabled=no
add chain=prerouting protocol=tcp dst-port=8291 action=mark-connection \
new-connection-mark=mt_conn passthrough=yes comment=�" disabled=no
add chain=prerouting connection-mark=mt_conn action=mark-packet \
new-packet-mark=mt passthrough=no comment=�" disabled=no
add chain=prerouting protocol=tcp dst-port=443 action=mark-connection \
new-connection-mark=http_conn passthrough=yes comment=�" disabled=no

d. Optimasi Proxy pada paket mark

add chain=prerouting src-address=192.168.0.0/24 action=mark-packet \
new-packet-mark=Naik passthrough=no comment=�Up Traffic� disabled=yes
add chain=forward src-address=192.168.0.0/24 action=mark-connection \
new-connection-mark=Koneksi passthrough=yes comment=�Conn-Mark� \
disabled=yes
add chain=output out-interface=Lan dst-address=192.168.0.0/24 \
action=mark-packet new-packet-mark=Turun passthrough=no comment=�Down-Via \
Proxy� disabled=yes

4. Filter Firewall

/ ip firewall filter

a. penentuan proteksi router

add chain=input connection-state=invalid action=drop comment=�Drop invalid \
connections� disabled=no
add chain=input connection-state=established action=accept comment=�Allow \
esatblished connections� disabled=no
add chain=input connection-state=related action=accept comment=�Allow related \
connections� disabled=no
add chain=input protocol=udp action=accept comment=�Allow UDP� disabled=no
add chain=input protocol=icmp action=accept comment=�Allow ICMP� disabled=no
add chain=input in-interface=!Modem1 action=accept comment=�Allow connection \
to router from local network� disabled=no
add chain=input in-interface=!Modem2 action=accept comment=�" disabled=no
add chain=input action=accept comment=�" disabled=no
add chain=forward in-interface=Lan protocol=tcp dst-port=6112 \
connection-limit=100,32 action=reject reject-with=icmp-network-unreachable \
comment=�" disabled=no

b. penentuan proteksi dari akses gain ke router
add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list \
address-list=�port scanners� address-list-timeout=2w comment=�Port \
scanners to list � disabled=no

add chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg \
action=add-src-to-address-list address-list=�port scanners� \
address-list-timeout=2w comment=�NMAP FIN Stealth scan� disabled=no
add chain=input protocol=tcp tcp-flags=fin,syn action=add-src-to-address-list \
address-list=�port scanners� address-list-timeout=2w comment=�SYN/FIN \
scan� disabled=no
add chain=input protocol=tcp tcp-flags=syn,rst action=add-src-to-address-list \
address-list=�port scanners� address-list-timeout=2w comment=�SYN/RST \
scan� disabled=no
add chain=input protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack \
action=add-src-to-address-list address-list=�port scanners� \
address-list-timeout=2w comment=�FIN/PSH/URG scan� disabled=no
add chain=input protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg \
action=add-src-to-address-list address-list=�port scanners� \
address-list-timeout=2w comment=�ALL/ALL scan� disabled=no
add chain=input protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg \
action=add-src-to-address-list address-list=�port scanners� \
address-list-timeout=2w comment=�NMAP NULL scan� disabled=no
add chain=input src-address-list=�port scanners� action=drop comment=�dropping \ port scanners� disabled=no

c. Drop Port Aneh2
add chain=virus protocol=tcp dst-port=135-139 action=drop comment=�Drop \
Blaster Worm� disabled=no
add chain=virus protocol=udp dst-port=135-139 action=drop comment=�Drop \
Messenger Worm� disabled=no
add chain=virus protocol=tcp dst-port=445-3000 action=drop comment=�Drop \
Blaster Worm� disabled=no
add chain=virus protocol=udp dst-port=445-3000 action=drop comment=�Drop \
Blaster Worm� disabled=no
add chain=virus protocol=tcp dst-port=593 action=drop comment=�________� \
disabled=no
add chain=virus protocol=udp dst-port=7000 action=drop comment=â€Â�Setan1″ \
disabled=no
add chain=virus protocol=tcp dst-port=100-1000 action=drop comment=â€Â�Setan1″ \
disabled=no
add chain=virus protocol=udp dst-port=100-1000 action=drop comment=�Drop \
Messenger Worm� disabled=no
add chain=virus protocol=tcp dst-port=1000-3000 action=drop comment=â€Â�Setan1″ \
disabled=no
add chain=virus protocol=udp dst-port=1000-3000 action=drop comment=�Drop \
Messenger Worm� disabled=no
add chain=virus protocol=tcp dst-port=40000-50000 action=drop comment=â€Â�Setan1″ \
disabled=no
add chain=virus protocol=udp dst-port=40000-50000 action=drop comment=�Drop \
Messenger Worm� disabled=no
add chain=virus protocol=tcp dst-port=7000 action=drop comment=â€Â�Setan1″ \
disabled=no
add chain=virus protocol=udp dst-port=135-139 action=drop comment=�Drop \
Messenger Worm� disabled=no
add chain=virus protocol=tcp dst-port=7000 action=drop comment=â€Â�Setan1″ \
disabled=no
add chain=virus protocol=tcp dst-port=25 action=drop comment=�Drop Blaster \
Worm� disabled=no
add chain=virus protocol=udp dst-port=135-139 action=drop comment=�Drop \
Messenger Worm� disabled=no
add chain=virus action=return comment=�" disabled=no
add chain=virus protocol=tcp dst-port=110 action=drop comment=�Drop Blaster \
Worm� disabled=no

bersambung

5. Proxy

a. Aktivasi proxy di ip web proxy

/ ip web-proxy
set enabled=yes src-address=0.0.0.0 port=8080 hostname=�proxy.phonix.net� \
transparent-proxy=yes parent-proxy=0.0.0.0:0 \
cache-administrator=�webmaster@phonix.net� max-object-size=4096KiB \
cache-drive=system max-cache-size=unlimited max-ram-cache-size=unlimited

max-cache-size=unlimited max-ram-cache-size=unlimited –>> tegantung besar hardisk

b. memblok web disini

/ ip web-proxy access
add dst-port=23-25 action=deny comment=�block telnet & spam e-mail relaying� \
disabled=no

c. optimasi cache isi web

/ ip web-proxy cache
add action=allow comment=�" disabled=no
add url=�http*youtube*get_video*� action=allow comment=�YouTube� disabled=no
add url=�http*friendster.com� action=allow comment=�Friendster� disabled=no
add url=�http*pu.go.id� action=allow comment=�PU� disabled=no
add url=�http*detik*com� action=allow comment=�Detik� disabled=no
add url=�http*domai.com� action=allow comment=�Domai� disabled=no
add url=�http*nigmae.net� action=allow comment=�Nigmae� disabled=no
add url=�http*kompas.com� action=allow comment=�Kompas� disabled=no
add url=�http*lalatx.com� action=allow comment=�Lalatx� disabled=no
add url=�http*yahoo.com� action=allow comment=�Yahoo� disabled=no
add url=�http*kapanlagi.com� action=allow comment=�Kapanlagi� disabled=no
add url=�http*plasa.com� action=allow comment=�Plasa� disabled=no
add url=�http*kaskus.us� action=allow comment=�Kaskus� disabled=no
add url=�http*avaxhome*org� action=allow comment=�Avaxhome� disabled=no
add url=â€Â� action=allow comment=â€Â�Worth1000″ disabled=no
add action=allow comment=�Allow sado alahe� disabled=no
add url=�:cgi-bin \\?� action=deny comment=�don’t cache dynamic http pages� \
disabled=no

6. Quee type

/ queue type
set default name=�default� kind=pfifo pfifo-limit=50
set ethernet-default name=�ethernet-default� kind=pfifo pfifo-limit=50
set wireless-default name=�wireless-default� kind=sfq sfq-perturb=5 \
sfq-allot=1514
set synchronous-default name=�synchronous-default� kind=red red-limit=60 \
red-min-threshold=10 red-max-threshold=50 red-burst=20 red-avg-packet=1000
set hotspot-default name=�hotspot-default� kind=sfq sfq-perturb=5 \
sfq-allot=1514

a. pcq konsep
add name=�pcq-download� kind=pcq pcq-rate=0 pcq-limit=50 \
pcq-classifier=dst-address pcq-total-limit=2000
add name=�pcq-upload� kind=pcq pcq-rate=0 pcq-limit=50 \
pcq-classifier=src-address pcq-total-limit=2000

b. limit bw untuk icmp

add name=â€Â�PFIFO-64″ kind=pfifo pfifo-limit=64

add name=�default-small� kind=pfifo pfifo-limit=10

7. quee simple untuk bagi bw /pc

/ queue simple
add name=�Phonix.Net� dst-address=192.168.0.0/24 interface=Lan parent=none \
priority=1 queue=ethernet-default/ethernet-default limit-at=0/768000 \
max-limit=0/768000 total-queue=default disabled=no
add name=â€Â�01″ target-addresses=192.168.0.1/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�02″ target-addresses=192.168.0.2/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�03″ target-addresses=192.168.0.3/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�04″ target-addresses=192.168.0.4/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�05″ target-addresses=192.168.0.5/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�06″ target-addresses=192.168.0.6/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�07″ target-addresses=192.168.0.7/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�08″ target-addresses=192.168.0.8/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�09″ target-addresses=192.168.0.9/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�10″ target-addresses=192.168.0.10/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�11″ target-addresses=192.168.0.11/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�12″ target-addresses=192.168.0.12/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�13″ target-addresses=192.168.0.13/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�14″ target-addresses=192.168.0.14/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�15″ target-addresses=192.168.0.15/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=8/96000 \
total-queue=default disabled=no
add name=â€Â�16″ target-addresses=192.168.0.16/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�17″ target-addresses=192.168.0.17/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�18″ target-addresses=192.168.0.18/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net packet-marks=�" priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�19″ target-addresses=192.168.0.19/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�20″ target-addresses=192.168.0.20/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�21″ target-addresses=192.168.0.21/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�22″ target-addresses=192.168.0.22/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net packet-marks=�" priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�23″ target-addresses=192.168.0.23/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�24″ target-addresses=192.168.0.24/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no
add name=â€Â�25″ target-addresses=192.168.0.25/32 dst-address=0.0.0.0/0 \
interface=Lan parent=Phonix.Net packet-marks=�" priority=8 \
queue=ethernet-default/ethernet-default limit-at=0/16000 max-limit=0/96000 \
total-queue=default disabled=no

8. quee tree

/ queue tree

a. pcq
add name=�downstream� parent=Lan packet-mark=Turun limit-at=0 \
queue=pcq-download priority=1 max-limit=0 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name=�upstream� parent=global-in packet-mark=Naik limit-at=0 \
queue=pcq-upload priority=1 max-limit=0 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no

b. bw over untuk icmp / latensy
add name=�ICMP� parent=global-in packet-mark=ICMP-PM limit-at=8000 \
queue=PFIFO-64 priority=1 max-limit=16000 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no
add name=�DNS� parent=global-in packet-mark=DNS-PM limit-at=8000 \
queue=PFIFO-64 priority=1 max-limit=16000 burst-limit=0 burst-threshold=0 \
burst-time=0s disabled=no


Regard
kalau ada tambahan makin bagus. hehehe. ini sample aja

om kok susunan jaringan ada modem 2 ??

gmn nih ???

@ xxx123 om kok susunan jaringan ada modem 2 ??

gmn nih ???<<< karena input internetnya ada 2 ... (kalau salah mohon dibetulin)

@harrychanputra
suhu harrychanputra... minta liat ip firewall nat dan ip dns nya dong.. karena saya coba pake rule nya... kalau ip web proxy diaktifkan , koneksi jadi kacau ,
sering gak nemu dns.. trus kalau di traceroute..seringkali berhenti agak lama ( seperti bingung pilih arah gateway ke mana ) .. mohon pencerahan...

status modem ppoe. kenapa di beginikan gamecenter hanya butuh management bw terus trafik priority.
untuk dns masih sama karena dns masih ke telkom kecuali beda isp terpaksa di klientnya di inputkan juga.


regard

modem 1
192.168.1.1
|
|
192.168.1.2
MIkrotik Load Balancingâ€â€�–192.168.0.254–hubà ¢â‚¬â€�â€â€�-Client
192.168.2.2
|
|
modem 2
192.168.2.1

makai 2 speedy

Pak, itu ToS yg dibikin maren tu, ada ngaruh kalau di Game Center ya. Kalau /me cobanya sihnya di Network biasa aja, pake 2 Nap. cuman jaringan lebih stabil aja, dak ngaruh kali terasanya.

klo ngeliat /ip route nya berarti ini ...

koneksi 192.168.0.XX ke modem A dan 192.168.1.XX ke modem B


hmm..... bukan redundant link ya,,,,,





but... it's a very nice tuttorial

kalo beda isp gimana yaa settinya ... trus misalkan kalo pisahin misalnya ... isp A khusus buat browsing, buka email .... trus yang dari isp B khusus buat download aja ... gimana rule nya ......... terima kasih banyak

yah. di game center ke stabilan latensy terjaga. dan buat game online nya perlu latensynya itu di bawah 100 ms. terutama untuk games dota, wow. sedangkan untuk games2 lain latensy di 100 ms masih aman.
regard

untuk beda isp. ada perlu di perhatikan
1. open dns ngak.
2. di masing2 klien terpaksa kita inputkan dimasing client kedua dns ispnya. di router dimasukin juga mana yang di jadikan primarinya itu berdasarkan prioritas juga.

di mangle nya kita prioritykan okde. ntar dibikinkan rule manglenya...

pakai 2 speedy untuk jaringan ini satus modem ppoe

apakah ada cara lain nge load balancing tapi tidak dengan nge mark packet?

karena ditempat gua 2 isp itu dijalanin dengan cara mark packet, itu tidak berhasil di bagian dstnat untuk ngeredirect port 80 ke 3128 (dalam arti mau nyalain web proxy buat ngeblock url dan caching).

atau memang ada trick2nya? tapi yg pasti sih kalau bagian dstnat redirect nya di disable, langsung semua berjalan.