tutsnya mantap gan... rata BWnya
btw mw tanya neh apa ada juragan2 yg ngalamin masalah yang sama seperti saya + sambil nunggu tuts lanjutan akang LB PCC + eks proxy
saya sudah coba2 sendiri tp ttp g bisa.. maklum nubie gan.
gini gan problemnya :
ane pake rb493ah
eth2 & eth3 --------------> modem ( PPoe di mikrotik )
eth4 (192.168.0.3) -------> switch ----------------> client (192.168.0.0/24)
eth5 (10.100.100.1) ------> proxy ubuntu (10.100.100.2)
kalau pakai yg PCC kok jadinya tidak bisa ping dari client ke proxy dan sebaliknya.. jadinya nat ke proxy tidak bisa jalan juga kayaknya...
firewall + filter sudah saya disable semua ttp g bisa
ini export mangle saya :
Code:
/ip firewall mangle
add action=mark-connection chain=prerouting comment="" \
disabled=no dst-address-list=IPFB dst-port=80 \
new-connection-mark=FB-Mania passthrough=yes protocol=\
tcp
add action=mark-packet chain=prerouting comment="" \
connection-mark=FB-Mania disabled=no new-packet-mark=\
FB-Poker-Mania passthrough=no
add action=mark-routing chain=prerouting comment="" \
disabled=no in-interface=local layer7-protocol=yahoo \
new-routing-mark=jalur-1 passthrough=no
add action=mark-connection chain=input comment=\
"NEW Load Balance Local" connection-state=new \
disabled=no in-interface=PPPoE-1 new-connection-mark=\
ADSL-1 passthrough=yes
add action=mark-connection chain=input comment="" \
connection-state=new disabled=no in-interface=PPPoE-2 \
new-connection-mark=ADSL-2 passthrough=yes
add action=mark-routing chain=output comment="" \
connection-mark=ADSL-1 disabled=no new-routing-mark=\
jalur-1 passthrough=no
add action=mark-routing chain=output comment="" \
connection-mark=ADSL-2 disabled=no new-routing-mark=\
jalur-2 passthrough=no
add action=mark-connection chain=prerouting comment="" \
disabled=no dst-address-type=!local in-interface=local \
new-connection-mark=ADSL-1 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/0
add action=mark-connection chain=prerouting comment="" \
disabled=no dst-address-type=!local in-interface=local \
new-connection-mark=ADSL-2 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/1
add action=mark-routing chain=prerouting comment="" \
connection-mark=ADSL-1 disabled=no in-interface=local \
new-routing-mark=jalur-1 passthrough=yes
add action=mark-routing chain=prerouting comment="" \
connection-mark=ADSL-2 disabled=no in-interface=local \
new-routing-mark=jalur-2 passthrough=yes
add action=mark-connection chain=input comment=\
"NEW Load Balance PROXY" connection-state=new \
disabled=no in-interface=PPPoE-1 new-connection-mark=\
Proxy-1 passthrough=yes
add action=mark-connection chain=input comment="" \
connection-state=new disabled=no in-interface=PPPoE-2 \
new-connection-mark=Proxy-2 passthrough=yes
add action=mark-routing chain=output comment="" \
connection-mark=Proxy-1 disabled=no new-routing-mark=\
jalur-1 passthrough=no
add action=mark-routing chain=output comment="" \
connection-mark=Proxy-2 disabled=no new-routing-mark=\
jalur-2 passthrough=no
add action=mark-connection chain=prerouting comment="" \
disabled=no dst-address-type=!local in-interface=proxy \
new-connection-mark=Proxy-1 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/0
add action=mark-connection chain=prerouting comment="" \
disabled=no dst-address-type=!local in-interface=proxy \
new-connection-mark=Proxy-2 passthrough=yes \
per-connection-classifier=both-addresses-and-ports:2/1
add action=mark-routing chain=prerouting comment="" \
connection-mark=Proxy-1 disabled=no in-interface=proxy \
new-routing-mark=jalur-1 passthrough=yes
add action=mark-routing chain=prerouting comment="" \
connection-mark=Proxy-2 disabled=no in-interface=proxy \
new-routing-mark=jalur-2 passthrough=yes
add action=mark-routing chain=prerouting comment=\
"Bridge1 - WLAN" connection-mark=ADSL-1 disabled=no \
in-interface=bridge1 new-routing-mark=jalur-1 \
passthrough=yes
add action=mark-routing chain=prerouting comment="" \
connection-mark=ADSL-2 disabled=no in-interface=\
bridge1 new-routing-mark=jalur-2 passthrough=yes
Web proxy jalan di 192.168.0.3:8080 parent ke Squid di 10.100.100.2:3128
Kalau proxy dimasukin manual lewat browser bisa jalan..
tapi kalau di nat pakai yg dibawah tidak bisa jalan.
Code:
add action=redirect chain=dstnat comment="Transparent Web Proxy redirector" \
disabled=no dst-port=80 protocol=tcp to-ports=8080
atau
Code:
add action=dst-nat chain=dstnat comment="Redirect to Squid" disabled=yes dst-port=80 protocol=\
tcp to-addresses=192.168.0.3 to-ports=8080
atau
Code:
add action=dst-nat chain=dstnat comment="Redirect to Squid" disabled=yes dst-port=80 protocol=\
tcp to-addresses=10.100.100.2 to-ports=3128
mohon bantuannya trims...