
Originally Posted by
adhielesmana
di print sini aja rule nya..

>interface print
Code:
Flags: D - dynamic, X - disabled, R - running, S - slave
# NAME TYPE MTU
0 R Speedy3 ether 1500
1 R Speedy1 ether 1500
2 R Speedy2 ether 1500
3 R Local ether 1500
4 R Speedy3-out pppoe-out 1480
5 R Speedy1-out pppoe-out 1480
6 R Speedy2-out pppoe-out 1480
> ip firewall mangle print
Code:
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; GroupA
chain=prerouting action=mark-routing new-routing-mark=GroupA
passthrough=no src-address-list=GroupA
1 ;;; GroupB
chain=prerouting action=mark-routing new-routing-mark=GroupB
passthrough=no src-address-list=GroupB
2 ;;; GroupC
chain=prerouting action=mark-routing new-routing-mark=GroupC
passthrough=no src-address-list=GroupC
3 chain=forward action=mark-connection new-connection-mark=Download1
passthrough=yes dst-address-list=GroupA in-interface=Speedy1-out
out-interface=Local protocol=tcp connection-bytes=262146-4294967295
4 chain=forward action=mark-connection new-connection-mark=Download2
passthrough=yes dst-address-list=GroupB in-interface=Speedy2-out
5 chain=forward action=mark-connection new-connection-mark=Download3
passthrough=yes dst-address-list=GroupC in-interface=Speedy3-out
out-interface=Local protocol=tcp connection-bytes=262146-4294967295
6 chain=forward action=mark-packet new-packet-mark=Download1 passthrough=no
dst-address-list=GroupA in-interface=Speedy1-out out-interface=Local
protocol=tcp connection-mark=Download1
7 chain=forward action=mark-packet new-packet-mark=Download2 passthrough=no
dst-address-list=GroupB in-interface=Speedy2-out out-interface=Local
protocol=tcp connection-mark=Download2
8 chain=forward action=mark-packet new-packet-mark=Download3 passthrough=no
dst-address-list=GroupC in-interface=Speedy3-out out-interface=Local
protocol=tcp connection-mark=Download3
> ip firewall nat print
Code:
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; LAN Network
chain=srcnat action=masquerade src-address-list=lannetwork
> ip route print
Code:
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY-STATE GATEWAY DISTANCE INTERFACE
0 A S ;;; GroupB
0.0.0.0/0 reachable Speedy2-out 1 Speedy2-out
1 A S ;;; GroupC
0.0.0.0/0 reachable Speedy3-out 1 Speedy3-out
2 A S ;;; GroupA
0.0.0.0/0 reachable Speedy1-out 1 Speedy1-out
Masalah address-listnya
GroupA = IP Client 1 - 5
GroupB = IP Client 6 - 10
GroupC = IP Client 11 -15