Taruna Informatika Team { Biro Jasa Iklan Banjarmasin }

ether1 = Modem
ether2 = Lan
ether3 = Squid

Modem ADSL = 192.168.2.1
Modem = 192.168.2.2
Lan = 192.168.1.1/24
Squid = 192.168.90.1/24
Proxy = 192.168.90.2/24

Layer 7 Protokol

ip firewall layer7-protocol
add name=Konten regexp="^.*get.+\\.(exe|rar|zip|7z|cab|asf|mov|wmv|mpg|mpeg|mk\
v|avi|flv|pdf|wav|rm|mp3|mp4|ram|rmvb|dat|daa|iso|nrg|bin|vcd|mp2|3gp|mpe|\
qt|raw|wma|ogg|doc|deb|tar|bzip|gzip|gzip2|0[0-9][0-9]).*\$"
add name=Youtube regexp="^.*get.+.c.youtube.com.*\$"

Blok Windows Update di Firewall

ip firewall filter
add action=accept chain=forward comment=Proxy disabled=no dst-port=3128 \
protocol=tcp
add action=drop chain=forward comment="Blok Windows Update" content=\
download.windowsupdate.com disabled=no
add action=drop chain=forward content=download.microsoft.com disabled=no

NTP Client

system ntp client
set enabled=yes mode=unicast primary-ntp=129.6.15.29 secondary-ntp=\
65.55.56.206

Clock GMT Jakarta

system clock
set time-zone-name=Asia/Jakarta

DNS Nawala
ip dns
set allow-remote-requests=yes cache-max-ttl=1w cache-size=2048KiB \
max-udp-packet-size=4096 servers=180.131.144.144,180.131.145.145

Route Gateway

ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.2.1 scope=\
30 target-scope=10

Nat = Masquerade Modem dan Pembelokan Port 80 ke Proxy External

ip firewall nat
add action=masquerade chain=srcnat disabled=no out-interface=Modem
add action=dst-nat chain=dstnat disabled=no dst-port=80 in-interface=Lan \
protocol=tcp src-address=192.168.1.0/24 to-addresses=192.168.90.2 \
to-ports=3128

ip firewall mangle

add action=jump chain=prerouting comment="Rule Game Online" disabled=no \

jump-target=game

add action=mark-connection chain=game comment="Point Blank" disabled=no \

dst-address=203.89.146.0/23 dst-port=39190 new-connection-mark=Game \

passthrough=yes protocol=tcp

add action=mark-connection chain=game comment="" disabled=no dst-address=\

203.89.146.0/23 dst-port=40000-40010 new-connection-mark=Game \

passthrough=yes protocol=udp

add action=mark-connection chain=game comment="Seal Online" disabled=no \

dst-port=1818 new-connection-mark=Game passthrough=yes protocol=tcp

add action=mark-connection chain=game comment=Lineage2 disabled=no dst-port=\

7777 new-connection-mark=Game passthrough=yes protocol=tcp

add action=mark-connection chain=game comment="Ghost Online" disabled=no \

dst-port=19101 new-connection-mark=Game passthrough=yes protocol=tcp

add action=mark-connection chain=game comment="RF Elven" disabled=no \

dst-port=27780 new-connection-mark=Game passthrough=yes protocol=tcp

add action=mark-connection chain=game comment="Perfeck World" disabled=no \

dst-port=18901-18909 new-connection-mark=Game passthrough=yes protocol=\

tcp

add action=mark-connection chain=game comment=Rohan disabled=no dst-port=\

22100 new-connection-mark=Game passthrough=yes protocol=tcp

add action=mark-connection chain=game comment="Zeus RO" disabled=no dst-port=\

5121 new-connection-mark=Game passthrough=yes protocol=tcp

add action=mark-connection chain=game comment=Dota disabled=no dst-port=\

6000-6152 new-connection-mark=Game passthrough=yes protocol=tcp

add action=mark-connection chain=game comment="Ido Street " disabled=no \

dst-port=2001 new-connection-mark=Game passthrough=yes protocol=tcp

add action=mark-connection chain=game comment="Wow AMPM" disabled=no \

dst-port=8082 new-connection-mark=Game passthrough=yes protocol=tcp

add action=mark-connection chain=game comment="Drift City" disabled=no \

dst-port=11011-11041 new-connection-mark=Game passthrough=yes protocol=\

tcp

add action=mark-connection chain=game comment=Getamped disabled=no dst-port=\

13413 new-connection-mark=Game passthrough=yes protocol=tcp

add action=mark-connection chain=game comment=Yulgang disabled=no dst-port=\

19000 new-connection-mark=Game passthrough=yes protocol=tcp

add action=mark-connection chain=game comment="RAN Online" disabled=no \

dst-port=5105 new-connection-mark=Game passthrough=yes protocol=tcp

add action=mark-connection chain=game comment=Crossfire disabled=no dst-port=\

10009 new-connection-mark=Game passthrough=yes protocol=tcp

add action=mark-connection chain=game comment="" disabled=no dst-port=\

12060-12070 new-connection-mark=Game passthrough=yes protocol=udp

add action=mark-connection chain=game comment=Atlantika disabled=no \

dst-address=203.89.147.0/24 dst-port=4300 new-connection-mark=Game \

passthrough=yes protocol=tcp

add action=mark-connection chain=game comment=Avalon disabled=no dst-port=\

9376-9377 new-connection-mark=Game passthrough=yes protocol=tcp

add action=mark-connection chain=game comment="Lost Saga" disabled=no \

dst-port=14009,14010 new-connection-mark=Game passthrough=yes protocol=\

tcp

add action=mark-connection chain=game comment="" disabled=no dst-port=\

14009-14026 new-connection-mark=Game passthrough=yes protocol=udp

add action=mark-connection chain=game comment="FB-Empires & Allies" disabled=\

no dst-port=8890 new-connection-mark=Game passthrough=yes protocol=tcp

add action=mark-connection chain=game comment=FB-Castleville disabled=no \

dst-port=8890 new-connection-mark=Game passthrough=yes protocol=tcp

add action=mark-packet chain=game comment="Packet Game Online" \

connection-mark=Game disabled=no new-packet-mark=Game_pkt passthrough=no

add action=mark-connection chain=forward comment=Poker content=\

statics.poker.static.zynga.com disabled=no dst-port=9339 \

new-connection-mark=Poker_con passthrough=yes protocol=tcp

add action=mark-connection chain=forward comment="" disabled=no dst-port=843 \

new-connection-mark=Poker_con passthrough=yes protocol=tcp

add action=mark-packet chain=forward comment="Packet Poker" connection-mark=\

Poker_con disabled=no new-packet-mark=Poker passthrough=no

add action=mark-packet chain=prerouting comment=Upload disabled=no \

in-interface=Lan new-packet-mark=Upload passthrough=no src-address=\

192.168.1.0/24

add action=mark-connection chain=forward comment="Youtube " disabled=no \

in-interface=Lan layer7-protocol=Youtube new-connection-mark=\

layer7-youtube out-interface=Modem passthrough=yes

add action=mark-packet chain=forward comment="Packet Youtube" \

connection-mark=layer7-youtube disabled=no new-packet-mark=Youtube \

passthrough=no

add action=mark-connection chain=forward comment="Limit Download" disabled=no \

in-interface=Lan layer7-protocol=Konten new-connection-mark=\

layer7-kontens out-interface=Modem passthrough=yes

add action=mark-packet chain=forward comment="Packet Limit Download" \

connection-mark=layer7-kontens disabled=no new-packet-mark=limit-kontens \

passthrough=no

add action=mark-connection chain=forward comment=Browsing disabled=no \

dst-port=80,3128 layer7-protocol=!Konten new-connection-mark=\

conn-browsing out-interface=Modem passthrough=yes protocol=tcp

add action=mark-packet chain=forward comment="Packet Browsing" \

connection-mark=conn-browsing disabled=no new-packet-mark=limit-browsing \

passthrough=no

add action=mark-connection chain=forward comment="Limit Download Lan" \

connection-bytes=155000-4294967295 connection-mark=!Poker_con disabled=no \

in-interface=Modem new-connection-mark=Download out-interface=Lan \

packet-mark=!Game_pkt passthrough=yes protocol=tcp

add action=mark-packet chain=forward comment="Packet Limit Download Lan" \

connection-mark=Download disabled=no new-packet-mark=Download_pkt \

packet-mark=!Game_pkt passthrough=no

queue tree

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \

max-limit=0 name="Main Browse" parent=global-out priority=8

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \

max-limit=0 name="Main Upload" parent=global-in priority=8

add kind=pcq name=Game pcq-classifier=\

src-address,dst-address,src-port,dst-port pcq-limit=50 pcq-rate=0 \

pcq-total-limit=2000

add kind=pcq name=Upload pcq-classifier=src-address pcq-limit=50 pcq-rate=0 \

pcq-total-limit=2000

add kind=pcq name=Lan pcq-classifier="" pcq-limit=50 pcq-rate=1024000 \

pcq-total-limit=2000

add kind=pcq name=Proxy pcq-classifier=dst-address pcq-limit=50 pcq-rate=\

1000000 pcq-total-limit=2000

queue tree

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \

max-limit=1M name=Browsing packet-mark=limit-browsing parent=\

"Main Browse" priority=3 queue=default

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \

max-limit=512k name=Youtube packet-mark=Youtube parent="Main Browse" \

priority=8 queue=default

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \

max-limit=0 name=Game packet-mark=Game_pkt parent=global-total priority=1 \

queue=Game

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \

max-limit=512k name=Download packet-mark=limit-kontens parent=\

"Main Browse" priority=5 queue=default

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \

max-limit=0 name=Poker packet-mark=Poker parent=global-out priority=2 \

queue=default

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \

max-limit=512k name=Upload packet-mark=Upload parent="Main Upload" \

priority=8 queue=Upload

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \

max-limit=256k name=Download-Lan packet-mark=Download_pkt parent=\

global-out priority=8 queue=default

Baca Selengkapnya!!

Malam Pertama..
1. Unda umpat imam malik..
beniat puasa sebulanan..

Malam kedua..
2. Sengaja aku puasa sebulanan ramadhan pada ini tahun, karna allah swt..

rukun puasa, jangan menggawi yang membatalkan puasa..
makan besinghaja.... maka batal lah puasa..
kalau tidak sengaja... kda pa2....

dan di jaga jangan bersetubuh di bulan puasa..
jika dilanggar, terpaksa memakani fakir miskin 60 ikung..

dijaga muntung, jangan menyambati lawan urang.. "tidak membatalkan puasa, tetapi mengurangi pahala"
makan minuman halal..

fadilat sembahyang tasbih "diampuni dosa seumur hidup"..
yasin "hatinya quraan"..
baca yasin apa niat.. berkat surah yasin, insya allah qobul..

lailah ha ilah anta, subhanaka ini kuntu minazholimin
dibaca 2375 kali isfu syaaban

guru zuhdi.. ceramah on masjid raya sabilal muthadin..

Baca Selengkapnya!!