Mikrotik, bandwitdh management

Mikrotik yang paling membedakan dengan yang lain, terurama newbie seperti saya, mungkin karena kemudahan pada konfigurasinya dan begitu banyaknya artikel dan Forum yang membahas masalah ini, berikut saya berbagi teknik pembagian bandiwdth yang biasa dilakukan:
[Code]

ip firewall mangle add chain=forward protocol=tcp in-interface=Public out-interface=Local connection-bytes=262146-4294967295 action=mark-connection new-connection-mark=Download passthrough=yes
ip firewall mangle add chain=forward protocol=tcp in-interface=Public out-interface=Local connection-mark=Download action=mark-packet new-packet-mark=Download

queue type add name=shape kind=pcq pcq-rate=128000 pcq-classifier=dst-address
queue tree add name=Download parent=global-out packet-mark=Download queue=shape max-limit=12000

Diantara cara diatas, masih banyak cara yang dapat dilakukan untuk melakukan pembagian bandwidth

More about → Mikrotik, bandwitdh management

Mikrotik, Drop port scanners

Ada beberapa cara yang dapat digunakan untuk mengamankan server dari luar, salah satunya dengan memblok scanning port.

/ip firewall filter [enter]
add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list address-list="port scanners" address-list-timeout=2w comment="Port scanners to list " disabled=no
add chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg action=add-src-to-address-list address-list="port scanners" address-list-timeout=2w comment="NMAP FIN Stealth scan"

add chain=input protocol=tcp tcp-flags=fin,syn action=add-src-to-address-list address-list="port scanners" address-list-timeout=2w comment="SYN/FIN scan"

add chain=input protocol=tcp tcp-flags=syn,rst action=add-src-to-address-list address-list="port scanners" address-list-timeout=2w comment="SYN/RST scan"

add chain=input protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack action=add-src-to-address-list address-list="port scanners" address-list-timeout=2w comment="FIN/PSH/URG scan"

add chain=input protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg action=add-src-to-address-list address-list="port scanners" address-list-timeout=2w comment="ALL/ALL scan"

add chain=input protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg action=add-src-to-address-list address-list="port scanners" address-list-timeout=2w comment="NMAP NULL scan"

add chain=input src-address-list="port scanners" action=drop comment="dropping port scanners" disabled=no

[selesai][link]

More about → Mikrotik, Drop port scanners