Untuk mengamankan router mikrotik dari traffic virus dan excess ping dapat digunakan skrip firewall berikut Pertama buat address-list “ournetwork” yang berisi alamat IP radio, IP LAN dan IP WAN atau IP lainnya yang dapat dipercaya Dalam contoh berikut alamat IP radio adalah = 10.0.0.0/16, IP LAN = 192.168.1.0/24 dan IP WAN = 203.89.24.0/21 dan IP […]
/ip firewall nat add chain=dstnat dst-address=0.0.0.0/0 protocol=icmp action=dst-nat to-addresses=(64.233.187.99 http://www.google.com) ping ke mesin = ping ke google
ip dns set primary-dns=202.134.1.10 secondary-dns=202.134.0.155 ip dns set allow-remote-requests=yes ip dns set cache-size=8192 ip web-proxy set transparent-proxy=yes ip web-proxy set max-cache-size=7500000 ip web-proxy set enabled=yes ip web-proxy access add src-address=192.168.10.1/24 ip web-proxy access add src-address=192.168.10.0/24 comment=ACCESS ip web-proxy access add src-address=0.0.0.0/0 dst-address=0.0.0.0/0 comment=DROP action=deny ip firewall nat add src-address=192.168.10.0/24 protocol=tcp dst-port=80 chain=dstnat in-interface=LAN action=redirect to-ports=3128 […]
queue simple add name=”ICMP” dst-address=0.0.0.0/0 interface=LAN parent=none packet-marks=ICMP direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=0/0 total-queue=default-small queue simple add name=”DNS-I” target-addresses=0.0.0.0/0 dst-address=202.134.1.10/32 interface=LAN parent=none direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=0/0 total-queue=default-small queue simple add name=”DNS-II” target-addresses=0.0.0.0/0 dst-address=202.134.0.155/32 interface=LAN parent=none direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=0/0 total-queue=default-small queue simple add name=”SERVER” target-addresses=10.10.10.10/32 dst-address=0.0.0.0/0 interface=LAN parent=none direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32000/32000 […]
/ip firewall filter add action=drop chain=input disabled=no protocol=icmp
/ tool graphing set store-every=5min / tool graphing interface add interface=all allow-address=0.0.0.0/0 store-on-disk=yes disabled=no
==SET interface/ip/identity/GW /interface set 0 name=Public /system identity set name=routerku /ip address add address=192.168.1.2/24 interface=Public /ip route add gateway=192.168.1.1
saya pake’ mikrotik 2.9.27 CRACK!! / ip address add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=Local comment=”” disabled=no <— Local lan add address=10.111.0.2/24 network=10.111.0.0 broadcast=10.111.0.255 interface=wlan2 comment=”” disabled=no <— Wlan-2
TXT 