Didalam postingan kali ini akan dilampirkan bagaiman cara menglimit
download file-file seperti rar, zip, iso, mp3 dan lain-lain.
Langsung saja kepermasalahan, tp sebelumnya buka winbox anda, untuk
mendownload winbox disini.
/ip firewall layer7-protocol add name=YOUTUBE
regexp="http/(0\\.9|1\\.0|1\\.1)[\\x09-\\x0d
][1-5][0-9][0-9][\\x09-\\x0d -~]*(content-type: video)"
Kemudian anda dapat copy / paste script dibawah ini pada "new terminal" mikrotik anda
/ip firewall layer7-protocol add name="EXE" regexp="\\.(exe)"
/ip firewall layer7-protocol add name="RAR" regexp="\\.(rar)"
/ip firewall layer7-protocol add name="7z" regexp="\\.(7z)"
/ip firewall layer7-protocol add name="CAB" regexp="\\.(cab)"
/ip firewall layer7-protocol add name="ASF" regexp="\\.(asf)"
/ip firewall layer7-protocol add name="MOV" regexp="\\.(mov)"
/ip firewall layer7-protocol add name="WMV" regexp="\\.(wmv)"
/ip firewall layer7-protocol add name="MPG" regexp="\\.(mpg)"
/ip firewall layer7-protocol add name="MPEG" regexp="\\.(mpeg)"
/ip firewall layer7-protocol add name="MKV" regexp="\\.(mkv)"
/ip firewall layer7-protocol add name="ZIP" regexp="\\.(zip)"
/ip firewall layer7-protocol add name="AVI" regexp="\\.(avi)"
/ip firewall layer7-protocol add name="FLV" regexp="\\.(flv)"
/ip firewall layer7-protocol add name="WAV" regexp="\\.(wav)"
/ip firewall layer7-protocol add name="RM" regexp="\\.(rm)"
/ip firewall layer7-protocol add name="MP3" regexp="\\.(mp3)"
/ip firewall layer7-protocol add name="MP4" regexp="\\.(mp4)"
/ip firewall layer7-protocol add name="RAM" regexp="\\.(ram)"
/ip firewall layer7-protocol add name="RMVB" regexp="\\.(rmvb)"
/ip firewall layer7-protocol add name="DAT" regexp="\\.(dat)"
/ip firewall layer7-protocol add name="DAA" regexp="\\.(daa)"
/ip firewall layer7-protocol add name="ISO" regexp="\\.(iso)"
/ip firewall layer7-protocol add name="NRG" regexp="\\.(nrg)"
/ip firewall layer7-protocol add name="BIN" regexp="\\.(bin)"
/ip firewall layer7-protocol add name="VCD" regexp="\\.(vcd)"
Maka hasilnya akan tampak pada gambar dibawah ini
Kemudian untuk mangle extention file-file exe, rar, mp3, zip. dll. yaitu
:
/ip firewall mangle add action=mark-connection chain=forward
comment="EXTENTION KONEKSI" disabled=no out-interface=local
new-connection-mark="EXTENTION KONEKSI" passthrough=yes
/ip firewall mangle add action=mark-packet chain=forward
comment="YOUTUBE MARK" layer7-protocol=YOUTUBE disabled=no
new-packet-mark="YOUTUBE" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="WMV
MARK" layer7-protocol=WMV disabled=no new-packet-mark="WMV"
passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="EXE
MARK" layer7-protocol=EXE disabled=no new-packet-mark="EXE"
passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="ZIP
MARK" layer7-protocol=ZIP new-packet-mark="ZIP" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="RAR
MARK" layer7-protocol=RAR new-packet-mark="RAR" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="MPG
MARK" layer7-protocol=MPG new-packet-mark="MPG" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="MPEG
MARK" layer7-protocol=MPEG new-packet-mark="MPEG" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="MP3
MARK" layer7-protocol=MP3 new-packet-mark="MP3" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="MOV
MARK" layer7-protocol=MOV new-packet-mark="MOV" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="ISO
MARK" disabled=no layer7-protocol=ISO new-packet-mark="ISO"
passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="MKV
MARK" layer7-protocol=MKV new-packet-mark="MKV" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="FLV
MARK" layer7-protocol=FLV new-packet-mark="FLV" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="AVI
MARK" layer7-protocol=AVI new-packet-mark="AVI" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="CAB
MARK" layer7-protocol=CAB new-packet-mark="CAB" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="ASF
MARK" layer7-protocol=ASF new-packet-mark="ASF" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="WAV
MARK" layer7-protocol=WAV new-packet-mark="WAV" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="RM
MARK" layer7-protocol=RM new-packet-mark="RM" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="RAM
MARK" layer7-protocol=RAM new-packet-mark="RAM" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="RMVB
MARK" layer7-protocol=RMVB new-packet-mark="RMVB" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="DAT
MARK" layer7-protocol=DAT new-packet-mark="DAT" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="DAA
MARK" layer7-protocol=DAA new-packet-mark="DAA" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="NRG
MARK" layer7-protocol=NRG new-packet-mark="NRG" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="BIN
MARK" layer7-protocol=BIN new-packet-mark="BIN" passthrough=no
/ip firewall mangle add action=mark-packet chain=forward comment="VCD
MARK" layer7-protocol=VCD new-packet-mark="VCD" passthrough=no
Dan hasilnya dapat dilihat dibawah ini
Kemudian Untuk Queues Extentionnya, anda tinggal copy/paste saja pada
"new terminal"
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=256000 name="LIMIT FILE EXTENTION"
parent=global-out priority=3
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="AVI" packet-mark=AVI
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="EXE" packet-mark="EXE"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="FLV" packet-mark="FLV"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=256000 name="YOUTUBE"
packet-mark="YOUTUBE" parent="LIMIT FILE EXTENTION" priority=3
queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="ISO" packet-mark=iso
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="MP3" packet-mark="MP3"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="MP4" packet-mark="MP4"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="MPEG" packet-mark="MPEG"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="MPG" packet-mark="MPG"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="RAR" packet-mark="RAR"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="WMV" packet-mark="WMV"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="ZIP" packet-mark="ZIP"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="CAB" packet-mark="CAB"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="ASF" packet-mark="ASF"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="MOV" packet-mark="MOV"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="MKV" packet-mark="MKV"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="WAV" packet-mark="WAV"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="RM" packet-mark="RM"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="RAM" packet-mark="RAM"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="RMVB" packet-mark="RMVB"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="DAT" packet-mark="DAT"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="DAA" packet-mark="DAA"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="NRG" packet-mark="NRG"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="BIN" packet-mark="BIN"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s
disabled=no limit-at=0 max-limit=128000 name="VCD" packet-mark="VCD"
parent="LIMIT FILE EXTENTION" priority=3 queue=default
Kemudian untuk melihat apakah script anda sudah benar atau berjalan
dengan baik anda dapat mencoba untuk mendownload sebuah fie yang
berbentuk exe, rar, mp3, zip, dan lain-lain.