Setting Hotspot pada Mikrotik

Setting Hotspot pada Mikrotik Router OS sangat mudah dikonfigurasi. Sistem autentikasi hotspot biasa digunakan ketika kita akan menyediakan akses internet pada areal publik, seperti : Hotel, café, Kampus, airport, taman, mall dll.

Teknologi akses internet ini biasanya menggunakan jaringan wireless atau wired. Biasanya menyediakan akses internet gratis dengan menggunakan hotspot atau bisa juga menggunakan Voucher untuk autentikasinya.

Ketika membuka halaman web maka router akan mengecek apakah user sudah di autentikasi atau belum. Jika belum melakukan autentikasi, maka user akan di arahkan pada hotspot login page yang mengharuskan mengisi username dan password. Jika informasi login yang dimasukkan sudah benar, maka router akan memasukkan user tersebut kedalam sistem hotspot dan client sudah bisa mengakses halaman web.

Selain itu akan muncul popup windows berisi status ip address, byte rate dan time live. Penggunaan akses internet hotspot dapat dihitung berdasarkan waktu (time-based) dan data yang di download/upload (volume-based). Selain itu dapat juga dilakukan melimit bandwidth berdasarkan data rate, total data upload/download atau bisa juga di limit berdasarkan lama pemakaian.

Cara mudah setting hotspot pada mikrotik adalah ada 2 (dua) pilihan selain menggunakan teks mode kita juga bisa menggunakan setting wizard dengan menggunakan Winbox Router OS, Langkah-langkat berikut merupakan konfigurasi dasar hotspot mikrotik sebagai Gateway Server. Pertama install Mikrotik Router OS pada PC atau pasang DOM atau kalau menggunakan Rouer Board langsung aja Login = ‘admin’ sedangkan untuk pasword anda kosongin untuk defaultnya.

Masuk ke IP ==> Hotspot ==> Setup

Kemudian tentukan IP lokal hospot yang akan ada gunakan, misal 192.168.10.1 dan Tentukan IP DHCP ke clientnya yang akan anda gunakan, dalam contoh ini adalah 192.168.10.2-192.168.10.255

Untuk SMTP Server sebaiknya anda kosongin saja, Kemudian DNS servernya anda isikan sesuaikan dengan Provider anda, dalam contoh ini adalah DNS1=202.47.78.1 DNS2=202.47.78.9

DNS lokal hotspot anda NEXT saja kemudian pada Hotspot user anda dalam contoh berikut diisi admin password admin123

Hotspot Server Profile digunakan untuk mensetting server yang akan sering digunakan untuk semua user seperti metode autentikasi dan Limitasi data rate. Ada 6 jenis autentikasi Hotspot mikrotik yang berbeda dalam profile setting, jenis autentikas tersebut adalah : HTTP PAP, HTTP CHAP, HTTPS, HTTP cookie, MAC address, Trial

Metode autentikasi yang akan digunakan, biasanya cukup menggunakan metode HTTP CHAP autentikasi

Data rate limitation digunakan sebagai default setting untuk user yang belum di setting bandwidth limit pemakaiannya. Dimana RX adalah Client upload dan TX adalah Client download. Misal setting default data rate di 64k/128k (upload/download)

Hotspot user profile digunakan untuk menyimpan data user yang akan dibuatkan rule profilenya. Dimana didalamnya bisa dilakukan setting firewall filter chain untuk traffic yang keluar/masuk, juga bisa untuk mensetting limitasi data rate dan selain itu dapat juga dilakukan paket marking untuk setiap user yang masuk kedalam profile tersebut secara otomatis.

Hotspot user yaitu nama-nama user yang akan diautentikasi pada sistem hotspot. Beberapa hal yang dapat dilakukan dalam konfigurasi hotspot user yaitu : username dan password, Membatasi user berdasarkan waktu dan paket data yang akan digunakan, hanya ip address tertentu dari ip address dhcp yang ditawarkan atau hanya mengizinkan user untuk koneksi ke sistem hotspot dari MAC Address tertentu saja.

IP Bindings digunakan untuk mengizinkan ip tertentu untuk membypass autentikasi hotpot, ini sangat berguna sekali ketika kita ingin menjalankan layanan server, atau IP telephony dibawah system hotspot. Misal, PC atau Notebook anda untuk dapat membypass hotspot system, dengan demikian anda dapat melakukan browsing tanpa autentikasi

Hotspot HTTP Walled Garden :

Hotspot Walled Garden adalah sebuah system yang mengizinkan semua user yang tidak memiliki autentikasi untuk mengakses halaman website tertentu. tetapi ketika akan mengakses resource yang lain maka harus melakukan autentikasi. Sistem ini akan melakukan pengaturan pada level protokol HTTP and HTTPS. Cara kerja Walled garden pada HTTP level mirip dengan web-proxy.

Contoh penggunaan:

- Buat hotspot system agar mengizinkan browser untuk mengakses http://www.chrisdyansyah.web.id tanpa menggunakan autentikasi

Advertisement :

Kita dapat menggunakan proxy yang sama pada user yang tidak memiliki autentikasi untuk menerapkan fasilitas walled-garden ini, settingan advertise bisa juga digunakan oleh user yang memiliki autentikasi untuk dapat menampilkan advertise (iklan) dalam bentuk popup windows. Advertisement ini diaktifkan oleh network administrator dengan mensetting system secara automatis untuk membuka status page. Bahkan advertise ini tetap akan muncul meskipun user tersebut login dengan menggunakan mac address. Dan

akan melihat advertisement tersebut dalam interval waktu tertentu sesuai dengan yang disetting. Jadi ketika saatnya popup advertisement muncul, maka server akan mengarahkan web browser client ke status page dan status page akan menampilkan advertise yang kita buat.

Contoh penggunaan :

- Buat advertisement yang akan mengarah ke

- http://www.perbanas.ac.id

- http://anto-chuakev.web.id

- (bisa ditambahkan halaman lain yang akan anda advertise)

Read more »

Mangle Port Game Online Mikrotik Router

Berikut ini adalah mangle port game online yang nanti nya anda masukkan ke queue tree atau queue simple yang akan di jadikan prioritas yang tertinggi di mikrotik router,berikut ini mangle mangle port game online :

Di paket kan dulu Semua Game nya:

/ip firewall mangle

add action=mark-packet chain=forward comment="SEMUA GAME DIPAKETKAN" \

connection-mark="GAME KONEKSI" disabled=no new-packet-mark="GAME PAKET" \

passthrough=no

Mangle POKER tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="POKER KONEKSI" \

disabled=no dst-port=9339,843 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle AYODANCE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="AYODANCE KONEKSI" \

disabled=no dst-port=18901,18902,18903,18904,18905,18906,18907,18908,18909 \

new-connection-mark="GAME KONEKSI" passthrough=yes protocol=tcp

Mangle SEAL ONLINE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="SEAL ONLINE KONEKSI" \

disabled=no dst-port=1818 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle LINE AGE2 tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="LINE AGE2 KONEKSI" \

disabled=no dst-port=7777 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle POINT BLANK udp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="POINT BLANK KONEKSI UDP" \

disabled=no dst-port=40000-40010 new-connection-mark="GAME KONEKSI" \

passthrough=no protocol=udp

Mangle POINT BLANK tcp port

/ip firewall mangle

add chain=prerouting action=mark-connection \

new-connection-mark="GAME KONEKSI" passthrough=yes protocol=tcp \

dst-address=203.89.146.0/23 dst-port=39190 comment="POINT BLANK KONEKSI TCP"

Mangle RF udp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="RF KONEKSI UDP" \

disabled=no dst-port=10001,10002,10003,10004,10005,10006,10007 \

new-connection-mark="GAME KONEKSI" passthrough=no protocol=udp

Mangle RF-ELVENT tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="RF-ELVENT KONEKSI" \

disabled=no dst-port=27780 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle PERFECT WORLD tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="PERFECT WORLD KONEKSI" \

disabled=no dst-port=29000 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle ROHAN tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="ROHAN KONEKSI" \

disabled=no dst-port=22100 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle ROHAN tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="ZEUS RO KONEKSI" \

disabled=no dst-port=5121 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle DOTA tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="DOTTA KONEKSI" \

disabled=no dst-port=6000-6152 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle GHOST ONLINE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="GHOST ONLINE KONEKSI" \

disabled=no dst-port=19101 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle GHOST ONLINE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="WOW AMPM KONEKSI" \

disabled=no dst-port=8085 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle DRIFT CITY tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="DRIFT CITY KONEKSI" \

disabled=no dst-port=11011-11041 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle GET AMPED tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="GET AMPED KONEKSI" \

disabled=no dst-port=13413 new-connection-mark="GAME KONEKSI" \

passthrough=no protocol=tcp

Mangle YULLGANG tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="YULLGANG KONEKSI" \

disabled=no dst-port=19000 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle IDOL STREET tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="IDOL STREET KONEKSI" \

disabled=no dst-port=2001 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle CRAZY KART tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="CRAZY KART KONEKSI" \

disabled=no dst-port=9601-9602 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle RAN ONLINE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="RAN ONLINE KONEKSI" \

disabled=no dst-port=5105 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle CROSS FIRE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="CROSS FIRE KONEKSI TCP" \

disabled=no dst-port=10009 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle CROSS FIRE udp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="CROSS FIRE KONEKSI UDP" \

disabled=no dst-port=40000-40010 new-connection-mark="GAME KONEKSI" \

passthrough=no protocol=udp

Mangle RETURN OF WARRIOR tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="RETURN OF WARRIOR" \

disabled=no dst-port=10402 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle CRAZY KART 2 tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="CRAZY KART 2" \

disabled=no dst-port=9600 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle LUNA ONLINE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="LUNA ONLINE" \

disabled=no dst-port=15002 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle RUNES OF MAGIC tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="RUNES OF MAGIC" \

disabled=no dst-port=16402-16502 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle FRESH RO tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="FRESH RO" \

disabled=no dst-port=5126 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle CABAL INDONESIA tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="CABAL INDONESIA" \

disabled=no dst-port=15001,15002 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle WAR ROCK tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="WAR ROCK" \

disabled=no dst-port=5340-5352 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle FASTBLACK tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="FASTBLACK" \

disabled=no dst-port=6000-6001 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle ROSE ONLINE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="ROSE ONLINE" \

disabled=no dst-port=29200 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle X-SHOT TCP tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="X-SHOT TCP" \

disabled=no dst-port=7341,7451 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle X-SHOT TCP udp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="X-SHOT UDP" \

disabled=no dst-port=7808,30000 new-connection-mark="GAME KONEKSI" \

passthrough=no protocol=udp

Mangle TANTRA ONLINE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="TANTRA ONLINE" \

disabled=no dst-port=3010 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle HEROES OF NEWEARTH INCATAMERS tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="HEROES OF NEWEARTH INCATAMERS TCP" \

disabled=no dst-port=11031 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle HEROES OF NEWEARTH INCATAMERS udp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="HEROES OF NEWEARTH INCATAMERS UDP" \

disabled=no dst-port=11100-11125,11440-11460 new-connection-mark="GAME KONEKSI" \

passthrough=no protocol=udp

Mangle ATLANTICA tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="ATLANTICA" \

disabled=no dst-port=4300 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp dst-address=203.89.147.0/24

Mangle ECO ONLINE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="ECO ONLINE" \

disabled=no dst-port=12011,12110 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

nah…sekarang tinggal anda buat queue tree atau simple nya..dengan prioritas tertinggi…Berikut ini adalah mangle port game online yang nanti nya anda masukkan ke queue tree atau queue simple yang akan di jadikan prioritas yang tertinggi di mikrotik router,berikut ini mangle mangle port game online :

Di paket kan dulu Semua Game nya:

/ip firewall mangle

add action=mark-packet chain=forward comment="SEMUA GAME DIPAKETKAN" \

connection-mark="GAME KONEKSI" disabled=no new-packet-mark="GAME PAKET" \

passthrough=no

Mangle POKER tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="POKER KONEKSI" \

disabled=no dst-port=9339,843 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle AYODANCE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="AYODANCE KONEKSI" \

disabled=no dst-port=18901,18902,18903,18904,18905,18906,18907,18908,18909 \

new-connection-mark="GAME KONEKSI" passthrough=yes protocol=tcp

Mangle SEAL ONLINE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="SEAL ONLINE KONEKSI" \

disabled=no dst-port=1818 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle LINE AGE2 tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="LINE AGE2 KONEKSI" \

disabled=no dst-port=7777 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle POINT BLANK udp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="POINT BLANK KONEKSI UDP" \

disabled=no dst-port=40000-40010 new-connection-mark="GAME KONEKSI" \

passthrough=no protocol=udp

Mangle POINT BLANK tcp port

/ip firewall mangle

add chain=prerouting action=mark-connection \

new-connection-mark="GAME KONEKSI" passthrough=yes protocol=tcp \

dst-address=203.89.146.0/23 dst-port=39190 comment="POINT BLANK KONEKSI TCP"

Mangle RF udp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="RF KONEKSI UDP" \

disabled=no dst-port=10001,10002,10003,10004,10005,10006,10007 \

new-connection-mark="GAME KONEKSI" passthrough=no protocol=udp

Mangle RF-ELVENT tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="RF-ELVENT KONEKSI" \

disabled=no dst-port=27780 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle PERFECT WORLD tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="PERFECT WORLD KONEKSI" \

disabled=no dst-port=29000 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle ROHAN tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="ROHAN KONEKSI" \

disabled=no dst-port=22100 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle ROHAN tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="ZEUS RO KONEKSI" \

disabled=no dst-port=5121 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle DOTA tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="DOTTA KONEKSI" \

disabled=no dst-port=6000-6152 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle GHOST ONLINE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="GHOST ONLINE KONEKSI" \

disabled=no dst-port=19101 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle GHOST ONLINE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="WOW AMPM KONEKSI" \

disabled=no dst-port=8085 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle DRIFT CITY tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="DRIFT CITY KONEKSI" \

disabled=no dst-port=11011-11041 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle GET AMPED tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="GET AMPED KONEKSI" \

disabled=no dst-port=13413 new-connection-mark="GAME KONEKSI" \

passthrough=no protocol=tcp

Mangle YULLGANG tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="YULLGANG KONEKSI" \

disabled=no dst-port=19000 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle IDOL STREET tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="IDOL STREET KONEKSI" \

disabled=no dst-port=2001 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle CRAZY KART tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="CRAZY KART KONEKSI" \

disabled=no dst-port=9601-9602 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle RAN ONLINE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="RAN ONLINE KONEKSI" \

disabled=no dst-port=5105 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle CROSS FIRE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="CROSS FIRE KONEKSI TCP" \

disabled=no dst-port=10009 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle CROSS FIRE udp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="CROSS FIRE KONEKSI UDP" \

disabled=no dst-port=40000-40010 new-connection-mark="GAME KONEKSI" \

passthrough=no protocol=udp

Mangle RETURN OF WARRIOR tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="RETURN OF WARRIOR" \

disabled=no dst-port=10402 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle CRAZY KART 2 tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="CRAZY KART 2" \

disabled=no dst-port=9600 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle LUNA ONLINE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="LUNA ONLINE" \

disabled=no dst-port=15002 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle RUNES OF MAGIC tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="RUNES OF MAGIC" \

disabled=no dst-port=16402-16502 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle FRESH RO tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="FRESH RO" \

disabled=no dst-port=5126 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle CABAL INDONESIA tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="CABAL INDONESIA" \

disabled=no dst-port=15001,15002 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle WAR ROCK tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="WAR ROCK" \

disabled=no dst-port=5340-5352 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle FASTBLACK tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="FASTBLACK" \

disabled=no dst-port=6000-6001 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle ROSE ONLINE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="ROSE ONLINE" \

disabled=no dst-port=29200 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle X-SHOT TCP tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="X-SHOT TCP" \

disabled=no dst-port=7341,7451 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle X-SHOT TCP udp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="X-SHOT UDP" \

disabled=no dst-port=7808,30000 new-connection-mark="GAME KONEKSI" \

passthrough=no protocol=udp

Mangle TANTRA ONLINE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="TANTRA ONLINE" \

disabled=no dst-port=3010 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle HEROES OF NEWEARTH INCATAMERS tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="HEROES OF NEWEARTH INCATAMERS TCP" \

disabled=no dst-port=11031 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

Mangle HEROES OF NEWEARTH INCATAMERS udp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="HEROES OF NEWEARTH INCATAMERS UDP" \

disabled=no dst-port=11100-11125,11440-11460 new-connection-mark="GAME KONEKSI" \

passthrough=no protocol=udp

Mangle ATLANTICA tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="ATLANTICA" \

disabled=no dst-port=4300 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp dst-address=203.89.147.0/24

Mangle ECO ONLINE tcp port

/ip firewall mangle

add action=mark-connection chain=prerouting comment="ECO ONLINE" \

disabled=no dst-port=12011,12110 new-connection-mark="GAME KONEKSI" \

passthrough=yes protocol=tcp

NB : -->

PORT GAME ONLINE

Berikut adalah port² game online yang menggunakan IIX/Koneksi lokal :

1. Ayo Dance : tcp 18901-18909
2. SealOnline : tcp 1818
3. PointBlank : tcp 39190, udp 40000-40010
4. Lineage2 : tcp 7777
5. GhostOnline : tcp 19101
6. RF-Elven : tcp 27780
7. Perfect world : tcp 29000
8. Rohan : tcp 22100
9. Zeus RO : tcp 5121
10. Dotta : tcp 6000-6152
11. IdolStreet : tcp 2001
12. CrazyKart : 9601-9602
13. WOW AMPM : tcp 8085
14. DriftCity : tcp 11011-11041
15. GetAmped : tcp 13413
16. Yullgang : tcp 19000
17. RAN Online : tcp 5105
18. CrossFire : tcp 10009, udp 12060-12070
19. WarRock : tcp 5340-5352
20. FastBlack : tcp 6000-6001
21. Rose Online : tcp 29200
22. Return Of Warrior : tcp 10402
23. CrazyKart 2 : tcp 9600 http://vertical-network.blogspot.com
25. Luna Online : tcp 15002
26. Runes Of Magic : tcp 16402-16502
27. FreshRO : tcp 5126
28. Tantra Online : tcp 3010
29. Heroes Of Newearth Incatamers : tcp 11031 udp 11100-11125,11440-11460
30. Atlantica : tcp 4300 , ip 203.89.147.0/24
31. ECO Online : tcp Port 12011 , 12110
32. Cabal Indo : tcp Port 15001, 15002
33. X-SHOT : tcp 7341,7451 , udp 7808,3000034. 3 Kingdoms : UDP 42051-42052
35. AVALON : TCP 9376-9377
36. Free Style : TCP 10001-10011,40000, UDP 40040-40500,1293,1479
37. Grand Chase : TCP 9300,9400,9700, UDP 9401,9600
38. Lost Saga : TCP 14009-14010, UDP: 14009-14010
39. CS Online Indonesia : UDP 27017, TCP : 8001,9015,40300-40404,36567 

 

List TCP & UDP Port Game Online

Port TCP Game Online :

1. Zynga Poker : 843,9339
2. SealOnline : 1818
3. IdolStreet : 2001
4. Tantra Online : 3010
5. Atlantica : 4300
6. RAN Online : 5105
7. Zeus RO : 5121
8. Fresh Ragnarok : 5126,5171
9. WarRock : 5340-5352
10. FastBlack : 6000-6001
11. Dotta : 6000-6152
12. Lineage2 : 7777
13. X-SHOT : 7341-7350,7451
14. WOW AMPM : 8085
15. CrazyKart 2: 9600
16. CrazyKart : 9601-9602
17. Grand Chase : 9300,9400,9700
18. AVALON : 9376-9377
19. Free Style : 10001-10011,40000,
20. CrossFire : 10009,13008,16666,28012,
21. DriftCity : 11011-11041
22. Return Of Warrior : 10402
23. Heroes Of Newearth Incatamers : 11031
24. ECO Online : 12011 , 12110
25. GetAmped : 13413
26. Luna Online : 15000-15002
27. Cabal Indo : 15001, 15002
28. Runes Of Magic : 16402-16502
29. Ayo Dance : 18901-18909
30. Yulgang : 19000
31. GhostOnline : 19101
32. Rohan : 22100
33. RF-Elven : 27780
34. Perfect world : 29000
35. Rose Online : 29200
36. PointBlank : 39100,39110,39220,39190,49100,

 

UDP Port Game Online :

Free Style : 1293,1479,40040-40500
DOTA : 6100-6152
X-SHOT : 7777-7977,30000
Grand Chase : 9401,9600
Crazy Kart : 9600-9602
CrossFire : 12020-12080,13000 – 13080
PointBlank : 40000-40010
3 Kingdoms : 42051-42052
Heroes Of Newearth Incatamers : 11100-11125,11440-11460




Urutan TCP Port untuk setting Mangle Mark Mikrotik :

TCP_1 : 843,1818,2001,3010,4300,5105,5121,5126,5171,5340-5352,6000-6152,7777

TCP_2 : 7341-7350,7451,8085,9600,9601-9602,9300,9339,9376-9377,9400,9700,10001-10011

TCP_3 : 10402,11011-11041,12011,12110,13008,13413,15000-15002,16402-16502,16666,18901-18909,19000

TCP_4 : 19101,22100,27780,28012,29000,29200,39100,39110,39220,39190,40000,49100


Urutan UDP Port untuk setting Mangle Mark Mikrotik :

UDP_1 : 1293,1479,6100-6152,7777-7977,9401,9600-9602,12020-12080,30000,40000-40010

UDP_2 : 42051-42052,11100-11125,11440-11460 

freestyle buka juga port 20000 (dua puluh ribu)

jika port 20000 gak dibuka maka freestyle gak mau distart/dimulai game, komentnya "gak ada respon dari kita"

Lost Saga : TCP 14009-14010, UDP: 14009-14010
CS Online Indonesia : UDP 27017, TCP : 8001,9015,40300-40404,36567 

 

SIMAK DENGAN BAIK,SOALNYA AGAK RUMIT SEDIKIT :D

 

Read more »

Konfigurasi Mikrotik Firewall ( Filter, Block Client, Block Mac Addres, Block Attacker, dll )

Ringkasan ini tidak tersedia. Harap klik di sini untuk melihat postingan.

Read more »

Drop Port Scanners pada Mikrotik Router

Tujuannya adalah untuk menghindari pihak lain yang bermaksud melakukan Scanning atau Investigasi ke Mikrotik kita. Konsep artikel ini di ambil dari : http://wiki.mikrotik.com/wiki/Drop_port_scanners , karena banyak rekan-rekan yang kurang memahaminya maka saya buatkan artikel ini agar lebih mudah dalam melakukan konfigurasi di Mikrotik kita masing-masing.

• Buka menu TERMINAL, bisa dari Console, dari Winbox, dari SSH maupun dari telnet. Pada  konfigurasi di Filrewall -> Filter Rule…
• Copykan Script dari link : http://wiki.mikrotik.com/wiki/Drop_port_scanners , ataupun anda dapat COPAS Script dibawah ini :

ip firewall filter add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list address-list=”port scanners” address-list-timeout=2w comment=”Port scanners to list ” disabled=no

ip firewall filter add chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg action=add-src-to-address-list address-list=”port scanners” address-list-timeout=2w comment=”NMAP FIN Stealth scan”

ip firewall filter add chain=input protocol=tcp tcp-flags=fin,syn action=add-src-to-address-list address-list=”port scanners” address-list-timeout=2w comment=”SYN/FIN scan”

ip firewall filter add chain=input protocol=tcp tcp-flags=syn,rst action=add-src-to-address-list address-list=”port scanners” address-list-timeout=2w comment=”SYN/RST scan”

ip firewall filter add chain=input protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack action=add-src-to-address-list address-list=”port scanners” address-list-timeout=2w comment=”FIN/PSH/URG scan”

ip firewall filter add chain=input protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg action=add-src-to-address-list address-list=”port scanners” address-list-timeout=2w comment=”ALL/ALL scan”

ip firewall filter add chain=input protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg action=add-src-to-address-list address-list=”port scanners” address-list-timeout=2w comment=”NMAP NULL scan”

ip firewall filter add chain=input src-address-list=”port scanners” action=drop comment=”dropping port scanners” disabled=no

• Paste Script di atas ke New Terminal / Console Mikrotik kita
• Selanjutnya perhatikan hasil Paste Script tadi di Menu IP -> Firewall -> FilterRule. Sudah ada “penampakan” iyach khan ??? Berarti tugas kita sudah selesai, tinggal memantau adanya indikasi serangan dari luar ( lihat LOG Merah ). Selain itu, kita masih bisa mengembangkan Firewall Filter Rule ini untuk konfigurasi yang lain sesuai kebutuhan dan Policy / kebijakan di jaringan kita.

Read more »

Bagi Bandwidth Adil Sama Rata scr Otomatis

Membagi Bandwidth Otomatis di Mikrotik Router ini lebih menyenangkan di timbangkan Membagi bandwidth Mikrotik Rouuter Secara manual.

Systemnya di sini adalah misalkan anda mempunyai bandwidth 512Kbps sebanyak 10 komputer,jika yang main Cuma satu computer maka bandwidth yang di dapat adalah 512Kbps,jika yang main dua computer maka bandwidth yang di dapat 256Kbps Per komputer,jika yang main empat computer maka bandwidth yang di dapat 128Kbps Per computer,begitu seterusnya,pembagian tersebut Secara Otomatis di lakukan mikrotik Router,begini tutorialnya:

/ip firewall mangle add chain=forward src-address=192.168.0.0/24 action=mark-connection new-connection-mark=users-con http://vertical-network.blogspot.com
/ip firewall mangle add connection-mark=users-con action=mark-packet new-packet-mark=users chain=forward
/queue type add name=pcq-download kind=pcq pcq-classifier=dst-address
/queue type add name=pcq-upload kind=pcq pcq-classifier=src-address
/queue tree add parent=lokal queue=pcq-download packet-mark=users
/queue tree add parent=publik queue=pcq-upload packet-mark=users

--Kemudian Di Edit dengan keterangan:
1.Tulisan yang berwarna merah anda ganti dengan ip jaringan local anda misalkan ip address local di mikrotik anda yaitu 192.168.0.1 maka anda ganti 192.168.0.0/27

2.Tulisan yang berwarna Biru anda ganti dengan nama interface Ethernet mikrotik anda yang mengarah ke client,anda bisa lihat nama interface mikrotik anda yang mengarah ke client dengan mengetik perintah di new terminal winbox interface print

3.Tulisan yang berwarna Hijau anda ganti dengan nama interface Ethernet mikrotik anda yang mengarah ke modem,anda bisa lihat nama interface mikrotik anda yang mengarah ke modem dengan perintah di new terminal winbox interface print

Read more »

Auto-Update DynDNS IP

Smaleman ngutakngatik script buat autoupdate ip yg ada di dyndns klo IP kita ber-ubah2 (dynamic), akhirnya jalan jg. Tadinya kan gw pake built-in yg ada di modem tp-link, sedangkan klo mao dial PPPoE di mikrotik uda ga ada gunanya lg tu settingan dyndns di modem (CMIIW)...lgsg aja gw share disini deh biar ga ilang (referensi ada di paling bawah).


di /system/scripts isi ini:

name :

Code:

 

dynDNS

policy :

Code:

 

centang smua (sebenernya si ga perlu smua, tp tes2 aja lg

source:

Code:

:local ddnsuser "<ddns-username>"
:local ddnspass "<ddns-password>"
:local theinterface "<pppoe-interface>"
:local ddnshost "<host.di.ddns.org>"

:local ipddns [:resolve $ddnshost];
:local ipfresh [ /ip address get [/ip address find interface=$theinterface ] address ]

:if ([ :typeof $ipfresh ] = nil ) do={
   :log info ("DynDNS: No ip address on $theinterface .")
} else={
   :for i from=( [:len $ipfresh] - 1) to=0 do={ 
      :if ( [:pick $ipfresh $i] = "/") do={ 
    :set ipfresh [:pick $ipfresh 0 $i];
      } 
}
    
:if ($ipddns != $ipfresh) do={
    :log info ("DynDNS: IP-DynDNS = $ipddns")
    :log info ("DynDNS: IP-Fresh = $ipfresh")
   :log info "DynDNS: Update IP needed, Sending UPDATE...!"
    :local str "/nic/update?hostname=$ddnshost&myip=$ipfresh&wildcard=NOCHG&mx=NOCHG&backmx=NOCHG"
    /tool fetch address=members.dyndns.org src-path=$str mode=http user=$ddnsuser password=$ddnspass dst-path=("/DynDNS.".$ddnshost)
    :delay 1
    :local str [/file find name="DynDNS.$ddnshost"];
    /file remove $str
    :global ipddns $ipfresh
  :log info "DynDNS: IP updated to $ipfresh!"
    } else={
     :log info "DynDNS: No need to update";
    }
}

 







di terminal paste ini:

Code:

/system scheduler add name=dynDNS interval=00:01 on-event="/system script run dynDNS\r\n"

klo ada yg salah mohon dikoreksi, maklum masi belajar2 mikrotik jg
NB: gw pake mikrotik 4.5 klo ada yg error mungkin beda versi aja kli ya.

Read more »

Auto Reboot & Clear Counter Mikrotik

Script kedua gue sejak bisa pake Mikrotik

1. Auto Reboot Mikrotik

/system script pr
name="scrrestart" owner="admin"
policy=ftp,reboot,read,write,policy,test,winbox,pa ssword run-count=0
source=/system reboot


2. Auto Reset Counter firewall and mangle

/system script pr
name="resetcntr" owner="admin"
policy=ftp,reboot,read,write,policy,test,winbox,pa ssword run-count=0
source=
/ip firewall filter reset-counters-all
/ip fire mangle reset-counters-all

nah ini schedulernya:

# NAME ON-EVENT START-DATE START-TIME INTERVAL RUN-COUNT
0 schrestart scrrestart apr/16/2007 05:00:00 1d 0
1 schrstctr resetcntr dec/13/2006 04:59:55 1d 0

punya gue kubuat tiap hari reset sama reboot tiap pagi

Read more »

Agan2 yg cakep mohon bantuannya donk, Hotspot aku klo aku cek di mikrotiknya IP-ARP kok ada 1 MAC memakai IP mohon bantuannya untuk mengatasinya?

THANKS SEBELUMNYA

penampakannya :

Read more »