Cara Konfigurasi Jaringan internet GGC telkom dan ip google

/ip firewall address-list
add list="private-lokal" address=0.0.0.0/8
add list="private-lokal" address=10.0.0.0/8
add list="private-lokal" address=100.64.0.0/10
add list="private-lokal" address=127.0.0.0/8
add list="private-lokal" address=169.254.0.0/16
add list="private-lokal" address=172.16.0.0/12
add list="private-lokal" address=192.0.0.0/24
add list="private-lokal" address=192.0.2.0/24
add list="private-lokal" address=192.168.0.0/16
add list="private-lokal" address=198.18.0.0/15
add list="private-lokal" address=198.51.100.0/24
add list="private-lokal" address=203.0.113.0/24
add list="private-lokal" address=224.0.0.0/3

#ip ggc telkom dan ip google
/ip firewall address-list
add address=118.98.0.0/17 list=ggc-telkom
add address=118.97.0.0/16 list=ggc-telkom
add address=216.239.32.0/19 list=ggc-telkom
add address=216.58.192.0/19 list=ggc-telkom
add address=172.217.0.0/16 list=ggc-telkom
add address=74.125.0.0/16 list=ggc-telkom

/ip firewall address-list
add list=sosmed address=31.13.24.0/21 comment="Facebook Ireland"
add list=sosmed address=31.13.64.0/18 comment="Facebook Ireland"
add list=sosmed address=31.13.64.0/19 comment="Facebook Ireland"
add list=sosmed address=31.13.64.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.65.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.66.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.67.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.68.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.69.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.70.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.71.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.72.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.73.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.74.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.75.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.76.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.78.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.80.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.81.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.82.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.83.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.84.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.85.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.86.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.87.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.90.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.91.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.92.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.94.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.95.0/24 comment="Facebook Ireland"
add list=sosmed address=31.13.96.0/19 comment="Facebook Ireland"
add list=sosmed address=45.64.40.0/22 comment="Facebook Singapore Pte Ltd. Singapore"
add list=sosmed address=66.220.144.0/20 comment="Facebook, Inc. United States"
add list=sosmed address=66.220.144.0/21 comment="Facebook, Inc. United States"
add list=sosmed address=66.220.152.0/21 comment="Facebook, Inc. United States"
add list=sosmed address=69.63.176.0/20 comment="Facebook, Inc. United States"
add list=sosmed address=69.63.176.0/21 comment="Facebook, Inc. United States"
add list=sosmed address=69.63.184.0/21 comment="Facebook, Inc. United States"
add list=sosmed address=69.171.224.0/19 comment="Facebook, Inc. United States"
add list=sosmed address=69.171.224.0/20 comment="Facebook, Inc. United States"
add list=sosmed address=69.171.239.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=69.171.240.0/20 comment="Facebook, Inc. United States"
add list=sosmed address=69.171.255.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=74.119.76.0/22 comment="Facebook, Inc. United States"
add list=sosmed address=103.4.96.0/22 comment=" Temasek Avenue Singapore"
add list=sosmed address=157.240.0.0/17 comment="Facebook, Inc. United States"
add list=sosmed address=157.240.1.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=157.240.2.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=157.240.3.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=157.240.6.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=157.240.7.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=157.240.8.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=157.240.9.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=157.240.10.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=157.240.11.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=157.240.12.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=157.240.13.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=157.240.14.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=157.240.15.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=157.240.16.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=157.240.18.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=157.240.20.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=157.240.21.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=157.240.22.0/24 comment="Facebook, Inc. United States"
add list=sosmed address=173.252.64.0/19 comment="Facebook, Inc. United States"
add list=sosmed address=173.252.88.0/21 comment="Facebook, Inc. United States"
add list=sosmed address=173.252.96.0/19 comment="Facebook, Inc. United States"
add list=sosmed address=179.60.192.0/22 comment="Edge Network Services Ltd United States"
add list=sosmed address=179.60.192.0/24 comment="Edge Network Services Ltd United States"
add list=sosmed address=179.60.193.0/24 comment="Edge Network Services Ltd United States"
add list=sosmed address=179.60.195.0/24 comment="Edge Network Services Ltd United States"
add list=sosmed address=185.60.216.0/22 comment="Facebook Ireland"
add list=sosmed address=185.60.216.0/24 comment="Facebook Ireland"
add list=sosmed address=185.60.218.0/24 comment="Facebook Ireland"
add list=sosmed address=185.60.219.0/24 comment="Facebook Ireland"
add list=sosmed address=204.15.20.0/22 comment="Facebook, Inc. United States"

/ip firewall address-list
add list=sosmed address=64.63.0.0/18 comment="MoPub, Inc. United States"
add list=sosmed address=69.195.160.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.162.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.163.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.164.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.165.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.166.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.168.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.169.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.171.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.172.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.173.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.175.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.176.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.177.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.178.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.179.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.180.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.181.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.182.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.184.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.185.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.186.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.187.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.188.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.189.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.190.0/24 comment="Twitter Inc. United States"
add list=sosmed address=69.195.191.0/24 comment="Twitter Inc. United States"
add list=sosmed address=103.252.112.0/23 comment="60 Robinson Road, #11-02 BEA Building, Singapore 068892. Singapore"
add list=sosmed address=103.252.114.0/23 comment="60 Robinson Road, #11-02 BEA Building, Singapore 068892. Singapore"
add list=sosmed address=104.244.40.0/24 comment="Twitter Inc. United States"
add list=sosmed address=104.244.41.0/24 comment="Twitter Inc. United States"
add list=sosmed address=104.244.42.0/24 comment="Twitter Inc. United States"
add list=sosmed address=104.244.43.0/24 comment="Twitter Inc. United States"
add list=sosmed address=104.244.44.0/24 comment="Twitter Inc. United States"
add list=sosmed address=104.244.45.0/24 comment="Twitter Inc. United States"
add list=sosmed address=104.244.46.0/24 comment="Twitter Inc. United States"
add list=sosmed address=104.244.47.0/24 comment="Twitter Inc. United States"
add list=sosmed address=185.45.5.0/24 comment="Twitter International Company Ireland"
add list=sosmed address=185.45.6.0/23 comment="Twitter International Company Ireland"
add list=sosmed address=188.64.224.0/24 comment="Heron SAS France"
add list=sosmed address=188.64.225.0/24 comment="Heron SAS France"
add list=sosmed address=188.64.226.0/23 comment="Heron SAS France"
add list=sosmed address=188.64.226.0/24 comment="Heron SAS France"
add list=sosmed address=188.64.227.0/24 comment="Heron SAS France"
add list=sosmed address=188.64.228.0/24 comment="Heron SAS France"
add list=sosmed address=188.64.229.0/24 comment="Heron SAS France"
add list=sosmed address=192.44.69.0/24 comment="Crashlytics, Inc United States"
add list=sosmed address=192.133.76.0/22 comment="Twitter Inc. United States"
add list=sosmed address=192.133.76.0/23 comment="Twitter Inc. United States"
add list=sosmed address=199.16.156.0/22 comment="Twitter Inc. United States"
add list=sosmed address=199.16.156.0/23 comment="Twitter Inc. United States"
add list=sosmed address=199.59.148.0/22 comment="Twitter Inc. United States"
add list=sosmed address=199.96.56.0/23 comment="Twitter Inc. United States"
add list=sosmed address=199.96.56.0/24 comment="Twitter Inc. United States"
add list=sosmed address=199.96.57.0/24 comment="Twitter Inc. United States"
add list=sosmed address=199.96.58.0/23 comment="Twitter Inc. United States"
add list=sosmed address=199.96.60.0/23 comment="Twitter Inc. United States"
add list=sosmed address=199.96.60.0/24 comment="Twitter Inc. United States"
add list=sosmed address=199.96.61.0/24 comment="Twitter Inc. United States"
add list=sosmed address=199.96.62.0/23 comment="Twitter Inc. United States"
add list=sosmed address=202.160.128.0/24 comment="Twitter Asia Pacific Pte. Ltd. Singapore"
add list=sosmed address=202.160.129.0/24 comment="Twitter Asia Pacific Pte. Ltd. Singapore"
add list=sosmed address=202.160.130.0/24 comment="Twitter Asia Pacific Pte. Ltd. Singapore"
add list=sosmed address=202.160.131.0/24 comment="Twitter Asia Pacific Pte. Ltd. Singapore"
add list=sosmed address=209.237.192.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.193.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.194.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.195.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.196.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.197.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.198.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.199.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.200.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.201.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.204.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.205.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.206.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.207.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.208.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.209.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.210.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.211.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.212.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.213.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.214.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.215.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.216.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.217.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.218.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.219.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.220.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.221.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.222.0/24 comment="Twitter Inc. United States"
add list=sosmed address=209.237.223.0/24 comment="Twitter Inc. United States"

/ip firewall address-list
add list=sosmed address=whatsapp.com comment="whatsapp"
add list=sosmed address=whatsapp.net comment="whatsapp"
add list=sosmed address=instagram.com comment="instagram"

/ip firewall layer7-protocol
add name=torrent1 regexp="^.+(Torrent|torrent)"
add name=torrent2 regexp="^(bittorrent protocol|azver1\$|get /scrape\\\\\?info_hash=)|d1:ad2:id20:|87P\\)[RP]"
add name=torrent3 regexp="^(\\x13bittorrent protocol|azver\\x01\$|get /scrape\\\?info_hash=get /announce\\\?info_hash=|get /client/bitcomet/|GET /data\\\?fid=)|d1:ad2:id20:|\\x08'7P\\)[RP]"
add name=torrent4 regexp="^.*(get|GET).+(torrent|thepiratebay|isohunt|entertane|demonoid|btjunkie|mininova|flixflux|torrentz|vertor|h33t|btscene|bitunity|bittoxic|thunderbytes|entertane|zoozle|vcdq|bitnova|bitsoup|meganova|fulldls|btbot|flixflux|seedpeer|fenopy|gpirate|commonbits).*\$"


/ip firewall mangle
add action=accept chain=input dst-address-list=private-lokal src-address-list=private-lokal
add action=accept chain=prerouting dst-address-list=private-lokal src-address-list=private-lokal
add action=accept chain=forward dst-address-list=private-lokal src-address-list=private-lokal
add action=accept chain=postrouting dst-address-list=private-lokal src-address-list=private-lokal
add action=accept chain=output dst-address-list=private-lokal src-address-list=private-lokal
add action=mark-connection chain=prerouting comment=icmp-dns dst-address-list=!private-lokal new-connection-mark=icmp-dns passthrough=yes protocol=icmp \
    src-address-list=private-lokal
add action=mark-connection chain=prerouting comment=icmp-dns dst-address-list=!private-lokal dst-port=53,5353,123 new-connection-mark=icmp-dns passthrough=\
    yes protocol=tcp src-address-list=private-lokal
add action=mark-connection chain=prerouting comment=icmp-dns dst-address-list=!private-lokal dst-port=53,5353,123 new-connection-mark=icmp-dns passthrough=\
    yes protocol=udp src-address-list=private-lokal
add action=accept chain=prerouting comment=icmp-dns connection-mark=icmp-dns
add action=mark-packet chain=forward comment=icmp-dns connection-mark=icmp-dns new-packet-mark=icmp-dns passthrough=no
add action=mark-connection chain=prerouting comment=ggc-telkom connection-mark=no-mark dst-address-list=ggc-telkom new-connection-mark=ggc-telkom \
    passthrough=yes src-address-list=private-lokal
add action=mark-packet chain=forward comment=ggc-telkom connection-mark=ggc-telkom new-packet-mark=ggc-telkom passthrough=no
add action=mark-connection chain=prerouting comment=sosmed connection-mark=no-mark dst-address-list=sosmed new-connection-mark=sosmed passthrough=yes \
    src-address-list=private-lokal
add action=mark-packet chain=forward comment=sosmed connection-mark=sosmed new-packet-mark=sosmed passthrough=no
add action=mark-connection chain=prerouting comment=trafik connection-mark=no-mark dst-address-list=!private-lokal dst-port=\
    5000,5500-7100,9000,9091,3000-3200 new-connection-mark=trafik passthrough=yes protocol=tcp src-address-list=private-lokal
add action=mark-connection chain=prerouting comment=trafik connection-mark=no-mark dst-address-list=!private-lokal dst-port=\
    5000,5500-7100,9000,9091,3000-3200 new-connection-mark=trafik passthrough=yes protocol=udp src-address-list=private-lokal
add action=mark-connection chain=prerouting comment=trafik connection-mark=no-mark dst-address-list=!private-lokal dst-port=\
    0-2000,5050,8777,8000-8099,5353,5938,8291,12671-12675,16800 new-connection-mark=trafik passthrough=yes protocol=tcp src-address-list=private-lokal
add action=mark-connection chain=prerouting comment=trafik connection-mark=no-mark dst-address-list=!private-lokal dst-port=\
    0-2000,5050,8777,8000-8099,5353,5938,8291,12671-12675,16800 new-connection-mark=trafik passthrough=yes protocol=udp src-address-list=private-lokal
add action=mark-connection chain=prerouting comment=trafik connection-mark=no-mark dst-address-list=!private-lokal layer7-protocol=torrent1 \
    new-connection-mark=trafik passthrough=yes src-address-list=private-lokal
add action=mark-connection chain=prerouting comment=trafik connection-mark=no-mark dst-address-list=!private-lokal layer7-protocol=torrent2 \
    new-connection-mark=trafik passthrough=yes src-address-list=private-lokal
add action=mark-connection chain=prerouting comment=trafik connection-mark=no-mark dst-address-list=!private-lokal layer7-protocol=torrent3 \
    new-connection-mark=trafik passthrough=yes src-address-list=private-lokal
add action=mark-connection chain=prerouting comment=trafik connection-mark=no-mark dst-address-list=!private-lokal layer7-protocol=torrent4 \
    new-connection-mark=trafik passthrough=yes src-address-list=private-lokal
add action=mark-connection chain=prerouting comment=high-priority connection-mark=no-mark dst-address-list=!private-lokal new-connection-mark=high-priority \
    passthrough=yes src-address-list=private-lokal
add action=accept chain=prerouting comment=high-priority connection-mark=high-priority
add action=mark-packet chain=forward comment=high-priority connection-mark=high-priority new-packet-mark=high-priority passthrough=no
add action=mark-packet chain=forward comment=browsing connection-mark=trafik connection-rate=0-1M new-packet-mark=browsing passthrough=no
add action=mark-packet chain=forward comment=midle-trafik connection-mark=trafik connection-rate=1000001-3M new-packet-mark=midle-trafik passthrough=no
add action=mark-packet chain=forward comment=high-trafik connection-mark=trafik connection-rate=3000001-1G new-packet-mark=high-trafik passthrough=no



/queue tree
add max-limit=1G name=INCOMING parent=global queue=default
add limit-at=64k max-limit=1G name=I.01.ICMP-DNS packet-mark=icmp-dns parent=INCOMING priority=1 queue=default
add limit-at=5M max-limit=1G name=I.02.HIGH-PRIORITY packet-mark=high-priority parent=INCOMING priority=3 queue=default
add limit-at=90M max-limit=100M name=I.03.NORMAL parent=INCOMING queue=default
add limit-at=10M max-limit=100M name=I.03.1.SOSMED packet-mark=sosmed parent=I.03.NORMAL priority=5 queue=pcq-download-default
add limit-at=10M max-limit=100M name=I.03.2.BROWSING packet-mark=browsing parent=I.03.NORMAL priority=5 queue=pcq-download-default
add limit-at=10M max-limit=100M name=I.03.3.MIDLE-TRAFIK packet-mark=midle-trafik parent=I.03.NORMAL priority=7 queue=pcq-download-default
add limit-at=10M max-limit=100M name=I.03.4.HIGH-TRAFIK packet-mark=high-trafik parent=I.03.NORMAL queue=pcq-download-default
add limit-at=10M max-limit=100M name=I.04.YOUTUBE-GOOGLE packet-mark=ggc-telkom parent=INCOMING queue=pcq-download-default
add max-limit=1G name=OUTGOING parent=ether1 queue=default
add limit-at=64k max-limit=1G name=O.01.ICMP-DNS packet-mark=icmp-dns parent=OUTGOING priority=1 queue=default
add limit-at=3M max-limit=1G name=O.02.HIGH-PRIORITY packet-mark=high-priority parent=OUTGOING priority=3 queue=default
add limit-at=10M max-limit=15M name=O.03.NORMAL parent=OUTGOING queue=default
add limit-at=1M max-limit=15M name=O.03.1.SOSMED packet-mark=sosmed parent=O.03.NORMAL priority=5 queue=pcq-upload-default
add limit-at=1M max-limit=15M name=O.03.2.BROWSING packet-mark=browsing parent=O.03.NORMAL priority=5 queue=pcq-upload-default
add limit-at=1M max-limit=15M name=O.03.3.MIDLE-TRAFIK packet-mark=midle-trafik parent=O.03.NORMAL priority=7 queue=pcq-upload-default
add limit-at=1M max-limit=15M name=O.03.4.HIGH-TRAFIK packet-mark=high-trafik parent=O.03.NORMAL queue=pcq-upload-default
add limit-at=1M max-limit=15M name=O.04.YOUTUBE-GOOGLE packet-mark=ggc-telkom parent=OUTGOING queue=pcq-upload-default

Share This