Log Analisis Squid di Windows

sekarang akan dibahas mengenai log analisis dengan menggunakan Squid Efficiency Analyzer 1.1.0. Download disini.
Pada configurasi squid yang saya tuliskan di Proxy Squid di Windows ada sedikit perubahan. Apabila Anda sudah menghinstall squid di Windows yang pertama harus dilakukan adalah:
1. Stop/Disable lebih dahulu squid, Klik Start –> Run ketik services.msc
2. Jalankan program Squideff.exe klik Select file and analyze cari file log yaitu access.log
squid-analyzer
NOTE:
Di saat melakukan analyze ini squid harus di Disable/Stop terlebih dahulu
Untuk penjelasan Kodenya:
TCP_HIT
A valid copy of the requested object was in the cache.
TCP_MEM_HIT
A valid copy of the requested object was in the cache, AND it was in
memory so it did not have to be read from disk.
TCP_NEGATIVE_HIT
The request was for a negatively-cached object. Negative-caching refers
to caching certain types of errors, such as “404 Not Found.” The amount
of time these errors are cached is controlled with the negative_ttl
configuration parameter.
TCP_MISS
The requested object was not in the cache.
TCP_REFRESH_HIT
The object was in the cache, but STALE. An If-Modified-Since request was
made and a “304 Not Modified” reply was received.
TCP_REF_FAIL_HIT
The object was in the cache, but STALE. The request to validate the object
failed, so the old (stale) object was returned.
TCP_REFRESH_MISS
The object was in the cache, but STALE. An If-Modified-Since request was
made and the reply contained new content.
TCP_CLIENT_REFRESH
The client issued a request with the “no-cache” pragma.
TCP_IMS_HIT
The client issued an If-Modified-Since request and the object was in the
cache and still fresh.
TCP_IMS_MISS
The client issued an If-Modified-Since request for a stale object.
TCP_SWAPFAIL
The object was believed to be in the cache, but could not be accessed.
TCP_DENIED
Access was denied for this request
UDP_HIT
A valid copy of the requested object was in the cache.
UDP_HIT_OBJ
Same as UDP_HIT, but the object data was small enough to be sent in the UDP
reply packet. Saves the following TCP request.
UDP_MISS
The requested object was not in the cache.
UDP_DENIED
Access was denied for this request.
UDP_INVALID
An invalid request was received.
UDP_RELOADING
The ICP request was “refused” because the cache is busy reloading its metadata.

Proxy Squid di Windows

Untuk memulai Instalasinya silahkan download dulu source squid khusus untuk window squid-2.7.STABLE5-bin.zip
Extrak file ke c:/squid
masuk di dalam direktori c:/squid/etc
disitu terdapat 3 file yaitu: cachemgr.conf.default, squid.conf.default dan mime.conf.default
ketiga file itu harus di rename menjadi cachemgr.conf, squid.conf, dan mime.conf
kemudian edit squid.conf atau copas dari code dibawah ini atau bisa langsung didownload squid.conf

#file squid.conf
http_port 3128
icp_port 0
visible_hostname paidjo.web.id
acl QUERY urlpath_regex cgi-bin ?
no_cache deny QUERY
cache_mem 8 MB
cache_swap_low 98
cache_swap_high 96
maximum_object_size 128 KB ## Old = 128 MB
minimum_object_size 0 KB
maximum_object_size_in_memory 32 KB
ipcache_size 1024
ipcache_low 98
ipcache_high 99
cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF
cache_dir aufs c:/squid/var/cache 4500 16 256
redirect_rewrites_host_header off
acl localnet src 0.0.0.0/24
acl localhost src 127.0.0.1/255.255.255.255
acl Safe_ports port 80 443 210 119 70 21 1025-65535
acl CONNECT method CONNECT
cache_mgr me@localhost
cache_access_log c:/squid/var/logs/access.log
cache_store_log none
cache_log c:/squid/var/logs/cache.log
emulate_httpd_log off
log_icp_queries off
log_fqdn off
memory_pools off
refresh_pattern ^ftp: 40320 95% 241920 reload-into-ims
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 120 50% 14400
quick_abort_min 0
quick_abort_max 0
quick_abort_pct 98
negative_ttl 1 minutes
positive_dns_ttl 60 seconds
negative_dns_ttl 30 seconds
cachemgr_passwd rahasia
acl manager proto cache_object
http_access allow manager
acl all src 0.0.0.0/0.0.0.0
http_access allow localnet
http_access allow localhost
http_access allow all
logfile_rotate 4
forwarded_for on
dns_testnames google.com detik.com
store_objects_per_bucket 10
reload_into_ims on
reload_into_ims on
pipeline_prefetch on
ie_refresh on
vary_ignore_expire on
#eof
Selanjutnya buka command prompt, masuk dalam directory c:/squid/sbin
didalam directory c:/squid/sbin ketik
squid -z
C:/squid/sbin>squid -z
2008/12/16 19:51:53| Creating Swap Directories
Bila masih ada kesalahan silahkan untuk mengedit squid.conf dan bila sudah sukses silahkan lanjutkan dengan mengetik
C:/squid/sbin>squid -i
Selanjutnya dari Run.. atau Start –> Run ketik “services.msc” (tanpa tanda kutip)
Silahkan cari squid dan kemudia start
Langkah selanjutnya atau mungkin yang terakhir :D
Masuk ke Control Panel –> Windows Firewall –> Exceptions
Klik Add Port isikan name: squid
Port number : (isikan port yang di buka pada squid conf pada fole configurasi saya port 3128 )
dan pilih TCP yang di aktifkan kemudian Ok
Pastikan squid pada exceptions di beri tanda cek/centang
Kalau sudah jalan silahkan browser anda di setting proxy servernya 127.0.0.1 port 3128
Selamat Mencoba.. sukses ya
penulis menggunakan Mozilla Firefox 3 dan OK tuh…
Untuk melakukan block suatu situs bisa menambahkan ACL seperti berikut
acl blocklist url_regex sex
http_access deny blocklist
dengan tambahan acl diatas maka setiap alamat url dengan kata sex akan di block
belajar squid windows, buat web proxy di windows, cara pemakaian squid di windows, memindahkan folder squid ke drive lain, cara memindah cache squid di drive d, squid windows drive c deep freeze, check proxy squid di windows, cachemgr conf ganti localhost, squid conf patch game, squid 2 7 stable8 windows download, Tags: , , , , ,

Cara Setting Mikrotik Supaya Seimbang Antara Browsing,Pointblank dan Poker

--Penyebab dari lag nya Pointblank,poker,browsing di antaranya yaitu tidak seimbangnya
Pembagian bandwidth di Mikrotik
--Supaya Ping dari Pointblank tidak drop maka harus anda sisakan bandwidth agar Ping tetap stabil
--Contoh saya punya bandwidth 2MB Upload dan 2MB Download berarti saya hanya gunakan 1,7MB untuk Browsing dan 300KB untuk Ping Pointblank dan Ping Poker
--Saya gunakan di sini queue tree yaitu limit bandwidth otomatis
--Dengan Queue Tree di Mikrotik bila anda sendiri yang menggunakan koneksi maka bandwidth full 1,7MB untuk anda,bila dua orang yang menggunakan koneksi Mikrotik akan otomatis membagi dua bandwidth bila tiga orang yang menggunakan koneksi maka Mikrotik otomatis membagi tiga bandwidth dan begitu seterusnya..

--Ok mari kita mulai:

--Jalankan Winbox dan Buka “New Terminal” Copykan perintah di bawah ini kemudian pastekan di “New Terminal”:

A.POINTBLANK

ip firewall mangle add chain=game action=mark-connection new-connection-mark=Game passthrough=yes protocol=tcp dst-address=203.89.146.0/23 dst-port=39190 comment=”Point Blank”

ip firewall mangle add chain=game action=mark-connection new-connection-mark=Game passthrough=yes protocol=udp dst-address=203.89.146.0/23 dst-port=40000-40010

ip firewall mangle add chain=game action=mark-packet new-packet-mark=Game_pkt passthrough=no connection-mark=Game

ip firewall mangle add chain=prerouting action=jump jump-target=game

queue type add name=”Game” kind=pcq pcq-rate=0 pcq-limit=50 pcq-classifier=src-address,dst-address,src-port,dst-port pcq-total-limit=2000

queue tree add name=”Game” parent=global-total packet-mark=Game_pkt limit-at=0 queue=Game priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s

B.POKER

ip firewall mangle add chain=prerouting protocol=tcp dst-port=9339 connection-state=new action=mark-connection new-connection-mark=poker passthrough=yes comment="poker" disabled=no


ip firewall mangle add chain=prerouting connection-mark=poker action=mark-packet new-packet-mark=poker1 passthrough=no comment="" disabled=no

queue tree add name="poker mania" parent=global-out packet-mark=poker1 limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s disabled=no


C.BROWSING

ip firewall mangle add chain=forward action=mark-connection new-connection-mark=http passthrough=yes protocol=tcp in-interface=public out-interface=local packet-mark=!Game_pkt connection-mark=!Game connection-bytes=0-262146 comment=”BROWSE”
ip firewall mangle add chain=forward action=mark-packet new-packet-mark=http_pkt passthrough=no protocol=tcp connection-mark=http
queue type add name=”Http” kind=pcq pcq-rate=1700k pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=2000
queue tree add name=”Main_Browse” parent=local limit-at=0 priority=8 max-limit=512k burst-limit=0 burst-threshold=0 burst-time=0s
queue tree add name=”Browse” parent=Main_Browse packet-mark=http_pkt limit-at=0 queue=Http priority=8 max-limit=1700k burst-limit=0 burst-threshold=0 burst-time=0s

--Untuk melihat perintah yang sudah berjalan anda bisa Klik di menu winbox “Ip” kemudian “Firewall” kemudian “Mangle”…seperti gambar di bawah ini:
Gambar kurang jelas…klik gambar untuk memperjelas!!!

--Kemudian klik “Queue” kemudian “Queue Tree” Double klik “Main Browse” kemudian anda ubah “Max Limit” 75 persen dari jumlah bandwidth anda…misalkan bandwidth anda 512Kb maka anda isikan “Max Limit” 350Kb begitu juga dengan "Browse"…seperti gambar di bawah ini:
Gambar kurang jelas…klik gambar untuk memperjelas!!!

--Selesai….selamat mencoba-- sumber : http://wirelessrouterproxy.blogspot.com

Cara Membatasi Bandwidth Download Client dengan Firewall layer7 Protocols Di Mikrotik Router


--Cara yang paling ampuh untuk.. membatasi Download atau limit Video di Router mikrotik adalah dengan Firewall Layer7 Protocols,yang paling hebatnya Dengan Firewall Layer7 protocols ini browsing tidak terlimit atau tidak terganggu,Soalnya saya hanya limit bandwidth berdasarkan Extension saja,Misalnya download exe,flv,zip,rar,mp3,mp4,3gp dan lain lain.
--Bagi anda yang mempunyai warnet tentu tutorial ini sangat berguna,saya limit dengan 32Kb,berarti dengan kecepatan download sekitar 8 kb perdetik termasuk Video streaming...
--Ok,sekarang kita mulai

--Buka winbox kemudian klik "ip" kemudian klik "firewall" kemudian klik tanda "plus" warna merah kemudian klik "layer7 protocols"
--isikan Name=http-video dan RegeXp=http/(0\.9|1\.0|1\.1)[\x09-\x0d ][1-5][0-9][0-9][\x09-\x0d -~]*(content-type: video)
--lihat gambar di bawah ini:


--Buka "New terminal" di winbox
--Copykan kode di bawah ini dan patekan di "New Terminal" winbox

ip firewall layer7-protocol add comment="" name="Extension \" .exe \"" regexp="\\.(exe)"
ip firewall layer7-protocol add comment="" name="Extension \" .rar \"" regexp="\\.(rar)"
ip firewall layer7-protocol add comment="" name="Extension \" .zip \"" regexp="\\.(zip)"
ip firewall layer7-protocol add comment="" name="Extension \" .7z \"" regexp="\\.(7z)"
ip firewall layer7-protocol add comment="" name="Extension \" .cab \"" regexp="\\.(cab)"
ip firewall layer7-protocol add comment="" name="Extension \" .asf \"" regexp="\\.(asf)"
ip firewall layer7-protocol add comment="" name="Extension \" .mov \"" regexp="\\.(mov)"
ip firewall layer7-protocol add comment="" name="Extension \" .wmv \"" regexp="\\.(wmv)"
ip firewall layer7-protocol add comment="" name="Extension \" .mpg \"" regexp="\\.(mpg)"
ip firewall layer7-protocol add comment="" name="Extension \" .mpeg \"" regexp="\\.(mpeg)"
ip firewall layer7-protocol add comment="" name="Extension \" .mkv \"" regexp="\\.(mkv)"
ip firewall layer7-protocol add comment="" name="Extension \" .avi \"" regexp="\\.(avi)"
ip firewall layer7-protocol add comment="" name="Extension \" .flv \"" regexp="\\.(flv)"
ip firewall layer7-protocol add comment="" name="Extension \" .wav \"" regexp="\\.(wav)"
ip firewall layer7-protocol add comment="" name="Extension \" .rm \"" regexp="\\.(rm)"
ip firewall layer7-protocol add comment="" name="Extension \" .mp3 \"" regexp="\\.(mp3)"
ip firewall layer7-protocol add comment="" name="Extension \" .mp4 \"" regexp="\\.(mp4)"
ip firewall layer7-protocol add comment="" name="Extension \" .ram \"" regexp="\\.(ram)"
ip firewall layer7-protocol add comment="" name="Extension \" .rmvb \"" regexp="\\.(rmvb)"
ip firewall layer7-protocol add comment="" name="Extension \" .dat \"" regexp="\\.(dat)"
ip firewall layer7-protocol add comment="" name="Extension \" .daa \"" regexp="\\.(daa)"
ip firewall layer7-protocol add comment="" name="Extension \" .iso \"" regexp="\\.(iso)"
ip firewall layer7-protocol add comment="" name="Extension \" .nrg \"" regexp="\\.(nrg)"
ip firewall layer7-protocol add comment="" name="Extension \" .bin \"" regexp="\\.(bin)"
ip firewall layer7-protocol add comment="" name="Extension \" .vcd \"" regexp="\\.(vcd)"

--tambah mangle,copykan kode bawah ini dan patekan di "New Terminal" winbox

/ip firewall mangle add action=mark-packet chain=prerouting comment="http-video mark-packet" disabled=no layer7-protocol=http-video new-packet-mark=http-video passthrough=no

/ip firewall mangle add action=mark-connection chain=prerouting comment="7z DOWNS" disabled=no layer7-protocol="Extension \" .7z \"" new-connection-mark="7z DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="7z DOWNS" disabled=no new-packet-mark=7z passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="asf DOWNS" disabled=no layer7-protocol="Extension \" .asf \"" new-connection-mark="asf DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="asf DOWNS" disabled=no new-packet-mark=asf passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="avi DOWNS" disabled=no layer7-protocol="Extension \" .avi \"" new-connection-mark="avi DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="avi DOWNS" disabled=no new-packet-mark=avi passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="bin DOWNS" disabled=no layer7-protocol="Extension \" .bin \"" new-connection-mark="bin DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="bin DOWNS" disabled=no new-packet-mark=bin passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="flv DOWNS" disabled=no layer7-protocol="Extension \" .flv \"" new-connection-mark="flv DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="flv DOWNS" disabled=no new-packet-mark=flv passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="iso DOWNS" disabled=no layer7-protocol="Extension \" .iso \"" new-connection-mark="iso DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark= "iso DOWNS" disabled=no new-packet-mark=iso passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="mkv DOWNS" disabled=no layer7-protocol="Extension \" .mkv \"" new-connection-mark="mkv DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="mkv DOWNS" disabled=no new-packet-mark=mkv passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="exe DOWNS" disabled=no layer7-protocol="Extension \" .exe \"" new-connection-mark="exe DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="exe DOWNS" disabled=no new-packet-mark=exe passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="mov DOWNS" disabled=no layer7-protocol="Extension \" .mov \"" new-connection-mark="mov DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="mov DOWNS" disabled=no new-packet-mark=mov passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="mp3 DOWNS" disabled=no layer7-protocol="Extension \" .mp3 \"" new-connection-mark="mp3 DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="mp3 DOWNS" disabled=no new-packet-mark=mp3 passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="mp4 DOWNS" disabled=no layer7-protocol="Extension \" .mp4 \"" new-connection-mark="mp4 DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="mp4 DOWNS" disabled=no new-packet-mark=mp4 passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="mpeg DOWNS" disabled=no layer7-protocol="Extension \" .mpeg \"" new-connection-mark="mpeg DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="mpeg DOWNS" disabled=no new-packet-mark=mpeg passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="mpg DOWNS" disabled=no layer7-protocol="Extension \" .mpg \"" new-connection-mark="mpg DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="mpg DOWNS" disabled=no new-packet-mark=mpg passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="nrg DOWNS" disabled=no layer7-protocol="Extension \" .nrg \"" new-connection-mark="nrg DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="nrg DOWNS" disabled=no new-packet-mark=nrg passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="ram DOWNS" disabled=no layer7-protocol="Extension \" .ram \"" new-connection-mark="ram DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="ram DOWNS" disabled=no new-packet-mark=ram passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="rar DOWNS" disabled=no layer7-protocol="Extension \" .rar \"" new-connection-mark="rar DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="rar DOWNS" disabled=no new-packet-mark=rar passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="rm DOWNS" disabled=no layer7-protocol="Extension \" .rm \"" new-connection-mark="rm DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="rm DOWNS" disabled=no new-packet-mark=rm passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="rmvb DOWNS" disabled=no layer7-protocol="Extension \" .rmvb \"" new-connection-mark="rmvb DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="rmvb DOWNS" disabled=no new-packet-mark=rmvb passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="wav DOWNS" disabled=no layer7-protocol="Extension \" .wav \"" new-connection-mark="wav DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="wav DOWNS" disabled=no new-packet-mark=wav passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="wma DOWNS" disabled=no layer7-protocol="Extension \" .wma \"" new-connection-mark="wma DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="wma DOWNS" disabled=no new-packet-mark=wma passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="wmv DOWNS" disabled=no layer7-protocol="Extension \" .wmv \"" new-connection-mark="wmv DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="wmv DOWNS" disabled=no new-packet-mark=wmv passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="zip DOWNS" disabled=no layer7-protocol="Extension \" .zip \"" new-connection-mark="zip DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="zip DOWNS" disabled=no new-packet-mark=zip passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="youtube DOWNS" disabled=no layer7-protocol="YouTube " new-connection-mark="youtube DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="youtube DOWNS" disabled=no new-packet-mark=youtube passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="daa DOWNS" disabled=no layer7-protocol="Extension \" .daa \"" new-connection-mark="daa DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="daa DOWNS" disabled=no new-packet-mark=daa passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="dat DOWNS" disabled=no layer7-protocol="Extension \" .dat \"" new-connection-mark="dat DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="dat DOWNS" disabled=no new-packet-mark=dat passthrough=no protocol=tcp


/ip firewall mangle add action=mark-connection chain=prerouting comment="vcd DOWNS" disabled=no layer7-protocol="Extension \" .vcd \"" new-connection-mark="vcd DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="vcd DOWNS" disabled=no new-packet-mark=vcd passthrough=no protocol=tcp

/ip firewall mangle add action=mark-connection chain=prerouting comment="cab DOWNS" disabled=no layer7-protocol="Extension \" .cab \"" new-connection-mark="cab DOWNS" passthrough=yes protocol=tcp
/ip firewall mangle add action=mark-packet chain=postrouting comment="" connection-mark="cab DOWNS" disabled=no new-packet-mark=cab passthrough=no protocol=tcp

--kemudian untuk limit nya ,saya di sini beri 32kB untuk limitnya berarti downloadnya hanya 8 KB perdetik,Copykan kode bawah ini dan patekan di "New Terminal" winbox

queue simple add name="youtube" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=http-video direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=100k/100k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="exe" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=exe direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="rar" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=rar direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="zip" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=zip direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="7z" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=7z direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="cab" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=cab direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="asf" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=asf direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="mov" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=mov direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="wmv" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=wmv direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="mpg" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=mpg direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="mpeg" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=mpeg direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="mkv" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=mkv direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="avi" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=avi direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="flv" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=flv direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="wav" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=wav direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="rm" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=rm direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="mp3" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=mp3 direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="mp4" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=mp4 direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="ram" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=ram direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="rmvb" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=rmvb direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="dat" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=dat direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="daa" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=daa direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="iso" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=iso direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="nrg" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=nrg direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="bin" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=bin direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small
queue simple add name="vcd" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=vcd direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=32k/32k burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default-small

--lihat gambar di bawah ini....youtube video terlimit

--Selamat mencoba-- sumber : http://wirelessrouterproxy.blogspot.com

Cara Instal Ulang Mikrotik Routerboard RB750 Tanpa Kabel Console Sekaligus Upgrade OS nya


Sebelum Install Mikrotik RB750,download dulu software yang dibutuhkan yaitu:
--Netinstall Versi 4.16 Dwonload ((DI SINI)
--Routeros Versi 4.16 Dwonload ((DI SINI))

Berikut caranya:
--Colokkan kabel LAN dari PC atau Laptop ke Mikrotik Routerboard RB750,Ke Ethernet1
--Hidupkan Mikrotik Routerboard RB750
--Masukan IP di LAN Pc atau Laptop 192.168.1.1 entmask=255.255.255.0,seperti gambar di bawah ini:

--Jalankan Netinstall V4.16 nya:

--Pilih "Net Booting" Yang di Netinstall Tersebut
--Centang/Ceklist "Boot Servers Enabled" dan masukkan IP address 192.168.1.2,seperti gambar di bawah ini:

--Kemudian klik "Browse" pada Netinstall untuk Memilih folder Routeros Versi 4.16 yang telah di download tadi,lihat gambar di bawah ini:
--setelah di pilih tempat folder Routeros versi 4.16 tadi akan terlihat seperti gambar kantong uang,lihat gambar di bawah ini:
--Kemudian cabut adaptor Mikrotik Routerboard RB750
--Cari congkel gigi atau lidi tekan tombol reset Mikrotik Routerboard RB750 pakai congkel gigi atau lidi dan tahan,tombol reset ada di belakang Mikrotik Routerboard RB750,lihat gambar di bawah ini:
--Tombol Reset tetap di tahan,sambil menahan tombol reset Mikrotik routerboard RB750 langsung pasang adaptornya,Tetap di tahan tombol resetnya sampai 2 menit kemudian lepaskan
--Kemudian tunggu sekitar 5 menit,bakar rokok sampoerna mild untuk menunggu
--Perhatikan Netinstall V4.16 nya,ada timbul "nstreme",di bawah drive C atau drive D,lihat gambar di bawah ini:
--Kemudian klik "Install",dan tunggu sekitar 5 menit,kemudian Klik "Reboot"....
--Mudah bukan?
--Selamat Mencoba-- sumber : http://wirelessrouterproxy.blogspot.com

Setting Nat,Dan Web Proxy Mikrotik

Supaya Client connect ke internet harus... di buat nat pada mikrotik.
Buka winbox dan klik new Terminal dan isikan perintah dibawah ini
/ip firewall nat add chain=srcnat out-interface=public action=masquerade src-address=192.168.20.0/24

Web Proxy
Web proxy adalah tempat penyimpanan situs yang pernah anda buka…tujuannya adalah untuk menghemat Bandwidth
Kenapa?karna situs situs yang anda buka kembali telaah tersimpan di Mikrotik…
Buka winbox dan klik new Terminal dan isikan perintah dibawah ini

/ip firewall nat add chain=dstnat in-interface=local src-address=192.168.20.0/24 protocol=tcp dst-port=80 action=redirect to-ports=3128

/ip web-proxy set enable=yes src-address=0.0.0.0 port=3128 hostname=”proxy” transparentproxy=yes parent-proxy=0.0.0.0:0 cacheadministrator=”Admin” max-objectsize=131072KiB cache-drive=system max-cache-size=4096 KiB

Ket:
Perhatikan kapasitas hardisk anda…karna situs yang tersimpan (cache) akan memenuhi hardisk Mikrotik anda…jadi max-cache-size nya jgn sampai sepenuh muatan hardisk…tarok 75% dari kapasitas hardisk anda.

Untuk melihat berapa banyak hardisk anda bias anda ketik perintah:

/system resource print
uptime: 4d20h58m15s
version: "4.16"
free-memory: 461040kB
total-memory: 516824kB
cpu: "e500v2"
cpu-count: 1
cpu-frequency: 1333MHz
cpu-load: 4
free-hdd-space: 451380kB
total-hdd-space: 520192kB
write-sect-since-reboot: 47309
write-sect-total: 364178
bad-blocks: 0%
architecture-name: "powerpc"
board-name: "RB1000"
platform: "MikroTik"

 sumber : http://wirelessrouterproxy.blogspot.com