Limit Download Files Dengan L7 Filtering Mikrotik

Biasanya kan kita tuh limit download pake delay pool nya squid linux, yah pasti tau lah fungsinya. Biar yang tukang download bisa diatur pemakaiannya.

Disini kita pake konsep L7 Filtering bwt filter aktifitas download files sesuai file ekstensi yang ditentuin pake MikroTik, entah itu download file exe, rar, zip, iso dll

Kbanyak cincong ah, lanjut nyok!

Pertama buat dulu filteringnya

/ip firewall layer7-protocol add name="Extension " .exe "" regexp="^.*get.+\.exe.*$" add name="Extension " .mp4 "" regexp="^.*get.+\.mp4.*$" add name="Extension " .rar"" regexp="^.*get.+\.rar.*$" add name="Extension " .zip"" regexp="^.*get.+\.zip.*$"

File ekstensi bisa ditambahin suka-suka, jgn banyak-2 L7 ngabisin resource PC/routerboard alias bikin jadi sibuk perangkat. Ga kuat? paling ngerestart/hang mikrotiknya

Trus kita buat manglenya

?

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16

/ip firewall mangle add action=mark-connection chain=prerouting disabled=no layer7-protocol= "Extension " .exe "" new-connection-mark=exe_conn passthrough=yes protocol=tcp add action=mark-connection chain=prerouting disabled=no layer7-protocol= "Extension " .zip"" new-connection-mark=zip_conn passthrough=yes protocol=tcp add action=mark-connection chain=prerouting disabled=no layer7-protocol= "Extension " .rar"" new-connection-mark=rar_conn passthrough=yes protocol=tcp add action=mark-packet chain=prerouting connection-mark=exe_conn disabled= no new-packet-mark=exe passthrough=no add action=mark-packet chain=prerouting connection-mark=rar_conn disabled= no new-packet-mark=rar passthrough=no add action=mark-packet chain=prerouting connection-mark=zip_conn disabled= no new-packet-mark=zip passthrough=no

Trus bikin Queue Tree nya deh

?

1 2 3 4 5 6 7 8 9 10 11 12

/queue tree add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=DW.FILES parent=global-out priority=8 add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=ZIP packet-mark=zip parent=DW.FILES priority=8 queue= default add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=EXE packet-mark=exe parent=DW.FILES priority=8 queue= default add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=RAR packet-mark=rar parent=DW.FILES priority=8 queue= default