Breaking News
Loading...
05 April 2012

hit proxy

  1. /ip firewall mangle
  2. add action=mark-packet chain=prerouting comment="HIT DSCP 12" disabled=no dscp=12 new-packet-mark=HIT passthrough=no
  3. add action=mark-packet chain=prerouting comment="L7-HIT PROXY" disabled=no layer7-protocol=Httphit new-packet-mark=Hit-L7 passthrough=no
  4. add action=mark-packet chain=prerouting comment=L7-MISS disabled=no layer7-protocol=httpmisses new-packet-mark=missproxy-L7 passthrough=no
  5. add action=mark-connection chain=prerouting comment="--------------------------NTH Local------------------------" connection-state=new disabled=no in-interface=Local new-connection-mark=spidi1 nth=3,1 passthrough=yes
  6. add action=mark-routing chain=prerouting comment="" connection-mark=spidi1 disabled=no in-interface=Local new-routing-mark=pppoe_1 passthrough=no
  7. add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no in-interface=Local new-connection-mark=spidi2 nth=3,2 passthrough=yes
  8. add action=mark-routing chain=prerouting comment="" connection-mark=spidi2 disabled=no in-interface=Local new-routing-mark=pppoe_2 passthrough=no
  9. add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no in-interface=Local new-connection-mark=spidi3 nth=3,3 passthrough=yes
  10. add action=mark-routing chain=prerouting comment="" connection-mark=spidi3 disabled=no in-interface=Local new-routing-mark=pppoe_3 passthrough=no
  11. add action=mark-connection chain=prerouting comment="--------------------------NTH Proxy------------------------" connection-state=new disabled=no in-interface=Proxy new-connection-mark=spidi1 nth=3,1 passthrough=yes
  12. add action=mark-routing chain=prerouting comment="" connection-mark=spidi1 disabled=no in-interface=Proxy new-routing-mark=pppoe_1 passthrough=no
  13. add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no in-interface=Proxy new-connection-mark=spidi2 nth=3,2 passthrough=yes
  14. add action=mark-routing chain=prerouting comment="" connection-mark=spidi2 disabled=no in-interface=Proxy new-routing-mark=pppoe_2 passthrough=no
  15. add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no in-interface=Proxy new-connection-mark=spidi3 nth=3,3 passthrough=yes
  16. add action=mark-routing chain=prerouting comment="" connection-mark=spidi3 disabled=no in-interface=Proxy new-routing-mark=pppoe_3 passthrough=no
  17. /ip firewall nat
  18. add action=masquerade chain=srcnat comment=Masquerade disabled=no out-interface=pppoe_1
  19. add action=masquerade chain=srcnat comment="" disabled=no out-interface=pppoe_2
  20. add action=masquerade chain=srcnat comment="" disabled=no out-interface=pppoe_3
  21. add action=masquerade chain=srcnat comment="" disabled=no out-interface=Proxy
  22. add action=redirect chain=dstnat comment="By Pass DNS PROXIESS >>DIRECT" disabled=yes dst-port=53 protocol=udp to-ports=53
  23. add action=redirect chain=dstnat comment="" disabled=yes dst-port=53 protocol=tcp to-ports=53
  24. add action=dst-nat chain=dstnat comment="TRANSPARENT PROXY disable this to bypass squid" disabled=no dst-port=80,8080,3128 protocol=tcp src-address=10.20.30.0/24 src-address-list=Local to-addresses=192.168.10.2 to-ports=3128
  25. add action=dst-nat chain=dstnat comment="PROXY NAT" disabled=no dst-address=10.20.30.200 dst-port=22,81,10000 in-interface=Local protocol=tcp to-addresses=192.168.10.2
  26. add action=dst-nat chain=dstnat comment="TRANSPARENT DNS" disabled=no dst-port=53 in-interface=Local protocol=udp to-addresses=192.168.10.2 to-ports=53
  27. add action=dst-nat chain=dstnat comment="" disabled=no dst-port=53 in-interface=Local protocol=tcp to-addresses=192.168.10.2 to-ports=53
  28. add action=dst-nat chain=dstnat comment="" disabled=no dst-port=53 in-interface=Proxy protocol=udp to-ports=53
  29. add action=dst-nat chain=dstnat comment="" disabled=no dst-port=53 in-interface=Proxy protocol=tcp to-ports=53
  30. add action=dst-nat chain=dstnat comment="DMZ 1" disabled=no dst-port=81,22 in-interface=pppoe_1 protocol=tcp to-addresses=192.168.10.2
  31. add action=dst-nat chain=dstnat comment="DMZ 2" disabled=no dst-port=81,22 in-interface=pppoe_2 protocol=tcp to-addresses=192.168.10.2
  32. add action=dst-nat chain=dstnat comment="REMOTE OP" disabled=no dst-port=5900 in-interface=pppoe_2 protocol=tcp to-addresses=10.20.30.230
  33. add action=dst-nat chain=dstnat comment="DMZ ------- CHECK BEFORE ENABLED" disabled=yes dst-address=192.168.10.2 dst-port=81,22,21 in-interface=pppoe_3 protocol=tcp to-addresses=192.168.10.2
  34. add action=dst-nat chain=dstnat comment="" disabled=yes dst-address=192.168.10.2 dst-port=81,22,21 in-interface=pppoe_2 protocol=tcp to-addresses=192.168.10.2
     
     RAW Paste Data
     
     /ip firewall mangle
    add action=mark-packet chain=prerouting comment="HIT DSCP 12" disabled=no dscp=12 new-packet-mark=HIT passthrough=no
    add action=mark-packet chain=prerouting comment="L7-HIT PROXY" disabled=no layer7-protocol=Httphit new-packet-mark=Hit-L7 passthrough=no
    add action=mark-packet chain=prerouting comment=L7-MISS disabled=no layer7-protocol=httpmisses new-packet-mark=missproxy-L7 passthrough=no
    add action=mark-connection chain=prerouting comment="--------------------------NTH Local------------------------" connection-state=new disabled=no in-interface=Local new-connection-mark=spidi1 nth=3,1 passthrough=yes
    add action=mark-routing chain=prerouting comment="" connection-mark=spidi1 disabled=no in-interface=Local new-routing-mark=pppoe_1 passthrough=no
    add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no in-interface=Local new-connection-mark=spidi2 nth=3,2 passthrough=yes
    add action=mark-routing chain=prerouting comment="" connection-mark=spidi2 disabled=no in-interface=Local new-routing-mark=pppoe_2 passthrough=no
    add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no in-interface=Local new-connection-mark=spidi3 nth=3,3 passthrough=yes
    add action=mark-routing chain=prerouting comment="" connection-mark=spidi3 disabled=no in-interface=Local new-routing-mark=pppoe_3 passthrough=no
    add action=mark-connection chain=prerouting comment="--------------------------NTH Proxy------------------------" connection-state=new disabled=no in-interface=Proxy new-connection-mark=spidi1 nth=3,1 passthrough=yes
    add action=mark-routing chain=prerouting comment="" connection-mark=spidi1 disabled=no in-interface=Proxy new-routing-mark=pppoe_1 passthrough=no
    add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no in-interface=Proxy new-connection-mark=spidi2 nth=3,2 passthrough=yes
    add action=mark-routing chain=prerouting comment="" connection-mark=spidi2 disabled=no in-interface=Proxy new-routing-mark=pppoe_2 passthrough=no
    add action=mark-connection chain=prerouting comment="" connection-state=new disabled=no in-interface=Proxy new-connection-mark=spidi3 nth=3,3 passthrough=yes
    add action=mark-routing chain=prerouting comment="" connection-mark=spidi3 disabled=no in-interface=Proxy new-routing-mark=pppoe_3 passthrough=no
    /ip firewall nat
    add action=masquerade chain=srcnat comment=Masquerade disabled=no out-interface=pppoe_1
    add action=masquerade chain=srcnat comment="" disabled=no out-interface=pppoe_2
    add action=masquerade chain=srcnat comment="" disabled=no out-interface=pppoe_3
    add action=masquerade chain=srcnat comment="" disabled=no out-interface=Proxy
    add action=redirect chain=dstnat comment="By Pass DNS PROXIESS >>DIRECT" disabled=yes dst-port=53 protocol=udp to-ports=53
    add action=redirect chain=dstnat comment="" disabled=yes dst-port=53 protocol=tcp to-ports=53
    add action=dst-nat chain=dstnat comment="TRANSPARENT PROXY disable this to bypass squid" disabled=no dst-port=80,8080,3128 protocol=tcp src-address=10.20.30.0/24 src-address-list=Local to-addresses=192.168.10.2 to-ports=3128
    add action=dst-nat chain=dstnat comment="PROXY NAT" disabled=no dst-address=10.20.30.200 dst-port=22,81,10000 in-interface=Local protocol=tcp to-addresses=192.168.10.2
    add action=dst-nat chain=dstnat comment="TRANSPARENT DNS" disabled=no dst-port=53 in-interface=Local protocol=udp to-addresses=192.168.10.2 to-ports=53
    add action=dst-nat chain=dstnat comment="" disabled=no dst-port=53 in-interface=Local protocol=tcp to-addresses=192.168.10.2 to-ports=53
    add action=dst-nat chain=dstnat comment="" disabled=no dst-port=53 in-interface=Proxy protocol=udp to-ports=53
    add action=dst-nat chain=dstnat comment="" disabled=no dst-port=53 in-interface=Proxy protocol=tcp to-ports=53
    add action=dst-nat chain=dstnat comment="DMZ 1" disabled=no dst-port=81,22 in-interface=pppoe_1 protocol=tcp to-addresses=192.168.10.2
    add action=dst-nat chain=dstnat comment="DMZ 2" disabled=no dst-port=81,22 in-interface=pppoe_2 protocol=tcp to-addresses=192.168.10.2
    add action=dst-nat chain=dstnat comment="REMOTE OP" disabled=no dst-port=5900 in-interface=pppoe_2 protocol=tcp to-addresses=10.20.30.230
    add action=dst-nat chain=dstnat comment="DMZ ------- CHECK BEFORE ENABLED" disabled=yes dst-address=192.168.10.2 dst-port=81,22,21 in-interface=pppoe_3 protocol=tcp to-addresses=192.168.10.2
    add action=dst-nat chain=dstnat comment="" disabled=yes dst-address=192.168.10.2 dst-port=81,22,21 in-interface=pppoe_2 protocol=tcp to-addresses=192.168.10.2

0 komentar:

Post a Comment

 
Toggle Footer