Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #OnlyTPROXY
- === drop koneksi "aneh" dari ip proxy ke inet ===
- example:
- ip proxy 10.212.212.212
- ether1 = ether mikrotik ke proxy
- /ip firewall filter
- add action=accept chain=forward comment=proxy-to-local disabled=no dst-address-list=lokal in-interface=ether1 src-address=10.212.212.0/24
- add action=accept chain=forward comment=proxy-icmp disabled=no in-interface=ether1 protocol=icmp src-address=10.212.212.0/24
- add action=accept chain=forward comment=proxy-dns disabled=no dst-port=53,5353 in-interface=ether1 protocol=tcp src-address=10.212.212.0/24
- add action=accept chain=forward comment=proxy-dns disabled=no dst-port=53,5353 in-interface=ether1 protocol=udp src-address=10.212.212.0/24
- add action=drop chain=forward comment=drop-proxy-to-out disabled=no in-interface=ether1 src-address=10.212.212.0/24
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement