Friday, February 15, 2013

Manipulasi TOS ICMP Dan DNS Resolving

Gunanya agar koneksi ping dan koneksi Dns tidak terganggu oleh koneksi2 lain
Letakkan rule yang dimangle ini dipaling atas dari rule yang lain. Agar diproses terlebih dahulu 

/Ip Firewall Mangle
add action=mark-connection chain=prerouting comment="manipulasi Type of Service untuk ICMP Packet" disabled=no new-connection-mark=ICMP-CM passthrough=yes protocol=icmp
add action=mark-packet chain=prerouting comment="" connection-mark=ICMP-CM disabled=no new-packet-mark=ICMP-PM passthrough=yes
add action=change-dscp chain=prerouting comment="" disabled=no new-dscp=16 packet-mark=ICMP-PM
add action=mark-connection chain=prerouting comment="manipulasi Type of Service untuk DNS Resolving" disabled=no dst-port=53 new-connection-mark=DNS-CM passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=no dst-port=53 new-connection-mark=DNS-CM passthrough=yes protocol=udp
add action=mark-packet chain=prerouting comment="" connection-mark=DNS-CM disabled=no new-packet-mark=DNS-PM passthrough=yes
add action=change-dscp chain=prerouting comment="" disabled=no new-dscp=16 packet-mark=DNS-PM


/queue type
add kind=pfifo name=pfifo-64 pfifo-limit=64
/queue Tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=8k max-limit=100k name=ICMP packet-mark=ICMP-PM parent=global-in priority=1 queue=pfifo-64
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=8k max-limit=100k name=DNS packet-mark=DNS-PM parent=global-in priority=1 queue=pfifo-64

Source : http://www.ngapak.web.id/Thread-Manipulasi-TOS-ICMP-Dan-DNS-Resolving

No comments:

Post a Comment