Letakkan rule yang dimangle ini dipaling atas dari rule yang lain. Agar diproses terlebih dahulu
/Ip Firewall Mangle
add action=mark-connection chain=prerouting comment="manipulasi Type of Service untuk ICMP Packet" disabled=no new-connection-mark=ICMP-CM passthrough=yes protocol=icmp
add action=mark-packet chain=prerouting comment="" connection-mark=ICMP-CM disabled=no new-packet-mark=ICMP-PM passthrough=yes
add action=change-dscp chain=prerouting comment="" disabled=no new-dscp=16 packet-mark=ICMP-PM
add action=mark-connection chain=prerouting comment="manipulasi Type of Service untuk DNS Resolving" disabled=no dst-port=53 new-connection-mark=DNS-CM passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" disabled=no dst-port=53 new-connection-mark=DNS-CM passthrough=yes protocol=udp
add action=mark-packet chain=prerouting comment="" connection-mark=DNS-CM disabled=no new-packet-mark=DNS-PM passthrough=yes
add action=change-dscp chain=prerouting comment="" disabled=no new-dscp=16 packet-mark=DNS-PM
/queue type
add kind=pfifo name=pfifo-64 pfifo-limit=64
/queue Tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=8k max-limit=100k name=ICMP packet-mark=ICMP-PM parent=global-in priority=1 queue=pfifo-64
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=8k max-limit=100k name=DNS packet-mark=DNS-PM parent=global-in priority=1 queue=pfifo-64
Source : http://www.ngapak.web.id/Thread-Manipulasi-TOS-ICMP-Dan-DNS-Resolving
No comments:
Post a Comment