Membatasi Download di Mikrotik

Kadang seorang administrator jaringan akan mengalami “pusing” atas ulah para client yang mggunakan download accelator seperti Free Download Manager (FDM), Internet Download Manager (IDM) dan download accelerator yang lain.

Nah.. untuk mengakali nya ada cara yang efektif membatasi bandwitdh download tanpa mengganggu browsing secara keseluruhan.

Sebelum berlanjut, ada beberapa tahapan yang perlu kita perhatikan antara lain, kapasitas bandwith yang kita miliki, firewall, mangle, dan simple queue.

Langkah pertama kita mensetting firewall. berikut ini script nya :

/ip firewall filter add chain=forward src-address=192.168.100.0/24 protocol=tcp content=.exe action=add-dst-to-address-list address-list=cekek address-list-timeout=01:00:00

/ip firewall filter add chain=forward src-address=192.168.100.0/24 protocol=tcp content=.iso action=add-dst-to-address-list address-list=cekek address-list-timeout=01:00:00

/ip firewall filter add chain=forward src-address=192.168.100.0/24 protocol=tcp content=.mpg action=add-dst-to-address-list address-list=cekek address-list-timeout=01:00:00

/ip firewall filter add chain=forward src-address=192.168.100.0/24 protocol=tcp content=.zip action=add-dst-to-address-list address-list=cekek address-list-timeout=01:00:00

/ip firewall filter add chain=forward src-address=192.168.100.0/24 protocol=tcp content=.rar action=add-dst-to-address-list address-list=cekek address-list-timeout=01:00:00

/ip firewall filter add chain=forward src-address=192.168.100.0/24 protocol=tcp content=.dat action=add-dst-to-address-list address-list=cekek address-list-timeout=01:00:00

/ip firewall filter add chain=forward src-address=192.168.100.0/24 protocol=tcp content=.flv action=add-dst-to-address-list address-list=cekek address-list-timeout=01:00:00

/ip firewall filter add chain=forward src-address=192.168.100.0/24 protocol=tcp content=.3gp action=add-dst-to-address-list address-list=cekek address-list-timeout=01:00:00

/ip firewall filter add chain=forward src-address=192.168.100.0/24 protocol=tcp content=.mpeg action=add-dst-to-address-list address-list=cekek address-list-timeout=01:00:00

/ip firewall filter add chain=forward src-address=192.168.100.0/24 protocol=tcp content=.avi action=add-dst-to-address-list address-list=cekek address-list-timeout=01:00:00

/ip firewall filter add chain=forward src-address=192.168.100.0/24 protocol=tcp content=.ram action=add-dst-to-address-list address-list=cekek address-list-timeout=01:00:00

/ip firewall filter add chain=forward src-address=192.168.10.0/24 protocol=tcp content=.mov action=add-dst-to-address-list address-list=cekek address-list-timeout=01:00:00

/ip firewall filter add chain=forward src-address=192.168.100.0/24 protocol=tcp content=.wma action=add-dst-to-address-list address-list=cekek address-list-timeout=01:00:00

/ip firewall filter add chain=forward src-address=192.168.100.0/24 protocol=tcp content=.aiff action=add-dst-to-address-list address-list=cekek address-list-timeout=01:00:00

/ip firewall filter add chain=forward src-address=192.168.100.0/24 protocol=tcp content=.au action=add-dst-to-address-list address-list=cekek address-list-timeout=01:00:00

/ip firewall filter add chain=forward src-address=192.168.100.0/24 protocol=tcp content=.wav action=add-dst-to-address-list address-list=cekek address-list-timeout=01:00:00

/ip firewall filter add chain=forward src-address=192.168.100.0/24 protocol=tcp content=.rar action=add-dst-to-address-list address-list=cekek address-list-timeout=01:00:00

Keterangan :

ip address yang ada di script adalah ip network, oleh karena itu sesuaikan dulu dengan ip network anda, tcp content merupakan EXTENSI file yang sering di download oleh client, jika anda merasa kurang, silakan di tambahi sendiri. Address list cekek nantinya akan muncul otomatis di menu ip firewall  address list dengan nana cekek (di cekik, red) . Blok smua Script di atas kemudian anda paste kan di menu New terminal, akhiri dengan enter.

Langkah berikutnya adalah menginisialisai marking packet di mangle dengan script di bawah ini :

/ip firewall mangle add chain=forward protocol=tcp src-address-list=cekek action=mark-packet new-packet-mark=cekek-bw-by-extension

maksudnya, semua traffict tcp yang di kenali pada extension file yang di download akan di mark (ditandai) sebagai cekek-bw-by-extension yang selanjutny akan di kenali di firewall address list sehingga alamat ip yang di download akan terdeteksi otomatis.

Langkah terakhir, adalah  memasukkan marking packet yang kita buat di mangle agar di kenali oleh queu dengan memasukkan script dibawah ini:

/queue simple add-files max-limit=20000/20000 packet-marks=cekek-bw-by-extension

artinya kita membatasi download extension file 32kbps upload dan 64kbps dowload.  jika bandwitdh anda CEKAK  perlu di CEKEK  mereka-mereka yang suka ngedownload. Bagi anda yang memiliki bandwitdh besar silakan sesuaikan kapasitas downlod yang ingin anda berikan.. bisa 128kbps, 256kbps 512kbps up to you dah….

OK selesai..

sumber :

http://arizownie.blog.com/sistem-operasi/membatasi-download-di-mikrotik/