c






 
 



Posted on March 20, 2009 by harry chan putra

Disini akses yang digunakan adalah 2 Line Speedy Office Unlimitted untuk salah satu warnet
yang ada di kota Padang, contoh confignya adalah :

Login: areksitiung
Password:

MMM MMM KKK TTTTTTTTTTT KKK

MMMM MMMM KKK TTTTTTTTTTT KKK
MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK
MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK
MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK
MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK

MikroTik RouterOS 2.9.27 (c) 1999-2006 http://www.mikrotik.com/

# nov/27/2008 11:26:36 by RouterOS 2.9.27

# software id = HUI7-TQN
#
/ interface ethernet
set Local name=Local mtu=1500 mac-address=00:11:6B:95:D4:49 arp=enabled disable-
running-check=yes auto-negotiation=yes \
full-duplex=yes cable-settings=default speed=100Mbps comment=" disabled=no
set Speedy1 name=Speedy1 mtu=1500 mac-address=00:11:6B:94:F0:C5 arp=enabled
disable-running-check=yes \
auto-negotiation=yes full-duplex=yes cable-settings=default speed=100Mbps comment="
disabled=no
set Speedy2 name=Speedy2 mtu=1500 mac-address=00:19:21:28:5F:87 arp=enabled
disable-running-check=yes \
auto-negotiation=yes full-duplex=yes cable-settings=default speed=100Mbps comment="
disabled=no
/ interface l2tp-server server
set enabled=no max-mtu=1460 max-mru=1460 authentication=pap,chap,mschap1,mschap2
default-profile=default-encryption
/ interface pptp-server server
set enabled=no max-mtu=1460 max-mru=1460 authentication=mschap1,mschap2 keepalive-
timeout=30 \
default-profile=default-encryption
/ interface pppoe-client
add name=pppoe-out2 max-mtu=1480 max-mru=1480 interface=Speedy2
user=11140xxxxx@telkom.net password=xxxxxx \
profile=default service-name=" ac-name=" add-default-route=yes dial-on-demand=no use-
peer-dns=no \
allow=pap,chap,mschap1,mschap2 disabled=no
/ ip accounting
set enabled=no account-local-traffic=no threshold=256
/ ip accounting web-access
set accessible-via-web=no address=0.0.0.0/0
/ ip service
set telnet port=23 address=0.0.0.0/0 disabled=yes
set ftp port=21 address=0.0.0.0/0 disabled=yes
set www port=1979 address=0.0.0.0/0 disabled=no
set ssh port=1982 address=0.0.0.0/0 disabled=no
set www-ssl port=443 address=0.0.0.0/0 certificate=none disabled=yes
/ ip upnp
set enabled=no allow-disable-external-interface=yes show-dummy-rule=yes
/ ip arp
/ ip socks
set enabled=no port=1080 connection-idle-timeout=2m max-connections=200
/ ip dns
set primary-dns=203.130.193.74 secondary-dns=202.134.0.155 allow-remote-requests=yes
cache-size=2048KiB cache-max-ttl=1w
/ ip traffic-flow
set enabled=no interfaces=all cache-entries=4k active-flow-timeout=30m inactive-flow-
timeout=15s
/ ip address
add address=192.168.1.1/24 network=192.168.1.0 broadcast=192.168.1.255 interface=Local
comment=" disabled=no
add address=192.168.2.2/24 network=192.168.2.0 broadcast=192.168.2.255
interface=Speedy1 comment=" disabled=no
add address=192.168.3.2/24 network=192.168.3.0 broadcast=192.168.3.255
interface=Speedy2 comment=" disabled=yes
/ ip proxy
set enabled=no port=8080 parent-proxy=0.0.0.0:0 maximal-client-connecions=1000
maximal-server-connectons=1000
/ ip proxy access
add dst-port=23-25 action=deny comment=block telnet & spam e-mail relaying
disabled=no
/ ip neighbor discovery
set Local discover=yes
set Speedy1 discover=yes
set Speedy2 discover=yes
set pppoe-out2 discover=no
/ ip route
add dst-address=0.0.0.0/0 gateway=192.168.2.1 scope=255 target-scope=10 routing-
mark=one comment=" disabled=no
/ ip firewall mangle
add chain=prerouting in-interface=Local connection-state=new nth=1,1,0 action=mark-
connection new-connection-mark=one \
passthrough=yes comment=" disabled=no
add chain=prerouting in-interface=Local connection-mark=one action=mark-routing new-
routing-mark=one passthrough=no \
comment=" disabled=no
add chain=prerouting in-interface=Local connection-state=new nth=1,1,1 action=mark-
connection new-connection-mark=two \
passthrough=yes comment=" disabled=no
add chain=prerouting in-interface=Local connection-mark=two action=mark-routing new-
routing-mark=two passthrough=no \
comment=" disabled=no
/ ip firewall nat
add chain=srcnat out-interface=Speedy1 connection-mark=one action=masquerade
comment=" disabled=no
add chain=srcnat out-interface=pppoe-out2 connection-mark=two action=masquerade
comment=" disabled=no
/ ip firewall connection tracking
set enabled=yes tcp-syn-sent-timeout=5s tcp-syn-received-timeout=5s tcp-established-
timeout=1d tcp-fin-wait-timeout=10s \
tcp-close-wait-timeout=10s tcp-last-ack-timeout=10s tcp-time-wait-timeout=10s tcp-close-
timeout=10s udp-timeout=10s \
udp-stream-timeout=3m icmp-timeout=10s generic-timeout=10m tcp-syncookie=no
/ ip firewall filter
add chain=virus protocol=tcp dst-port=135-139 action=drop comment=Drop Blaster Worm
disabled=no
add chain=virus protocol=udp dst-port=135-139 action=drop comment=Drop Messenger
Worm disabled=no
add chain=virus protocol=tcp dst-port=445-3000 action=drop comment=Drop Blaster
Worm disabled=no
add chain=virus protocol=udp dst-port=445-3000 action=drop comment=Drop Blaster
Worm disabled=no
add chain=virus protocol=tcp dst-port=593 action=drop comment=________ disabled=no
add chain=virus protocol=udp dst-port=7000 action=drop comment=Setan1 disabled=no
add chain=virus protocol=tcp dst-port=100-1000 action=drop comment=Setan1
disabled=no
add chain=virus protocol=udp dst-port=100-1000 action=drop comment=Drop Messenger
Worm disabled=no
add chain=virus protocol=tcp dst-port=1000-3000 action=drop comment=Setan1
disabled=no
add chain=virus protocol=udp dst-port=1000-3000 action=drop comment=Drop Messenger
Worm disabled=no
add chain=virus protocol=tcp dst-port=40000-50000 action=drop comment=Setan1
disabled=no
add chain=virus protocol=udp dst-port=40000-50000 action=drop comment=Drop
Messenger Worm disabled=no
add chain=virus protocol=tcp dst-port=7000 action=drop comment=Setan1 disabled=no
add chain=virus protocol=udp dst-port=135-139 action=drop comment=Drop Messenger
Worm disabled=no
add chain=virus protocol=tcp dst-port=7000 action=drop comment=Setan1 disabled=no
add chain=virus protocol=udp dst-port=135-139 action=drop comment=Drop Messenger
Worm disabled=no
add chain=virus action=return comment=" disabled=no
add chain=input connection-state=invalid action=drop comment=Drop invalid connections
disabled=no
add chain=input connection-state=established action=accept comment=Allow esatblished
connections disabled=no
add chain=input connection-state=related action=accept comment=Allow related
connections disabled=no
add chain=input protocol=udp action=accept comment=Allow UDP disabled=no
add chain=input protocol=icmp action=accept comment=Allow ICMP disabled=no
add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list address-list=port
scanners \
address-list-timeout=2w comment=Port scanners to list disabled=no
add chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg action=add-src-to-
address-list address-list=port \
scanners address-list-timeout=2w comment=NMAP FIN Stealth scan disabled=no
add chain=input protocol=tcp tcp-flags=fin,syn action=add-src-to-address-list address-
list=port scanners \
address-list-timeout=2w comment=SYN/FIN scan disabled=no
add chain=input protocol=tcp tcp-flags=syn,rst action=add-src-to-address-list address-
list=port scanners \
address-list-timeout=2w comment=SYN/RST scan disabled=no
add chain=input protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack action=add-src-to-address-
list address-list=port \
scanners address-list-timeout=2w comment=FIN/PSH/URG scan disabled=no
add chain=input protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg action=add-src-to-address-list
address-list=port scanners \
address-list-timeout=2w comment=ALL/ALL scan disabled=no
add chain=input protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg action=add-src-to-
address-list address-list=port \
scanners address-list-timeout=2w comment=NMAP NULL scan disabled=no
/ ip firewall service-port
set ftp ports=21 disabled=yes
set tftp ports=69 disabled=yes
set irc ports=6667 disabled=yes
set h323 disabled=yes
set quake3 disabled=yes
set gre disabled=yes
set pptp disabled=yes
/ ip hotspot service-port
set ftp ports=21 disabled=no
/ ip hotspot profile
set default name=default hotspot-address=0.0.0.0 dns-name=" html-directory=hotspot
rate-limit=" http-proxy=0.0.0.0:0 \
smtp-server=0.0.0.0 login-by=cookie,http-chap http-cookie-lifetime=3d split-user-domain=no
use-radius=no
/ ip hotspot user profile
set default name=default idle-timeout=none keepalive-timeout=2m status-autorefresh=1m
shared-users=1 \
transparent-proxy=yes open-status-page=always advertise=no
/ ip dhcp-server config
set store-leases-disk=5m
/ ip ipsec proposal
add name=default auth-algorithms=sha1 enc-algorithms=3des lifetime=30m lifebytes=0
pfs-group=modp1024 disabled=no
/ ip web-proxy
set enabled=no src-address=0.0.0.0 port=3128 hostname=proxy transparent-proxy=no
parent-proxy=0.0.0.0:0 \
cache-administrator=webmaster max-object-size=4096KiB cache-drive=system max-
cache-size=none \
max-ram-cache-size=unlimited
/ ip web-proxy access
add dst-port=23-25 action=deny comment=block telnet & spam e-mail relaying
disabled=no
/ ip web-proxy cache
add url=:cgi-bin \\? action=deny comment=dont cache dynamic http pages disabled=no
/ system logging
add topics=info prefix=" action=memory disabled=no
add topics=error prefix=" action=memory disabled=no
add topics=warning prefix=" action=memory disabled=no
add topics=critical prefix=" action=echo disabled=no
/ system logging action
set memory name=memory target=memory memory-lines=100 memory-stop-on-full=no
set disk name=disk target=disk disk-lines=100 disk-stop-on-full=no
set echo name=echo target=echo remember=yes
set remote name=remote target=remote remote=0.0.0.0:514
/ system upgrade mirror
set enabled=no primary-server=0.0.0.0 secondary-server=0.0.0.0 check-interval=1d user="
/ system clock dst
set dst-delta=+00:00 dst-start=jan/01/1970 00:00:00 dst-end=jan/01/1970 00:00:00
/ system watchdog
set reboot-on-failure=yes watch-address=none watchdog-timer=yes no-ping-delay=5m
automatic-supout=yes auto-send-supout=no
/ system console
add port=serial0 term=" disabled=no
set FIXME term=linux disabled=no
set FIXME term=linux disabled=no
set FIXME term=linux disabled=no
set FIXME term=linux disabled=no
set FIXME term=linux disabled=no
set FIXME term=linux disabled=no
set FIXME term=linux disabled=no
set FIXME term=linux disabled=no
/ system console screen
set line-count=25
/ system identity
set name=ROUTER-99NET
/ system note
set show-at-login=yes note="
/ port
set serial0 name=serial0 baud-rate=9600 data-bits=8 parity=none stop-bits=1 flow-
control=hardware
/ ppp profile
set default name=default use-compression=default use-vj-compression=default use-
encryption=default only-one=default \
change-tcp-mss=yes comment="
set default-encryption name=default-encryption use-compression=default use-vj-
compression=default use-encryption=yes \
only-one=default change-tcp-mss=yes comment="
/ ppp aaa
set use-radius=no accounting=yes interim-update=0s
/ queue type
set default name=default kind=pfifo pfifo-limit=50
set ethernet-default name=ethernet-default kind=pfifo pfifo-limit=50
set wireless-default name=wireless-default kind=sfq sfq-perturb=5 sfq-allot=1514
set synchronous-default name=synchronous-default kind=red red-limit=60 red-min-
threshold=10 red-max-threshold=50 \
red-burst=20 red-avg-packet=1000
set hotspot-default name=hotspot-default kind=sfq sfq-perturb=5 sfq-allot=1514
add name=pcq-download kind=pcq pcq-rate=384000 pcq-limit=50 pcq-classifier=dst-
address pcq-total-limit=2000
add name=pcq-upload kind=pcq pcq-rate=64000 pcq-limit=50 pcq-classifier=src-address
pcq-total-limit=2000
add name=PFIFO-64 kind=pfifo pfifo-limit=64
add name=default-small kind=pfifo pfifo-limit=10
/ queue simple
add name=99.net target-addresses=192.168.1.0/24 dst-address=0.0.0.0/0 interface=Local
parent=none direction=both \
priority=1 queue=ethernet-default/ethernet-default limit-at=0/0 max-limit=0/0 total-
queue=default-small disabled=yes
add name=Server target-addresses=192.168.1.100/32 dst-address=0.0.0.0/0 interface=all
parent=99.net direction=both \
priority=8 queue=ethernet-default/ethernet-default limit-at=0/0 max-limit=0/0 total-
queue=default-small disabled=yes
add name=Meja-1 target-addresses=192.168.1.11/32 dst-address=0.0.0.0/0 interface=all
parent=99.net direction=both \
priority=8 queue=ethernet-default/ethernet-default limit-at=64000/128000 max-
limit=64000/128000 \
total-queue=default-small disabled=no
add name=Meja-2 target-addresses=192.168.1.12/32 dst-address=0.0.0.0/0 interface=all
parent=none direction=both \
priority=8 queue=default-small/default-small limit-at=0/0 max-limit=64000/128000 total-
queue=default-small \
disabled=yes
add name=Meja-3 target-addresses=192.168.1.13/32 dst-address=0.0.0.0/0 interface=all
parent=99.net direction=both \
priority=8 queue=ethernet-default/ethernet-default limit-at=64000/128000 max-
limit=64000/128000 \
total-queue=default-small disabled=no
add name=Meja-4 target-addresses=192.168.1.14/32 dst-address=0.0.0.0/0 interface=all
parent=99.net direction=both \
priority=8 queue=ethernet-default/ethernet-default limit-at=64000/128000 max-
limit=64000/128000 \
total-queue=default-small disabled=no
add name=Meja-5 target-addresses=192.168.1.15/32 dst-address=0.0.0.0/0 interface=all
parent=99.net direction=both \
priority=8 queue=ethernet-default/ethernet-default limit-at=64000/128000 max-
limit=64000/128000 \
total-queue=default-small disabled=no
add name=Meja-6 target-addresses=192.168.1.16/32 dst-address=0.0.0.0/0 interface=all
parent=none direction=both \
priority=8 queue=default-small/default-small limit-at=0/0 max-limit=64000/128000 total-
queue=default-small disabled=no
add name=Meja-7 target-addresses=192.168.1.17/32 dst-address=0.0.0.0/0 interface=all
parent=99.net direction=both \
priority=8 queue=ethernet-default/ethernet-default limit-at=64000/128000 max-
limit=64000/128000 \
total-queue=default-small disabled=no
add name=Meja-8 target-addresses=192.168.1.18/32 dst-address=0.0.0.0/0 interface=all
parent=99.net direction=both \
priority=8 queue=ethernet-default/ethernet-default limit-at=64000/128000 max-
limit=64000/128000 \
total-queue=default-small disabled=no
add name=Meja-9 target-addresses=192.168.1.19/32 dst-address=0.0.0.0/0 interface=all
parent=99.net direction=both \
priority=8 queue=ethernet-default/ethernet-default limit-at=64000/128000 max-
limit=64000/128000 \
total-queue=default-small disabled=no
add name=Meja-10 target-addresses=192.168.1.20/32 dst-address=0.0.0.0/0 interface=all
parent=99.net direction=both \
priority=8 queue=ethernet-default/ethernet-default limit-at=64000/128000 max-
limit=64000/128000 \
total-queue=default-small disabled=no
add name=Meja-11 target-addresses=192.168.1.25/32 dst-address=0.0.0.0/0 interface=all
parent=99.net direction=both \
priority=8 queue=ethernet-default/ethernet-default limit-at=64000/128000 max-
limit=64000/128000 \
total-queue=default-small time=0s-0s, disabled=no
add name=Meja-12 target-addresses=192.168.1.22/32 dst-address=0.0.0.0/0 interface=all
parent=99.net direction=both \
priority=8 queue=ethernet-default/ethernet-default limit-at=64000/128000 max-
limit=64000/128000 \
total-queue=default-small disabled=no
add name=Meja-13 target-addresses=192.168.1.23/32 dst-address=0.0.0.0/0 interface=all
parent=99.net direction=both \
priority=8 queue=ethernet-default/ethernet-default limit-at=64000/128000 max-
limit=64000/128000 \
total-queue=default-small disabled=no
add name=Meja-14 target-addresses=192.168.1.24/32 dst-address=0.0.0.0/0 interface=all
parent=99.net direction=both \
priority=8 queue=ethernet-default/ethernet-default limit-at=64000/128000 max-
limit=64000/128000 \
total-queue=default-small disabled=no
add name=Meja-15 target-addresses=192.168.1.21/32 dst-address=0.0.0.0/0 interface=all
parent=99.net direction=both \
priority=8 queue=ethernet-default/ethernet-default limit-at=64000/128000 max-
limit=64000/128000 \
total-queue=default-small disabled=no
add name=Meja-16 target-addresses=192.168.1.22/32 dst-address=0.0.0.0/0 interface=all
parent=99.net direction=both \
priority=8 queue=ethernet-default/ethernet-default limit-at=0/0 max-limit=64000/128000
total-queue=default-small \
disabled=no
add name=Meja-17 target-addresses=192.168.1.27/32 dst-address=0.0.0.0/0 interface=all
parent=99.net direction=both \
priority=8 queue=ethernet-default/ethernet-default limit-at=0/96000 max-limit=0/96000
total-queue=default-small \
disabled=no
add name=Meja-18 target-addresses=192.168.1.28/32 dst-address=0.0.0.0/0 interface=all
parent=99.net direction=both \
priority=8 queue=ethernet-default/ethernet-default limit-at=0/96000 max-limit=0/96000
total-queue=default-small \
disabled=no
add name=Meja-19 target-addresses=192.168.1.29/32 dst-address=0.0.0.0/0 interface=all
parent=99.net direction=both \
priority=8 queue=ethernet-default/ethernet-default limit-at=0/96000 max-limit=0/96000
total-queue=default-small \
disabled=no
add name=Printer target-addresses=192.168.1.26/32 dst-address=0.0.0.0/0 interface=all
parent=none direction=both \
priority=8 queue=default-small/default-small limit-at=0/0 max-limit=0/0 total-queue=default-
small disabled=no
/ queue tree
add name=ICMP parent=global-in packet-mark=ICMP-PM limit-at=8000 queue=PFIFO-
64 priority=1 max-limit=16000 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
add name=DNS parent=global-in packet-mark=DNS-PM limit-at=8000 queue=PFIFO-64
priority=1 max-limit=16000 burst-limit=0 \
burst-threshold=0 burst-time=0s disabled=no
/ user
add name=admin group=full address=0.0.0.0/0 comment=system default user
disabled=yes
add name=areksitiung group=full address=0.0.0.0/0 comment=" disabled=no
add name=99net group=full address=0.0.0.0/0 comment=" disabled=no
/ user group
add name=read
policy=local,telnet,ssh,reboot,read,test,winbox,password,web,!ftp,!write,!policy
add name=write
policy=local,telnet,ssh,reboot,read,write,test,winbox,password,web,!ftp,!policy
add name=full
policy=local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web
/ user aaa
set use-radius=no accounting=yes interim-update=0s default-group=read
/ radius incoming
set accept=no port=1700
/ driver
/ snmp
set enabled=no contact=" location="
/ snmp community
set public name=public address=0.0.0.0/0 read-access=yes
/ tool bandwidth-server
set enabled=yes authenticate=yes allocate-udp-ports-from=2000 max-sessions=10
/ tool mac-server ping
set enabled=yes
/ tool e-mail
set server=0.0.0.0 from=<>
/ tool sniffer
set interface=all only-headers=no memory-limit=10 file-name=" file-limit=10 streaming-
enabled=no streaming-server=0.0.0.0 \
filter-stream=yes filter-protocol=ip-only filter-address1=0.0.0.0/0:0-65535 filter-
address2=0.0.0.0/0:0-65535
/ tool graphing
set store-every=5min
/ tool graphing queue
add simple-queue=all allow-address=0.0.0.0/0 store-on-disk=yes allow-target=yes
disabled=no
/ tool graphing resource
add allow-address=0.0.0.0/0 store-on-disk=yes disabled=no
/ tool graphing interface
add interface=all allow-address=0.0.0.0/0 store-on-disk=yes disabled=no
/ routing ospf
set router-id=0.0.0.0 distribute-default=never redistribute-connected=no redistribute-
static=no redistribute-rip=no \
redistribute-bgp=no metric-default=1 metric-connected=20 metric-static=20 metric-rip=20
metric-bgp=20
/ routing ospf area
set backbone area-id=0.0.0.0 type=default translator-role=translate-candidate
authentication=none prefix-list-import=" \
prefix-list-export=" disabled=no
/ routing bgp
set enabled=no as=1 router-id=0.0.0.0 redistribute-static=no redistribute-connected=no
redistribute-rip=no \
redistribute-ospf=no
/ routing rip
set redistribute-static=no redistribute-connected=no redistribute-ospf=no redistribute-bgp=no
metric-static=1 \
metric-connected=1 metric-ospf=1 metric-bgp=1 update-timer=30s timeout-timer=3m
garbage-timer=2m
[areksitiung@ROUTER-99NET] >