Blok IDM di hotspot dengan Mikrotik

Jika anda sedang bermain hitspot lalu orang orang di sekitar anda sedang mendownload menggunakan IDM pasti Koneksi anda akan menjadi pelan. ini karena idm adalah software downloader yang sangat rakus . oleh sebab itu di sebagian tempat idm dilarang di gunakan karena akan mennyedot koneksi di sekitarnya.

Tutorial ini sangat bermanfaat bagi RT/RW net ataupun warnet yang ingin melakukan limitasi untuk akses ke ekstensi file2 tertentu, yang biasanya identik dengan hal download mendownload. Biasanya, si client menggunakan salah satu program yang sudah tidak asing lagi, yaitu IDM.

Dengan menambahkan setingan berikut, hanya aktifitas download saja yang akan kita limit, sehingga aktifitas browsing client tetap lancar.

Langkah-langkahnya adalah sebagai berikut :

1. Masukkan rule di firewall untuk mendapatkan IP server tempat file yang didownload dan memasukan IP itu ke dalam address list.

/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.mp3
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.exe
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.rar
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.zip
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.7z
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.cab
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.asf
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.mov
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.wmv
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.mpg
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.mpeg
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.mkv
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.avi
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.flv
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.pdf
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.wav
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.rm
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.mp4
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.ram
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.rmvb
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.dat
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.daa
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.iso
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.nrg
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.bin
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.vcd
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.mp2
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.3gp
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.mpe
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.qt
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.raw
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.wma
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.ogg
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00
/ip firewall filter add chain=forward
src-address=192.168.10.0/24 protocol=tcp content=.doc
action=add-dst-to-address-list address-list=downloads
address-list-timeout=00:05:00

Rule diatas akan menangkap semua traffic dengan ekstensi tertentu dan memasukkannya ke address list downloads selamat 5 menit. Jika ingin menambahkan ekstensi lainnya tinggal dikopas saja.

2. Setting mangle untuk paket yang berasal dari IP yang didapat dari langkah 1.

/ip firewall mangle add chain=forward
protocol=tcp src-address-list=downloads
action=mark-packet new-packet-mark=downloads-paket

3. Langkah terakhir kita masukkan simple queue dari paket mark yang dibuat dari langkah 2.

/queue simple add name=downloads-files
max-limit=128000/128000 packet-marks=downloads-paket

Letakkan queue ini di urutan paling atas, supaya dibaca pertama kali oleh mikrotik sebelum queue lainnya.