Skip to content Skip to sidebar Skip to footer
Home / Bandwidth Management / Linux / MikroTik / Network / Operating Systems / programs / Software / Tools / Web

MikroTik Bandwidth Management + Web Proxy

Posted by vlee 38 comments
mtk
Script MikroTik in Black and White
========================
First you need to determining your network model.
in this case we used subnetmask Class "C"
-----------------------------------
255.255.255.0           = 24 -> 254
255.255.255.128       = 25 -> 128
255.255.255.192       = 26 -> 64
255.255.255.224       = 27 -> 32
255.255.255.240       = 28 -> 16
255.255.255.248       = 29 -> 8
255.255.255.252 = 30 -> 4
255.255.255.254 = 31 -> 2
255.255.255.255 = 32 -> 1
        ------------------------------
Note :  if using WinBox Just copy-paste to terminal/linegroup.. Here we go.....;)
           (ISP line  Up to 1 Mbps)

/interface
set 0 name=public
set 1 name=local

password

system identity set name=newbie

/ip address add address=192.168.1.2/24 netmask=255.255.255.0 interface=public comment="Internet"
/ip address add address=192.168.0.1/28 netmask=255.255.255.240 interface=local comment = "LAN"

/ip route add gateway=192.168.1.1

/ip dns set primary-dns=8.8.8.8 allow-remoterequests=yes
/ip dns set secondary-dns=8.8.4.4 allow-remoterequests=yes


/ip web-proxy
set enabled=yes src-address=0.0.0.0 port=3128 hostname="computersnewbie.blogspot.com" transparent-proxy=yes parent-proxy=0.0.0.0:0 cache-administrator="computersnewbie@groups.facebook.com" max-object-size=8192KiB cache-drive=system max-cache-size=unlimited max-ram-cache-size=unlimited

/ip firewall nat
add chain=dstnat protocol=tcp dst-port=80 action=redirect to-ports=3128 disabled=no
add chain=dstnat protocol=tcp dst-port=8080 action=redirect to-ports=3128 disabled=no
add chain=dstnat protocol=tcp dst-port=8000 action=redirect to-ports=3128
add chain=scrnat out-interface=public action=masquerade


/ip firewall mangle
add chain=prerouting protocol=icmp action=mark-connection new-connection-mark=icmp-con passthrough=yes comment="" disabled=no
add chain=prerouting protocol=icmp connection-mark=icmp-con action=mark-packet new-packet-mark=icmp-pkt passthrough=no comment="" disabled=no
add chain=prerouting action=mark-connection new-connection-mark=con-up passthrough=yes comment=""
add chain=prerouting action=mark-packet new-packet-mark=all-pkt connection-mark=con-up passthrough=no comment=""
add chain=output content="X-Cache: HIT" action=mark-connection new-connection-mark=proxy-con passthrough=yes comment="" disabled=no
add chain=output connection-mark=proxy-con action=mark-packet new-packet-mark=proxy-pkt passthrough=no comment="" disabled=no
add chain=forward action=mark-connection new-connection-mark=direct-con passthrough=yes comment="" disabled=no
add chain=forward protocol=tcp connection-mark=direct-con action=mark-packet new-packet-mark=all-pkt passthrough=no comment="" disabled=no
add chain=output protocol=tcp connection-mark=direct-con action=mark-packet new-packet-mark=all-pkt passthrough=no comment="" disabled=no


/queue simple
add name="proxy-HIT" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=proxy-pkt direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=0/0 total-queue=default-small disabled=no
add name="Ping-queue" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=icmp-pkt direction=both priority=2 queue=default-small/default-small limit-at=0/0 max-limit=0/0 total-queue=default-small disabled=no
add name="Parent-queue" dst-address=0.0.0.0/0 interface=all parent=none direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=200000/850000 total-queue=default-small disabled=no

/queue simple
add name="Billing" target-addresses=192.168.0.2 dst-address=0.0.0.0/0 interface=all parent=Parent-queue packet-marks=all-pkt direction=both priority=3 queue=default-small/default-small limit-at=20000/85000 max-limit=32000/100000 total-queue=default-small disabled=no
add name="1" target-addresses=192.168.0.3 dst-address=0.0.0.0/0 interface=all parent=Parent-queue packet-marks=all-pkt direction=both priority=3 queue=default-small/default-small limit-at=20000/85000 max-limit=32000/100000 total-queue=default-small disabled=no
add name="2" target-addresses=192.168.0.4 dst-address=0.0.0.0/0 interface=all parent=Parent-queue packet-marks=all-pkt direction=both priority=3 queue=default-small/default-small limit-at=20000/85000 max-limit=32000/100000 total-queue=default-small disabled=no
add name="3" target-addresses=192.168.0.5 dst-address=0.0.0.0/0 interface=all parent=Parent-queue packet-marks=all-pkt direction=both priority=3 queue=default-small/default-small limit-at=20000/85000 max-limit=32000/100000 total-queue=default-small disabled=no
add name="4" target-addresses=192.168.0.6 dst-address=0.0.0.0/0 interface=all parent=Parent-queue packet-marks=all-pkt direction=both priority=3 queue=default-small/default-small limit-at=20000/85000 max-limit=32000/100000 total-queue=default-small disabled=no
add name="5" target-addresses=192.168.0.7 dst-address=0.0.0.0/0 interface=all parent=Parent-queue packet-marks=all-pkt direction=both priority=3 queue=default-small/default-small limit-at=20000/85000 max-limit=32000/100000 total-queue=default-small disabled=no
add name="6" target-addresses=192.168.0.8 dst-address=0.0.0.0/0 interface=all parent=Parent-queue packet-marks=all-pkt direction=both priority=3 queue=default-small/default-small limit-at=20000/85000 max-limit=32000/100000 total-queue=default-small disabled=no
add name="7" target-addresses=192.168.0.9 dst-address=0.0.0.0/0 interface=all parent=Parent-queue packet-marks=all-pkt direction=both priority=3 queue=default-small/default-small limit-at=20000/85000 max-limit=32000/100000 total-queue=default-small disabled=no
add name="8" target-addresses=192.168.0.10 dst-address=0.0.0.0/0 interface=all parent=Parent-queue packet-marks=all-pkt direction=both priority=3 queue=default-small/default-small limit-at=20000/85000 max-limit=32000/100000 total-queue=default-small disabled=no
add name="9" target-addresses=192.168.0.11 dst-address=0.0.0.0/0 interface=all parent=Parent-queue packet-marks=all-pkt direction=both priority=3 queue=default-small/default-small limit-at=20000/85000 max-limit=32000/100000 total-queue=default-small disabled=no
add name="10" target-addresses=192.168.0.12 dst-address=0.0.0.0/0 interface=all parent=Parent-queue packet-marks=all-pkt direction=both priority=3 queue=default-small/default-small limit-at=20000/85000 max-limit=32000/100000 total-queue=default-small disabled=no


38 comments for "MikroTik Bandwidth Management + Web Proxy"

  1. fleahlitOctober 25, 2011 at 6:22 AM

    Thank's for sharing, itu untuk queue nya yang di limit apaan bos? thx

    ReplyDelete
  2. vleeOctober 26, 2011 at 12:02 PM

    target-addresses=192.168.0.2-12....harusnya cuma packet public,tapi dalam kenyataannya yg proxy HIT juga ikut kelimit...ada solusi bro...xixiixi :)

    ReplyDelete
  3. UnknownMarch 1, 2013 at 9:36 AM

    target for proxy office ?
    I ask ......


    Thank's

    ReplyDelete
  4. UnknownApril 8, 2013 at 2:25 PM

    Interesting information I haven’t been through such information in a long time.
    Unblock Facebook

    ReplyDelete
  5. hennry wijayaMay 12, 2013 at 11:45 PM

    pake post routing dah

    ReplyDelete
  6. AnonymousJuly 3, 2013 at 12:45 PM

    This blog post is really great; the standard stuff of the post is genuinely amazing. Facebook Fans kaufen

    ReplyDelete
  7. UnknownJuly 9, 2013 at 4:19 PM

    I’m sure you will provide the more awesome blogs like these blogs that I’ve enjoyed a lot. manassas web design

    ReplyDelete
  8. UnknownAugust 20, 2013 at 4:36 PM

    The complete blogs are really inconceivable and definitely everyone will share this information. social media marketing virginia

    ReplyDelete
  9. AnonymousAugust 24, 2013 at 5:54 PM

    The vital information in this blogs has allured me. web development Singapore

    ReplyDelete
  10. SinelogixAugust 30, 2013 at 1:17 PM

    Informative information thanks for share
    Web Designer in Bangalore

    ReplyDelete
  11. UnknownSeptember 16, 2013 at 12:18 PM

    I think I have really come on the right place for getting the perfect info. genesis theme framework

    ReplyDelete
  12. NounWEbOctober 17, 2013 at 9:45 AM

    Thanks for sharing
    Proxy website

    ReplyDelete
  13. AnonymousOctober 28, 2013 at 1:10 PM

    Your site is very informative and your articles are wonderful. Niche Marketing

    ReplyDelete
  14. Diverser TelechargementNovember 8, 2013 at 5:11 PM

    Thank's for sharing, Free proxy web online with
    Proxyweb
    dkproxy
    Proxyo

    ReplyDelete
  15. KHALEDNovember 16, 2013 at 2:55 PM


    thank you


    007z

    ReplyDelete
  16. UnknownNovember 16, 2013 at 3:22 PM

    The Info in the blog is out of this world, I so want to read more. comment pirater un compte facebook

    ReplyDelete
  17. UnknownNovember 17, 2013 at 7:36 AM

    Explanation well dear brother thank
    http://www.webfilter-proxy.tk

    ReplyDelete
  18. ademNovember 23, 2013 at 3:20 PM


    World-wide-web proxies differ lots with functions and efficiency. The best web proxies offer you SSL stability, which in turn encrypts communications relating to the end user as well as the proxy. The perfect unwanted effect of SSL is actually to be able to get around censorship restrictions with international locations which in turn reduce access to internet websites. World-wide-web proxies additionally find the money for a few additional possibilities that happen to be distinctive for you to this proxy, such as User Realtor covering up, dessert administration, and advert elimination.

    faceb11k

    casslporxy

    sslproxy1

    007z


    ReplyDelete
  19. AnonymousNovember 27, 2013 at 2:20 PM

    You guys present there are performing an excellent job. social media infographics

    ReplyDelete
  20. UnknownNovember 28, 2013 at 5:27 PM

    Quality stuff may be the key to invite the users to visit begin to see the blog site, that’s what this site provides. infographic

    ReplyDelete
  21. zefezfzefJanuary 19, 2014 at 2:56 PM

    thanks brother for this subject proxy facebook sites for school

    ReplyDelete
  22. jimiFebruary 12, 2014 at 9:54 AM

    awesome !!!!
    school proxy

    ReplyDelete
  23. UnknownFebruary 17, 2014 at 1:21 AM

    Free Proxy usa unblocked Youtube, Facebook, Twitter And For Change Your ip Please entre here Free Proxy USA

    ReplyDelete
  24. UnknownFebruary 17, 2014 at 1:22 AM

    Free Proxy usa unblocked Youtube, Facebook, Twitter And For Change Your ip Please entre here Free Proxy USA

    ReplyDelete
  25. AnonymousFebruary 28, 2014 at 5:57 PM

    Your work is totally appreciative and informative. Magnetic Marketing Dan Kennedy

    ReplyDelete
  26. zakaria amalouMarch 26, 2014 at 4:27 AM

    THANKS FOR this red4proxy

    ReplyDelete
  27. neswApril 1, 2014 at 6:36 AM

    thank you very much i hope that work on my site please help me - See more at

    ssl-4-proxy/

    ReplyDelete
  28. neswApril 7, 2014 at 10:15 PM

    Why Do People Use Web Proxies?
    For most people, web proxies are unknown and usually unexplored territory, however they can be very useful in certain circumstances. Essentially, web proxies are proxy servers which allow you to by-pass filters and blocks which may prevent you from visiting certain websites. Many schools and workplaces have such strong filters in place that people who use their computers cannot even access their hotmail account, let alone social networking sites like MySpace or FaceBook. Furthermore, most people are unaware that governments can block their citizens from visiting certain websites. China, for example, has significant blocks on what its citizens can view over the internet. We should also not assume that Western Countries don't have blocks of their own.

    A sign that a website is being blocked to your IP address is that the page just will not load. You can override such obstructions by taking advantage of a proxy server. Proxy servers work by simply typing in the web address you want to visit into the search box on their web page. You will then visit the website via the proxy's IP address, rather than your own. Chances are, you will now be able to get through to the site.

    If you wish to use a web proxy all the time, rather than just in certain circumstances, you can configure your computer to access the internet via a particular web proxy. This can give you added security if you are concerned that your internet habits could be monitored to use against you in some way. Unfortunately, if the web proxy you choose has been set up by criminals to monitor passwords and to obtain personal financial information you can be in real trouble. It is therefore essential that you take time to research safe and reputable proxy servers.

    Students at schools and universities can be hamstrung by overly tight controls on searches because software protections can cause some terms to be excluded if they have an alternate, negative meaning. Bypassing the security system and accessing a search engine via a proxy server can provide a far broader range of search results to assist with school assignments.

    Of course, we would be naïve to think that school students would only want to bypass their school's computer security for study purposes. Most probably want to talk to their friends on their favorite social networking sites, check their emails or play computer games. These desires will also drive workers to use proxy servers at work.

    There other significant benefits of using a web proxy. Your IP address is hidden which means you cannot be tracked on the internet by marketing companies, spy software, or criminals looking to steal your personal information.

    It is important, however, to understand that you can still be traced via a proxy server, so while you may choose for convenience to bypass controls to view certain websites, make sure that you are not acting illegally. There are real benefits to proxy servers in controlled environments as they can give you the freedom to move as you wish around the internet. However, understand the laws of your country and international laws and act responsibly with proxy servers. They are not a way to cheat law enforcement authorities as log records of proxy servers can be obtained.

    http://www.jobmejlet.com/
    http://www.web-4proxy.com/
    http://www.ssl-4-proxy.com/
    http://www.ooproxy.com/
    http://www.insurance-to-insurance.com/

    ReplyDelete
  29. Send Flower PakistanAugust 5, 2014 at 5:59 PM

    Your nice work is very attractive and impressive.
    Torrentz UK proxy

    ReplyDelete
  30. Send Flower PakistanAugust 15, 2014 at 4:56 PM

    Your detailed blog is very good. Keep doing this work.
    access TorrentCrazy in UK

    ReplyDelete
  31. UnknownFebruary 18, 2015 at 2:30 PM

    This blog is absolutely useful; I love the piece of informative writing. SEO Conference

    ReplyDelete
  32. Mobile App DevelopersOctober 12, 2015 at 6:03 PM

    Very great post. I simply stumbled upon your blog and wanted to say that I have really enjoyed browsing your weblog posts. After all I’ll be subscribing on your feed and I am hoping you write again very soon!

    ReplyDelete
  33. yoyo27February 3, 2017 at 11:19 AM

    sir is this useful in computer shop?i mean, does this script seperates the online gaming & browsing?

    ReplyDelete
  34. UnknownJune 8, 2017 at 8:05 PM

    Wonderful blog.. Thanks for sharing information. its very helpful to me..

    goldenslot slot games
    gclub casino
    gclub


    ReplyDelete
  35. GST TrainingAugust 9, 2017 at 11:11 AM

    Great article, Thanks for your great information, the content is quiet interesting. I will be waiting for your next post.

    ReplyDelete
  36. UnknownMay 11, 2018 at 10:34 PM

    this really helped me a lot..

    Free Proxy Sites
    Best Free Proxy
    Unblocked Proxy Sites
    Free Proxy List
    Proxy Server List

    ReplyDelete
  37. UnknownJuly 11, 2018 at 3:49 PM

    thank for good sharing,....
    โกลเด้นสล็อต
    goldenslot

    ReplyDelete
  38. ADMINMay 15, 2019 at 5:20 AM

    We're simply a mobilizing service, not a "content scraping proxy". We certainly don't place ads around anyone's content either. http://www.privateproxiesreview.com/proxy-to-bypass-websites/

    ReplyDelete