my user facing big problem about browsing..i m trying many things but same result
i think any problem in rules or firewell sitting..please guide for make it correct
[admin@WIFI] > export compact
# nov/16/2013 06:34:19 by RouterOS 5.20
# software id = W5EY-LHT9
#
/interface ethernet
set 0 name=LAN
set 1 name=WAN1
set 2 name=WAN2
set 3 name=WAN3
set 4 disabled=yes name=WAN4
set 5 disabled=yes name=WAN5
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] dns-name=login.gigalink.org hotspot-address=\
10.10.15.1 http-proxy=:8080 login-by=http-chap
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m \
open-status-page=http-login transparent-proxy=yes
add idle-timeout=none keepalive-timeout=2m name="1 Mb" open-status-page=\
http-login rate-limit=256k/900k transparent-proxy=yes
add idle-timeout=none keepalive-timeout=2m name="2 Mb" open-status-page=\
http-login rate-limit=509k/2048k transparent-proxy=yes
add idle-timeout=none keepalive-timeout=2m name="1.5 Mb" open-status-page=\
http-login rate-limit=256k/1500k transparent-proxy=yes
add idle-timeout=none keepalive-timeout=2m name="3 Mb" open-status-page=\
http-login rate-limit=512k/3000k transparent-proxy=yes
add idle-timeout=none keepalive-timeout=2m name="4 Mb" open-status-page=\
http-login rate-limit=1024k/4096k transparent-proxy=yes
add idle-timeout=none keepalive-timeout=2m name="512 Kbps" open-status-page=\
http-login rate-limit=128k/400k shared-users=unlimited transparent-proxy=\
yes
add idle-timeout=none keepalive-timeout=2m name="256 Kbps" rate-limit=\
64k/256k
/ip pool
add name=dhcp_pool1 ranges=10.10.15.2-10.10.15.254
add name="PPPoE pool" ranges=10.10.10.2-10.10.10.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=LAN lease-time=1d name=\
dhcp1
/ip hotspot
add address-pool=dhcp_pool1 addresses-per-mac=1 disabled=no interface=LAN \
name=hotspot1
/ppp profile
set 0 local-address="PPPoE pool" remote-address="PPPoE pool"
add local-address="PPPoE pool" name="512 kbps" rate-limit=128k/512k \
remote-address="PPPoE pool"
add local-address="PPPoE pool" name="1 mbps" rate-limit=128k/1024k \
remote-address="PPPoE pool"
add local-address="PPPoE pool" name="2 mbps" rate-limit=256k/2048k \
remote-address="PPPoE pool"
add local-address="PPPoE pool" name="3 mbps" rate-limit=300k/3032k \
remote-address="PPPoE pool"
add local-address="PPPoE pool" name="4 mbps" rate-limit=512k/4096k \
remote-address="PPPoE pool"
/queue tree
add disabled=yes name="Unlimited Speed" packet-mark=cache-hits parent=\
global-out
add disabled=yes name=skpehits packet-mark=skype parent=global-out
/queue type
add kind=pcq name=pcq-upload-default pcq-classifier=src-address
add kind=pcq name=pcq-download-default pcq-classifier=dst-address
/tool user-manager customer
add backup-allowed=yes disabled=no login=admin password="" \
paypal-accept-pending=no paypal-allowed=no paypal-secure-response=no \
permissions=owner signup-allowed=no time-zone=-00:00
/interface pppoe-server server
add authentication=pap disabled=no interface=LAN max-mru=1488 max-mtu=1488 \
one-session-per-host=yes service-name="PPPoE Server"
/ip address
add address=10.10.15.1/24 interface=LAN
add address=192.168.9.99/24 interface=WAN1
add address=192.168.8.99/24 interface=WAN2
add address=192.168.7.99/24 interface=WAN3
add address=192.168.6.17/24 disabled=yes interface=WAN4
/ip dhcp-client
add default-route-distance=0 disabled=no interface=WAN1
add default-route-distance=0 disabled=no interface=WAN2
add default-route-distance=0 disabled=no interface=WAN3
/ip dhcp-server network
add address=10.10.10.0/24 comment=PPPoE gateway=10.10.10.1
add address=10.10.15.0/24 comment=dhcp gateway=10.10.15.1
/ip dns
set allow-remote-requests=yes max-udp-packet-size=512 servers=8.8.8.8,8.8.4.4
/ip firewall address-list
add address=10.10.15.1 comment="payment reminder custmer uni address" list=\
remind
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here"
add action=add-dst-to-address-list address-list=2_www address-list-timeout=\
12h chain=Remind comment="user monthly payment reminder" \
src-address-list=1_www
add action=add-dst-to-address-list address-list=1_www address-list-timeout=\
12h chain=Remind comment="user monthly payment reminder rule 2" \
src-address-list=1_www
add action=drop chain=input disabled=yes dst-port=8080 in-interface=WAN4 \
protocol=tcp
add action=add-src-to-address-list address-list=knock address-list-timeout=\
15s chain=input disabled=yes dst-port=1337 protocol=tcp
add action=add-src-to-address-list address-list=safe address-list-timeout=15m \
chain=input disabled=yes dst-port=7331 protocol=tcp src-address-list=\
knock
/ip firewall mangle
add action=mark-connection chain=input connection-state=new in-interface=WAN1 \
new-connection-mark=ADSL-1
add action=mark-connection chain=input connection-state=new in-interface=WAN2 \
new-connection-mark=ADSL-2
add action=mark-connection chain=input connection-state=new in-interface=WAN3 \
new-connection-mark=ADSL-3
add action=mark-routing chain=output connection-mark=ADSL-1 new-routing-mark=\
jalur-1 passthrough=no
add action=mark-routing chain=output connection-mark=ADSL-3 new-routing-mark=\
jalur-1 passthrough=no
add action=mark-routing chain=output connection-mark=ADSL-2 new-routing-mark=\
jalur-2 passthrough=no
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=WAN1 new-connection-mark=ADSL-1 per-connection-classifier=\
both-addresses-and-ports:4/0
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=WAN2 new-connection-mark=ADSL-2 per-connection-classifier=\
both-addresses-and-ports:4/1
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=WAN3 new-connection-mark=ADSL-3 per-connection-classifier=\
both-addresses-and-ports:4/1
add action=mark-routing chain=prerouting connection-mark=ADSL-1 in-interface=\
WAN1 new-routing-mark=jalur-1
add action=mark-routing chain=prerouting connection-mark=ADSL-2 in-interface=\
WAN2 new-routing-mark=jalur-2
add action=mark-routing chain=prerouting connection-mark=ADSL-3 in-interface=\
WAN3 new-routing-mark=jalur-3
add action=add-src-to-address-list address-list=skype address-list-timeout=1h \
chain=prerouting disabled=yes
add action=mark-connection chain=forward connection-rate=0-50k disabled=yes \
new-connection-mark=conn_skype protocol=udp src-address-list=skype
add action=mark-connection chain=forward connection-rate=0-50k disabled=yes \
dst-address-list=skype new-connection-mark=conn_skype protocol=udp
add action=mark-packet chain=forward connection-mark=conn_skype disabled=yes \
new-packet-mark=skype passthrough=no
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" to-addresses=0.0.0.0
add action=masquerade chain=srcnat out-interface=WAN1
add action=masquerade chain=srcnat out-interface=WAN2
add action=masquerade chain=srcnat out-interface=WAN3
add action=masquerade chain=srcnat disabled=yes out-interface=WAN4
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
src-address=10.10.15.0/24 to-addresses=0.0.0.0
add action=masquerade chain=srcnat comment="pppoe nat" src-address=10.0.0.0/8
add action=redirect chain=dstnat dst-port=80 protocol=tcp to-ports=8080
add action=dst-nat chain=dstnat dst-port=80 protocol=tcp to-addresses=\
192.168.6.254 to-ports=80
add action=redirect chain=dstnat dst-port=80 protocol=tcp to-addresses=\
0.0.0.0 to-ports=8080
/ip firewall service-port
set pptp ports=1723
/ip hotspot user
add name=dream password=dream123786 profile="4 Mb"
add name=imran password=imran123456 profile="4 Mb"
/ip neighbor discovery
set WAN4 disabled=no
set WAN5 disabled=no
/ip proxy
set cache-administrator=gigalinknetworkfp@gmail.com
/ip proxy access
add action=deny dst-port=80 path=*google_favicon_128.png* redirect-to=\
login.gigalink.org/img/google_favicon_128.png
add dst-port=23-25
add action=deny comment="admin of gn laptop" disabled=yes dst-port=0-35565 \
redirect-to=login.gigalink.org/payment.html src-address=10.10.15.2
add action=deny comment="office pc" disabled=yes dst-port=0-35565 \
redirect-to=login.gigalink.org/payment.html src-address=10.10.15.93
add action=deny dst-host=101com.com
add action=deny dst-host=101order.com
add action=deny dst-host=103bees.com
add action=deny dst-host=123found.com
add action=deny dst-host=123pagerank.com
add action=deny dst-host=180hits.de
add action=deny dst-host=180searchassistant.com
add action=deny dst-host=180solutions.com
add action=deny dst-host=1x1rank.com
add action=deny dst-host=207.net
add action=deny dst-host=247media.com
add action=deny dst-host=24log.com
add action=deny dst-host=24log.de
add action=deny dst-host=24pm-affiliation.com
add action=deny dst-host=2log.com
add action=deny dst-host=2o7.net
add action=deny dst-host=360yield.com
add action=deny dst-host=4affiliate.net
add action=deny dst-host=4d5.net
add action=deny dst-host=50websads.com
add action=deny dst-host=518ad.com
add action=deny dst-host=51yes.com
add action=deny dst-host=600z.com
add action=deny dst-host=777partner.com
add action=deny dst-host=777seo.com
add action=deny dst-host=77tracking.com
add action=deny dst-host=7adpower.com
add action=deny dst-host=7bpeople.com
add action=deny dst-host=7search.com
add action=deny dst-host=99count.com
add action=deny dst-host=a-counter.kiev.ua
add action=deny dst-host=a.0day.kiev.ua
add action=deny dst-host=a.collective-media.net
add action=deny dst-host=a.consumer.net
add action=deny dst-host=a.gismeteo.ru
add action=deny dst-host=a.mktw.net
add action=deny dst-host=a.sakh.com
add action=deny dst-host=a.softpedia.com
add action=deny dst-host=a.ucoz.net
add action=deny dst-host=a.ucoz.ru
add action=deny dst-host=a.wowinterface.com
add action=deny dst-host=a.xanga.com
add action=deny dst-host=a1.dealfindcdn.com
add action=deny dst-host=a32.g.a.yimg.com
add action=deny dst-host=aaddzz.com
add action=deny dst-host=abacho.net
add action=deny dst-host=abc-ads.com
add action=deny dst-host=abz.com
add action=deny dst-host=ac.rnm.ca
add action=deny dst-host=accounts.pkr.com
add action=deny dst-host=acsseo.com
add action=deny dst-host=actionsplash.com
add action=deny dst-host=actualdeals.com
add action=deny dst-host=ad-flow.com
add action=deny dst-host=ad-images.suntimes.com
add action=deny dst-host=ad-pay.de
add action=deny dst-host=ad-rotator.com
/ip route
add distance=1 gateway=192.168.9.254 routing-mark=jalur-1
add distance=1 gateway=192.168.8.254 routing-mark=jalur-2
add distance=1 gateway=192.168.7.254 routing-mark=jalur-3
add disabled=yes distance=1 gateway=192.168.6.254 routing-mark=jalur-3
add distance=1 gateway=192.168.9.254,192.168.8.254,192.168.7.254
/ip service
set www-ssl disabled=no
set api disabled=no
/ppp secret
add name=irfan password=786 profile="2 mbps"
add name=khan password=khan123 profile="4 mbps"
/system clock
set time-zone-name=GMT
/system clock manual
set dst-end="jun/24/2014 00:00:00" dst-start="jun/24/2013 00:00:00"
/system identity
set name=WIFI
/system lcd
set contrast=0 enabled=no port=parallel type=24x4
/system lcd page
set time disabled=yes display-time=5s
set resources disabled=yes display-time=5s
set uptime disabled=yes display-time=5s
set packets disabled=yes display-time=5s
set bits disabled=yes display-time=5s
set version disabled=yes display-time=5s
set identity disabled=yes display-time=5s
set WAN5 disabled=yes display-time=5s
set WAN4 disabled=yes display-time=5s
set WAN3 disabled=yes display-time=5s
set WAN2 disabled=yes display-time=5s
set WAN1 disabled=yes display-time=5s
set LAN disabled=yes display-time=5s
set <pppoe-irfan> disabled=yes display-time=5s
/tool mac-server
add disabled=no
