My World...

2012-08-03T11:33:00.002+09:00

Cara Membuat YM Pingbox Pada Login Page Hotspot

Anda ingin memasang yahoo massenger Pingbox pada login page hotspot anda seperti pada gambar :

Cara membuatnya :

Klik http://id.messenger.yahoo.com/pingbox/
Pilih menu Pingbox™

Tekan tombol Buat Pingbox

Di jendela Pingbox Baru tentukan tema latar belakang, nama tampilan (yaitu nama yang akan terlihat oleh pengujung yang chat), salam sambutan online, pesan saat offline, dan tentukan nama untuk setting kamu ini

Klik tombol simpan

Setelah itu akan muncul layar untuk masuk ke account email Yahoo, masukkan nama dan password email yahoo, jika belum punya daftar saja kan gratis

Akan muncul layar “Pingbox Baru siap ditambahkan ke situs web”, di situ memberikan pilihan apakan akan ke sembarang situs atau situs lain yang tersedia semisal friendster, blogger, wordpress dll

Dibawah akan muncul muncul kode untuk dicopy paste ke login page hotspot kita.

Untuk membypass pingbox,supaya costumer tidak perlu login dulu untuk bisa chat maka dibutuhkan beberapa script di miktorik :

/ip hotspot walled-garden
add action=allow disabled=no dst-host=*sp1.yahoo.com dst-port=80-4767
add action=allow disabled=no dst-host=wgweb.msg.yahoo.com dst-port=80
add action=allow disabled=no dst-host=us.yimg.com dst-port=80
add action=allow disabled=no dst-host=opi.wgweb.msg.yahoo.com dst-port=80
add action=allow disabled=no dst-host=l.yimg.com dst-port=80
add action=allow disabled=no dst-host=img.msg.yahoo.com dst-port=80

2012-07-28T14:32:00.001+09:00

Limit Download Berdasarkan ukuran file

Jika anda ingin membatasi client anda yang suka mendonlod file-file yang ukurannya besar, anda dapat menggunakan scrip berikut ini

Misalkan
Ether1 = Publik
Ether2 = Lokal

1. Buat Connection Mark

/ip firewall mangle
add chain=forward action=mark-connection new-connection-mark=download-con passthrough=yes protocol=tcp in-interface=Publik out-interface=Lokal connection-bytes=662146-4294967295

ket. file dengan ukuran 256kb ke atas akan kena limit

2. Buat Connection Mark

/ip firewall mangle
add chain=forward action=mark-packet new-packet-mark=download-pak passthrough=no protocol=tcp in-interface=Publik out-interface=Lokal connection-mark=download-con

3. Buat queue type

add name=shape kind=pcq pcq-rate=64000 pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=2000

ket. 64000 kecepatan dibatasi 64 kbps

4. Buat queue Tree

add name="queue3" parent=global-out packet-mark=download-pak limit-at=0 queue=shape priority=8 max-limit=64k burst-limit=0 burst-threshold=0 burst-time=0s

ket. 64000 kecepatan dibatasi 64 kbps

2012-07-28T14:08:00.001+09:00

Limit Download extension di mikrotik

Jika anda ingin membatasi pemakaian bandwith, untuk beberapa extensi misalnya exe, rar, zip, mkv, dll misalkan ip client 192.168.10.0/24 berikut caranya :

Copy script berikut ke console mikrotik.

ip firewall filter add chain=forward src-address=192.168.10.0/24 protocol=tcp action=add-dst-to-address-list address-list=limit address-list-timeout=01:00:00 content=.iso comment=iso
ip firewall filter add chain=forward src-address=192.168.10.0/24 protocol=tcp action=add-dst-to-address-list address-list=limit address-list-timeout=01:00:00 content=.exe comment=exe
ip firewall filter add chain=forward src-address=192.168.10.0/24 protocol=tcp action=add-dst-to-address-list address-list=limit address-list-timeout=01:00:00 content=.flv comment=flv
ip firewall filter add chain=forward src-address=192.168.10.0/24 protocol=tcp action=add-dst-to-address-list address-list=limit address-list-timeout=01:00:00 content=.dat comment=dat
ip firewall filter add chain=forward src-address=192.168.10.0/24 protocol=tcp action=add-dst-to-address-list address-list=limit address-list-timeout=01:00:00 content=.mkv comment=mkv
ip firewall filter add chain=forward src-address=192.168.10.0/24 protocol=tcp action=add-dst-to-address-list address-list=limit address-list-timeout=01:00:00 content=.rar comment=rar
ip firewall filter add chain=forward src-address=192.168.10.0/24 protocol=tcp action=add-dst-to-address-list address-list=limit address-list-timeout=01:00:00 content=.zip comment=zip
ip firewall filter add chain=forward src-address=192.168.10.0/24 protocol=tcp action=add-dst-to-address-list address-list=limit address-list-timeout=01:00:00 content=.3gp comment=3gp
ip firewall filter add chain=forward src-address=192.168.10.0/24 protocol=tcp action=add-dst-to-address-list address-list=limit address-list-timeout=01:00:00 content=.mp4 comment=mp4
ip firewall filter add chain=forward src-address=192.168.10.0/24 protocol=tcp action=add-dst-to-address-list address-list=limit address-list-timeout=01:00:00 content=.mp3 comment=mp3
ip firewall filter add chain=forward src-address=192.168.10.0/24 protocol=tcp action=add-dst-to-address-list address-list=limit address-list-timeout=01:00:00 content=.mpeg comment=mpeg
ip firewall filter add chain=forward src-address=192.168.10.0/24 protocol=tcp action=add-dst-to-address-list address-list=limit address-list-timeout=01:00:00 content=.avi comment=avi

ulangi cara di atas jika ingin menambahkan extensi lain

ip firewall mangle add chain=forward protocol=tcp src-address-list=limit action=mark-packet new-packet-mark=limit-bw-by-extension
queue simple add max-limit=32000/64000 packet-marks=limit-bw-by-extension
ket : max-limit=32000/64000 berarti kecepatan donlotnya 64 kbps

2012-07-28T13:14:00.000+09:00

Firewall Mikrotik (New)

Copy script dibawah ini di console mikrotik

[admin@mikrotik] /ip firewall filter>

add chain=forward connection-state=established comment=”allowestablishedconnections”

add chain=forward connection-state=related comment=”allowrelatedconnections”

add chain=forward connection-state=invalid action=drop comment=”dropinvalidconnections”

add chain=virus protocol=udp action=drop dst-port=1

add chain=virus protocol=tcp action=drop dst-port=2

add chain=virus protocol=tcp action=drop dst-port=20

add chain=virus protocol=tcp action=drop dst-port=21

add chain=virus protocol=tcp action=drop dst-port=22

add chain=virus protocol=tcp action=drop dst-port=23

add chain=virus protocol=tcp action=drop dst-port=25

add chain=virus protocol=tcp action=drop dst-port=30

add chain=virus protocol=tcp action=drop dst-port=31

add chain=virus protocol=tcp action=drop dst-port=41

add chain=virus protocol=tcp action=drop dst-port=48

add chain=virus protocol=tcp action=drop dst-port=50

add chain=virus protocol=tcp action=drop dst-port=58

add chain=virus protocol=tcp action=drop dst-port=59

add chain=virus protocol=udp action=drop dst-port=67

add chain=virus protocol=tcp action=drop dst-port=79

add chain=virus protocol=tcp action=drop dst-port=81

add chain=virus protocol=tcp action=drop dst-port=99

add chain=virus protocol=udp action=drop dst-port=104

add chain=virus protocol=tcp action=drop dst-port=113

add chain=virus protocol=tcp action=drop dst-port=119

add chain=virus protocol=tcp action=drop dst-port=121

add chain=virus protocol=tcp action=drop dst-port=123

add chain=virus protocol=tcp action=drop dst-port=133

add chain=virus protocol=tcp action=drop dst-port=135-139

add chain=virus protocol=udp action=drop dst-port=135-139

add chain=virus protocol=tcp action=drop dst-port=142

add chain=virus protocol=tcp action=drop dst-port=146

add chain=virus protocol=udp action=drop dst-port=146

add chain=virus protocol=tcp action=drop dst-port=170

add chain=virus protocol=udp action=drop dst-port=220

add chain=virus protocol=udp action=drop dst-port=228

add chain=virus protocol=udp action=drop dst-port=303

add chain=virus protocol=tcp action=drop dst-port=334

add chain=virus protocol=tcp action=drop dst-port=411

add chain=virus protocol=tcp action=drop dst-port=420

add chain=virus protocol=tcp action=drop dst-port=421

add chain=virus protocol=udp action=drop dst-port=425

add chain=virus protocol=tcp action=drop dst-port=444-447

add chain=virus protocol=udp action=drop dst-port=444-447

add chain=virus protocol=tcp action=drop dst-port=455

add chain=virus protocol=tcp action=drop dst-port=456

add chain=virus protocol=udp action=drop dst-port=462

add chain=virus protocol=tcp action=drop dst-port=513

add chain=virus protocol=udp action=drop dst-port=513

add chain=virus protocol=tcp action=drop dst-port=514

add chain=virus protocol=udp action=drop dst-port=524

add chain=virus protocol=tcp action=drop dst-port=531

add chain=virus protocol=tcp action=drop dst-port=555

add chain=virus protocol=tcp action=drop dst-port=605

add chain=virus protocol=tcp action=drop dst-port=666

add chain=virus protocol=tcp action=drop dst-port=667

add chain=virus protocol=tcp action=drop dst-port=669

add chain=virus protocol=tcp action=drop dst-port=692

add chain=virus protocol=udp action=drop dst-port=738

add chain=virus protocol=tcp action=drop dst-port=777

add chain=virus protocol=tcp action=drop dst-port=808

add chain=virus protocol=tcp action=drop dst-port=911

add chain=virus protocol=udp action=drop dst-port=931

add chain=virus protocol=tcp action=drop dst-port=999

add chain=virus protocol=tcp action=drop dst-port=1000

add chain=virus protocol=tcp action=drop dst-port=1001

add chain=virus protocol=tcp action=drop dst-port=1010-1016

add chain=virus protocol=tcp action=drop dst-port=1020

add chain=virus protocol=tcp action=drop dst-port=1024

add chain=virus protocol=tcp action=drop dst-port=1025

add chain=virus protocol=udp action=drop dst-port=1025

add chain=virus protocol=tcp action=drop dst-port=1035

add chain=virus protocol=tcp action=drop dst-port=1042

add chain=virus protocol=tcp action=drop dst-port=1045

add chain=virus protocol=tcp action=drop dst-port=1049

add chain=virus protocol=tcp action=drop dst-port=1050

add chain=virus protocol=tcp action=drop dst-port=1053

add chain=virus protocol=tcp action=drop dst-port=1054

add chain=virus protocol=udp action=drop dst-port=1067

add chain=virus protocol=udp action=drop dst-port=1070

add chain=virus protocol=tcp action=drop dst-port=1080-1083

add chain=virus protocol=tcp action=drop dst-port=1090

add chain=virus protocol=tcp action=drop dst-port=1095-1098

add chain=virus protocol=tcp action=drop dst-port=1099

add chain=virus protocol=tcp action=drop dst-port=1150-1151

add chain=virus protocol=tcp action=drop dst-port=1170

add chain=virus protocol=udp action=drop dst-port=1200-1201

add chain=virus protocol=tcp action=drop dst-port=1207

add chain=virus protocol=tcp action=drop dst-port=1208

add chain=virus protocol=tcp action=drop dst-port=1212

add chain=virus protocol=tcp action=drop dst-port=1234

add chain=virus protocol=tcp action=drop dst-port=1243

add chain=virus protocol=tcp action=drop dst-port=1245

add chain=virus protocol=tcp action=drop dst-port=1255

add chain=virus protocol=tcp action=drop dst-port=1256

add chain=virus protocol=tcp action=drop dst-port=1269

add chain=virus protocol=udp action=drop dst-port=1270

add chain=virus protocol=tcp action=drop dst-port=1272

add chain=virus protocol=tcp action=drop dst-port=1313

add chain=virus protocol=tcp action=drop dst-port=1338

add chain=virus protocol=tcp action=drop dst-port=1349

add chain=virus protocol=tcp action=drop dst-port=1394

add chain=virus protocol=udp action=drop dst-port=1402

add chain=virus protocol=udp action=drop dst-port=1424

add chain=virus protocol=tcp action=drop dst-port=1441

add chain=virus protocol=tcp action=drop dst-port=1492

add chain=virus protocol=tcp action=drop dst-port=1524

add chain=virus protocol=udp action=drop dst-port=1547

add chain=virus protocol=tcp action=drop dst-port=1568

add chain=virus protocol=udp action=drop dst-port=1580

add chain=virus protocol=udp action=drop dst-port=1590

add chain=virus protocol=tcp action=drop dst-port=1600

add chain=virus protocol=udp action=drop dst-port=1641

add chain=virus protocol=udp action=drop dst-port=1643

add chain=virus protocol=udp action=drop dst-port=1658

add chain=virus protocol=tcp action=drop dst-port=1703

add chain=virus protocol=tcp action=drop dst-port=1777

add chain=virus protocol=udp action=drop dst-port=1776

add chain=virus protocol=tcp action=drop dst-port=1807

add chain=virus protocol=udp action=drop dst-port=1862

add chain=virus protocol=udp action=drop dst-port=1904

add chain=virus protocol=tcp action=drop dst-port=1966

add chain=virus protocol=tcp action=drop dst-port=1967

add chain=virus protocol=tcp action=drop dst-port=1969

add chain=virus protocol=tcp action=drop dst-port=1981

add chain=virus protocol=tcp action=drop dst-port=1999

add chain=virus protocol=tcp action=drop dst-port=2000

add chain=virus protocol=tcp action=drop dst-port=2001

add chain=virus protocol=tcp action=drop dst-port=2023

add chain=virus protocol=tcp action=drop dst-port=2080

add chain=virus protocol=tcp action=drop dst-port=2115

add chain=virus protocol=udp action=drop dst-port=2130

add chain=virus protocol=tcp action=drop dst-port=2140

add chain=virus protocol=udp action=drop dst-port=2140

add chain=virus protocol=tcp action=drop dst-port=2155

add chain=virus protocol=tcp action=drop dst-port=2255

add chain=virus protocol=tcp action=drop dst-port=2283

add chain=virus protocol=tcp action=drop dst-port=2300

add chain=virus protocol=tcp action=drop dst-port=2311

add chain=virus protocol=tcp action=drop dst-port=2330-2339

add chain=virus protocol=udp action=drop dst-port=2339

add chain=virus protocol=tcp action=drop dst-port=2345

add chain=virus protocol=tcp action=drop dst-port=2565

add chain=virus protocol=tcp action=drop dst-port=2583

add chain=virus protocol=tcp action=drop dst-port=2600

add chain=virus protocol=tcp action=drop dst-port=2716

add chain=virus protocol=tcp action=drop dst-port=2773-2774

add chain=virus protocol=tcp action=drop dst-port=2801

add chain=virus protocol=udp action=drop dst-port=2989

add chain=virus protocol=udp action=drop dst-port=2090

add chain=virus protocol=udp action=drop dst-port=2464

add chain=virus protocol=udp action=drop dst-port=2504

add chain=virus protocol=tcp action=drop dst-port=3212

add chain=virus protocol=udp action=drop dst-port=2579

add chain=virus protocol=udp action=drop dst-port=2590

add chain=virus protocol=udp action=drop dst-port=2622

add chain=virus protocol=udp action=drop dst-port=2682

add chain=virus protocol=udp action=drop dst-port=2874

add chain=virus protocol=tcp action=drop dst-port=3000

add chain=virus protocol=tcp action=drop dst-port=3024

add chain=virus protocol=tcp action=drop dst-port=3031

add chain=virus protocol=udp action=drop dst-port=3015

add chain=virus protocol=udp action=drop dst-port=3343

add chain=virus protocol=udp action=drop dst-port=3373

add chain=virus protocol=udp action=drop dst-port=3519

add chain=virus protocol=udp action=drop dst-port=3520

add chain=virus protocol=udp action=drop dst-port=3600

add chain=virus protocol=udp action=drop dst-port=3640

add chain=virus protocol=udp action=drop dst-port=3697

add chain=virus protocol=udp action=drop dst-port=3702

add chain=virus protocol=udp action=drop dst-port=3724

add chain=virus protocol=udp action=drop dst-port=3812

add chain=virus protocol=udp action=drop dst-port=3940

add chain=virus protocol=udp action=drop dst-port=3959

add chain=virus protocol=tcp action=drop dst-port=3128

add chain=virus protocol=tcp action=drop dst-port=3129

add chain=virus protocol=tcp action=drop dst-port=3150

add chain=virus protocol=udp action=drop dst-port=3150

add chain=virus protocol=tcp action=drop dst-port=3456

add chain=virus protocol=tcp action=drop dst-port=3459

add chain=virus protocol=tcp action=drop dst-port=3700

add chain=virus protocol=tcp action=drop dst-port=3777

add chain=virus protocol=tcp action=drop dst-port=3791-3801

add chain=virus protocol=tcp action=drop dst-port=4000

add chain=virus protocol=tcp action=drop dst-port=4092

add chain=virus protocol=tcp action=drop dst-port=4242

add chain=virus protocol=tcp action=drop dst-port=4321

add chain=virus protocol=udp action=drop dst-port=4018

add chain=virus protocol=udp action=drop dst-port=4019

add chain=virus protocol=udp action=drop dst-port=4080

add chain=virus protocol=udp action=drop dst-port=4094

add chain=virus protocol=udp action=drop dst-port=4203

add chain=virus protocol=udp action=drop dst-port=4225

add chain=virus protocol=udp action=drop dst-port=4369

add chain=virus protocol=tcp action=drop dst-port=4444

add chain=virus protocol=tcp action=drop dst-port=4567

add chain=virus protocol=tcp action=drop dst-port=4590

add chain=virus protocol=tcp action=drop dst-port=4950

add chain=virus protocol=udp action=drop dst-port=4451

add chain=virus protocol=udp action=drop dst-port=4594

add chain=virus protocol=udp action=drop dst-port=4755

add chain=virus protocol=udp action=drop dst-port=4770

add chain=virus protocol=udp action=drop dst-port=4879

add chain=virus protocol=udp action=drop dst-port=4956

add chain=virus protocol=udp action=drop dst-port=4962

add chain=virus protocol=udp action=drop dst-port=4984

add chain=virus protocol=udp action=drop dst-port=4974

add chain=virus protocol=tcp action=drop dst-port=5000

add chain=virus protocol=tcp action=drop dst-port=5001

add chain=virus protocol=tcp action=drop dst-port=5002

add chain=virus protocol=tcp action=drop dst-port=5010

add chain=virus protocol=tcp action=drop dst-port=5011

add chain=virus protocol=tcp action=drop dst-port=5025

add chain=virus protocol=tcp action=drop dst-port=5031-5032

add chain=virus protocol=tcp action=drop dst-port=5321

add chain=virus protocol=tcp action=drop dst-port=5333

add chain=virus protocol=tcp action=drop dst-port=5343

add chain=virus protocol=udp action=drop dst-port=5355

add chain=virus protocol=tcp action=drop dst-port=5400-5402

add chain=virus protocol=tcp action=drop dst-port=5512

add chain=virus protocol=tcp action=drop dst-port=5534

add chain=virus protocol=tcp action=drop dst-port=5550

add chain=virus protocol=tcp action=drop dst-port=5555

add chain=virus protocol=tcp action=drop dst-port=5556-5557

add chain=virus protocol=tcp action=drop dst-port=5569

add chain=virus protocol=tcp action=drop dst-port=5637-5638

add chain=virus protocol=tcp action=drop dst-port=5742

add chain=virus protocol=tcp action=drop dst-port=5760

add chain=virus protocol=tcp action=drop dst-port=5880-5889

add chain=virus protocol=tcp action=drop dst-port=6000

add chain=virus protocol=tcp action=drop dst-port=6006

add chain=virus protocol=tcp action=drop dst-port=6286

add chain=virus protocol=tcp action=drop dst-port=6272

add chain=virus protocol=tcp action=drop dst-port=6400

add chain=virus protocol=tcp action=drop dst-port=6661

add chain=virus protocol=tcp action=drop dst-port=6666

add chain=virus protocol=tcp action=drop dst-port=6667

add chain=virus protocol=tcp action=drop dst-port=6669

add chain=virus protocol=tcp action=drop dst-port=6670

add chain=virus protocol=tcp action=drop dst-port=6711

add chain=virus protocol=tcp action=drop dst-port=6712

add chain=virus protocol=tcp action=drop dst-port=6713

add chain=virus protocol=tcp action=drop dst-port=6723

add chain=virus protocol=tcp action=drop dst-port=6771

add chain=virus protocol=tcp action=drop dst-port=6776

add chain=virus protocol=udp action=drop dst-port=6838

add chain=virus protocol=tcp action=drop dst-port=6883

add chain=virus protocol=tcp action=drop dst-port=6912

add chain=virus protocol=tcp action=drop dst-port=6939

add chain=virus protocol=tcp action=drop dst-port=6969-6970

add chain=virus protocol=tcp action=drop dst-port=7000

add chain=virus protocol=tcp action=drop dst-port=7001

add chain=virus protocol=tcp action=drop dst-port=7215

add chain=virus protocol=tcp action=drop dst-port=7300-7308

add chain=virus protocol=tcp action=drop dst-port=7424

add chain=virus protocol=udp action=drop dst-port=7424

add chain=virus protocol=tcp action=drop dst-port=7597

add chain=virus protocol=tcp action=drop dst-port=7626

add chain=virus protocol=tcp action=drop dst-port=7777

add chain=virus protocol=tcp action=drop dst-port=7789

add chain=virus protocol=tcp action=drop dst-port=7891

add chain=virus protocol=tcp action=drop dst-port=7983

add chain=virus protocol=tcp action=drop dst-port=8787

add chain=virus protocol=tcp action=drop dst-port=8988

add chain=virus protocol=tcp action=drop dst-port=8989

add chain=virus protocol=tcp action=drop dst-port=9000

add chain=virus protocol=udp action=drop dst-port=9325

add chain=virus protocol=tcp action=drop dst-port=9400

add chain=virus protocol=tcp action=drop dst-port=9872-9875

add chain=virus protocol=tcp action=drop dst-port=9876

add chain=virus protocol=tcp action=drop dst-port=9878

add chain=virus protocol=tcp action=drop dst-port=9989

add chain=virus protocol=tcp action=drop dst-port=9999

add chain=virus protocol=tcp action=drop dst-port=10000-10005

add chain=virus protocol=udp action=drop dst-port=10067

add chain=virus protocol=tcp action=drop dst-port=10085-10086

add chain=virus protocol=tcp action=drop dst-port=10100

add chain=virus protocol=tcp action=drop dst-port=10101

add chain=virus protocol=udp action=drop dst-port=10167

add chain=virus protocol=tcp action=drop dst-port=10520

add chain=virus protocol=tcp action=drop dst-port=10528

add chain=virus protocol=tcp action=drop dst-port=10607

add chain=virus protocol=udp action=drop dst-port=10666

add chain=virus protocol=tcp action=drop dst-port=11000

add chain=virus protocol=tcp action=drop dst-port=11050-11051

add chain=virus protocol=tcp action=drop dst-port=11223

add chain=virus protocol=tcp action=drop dst-port=12076

add chain=virus protocol=tcp action=drop dst-port=12223

add chain=virus protocol=tcp action=drop dst-port=12345

add chain=virus protocol=tcp action=drop dst-port=12346

add chain=virus protocol=tcp action=drop dst-port=12349

add chain=virus protocol=tcp action=drop dst-port=12361-12363

add chain=virus protocol=udp action=drop dst-port=12623

add chain=virus protocol=tcp action=drop dst-port=12624

add chain=virus protocol=tcp action=drop dst-port=12631

add chain=virus protocol=tcp action=drop dst-port=12754

add chain=virus protocol=tcp action=drop dst-port=13000

add chain=virus protocol=tcp action=drop dst-port=13010

add chain=virus protocol=tcp action=drop dst-port=13013-13014

add chain=virus protocol=tcp action=drop dst-port=13223

add chain=virus protocol=tcp action=drop dst-port=13473

add chain=virus protocol=tcp action=drop dst-port=14500-14503

add chain=virus protocol=tcp action=drop dst-port=15000

add chain=virus protocol=tcp action=drop dst-port=15092

add chain=virus protocol=tcp action=drop dst-port=15104

add chain=virus protocol=tcp action=drop dst-port=15382

add chain=virus protocol=tcp action=drop dst-port=15858

add chain=virus protocol=tcp action=drop dst-port=16484

add chain=virus protocol=tcp action=drop dst-port=16660

add chain=virus protocol=tcp action=drop dst-port=16772

add chain=virus protocol=tcp action=drop dst-port=16959

add chain=virus protocol=tcp action=drop dst-port=16969

add chain=virus protocol=tcp action=drop dst-port=17166

add chain=virus protocol=tcp action=drop dst-port=17300

add chain=virus protocol=tcp action=drop dst-port=17449

add chain=virus protocol=tcp action=drop dst-port=17499-17500

add chain=virus protocol=tcp action=drop dst-port=17569

add chain=virus protocol=tcp action=drop dst-port=17593

add chain=virus protocol=tcp action=drop dst-port=17777

add chain=virus protocol=udp action=drop dst-port=18753

add chain=virus protocol=tcp action=drop dst-port=19864

add chain=virus protocol=tcp action=drop dst-port=20000

add chain=virus protocol=tcp action=drop dst-port=20001

add chain=virus protocol=tcp action=drop dst-port=20002

add chain=virus protocol=tcp action=drop dst-port=20005

add chain=virus protocol=tcp action=drop dst-port=20023

add chain=virus protocol=tcp action=drop dst-port=20034

add chain=virus protocol=tcp action=drop dst-port=20203

add chain=virus protocol=tcp action=drop dst-port=20331

add chain=virus protocol=tcp action=drop dst-port=20432

add chain=virus protocol=udp action=drop dst-port=20433

add chain=virus protocol=tcp action=drop dst-port=21544

add chain=virus protocol=tcp action=drop dst-port=21554

add chain=virus protocol=tcp action=drop dst-port=22222

add chain=virus protocol=tcp action=drop dst-port=23005-23006

add chain=virus protocol=tcp action=drop dst-port=23023

add chain=virus protocol=tcp action=drop dst-port=23032

add chain=virus protocol=tcp action=drop dst-port=23432

add chain=virus protocol=tcp action=drop dst-port=23456

add chain=virus protocol=tcp action=drop dst-port=23476

add chain=virus protocol=udp action=drop dst-port=23476

add chain=virus protocol=tcp action=drop dst-port=23477

add chain=virus protocol=tcp action=drop dst-port=23777

add chain=virus protocol=tcp action=drop dst-port=24000

add chain=virus protocol=tcp action=drop dst-port=25685-25982

add chain=virus protocol=udp action=drop dst-port=26274

add chain=virus protocol=tcp action=drop dst-port=26681

add chain=virus protocol=tcp action=drop dst-port=27374

add chain=virus protocol=udp action=drop dst-port=27444

add chain=virus protocol=tcp action=drop dst-port=27573

add chain=virus protocol=tcp action=drop dst-port=27665

add chain=virus protocol=tcp action=drop dst-port=28678

add chain=virus protocol=tcp action=drop dst-port=29104

add chain=virus protocol=tcp action=drop dst-port=29369

add chain=virus protocol=tcp action=drop dst-port=29891

add chain=virus protocol=tcp action=drop dst-port=30000

add chain=virus protocol=tcp action=drop dst-port=30001

add chain=virus protocol=tcp action=drop dst-port=30003

add chain=virus protocol=tcp action=drop dst-port=30029

add chain=virus protocol=tcp action=drop dst-port=30100-30133

add chain=virus protocol=udp action=drop dst-port=30103

add chain=virus protocol=tcp action=drop dst-port=30303

add chain=virus protocol=tcp action=drop dst-port=30947

add chain=virus protocol=tcp action=drop dst-port=30999

add chain=virus protocol=tcp action=drop dst-port=31335

add chain=virus protocol=tcp action=drop dst-port=31336

add chain=virus protocol=tcp action=drop dst-port=31337

add chain=virus protocol=udp action=drop dst-port=31337

add chain=virus protocol=tcp action=drop dst-port=31338

add chain=virus protocol=udp action=drop dst-port=31338

add chain=virus protocol=tcp action=drop dst-port=31339

add chain=virus protocol=tcp action=drop dst-port=31666

add chain=virus protocol=tcp action=drop dst-port=31785-31792

add chain=virus protocol=udp action=drop dst-port=31791-31792

add chain=virus protocol=tcp action=drop dst-port=32001

add chain=virus protocol=tcp action=drop dst-port=32100

add chain=virus protocol=tcp action=drop dst-port=32418

add chain=virus protocol=tcp action=drop dst-port=33270

add chain=virus protocol=tcp action=drop dst-port=33333

add chain=virus protocol=tcp action=drop dst-port=33577-33777

add chain=virus protocol=tcp action=drop dst-port=33911

add chain=virus protocol=tcp action=drop dst-port=34324

add chain=virus protocol=tcp action=drop dst-port=34444

add chain=virus protocol=udp action=drop dst-port=34555-35555

add chain=virus protocol=tcp action=drop dst-port=37237

add chain=virus protocol=tcp action=drop dst-port=37651

add chain=virus protocol=tcp action=drop dst-port=40412

add chain=virus protocol=tcp action=drop dst-port=40421

add chain=virus protocol=tcp action=drop dst-port=40422-40426

add chain=virus protocol=tcp action=drop dst-port=41337

add chain=virus protocol=tcp action=drop dst-port=41666

add chain=virus protocol=tcp action=drop dst-port=44444

add chain=virus protocol=tcp action=drop dst-port=44575

add chain=virus protocol=udp action=drop dst-port=47262

add chain=virus protocol=tcp action=drop dst-port=49301

add chain=virus protocol=tcp action=drop dst-port=50130

add chain=virus protocol=tcp action=drop dst-port=50505

add chain=virus protocol=tcp action=drop dst-port=50766

add chain=virus protocol=tcp action=drop dst-port=51966

add chain=virus protocol=tcp action=drop dst-port=52317

add chain=virus protocol=tcp action=drop dst-port=53001

add chain=virus protocol=tcp action=drop dst-port=54283

add chain=virus protocol=tcp action=drop dst-port=54320

add chain=virus protocol=tcp action=drop dst-port=54321

add chain=virus protocol=tcp action=drop dst-port=55165

add chain=virus protocol=tcp action=drop dst-port=55166

add chain=virus protocol=tcp action=drop dst-port=57341

add chain=virus protocol=tcp action=drop dst-port=58339

add chain=virus protocol=tcp action=drop dst-port=60000

add chain=virus protocol=tcp action=drop dst-port=60001

add chain=virus protocol=tcp action=drop dst-port=60068

add chain=virus protocol=tcp action=drop dst-port=60411

add chain=virus protocol=tcp action=drop dst-port=61348

add chain=virus protocol=tcp action=drop dst-port=61466

add chain=virus protocol=tcp action=drop dst-port=61603

add chain=virus protocol=tcp action=drop dst-port=63485

add chain=virus protocol=tcp action=drop dst-port=64101

add chain=virus protocol=tcp action=drop dst-port=64875

add chain=virus protocol=tcp action=drop dst-port=65000

add chain=virus protocol=tcp action=drop dst-port=65390

add chain=virus protocol=tcp action=drop dst-port=65421

add chain=virus protocol=tcp action=drop dst-port=65432

add chain=virus protocol=udp action=drop dst-port=65432

add chain=virus protocol=tcp action=drop dst-port=65534

add chain=virus protocol=tcp action=drop dst-port=65535

add chain=virus protocol=udp action=drop dst-port=4112

add chain=virus protocol=udp action=drop dst-port=1194

add chain=virus protocol=udp action=drop dst-port=2865

add chain=virus protocol=udp action=drop dst-port=5000

add chain=virus protocol=udp action=drop dst-port=3629

add chain=virus protocol=udp action=drop dst-port=12009

add chain=virus protocol=udp action=drop dst-port=12975

add chain=virus protocol=udp action=drop dst-port=1723

add chain=virus protocol=udp action=drop dst-port=1224

add chain=virus protocol=udp action=drop dst-port=4090

add chain=virus protocol=udp action=drop dst-port=32976

add chain=virus protocol=udp action=drop dst-port=7785

add chain=virus protocol=udp action=drop dst-port=7784

add chain=virus protocol=udp action=drop dst-port=7842

add chain=virus protocol=udp action=drop dst-port=1900

add chain=virus protocol=tcp action=drop dst-port=6005

add chain=virus protocol=udp action=drop dst-port=7783

add chain=virus protocol=tcp action=drop dst-port=64874

add chain=virus protocol=udp action=drop dst-port=49026

add chain=virus protocol=udp action=drop dst-port=25482

add chain=virus protocol=udp action=drop dst-port=16001

add chain=virus protocol=udp action=drop dst-port=10761

add chain=virus protocol=udp action=drop dst-port=7659

add chain=virus protocol=udp action=drop dst-port=7167

add chain=virus protocol=udp action=drop dst-port=5972

add chain=virus protocol=udp action=drop dst-port=5891

add chain=virus protocol=tcp action=drop dst-port=6881

add chain=virus protocol=udp action=drop dst-port=5355

add chain=virus protocol=udp action=drop dst-port=51575

add chain=virus protocol=tcp action=drop dst-port=64874

add chain=virus protocol=tcp action=drop dst-port=40013-40015

add chain=virus protocol=udp action=drop dst-port=40001-40031

add chain=virus protocol=udp action=drop dst-port=16464

add chain=virus protocol=tcp action=drop dst-port=8103

add chain=forward action=jump jump-target=virus comment="jump to the virus chain"

add chain=forward action=accept protocol=tcp dst-port=80 comment=”AllowHTTP”

add chain=forward action=accept protocol=tcp dst-port=443 comment=”Allowhttps”

add chain=forward protocol=tcp comment=”allowTCP”

add chain=forward protocol=icmp comment=”allowping”

add chain=forward protocol=udp comment=”allowudp”

add chain=forward action=drop comment=”dropeverythingelse”

Load balancing pcc mikrotik

2011-11-29T16:03:00.000+09:00

Trik ini sudah kami coba dan Alhamdulillah berhasil...

kami menggunakan RB750 dengan 5 port, berikut konfigurasinya

/ip address
add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=Local
add address=192.168.1.2/24 network=192.168.1.0 broadcast=192.168.1.255 interface=WAN1
add address=192.168.2.2/24 network=192.168.2.0 broadcast=192.168.2.255 interface=WAN2

/ip dns set allow-remote-requests=yes cache-max-ttl=1w cache-size=5000KiB max-udp-packet-size=512 servers=221.132.112.8,8.8.8.8

/ip firewall mangle
add chain=input in-interface=WAN1 action=mark-connection new-connection-mark=WAN1_conn
add chain=input in-interface=WAN2 action=mark-connection new-connection-mark=WAN2_conn

add chain=output connection-mark=WAN1_conn action=mark-routing new-routing-mark=to_WAN1
add chain=output connection-mark=WAN2_conn action=mark-routing new-routing-mark=to_WAN2

add chain=prerouting dst-address=192.168.1.0/24 action=accept in-interface=Local
add chain=prerouting dst-address=192.168.2.0/24 action=accept in-interface=Local

add chain=prerouting dst-address-type=!local in-interface=Local per-connection-classifier=both-addresses-and-ports:2/0 action=mark-connection new-connection-mark=WAN1_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=Local per-connection-classifier=both-addresses-and-ports:2/1 action=mark-connection new-connection-mark=WAN2_conn passthrough=yes

add chain=prerouting connection-mark=WAN1_conn in-interface=Local action=mark-routing new-routing-mark=to_WAN1
add chain=prerouting connection-mark=WAN2_conn in-interface=Local action=mark-routing new-routing-mark=to_WAN2

/ip route
add dst-address=0.0.0.0/0 gateway=192.168.1.1 routing-mark=to_WAN1 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.2.1 routing-mark=to_WAN2 check-gateway=ping

add dst-address=0.0.0.0/0 gateway=192.168.1.1 distance=1 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.2.1 distance=2 check-gateway=ping

/ip firewall nat
add chain=srcnat out-interface=WAN1 action=masquerade
add chain=srcnat out-interface=WAN2 action=masquerade

Menulis Huruf Arab dengan Nonosoft Khot

2011-07-02T16:01:00.007+09:00

Nonosoft KHOT, merupakan program editor teks khusus yang digunakan untuk menulis dengan font Arab yang disertai tanda harokat (fatha, kasra, domma, tasdid, sukun, dsb). Nonosoft KHOT mempunyai sistem penulisan berbeda (tidak kompatibel) dengan sistem arabic bawaan Windows, sehingga dokumen yang huruf-huruf arabnya diketik menggunakan Nonosoft KHOT tidak bisa diedit oleh editor arabic semacam Office Arabic ataupun semua editor yang menggunakan sistem unicode dalam penulisan arabicnya, begitu pula sebaliknya.

Dengan demikian Nonosoft KHOT tidak memiliki kemampuan seperti editor yang menggunakan sistem arabic unicode, dimana dalam perubahan bentuk huruf dan format paragraf sepenuhnya diatur oleh lingkungan windows. Selain itu sifat tulisan arabnya tidak universal, misalnya tidak bisa langsung digunakan pada penulisan huruf arab di website atau semua aplikasi online tanpa menyertakan/menginstal font-font pendukungnya pada komputer user.

Meski dengan keterbasan-keterbatasan tersebut, Nonosoft KHOT juga mempunyai fitur yang tidak terdapat pada editor-editor yang lain. Dan memang pemilihan sistem penulisan arabic yang berbeda dengan bawaan windows, sudah diniatkan sejak awal pengembangan agar Nonosoft KHOT memiliki ciri tersendiri diantara berbagai software editor teks arab yang ada. Karena fasilitas pengaturan dokumennya belum sebaik MS-Office, Adobe, Corel atau software-software yang sudah mapan dan dikembangkan oleh perusahaan-perusahaan besar, maka pengoperasian Nonosoft KHOT (jika untuk kebutuhan layout/percetakan) ebaiknya digunakan bersama editor-editor teks/gambar tersebut agar mendapatkan hasil yang maksimal.

Untuk mendukung hal itu, pada proses copy/paste di versi 3 sudah ditambahkan beberapa format selain RTF (Rich Text Format) yang sudah ada sejak versi 1, yaitu format HTML, Image Metafile dan Bitmap. Dengan kemampuan copy/paste dalam beberapa format tersebut, menjadikan tulisan arab dari Nonosoft KHOT dapat dipindah ke berbagai editor teks/gambar dengan mudah.

Untuk demo dan pemesanan Nonosoft KHOT 3 silahkan kunjungi http://www.nonosoft.jifisa.net/

Atau anda ingin mencoba Nonosoft khot versi 2.0.3 full version silahkan download disini dan petujuk penggunaannya download disini dan program virtual drive Alkohol 120% download disini

Al-Qur'an In Word For MS Office 2003 & 2007

2011-07-01T16:17:00.002+09:00

Al-Qur'an In Word adalah Program Aplikasi yang berguna untuk menyisipkan ayat-ayat Al-qur'an dan terjemahan berbahasa Indonesia kedalam Dokumen anda. Jika anda menggunakan Microsoft Office Word 2003 & 2007 maka gunakanlah Al-Qur'an In Word 1.3, dan jika anda belum punya softwarenya segera download AL-quran in word disini. Dan jika anda juga belum tahu cara penggunaanya silahkan ikuti langkah-langkah berikut ini:

1. Install terlebih dahulu Al-Qur'an In Word 1.3 yang sudah anda Download tadi
2. Setelah Installasi selesai, silahkan buka Microsoft Office Word 2003 & 2007, akan muncul Tab Menu baru dengan nama Add-Ins seperti terlihat pada gambar dibawah ini:

Pada MS Office 2003

Pada MS Office 2007

3. Klik Al-Qur'an pada tab Menu Add-Ins, kemudian akan muncul beberapa pilihan:
- Get Arabic-Translation: Untuk menyisipkan Ayat Al-Qur'an lengkap dengan Terjemahan bahasa Indonesianya
- Get Arabic: Untuk menyisipkan Ayat Al-Qur'an saja.
- Get Translation: Untuk menyisipkan terjemahan bahasa Indonesianya saja.
- Automatic Replace : Untuk mengganti secara otomatis.
- About: Untuk melihat Versi dan Pembuat Al-Qur'an In Word

Pada contoh ini kita Pilih Get Arabic-Translation, akan muncul dialog box seperti berikut:

- Pilih Surat yang akan anda sisipkan
- Pilih juga ayat berapa sampai berapa pada surat tersebut yang akan ditampilkan.
- Pilih besarnya Font yang akan digunakan
- Beri tanda centang Indonesia pada Translation
- Klik OK, akan muncul tampilan seperti berikut:

Motivasi Keajaiban Rejeki

2011-07-01T15:10:00.004+09:00

Saat ini mungkin kita sedang mengejar sesuatu yang disebut dengan sukses. Kita mengeluarkan segala upaya, pikiran, tenaga, modal, penderitaan, dan sebagainya demi sebuah kata sukses.
Berikut Audio mp3 motivasi-motivasi sukses dari bonus cd buku "Percepatan Rejeki Dalam 40 Hari Dengan Otak Kanan" Karya Ippho Santosa

Nasrullah download disini
Setyawan download disini
Mono download disini
Karsono download disini
Rofik download disini
Eddy download disini
Arya download disini
Kusnadi download disini

Ceramah Ust. Yusuf Mansyur

2011-07-01T14:14:00.011+09:00

Bagi saudaraku yang ingin download ceramah Ust. Yusuf Mansyur Tentang Keajaiban Sedekah dan Shalat Duha silahkan di link berikut:

KunFayakun side A donwload disini
KunFayakun side B download disini
Penawar Kesulitan Hidup-1 donwload disini
Penawar Kesulitan Hidup-2 download disini
Sedekah dengan Harta Tercinta-1 download disini
Sedekah dengan Harta Tercinta-2 download disini
Harta dan Jodoh-1 download disini
Harta dan Jodoh-2 download disini
Harta dan Jodoh download disini
Akibat Meninggalkan Shalat-1 download disini
Akibat Meninggalkan Shalat-2 download disini
Sedekah Dapat Rumah Download disini
Efek Harta Haram-1 Download disini
Efek Harta Haram-1 Download disini
Yakin Pertolongan Allah-1 Download Disini
Yakin Pertolongan Allah-2 Download disini

EV-DO

2011-06-22T15:51:00.002+09:00

EVDO, juga dikenal dengan EV-DO, 1xEvDO dan 1xEV-DO merupakan sebuah standard pada wireless broadband berkecepatan tinggi. EVDO adalah singkatan dari "Evolution, Data Only" atau "Evolution, Data optimized". Istilah resminya dikeluarkan oleh Assosiasi Industri Telekomunikasi yaitu CDMA2000, merupakan interface data berkecepatan tinggi pada media udara. EVDO satu dari dua macam standar utama wireless Generasi ke-3 atau 3G. adapun standart yang lainnya adalah W-CDMA.

Latar Belakang

3G desain untuk meningkatkan kecepatan data maupun voice dengan memanfaatkan jaringan telepon seluler yang telah ada. Dimana, kendala utama untuk menerapkan jaringan nirkabel berkecepatan tinggi adalah minimnya bandwidth, atau range frekuensi yang dapat dipakai. Dengan banyaknya frekuensi radio yang dapat ditekan/dirampingkan pada gelombang FM, maka tidak terlalu banyak data yang bisa memnfaatkan bandwidt tersebut. EVDO yang mengembangkan teknologi yang dikembangkan oleh Qualcomm dapat memecahkan masalah ini.

Cara Kerja

CDMA, Coded Division Multiple Access, menggunakan metode matematis untuk dapat melewatkan multiple wireless devices untuk mengirim data secara bersamaan pada frekuensi yang sama. Setiap perangkat, seperti telepon seluler, ditandai dengan tanda unik matematis. Tanda Unik tersebut diterapkan pada sinyal asli dan dikirim sebagai sinyal modified. Penerima juga menerapkan invers tanda matematika dari sinyal kirim untuk mendapatkan sinyal asli.

Jaringan Nirkabel dulunya memanfaatkan sebuah penghalang antara pengirim dan penerima, seperti kebanyakan telepon tradisional. EVDO, sebagai penggantinya mengadopsi pendekatan yang sama untuk internet. IP, Internet Protocol, memecah data pada pada pecahan kecil yang kemudian disebut paket. Tiap paket dikirim secara independen terhadap Paket yang lain. Tentu hal ini akan mengirit bandwidth yang memungkinkan dipakai oleh perangkat lain; ketika tak ada percakapan telepon pastinya juga tidak ada paket yang lewat karena tidak ada paket yang dikirim. atau ketika sebuah web site diakses, tidak akan ada bandwidth yang dipakai sampai site tersebut mulai mengirim web pages.

Secara teori EVDO mampu melewatkan 2.4 megabits per second. Tentu saja ini lebih cepat dari DSL dan broadband cable yang ada. Pada sebuah video conference di Amerika, yang digunakan oleh seseorang yang berada di dalam kendaraan pada kecepatan 60 mil/jam (90km/jam), sedangkan pada demo yang lain sebuah telepon dicoba dari sebuah bullet train yang bergerak melebihi 150 mil/jam (240 km/jam).
Kelebihan EVDO dibandingkan CDMA biasa, tentu lebih mengirit spektrum frekuensi dari regulator dan amat mahal pastinya, menurunkan biaya pengembangan dan memanfaatkan jaringan baru. di amerika EVDO dipakai oleh Verizon dan Sprint,di Korea Juga digunakan. Saat artikel ini dibuat EVDO tidak terlalu berpengaruh di pasar Eropa dan Sebagian besar Asia karena di Wilayah tersebut telah memilih 3G sebagai pilihan mereka. Namun Demikian di Indonesia telah ada beberapa operator yang memakai teknologi EVDO.

source : http://id.wikipedia.org/wiki/EV-DO

Menambah / Menulis Al-Qur'an di Office Word 2003/2007

2011-04-06T16:03:00.007+09:00

Ayat-ayat suci Al Quran dapat anda sisipkan ke dalam dokumen Word, anda hanya perlu menginstal plug in Al Quran (freeware) dari situs http://myquran.org/msword/ atau disini
Setelah pulg in terinstal, maka kita dapat mengetik huruf arab atau menampilkan tulisan arab yang telah tersedia dalam plugin tersebut.

Berikut panduan menggunakan plug in Al Quran di Word

1. Download bagian yang ditunjuk oleh panah (Indonesi transtalion included)

2. setelah selesai mendownload, Install ke komputer anda, jika terinstall dengan benar, maka pada saat membuka Word, di menubar akan muncul Menu baru (Al Quran) seperti di bawah ini

Untuk menginsert ayat-ayat Al Quran ke dokumen, pilih Get Arabic + translation

3. Pada kotak dialog yang muncul pilih Surat yang akan dimasukkan ke word, contoh:
Surat : 001. Al Faatihah
Ayat : 1 s/d 1
Translation : Centang Indonesia

4. Klik OK. Jika berhasil maka akan muncul tulisan arab (ayat Al faatihah) dan terjemahannya.

Penghitungan Subneting

2010-05-22T15:09:00.004+09:00

Penghitungan Subneting

Setelah anda membaca artikel Konsep Subnetting dan memahami konsep Subnetting dengan baik. Kali ini saatnya anda mempelajari teknik penghitungan subnetting. Penghitungan subnetting bisa dilakukan dengan dua cara, cara binary yang relatif lambat dan cara khusus yang lebih cepat. Pada hakekatnya semua pertanyaan tentang subnetting akan berkisar di empat masalah: Jumlah Subnet, Jumlah Host per Subnet, Blok Subnet, dan Alamat Host- Broadcast.

Penulisan IP address umumnya adalah dengan 192.168.1.2. Namun adakalanya ditulis dengan 192.168.1.2/24, apa ini artinya? Artinya bahwa IP address 192.168.1.2 dengan subnet mask 255.255.255.0. Lho kok bisa seperti itu? Ya, /24 diambil dari penghitungan bahwa 24 bit subnet mask diselubung dengan binari 1. Atau dengan kata lain, subnet masknya adalah: 11111111.11111111.11111111.00000000 (255.255.255.0). Konsep ini yang disebut dengan CIDR (Classless Inter-Domain Routing) yang diperkenalkan pertama kali tahun 1992 oleh IEFT.

Pertanyaan berikutnya adalah Subnet Mask berapa saja yang bisa digunakan untuk melakukan subnetting? Ini terjawab dengan tabel di bawah:

Subnet Mask	Nilai CIDR
255.128.0.0	/9
255.192.0.0	/10
255.224.0.0	/11
255.240.0.0	/12
255.248.0.0	/13
255.252.0.0	/14
255.254.0.0	/15
255.255.0.0	/16
255.255.128.0	/17
255.255.192.0	/18
255.255.224.0	/19

Subnet Mask	Nilai CIDR
255.255.240.0	/20
255.255.248.0	/21
255.255.252.0	/22
255.255.254.0	/23
255.255.255.0	/24
255.255.255.128	/25
255.255.255.192	/26
255.255.255.224	/27
255.255.255.240	/28
255.255.255.248	/29
255.255.255.252	/30

SUBNETTING PADA IP ADDRESS CLASS C

Ok, sekarang mari langsung latihan saja. Subnetting seperti apa yang terjadi dengan sebuah NETWORK ADDRESS 192.168.1.0/26 ?

Analisa: 192.168.1.0 berarti kelas C dengan Subnet Mask /26 berarti 11111111.11111111.11111111.11000000 (255.255.255.192).

Penghitungan: Seperti sudah saya sebutkan sebelumnya semua pertanyaan tentang subnetting akan berpusat di 4 hal, jumlah subnet, jumlah host per subnet, blok subnet, alamat host dan broadcast yang valid. Jadi kita selesaikan dengan urutan seperti itu:

Jumlah Subnet = 2^x, dimana x adalah banyaknya binari 1 pada oktet terakhir subnet mask (2 oktet terakhir untuk kelas B, dan 3 oktet terakhir untuk kelas A). Jadi Jumlah Subnet adalah 2² = 4 subnet

Jumlah Host per Subnet = 2^y – 2, dimana y adalah adalah kebalikan dari x yaitu banyaknya binari 0 pada oktet terakhir subnet. Jadi jumlah host per subnet adalah 2⁶ – 2 = 62 host

Blok Subnet = 256 – 192 (nilai oktet terakhir subnet mask) = 64. Subnet berikutnya adalah 64 + 64 = 128, dan 128+64=192. Jadi total subnetnya adalah 0, 64, 128, 192.

Bagaimana dengan alamat host dan broadcast yang valid? Kita langsung buat tabelnya. Sebagai catatan, host pertama adalah 1 angka setelah subnet, dan broadcast adalah 1 angka sebelum subnet berikutnya.

Subnet	192.168.1.0	192.168.1.64	192.168.1.128	192.168.1.192
Host Pertama	192.168.1.1	192.168.1.65	192.168.1.129	192.168.1.193
Host Terakhir	192.168.1.62	192.168.1.126	192.168.1.190	192.168.1.254
Broadcast	192.168.1.63	192.168.1.127	192.168.1.191	192.168.1.255

Kita sudah selesaikan subnetting untuk IP address Class C. Dan kita bisa melanjutkan lagi untuk subnet mask yang lain, dengan konsep dan teknik yang sama. Subnet mask yang bisa digunakan untuk subnetting class C adalah:

Subnet Mask	Nilai CIDR
255.255.255.128	/25
255.255.255.192	/26
255.255.255.224	/27
255.255.255.240	/28
255.255.255.248	/29
255.255.255.252	/30

SUBNETTING PADA IP ADDRESS CLASS B
Berikutnya kita akan mencoba melakukan subnetting untuk IP address class B. Pertama, subnet mask yang bisa digunakan untuk subnetting class B adalah:

Subnet Mask	Nilai CIDR
255.255.128.0	/17
255.255.192.0	/18
255.255.224.0	/19
255.255.240.0	/20
255.255.248.0	/21
255.255.252.0	/22
255.255.254.0	/23

Subnet Mask	Nilai CIDR
255.255.255.0	/24
255.255.255.128	/25
255.255.255.192	/26
255.255.255.224	/27
255.255.255.240	/28
255.255.255.248	/29
255.255.255.252	/30

Ok, kita coba satu soal untuk Class B dengan network address 172.16.0.0/18.
Analisa: 172.16.0.0 berarti kelas B, dengan Subnet Mask /18 berarti 11111111.11111111.11000000.00000000 (255.255.192.0).
Penghitungan:

Jumlah Subnet = 2^x, dimana x adalah banyaknya binari 1 pada 2 oktet terakhir. Jadi Jumlah Subnet adalah 2² = 4 subnet

Jumlah Host per Subnet = 2^y – 2, dimana y adalah adalah kebalikan dari x yaitu banyaknya binari 0 pada 2 oktet terakhir. Jadi jumlah host per subnet adalah 2¹⁴ – 2 = 16.382 host

Blok Subnet = 256 – 192 = 64. Subnet berikutnya adalah 64 + 64 = 128, dan 128+64=192. Jadi total subnetnya adalah 0, 64, 128, 192.

Alamat host dan broadcast yang valid?

Subnet	172.16.0.0	172.16.64.0	172.16.128.0	172.16.192.0
Host Pertama	172.16.0.1	172.16.64.1	172.16.128.1	172.16.192.1
Host Terakhir	172.16.63.254	172.16.127.254	172.16.191.254	172.16.255.254
Broadcast	172.16.63.255	172.16.127.255	172.16.191.255	172.16..255.255

Masih bingung? Ok kita coba satu lagi untuk Class B.Bagaimana dengan network address 172.16.0.0/25.
Analisa: 172.16.0.0 berarti kelas B, dengan Subnet Mask /25 berarti 11111111.11111111.11111111.10000000 (255.255.255.128).
Penghitungan:

Jumlah Subnet = 2⁹ = 512 subnet

Jumlah Host per Subnet = 2⁷ – 2 = 126 host

Blok Subnet = 256 – 128 = 128.

Alamat host dan broadcast yang valid?

Subnet	172.16.0.0	172.16.0.128	172.16.1.0	…	172.16.255.128
Host Pertama	172.16.0.1	172.16.0.129	172.16.1.1	…	172.16.255.129
Host Terakhir	172.16.0.126	172.16.0.254	172.16.1.126	…	172.16.255.254
Broadcast	172.16.0.127	172.16.0.255	172.16.1.127	…	172.16.255.255

Masih bingung juga? Ok sebelum masuk ke Class A, coba ulangi lagi dari Class C, dan baca pelan-pelan
SUBNETTING PADA IP ADDRESS CLASS A
Kalau sudah mantab dan paham, kita lanjut ke Class A. Konsepnya semua sama saja. Perbedaannya adalah di OKTET mana kita mainkan blok subnet. Kalau Class C di oktet ke 4 (terakhir), kelas B di Oktet 3 dan 4 (2 oktet terakhir), kalau Class A di oktet 2, 3 dan 4 (3 oktet terakhir). Kemudian subnet mask yang bisa digunakan untuk subnetting class A adalah semua subnet mask dari CIDR /8 sampai /30.
Kita coba latihan untuk network address 10.0.0.0/16.
Analisa: 10.0.0.0 berarti kelas A, dengan Subnet Mask /16 berarti 11111111.11111111.00000000.00000000 (255.255.0.0).
Penghitungan:

Jumlah Subnet = 2⁸ = 256 subnet

Jumlah Host per Subnet = 2¹⁶ – 2 = 65534 host

Blok Subnet = 256 – 255 = 1. Jadi subnet lengkapnya: 0,1,2,3,4, etc.

Alamat host dan broadcast yang valid?

Subnet	10.0.0.0	10.1.0.0	…	10.254.0.0	10.255.0.0
Host Pertama	10.0.0.1	10.1.0.1	…	10.254.0.1	10.255.0.1
Host Terakhir	10.0.255.254	10.1.255.254	…	10.254.255.254	10.255.255.254
Broadcast	10.0.255.255	10.1.255.255	…	10.254.255.255	10.255.255.255

Mudah-mudahan sudah setelah anda membaca paragraf terakhir ini, anda sudah memahami penghitungan subnetting dengan baik. Kalaupun belum paham juga, anda ulangi terus artikel ini pelan-pelan dari atas. Untuk teknik hapalan subnetting yang lebih cepat, tunggu di artikel berikutnya

Catatan: Semua penghitungan subnet diatas berasumsikan bahwa IP Subnet-Zeroes (dan IP Subnet-Ones) dihitung secara default. Buku versi terbaru Todd Lamle dan juga CCNA setelah 2005 sudah mengakomodasi masalah IP Subnet-Zeroes (dan IP Subnet-Ones) ini. CCNA pre-2005 tidak memasukkannya secara default (meskipun di kenyataan kita bisa mengaktifkannya dengan command ip subnet-zeroes), sehingga mungkin dalam beberapa buku tentang CCNA serta soal-soal test CNAP, anda masih menemukan rumus penghitungan Jumlah Subnet = 2^x – 2

REFERENSI

Todd Lamle, CCNA Study Guide 5th Edition, Sybex, 2005.

Module CCNA 1 Chapter 9-10, Cisco Networking Academy Program (CNAP), Cisco Systems.

Hendra Wijaya, Cisco Router, Elex Media Komputindo, 2004.

source : http://yoyok.wordpress.com/2007/09/14/penghitungan-subneting/

Standart 802.11a/b/g/n

2010-02-04T11:52:00.005+09:00

Standart 802.11a/b/g/n

* 802.11a

Selesai diratifikasi dan dirilis Oktober 1999. Standar wireless network dengan maksimum data transfer rate 54 Mbps dan bekerja pada frekuensi 5 GHz. Metode transmisi yang digunakan adalah Orthogonal Frequency Division Multiplexing (OFDM), yang mengizinkan pentransmisian data secara paralel di dalam sub-frekuensi (resisten terhadap interferensi dengan gelombang lain). Range maksimal untuk indoor hanya sekitar 15 meter/ ± 50 ft. Sedangkan outdoor ± 100 ft/30 meter. Standar 802.11a tidak kompatibel dengan 802.11 b,g

* 802.11b

Muncul di pasaran awal tahun 2000. Standar wireless network dengan maksimum data transfer rate 5.5 Mbps dan/atau 11 Mbps dan bekerja pada frekuensi 2,4 GHz. Dikenal juga dengan IEEE 802.11 HR. Pada prakteknya, kecepatan maksimum yang dapat diraih mencapai 5.9 Mbps pada protokol TCP, dan 7.1 Mbps pada protokol UDP. Metode transmisi yang digunakannya adalah DSSS. memiliki range area yang lebih panjang (~150 feet/45 meters di dalam indoor dan ~300 feet/90 meter dalam outdoor)

* 802.11g

Dipublikasikan pada bulan Juni 2003 mampu mencapai kecepatan hingga 54 Mbps pada pita frekuensi 2,4 GHz, sama seperti halnya IEEE 802.11 biasa dan IEEE 802.11b. Standar wireless network yang hampir sama dengan 802.11b tetapi metode transmisi yang digunakan adalah OFDM (sama dengan 802.11a). Range area ~150 feet/45 meter untuk indoor dan ~300 feet/90 meter untuk outdoor.

* 802.11n

Baru saja dirilis 11 September 2009. Secara teoritis, dapat mencapai kecepatan 600 Mbps. Namun, setelah Wi-Fi Alliance menguji, hanya mencapai kecepatan maksimum 450 Mbps. Bekerja pada frekuensi 2,4 GHz dan/atau 5 GHz. Sama seperti teknologi MIMO (multiple-input multiple-output), 802.11n bekerja dengan cara mengutilisasi banyak komponen pemancar dan penerima sinyal sehingga transmisi data dapat dilakukan paralel untuk meningkatkan nilai throughput (50-144 Mbps). Range maksimal untuk indoor 70 meter sedangkan outdoor bisa mencapai 250 meter. Wi-Fi 802.11n ini akan diaplikasikan di device router dan adapter.

source : http://hendri.staff.uns.ac.id/2009/12/wifi-802-11-a-b-g-n/

Limit Youtube Video Streaming from mikrotik

2009-09-22T06:48:00.005+09:00

1. Make http-video layer7-protocol

/ip firewall layer7-protocol add name=http-video
regexp=http/(0\.9|1\.0|1\.1)[\x09-\x0d ][1-5][0-9][0-9][\x09-\x0d -~]*(content-type: video)

2. Make Mangle Mark Packet http-video

/ip firewall mangle
add action=mark-packet chain=forward
comment="http-video mark-packet" disabled=no
layer7-protocol=http-video new-packet-mark=http-video passthrough=no

3. Make Queue Simple http-video

/queue simple
add max-limit=0/64000 name=http-video packet-marks=http-video

Install Webmin di Ubuntu Server

2009-09-14T09:45:00.004+09:00

Webmin adalah aplikasi bantu untuk memudahkan manajemen server kita. Selain web-base webmin juga mudah dimengerti bagi yang masih baru (seperti saya) dalam dunia ubuntu. Bagi yang menggunakan ubuntu server, silahkan ikuti petujuk dibawah ini, :

Untuk menginstall Webmin yang diperlukan adalah :

* ubuntu server yang terhubung dengan internet

Setelah syarat diatas terpenuhi anda lakukan 6 langkah dibawah ini :

1. ketikan perintah "sudo vi /etc/apt/sources.list"
2. setelah terbuka isikan baris berikut ini pada baris yang paling bawah :
"deb http://download.webmin.com/download/repository sarge contrib" (tanpa tanda kutip)
3. Setelah itu tutup dan simpan dengan mengetikkan ":wq" (tanpa tanda kutip)
4. Lakukan update source dengan mengetikkan "apt-get update" (tanpa tanda kutip), Tunggu sampai selesai
5. lalu instal webmin dengan mengetikkan "sudo apt-get install webmin" tekan Y/yes jika ada pertanyaan
6. Tunggu dan nikmati aplikasi bantu server anda

Menggunakan webmin mudah dan sangat "user friedly". ohya karena webmin menggunakan port 10000 maka jika anda mengetikkan di browser tambahi dengan https://ip-ubuntu-server:10000. Demikian semoga Webmin bisa membantu dalam memudahkan memanage server anda.

Mendalami HTB pada QoS RouterOS Mikrotik

2009-09-12T10:37:00.002+09:00

Implementasi QoS (Quality of Services) di Mikrotik banyak bergantung pada sistem HTB (Hierarchical Token Bucket). HTB memungkinkan kita membuat queue menjadi lebih terstruktur, dengan melakukan pengelompokan-pengelompokan bertingkat. Yang banyak tidak disadari adalah, jika kita tidak mengimplementasikan HTB pada Queue (baik Simple Queue maupun Queue Tree), ternyata ada beberapa parameter yang tidak bekerja seperti yang kita inginkan.Beberapa parameter yang tidak bekerja adalah priority, dan dual limitation (CIR / MIR).

Pada pembahasan artikel ini, kita akan mengambil contoh sebuah sistem QoS sederhana, di mana kita ingin mengalokasikan bandwidth sebesar 400kbps untuk 3 client, di mana masing-masing client bisa mendapatkan maksimal 200kbps. Di antara ketiga client tersebut, memiliki prioritas yang berbeda, yaitu: 1,2, dan 3.

Untuk mempermudah pemantauan dan pembuktian, kita akan menggunakan queue tree.

Cara paling mudah untuk melakukan queue dengan queue tree, adalah dengan menentukan parameter :
parent (yang harus diisi dengan outgoing-interface),
packet-mark (harus dibuat terlebih dahulu di ip-firewall-mangle),
max-limit (yang merupakan batas kecepatan maksimum), atau dikenal juga dengan MIR (Maximum Information Rate)
Untuk percobaan awal, semua priority diisi angka yang sama: 8, dan parameter limit-at tidak kita isi. Gambar berikut ini adalah ilustrasi apa yang akan terjadi dengan konfigurasi di atas.

Karena alokasi bandwidth yang tersedia hanya 400kbps, sedangkan total akumulasi ketiga client melebihinya (600 kbps), maka ketiga client akan saling berebut, dan tidak bisa diprediksikan siapa yang akan menang (menggunakan bandwidth secara penuh) dan siapa yang akan kalah (tidak mendapatkan bandwidth yang sesuai).

Misalkan q1 adalah client dengan prioritas tertinggi, dan q3 adalah client dengan prioritas terbawah. Kita akan mencoba memasukkan nilai prioritas untuk masing-masing client sesuai dengan prioritasnya.

Tampak pada gambar di atas, meskipun sekarang q1 sudah memiliki prioritas tertinggi, namun ketiga client masih berebutan bandwidth dan tidak terkontrol.

Gambar berikut akan mencoba mengimplementasikan nilai limit-at. Seharusnya, limit-at adalah CIR (Committed Information Rate), merupakan parameter di mana suatu client akan mendapatkan bandwidthnya, apapun kondisi lainnya, selama bandwidthnya memang tersedia.

Ternyata q1 masih tidak mendapatkan bandwidth sesuai dengan limit-at (CIR) nya. Padahal, karena bandwidth yang tersedia adalah 400kbps, seharusnya mencukupi untuk mensuplai masing-masing client sesuai dengan limit-at nya.

Berikutnya, kita akan menggunakan parent queue, dan menempatkan ketiga queue client tadi sebagai child queue dari parent queue yang akan kita buat. Pada parent queue, kita cukup memasukkan outgoing-interface pada parameter parent, dan untuk ketiga child, kita mengubah parameter parent menjadi nama parent queue. Pertama-tama, kita belum akan memasukkan nilai max-limit pada parent-queue, dan menghapus semua parameter limit-at pada semua client.

Tampak pada contoh di atas, karena kita tidak memasukkan nilai max-limit pada parent, maka priority pada child pun belum bisa terjaga.

Setelah kita memasang parameter max-limit pada parent queue, barulah prioritas pada client akan berjalan.

Tampak pada contoh di atas, q1 dan q2 mendapatkan bandwidth hampir sebesar max-limitnya, sedangkan q3 hampir tidak kebagian bandwidth. Prioritas telah berjalan dengan baik. Namun, pada kondisi sebenarnya, tentu kita tidak ingin ada client yang sama sekali tidak mendapatkan bandwidth.

Untuk itu, kita perlu memasang nilai limit-at pada masing-masing client. Nilai limit-at ini adalah kecepatan minimal yang akan di dapatkan oleh client, dan tidak akan terganggu oleh client lainnya, seberapa besarpun client lainnya 'menyedot' bandwidth, ataupun berapapun prioritasnya. Kita memasang nilai 75kbps sebagai limit-at di semua client.

Tampak bahwa q3, yang memiliki prioritas paling bawah, mendapatkan bandwidth sebesar limit-at nya. q1 yang memiliki prioritas tertinggi, bisa mendapatkan bandwidth sebesar max-limitnya, sedangkan q2 yang prioritasnya di antara q1 dan q3, bisa mendapatkan bandwidth di atas limit-at, tapi tidak mencapai max-limit. Pada contoh di atas, semua client akan terjamin mendapatkan bandwidth sebesar limit-at, dan jika ada sisa, akan dibagikan hingga jumlah totalnya mencapai max-limit parent, sesuai dengan prioritas masing-masing client.

Jumlah akumulatif dari limit-at tidaklah boleh melebihi max-limit parent. Jika hal itu terjadi, seperti contoh di bawah ini, jumlah limit-at ketiga client adalah 600kbps, sedangkan nilai max-limit parent hanyalah 400kbps, maka max-limit parent akan bocor. Contoh di bawah ini mengasumsikan bahwa kapasitas keseluruhan memang bisa mencapai nilai total limit-at. Namun, apabila bandwidth yang tersedia tidak mencapai total limit-at, maka client akan kembali berebutan dan sistem prioritas menjadi tidak bekerja.

Sedangkan, mengenai max-limit, max-limit sebuah client tidak boleh melebihi max-limit parent. Jika hal ini terjadi, maka client tidak akan pernah mencapai max-limit, dan hanya akan mendapatkan kecepatan maksimum sebesar max-limit parent (lebih kecil dari max-limit client).

Jika semua client memiliki prioritas yang sama, maka client akan berbagi bandwidth sisa. Tampak pada contoh di bawah ini, semua client mendapatkan bandwidth yang sama, sekitar 130kbps (total 400kbps dibagi 3).

Yang perlu diingat mengenai HTB:
HTB hanya bisa berjalan, apabila rule queue client berada di bawah setidaknya 1 level parent, setiap queue client memiliki parameter limit-at dan max-limit, dan parent queue harus memiliki besaran max-limit.
Jumlah seluruh limit-at client tidak boleh melebihi max-limit parent.
Max-limit setiap client harus lebih kecil atau sama dengan max-limit parent.
Untuk parent dengan level tertinggi, hanya membutuhkan max-limit (tidak membutuhkan parameter limit-at).
Untuk semua parent, maupun sub parent, parameter priority tidak diperhitungkan. Priority hanya diperhitungkan pada child queue.
Perhitungan priority baru akan dilakukan setelah semua limit-at (baik pada child queue maupun sub parent) telah terpenuhi.
Panduan praktis cara perhitungan limit-at dan max-limit

Di asumsikan bandwidth yang tersedia sebesar 1000kbps. Dan jumlah seluruh client adalah 70. Yang perlu diketahui adalah :
Berapa jumlah maksimal client yang menggunakan internet pada saat yang bersamaan. Jumlah ini belum tentu sama dengan jumlah komputer yang ada, apabila semua client tidak pernah terkoneksi secara bersamaan. Sebagai contoh, untuk kasus ini kita asumsikan adalah 50.
Berapa jumlah minimal client yang menggunakan internet pada saat yang bersamaan. Sebagai contoh, untuk kasus ini kita asumsikan adalah 10
Maka, untuk setiap client (1 client dibuatkan 1 rule queue), limit-at nya adalah 1000 / 50 = 20kbps, dan max-limit nya adalah 1000 / 10 = 100 kbps.

Jangan lupa untuk menambahkan parent dengan max-limit sebesar 1000kbps (tidak perlu limit-at), dan memasukkan semua queue client di bawah parent queue. Jika untuk terminal tertentu membutuhkan priority lebih besar, maka kita bisa menggunakan priority yang berbeda-beda, tergantung dengan urutan prioritasnya.

source : www.mikrotik.co.id

Squid zph (Zero Penalty Hit) and Mikrotik

2009-09-12T06:48:00.006+09:00

Bonus tambahan dari squid 2.7-stable3 adalah fungsi zph yang sudah terintegrasi.

ZPH sendiri adalah Zero Penalty Hit, penjelasan-nya bisa dibaca di http://zph.bratcheda.org/

Pada 2.7 sudah masuk dalam core engine squid.
Sebelum versi 2.7 harus melakukan patch.

Ide dari pemakaian ZPH ini adalah ketika memutar video dari youtube, masih terjadi delay karena terkena limit di mikrotik. Dari forum.mikrotik.com disebutkan pemakaian zph untuk memarking paket TCP_HIT.

Dengan mengedit sekian baris di squid dan penambahan 2 rule di mikrotik, akhirnya paket TCP_HIT pun dapat di baypass. Semua request dari klient mendapat traffic full sebesar local-loop yang dipunyai.

#tcp_outgoing_tos 0x30 localnet
zph_mode tos
zph_local 0x30
zph_parent 0
zph_option 136

Di mikrotik di bagian firewall mangle ditambahkan.

Untuk Mikrotik v.2.xx

/ ip firewall mangle
add chain=prerouting action=mark-packet new-packet-mark=proxy-hit
passthrough=no tos=48 comment="squid" disabled=no

Untuk Mikrotik v.3.xx

/ ip firewall mangle
add chain=prerouting action=mark-packet new-packet-mark=proxy-hit
passthrough=no dscp=12 comment="squid" disabled=no

Di bagian Queue, pada baris paling atas.

/ queue simple
add name="Proxy" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=proxy-hit
direction=both priority=1 queue=default-small/default-small limit-at=0/0 max-limit=0/0
total-queue=default-small disabled=no

Gambar topologi yang saya pakai seperti dibawah ini.

Paket marking zph juga masih bisa dikenali di router hotspot.

Jadi pelanggan hotspot akan merasakan loading konten yang cepat bila konten tersebut sudah ada dicache squid.

Tampilan grafik zph in action

source :
http://human.network.web.id/2008/07/03/squid-zph-and-mikrotik/
http://mum.mikrotik.com/presentations/EG07/sunday.pdf

802.11b WLAN Waveguide Antennas Unidirectional & Omnidirectional High gain, Simple construction

2009-08-15T08:45:00.004+09:00

Waveguides? Aren't they a bit complicated?

In a word, Yes! Microwave technology is pretty esoteric, and it used to be reserved for the "spooks" designing electronic warfare systems, radars, and the like.

But microwave equipment has been steadily penetrating into mainstream applications. Microwave ovens (operating at 2.4GHz) have already been with us for several decades. These have been joined by satellite dishes and LNBs operating at 10GHz and more recently, multichannel 2.4GHz cordless phones.

Microwave technology seems complex because we have left the boffins in charge for too long. Microwave text books have been written by academics who revel in every detailed equation. But you don't really need to know about Poynting vectors or Maxwell's equations to deploy a really effective Wireless LAN. Let me show you how simple it really is...

What is the 2.4GHz ISM Band?

Wireless networking systems using the 802.11b standard operate in the 2.4GHz ISM band. Other services, including microwave ovens, medical equipment, and cordless phones also operate in the ISM band. The IEEE 802.11b standard defines how WLAN networking will be configured, and how interference can be minimized from the other services operating at the same frequencies.

Channel ID	US/Canada	Europe	France	Spain	Japan
1	2412	2412	-	-	2412
2	2417	2417	-	-	2417
3	2422	2422	-	-	2422
4	2427	2427	-	-	2427
5	2432	2432	-	-	2432
6	2437	2437	-	-	2437
7	2442	2442	-	-	2442
8	2447	2447	-	-	2447
9	2452	2452	-	-	2452
10	2457	2457	2457	2457	2457
11	2462	2462	2462	2462	2462
12	-	2467	2467	-	2467
13	-	2472	2472	-	2472
14	-	-	-	-	2484

A WLAN receiver can use any of these channels, and can automatically hop from channel to channel if interference is encountered. An 802.11b antenna for the US and Canada should radiate well between 2410 and 2460 MHz.

Slotted Waveguide Antennas

Unlike wideband antennas like the biquad, slotted waveguides are resonant antennas, and have a relatively narrow operating frequency range. The designs I am describing on this page have an adequate bandwidth for any WLAN, but they have been carefully designed and must be equally carefully constructed.

The major attraction of a slotted waveguide design is its simplicity. Once you have built the first one it is very simple to build many more.

The gain varies little across the 802.11b spectrum, dropping a little bit at the extreme ends.

How I Produced These Designs and Charts

These slotted waveguide designs are the result of lengthy simulation using Zeland Software's Fidelity and IE3D electromagnetic simulators. Fidelity is much better at modelling waveguide structures than my favorite simulator, NEC2, but it is quite an expensive package, with a long learning curve...

Simulation can give you much more information about the performance of a microwave antenna than you get from building it. This is because there are severe limitations in the accuracy of measurements at microwave frequencies. Simulation makes it easier to see subtle interdependencies that would be very difficult to measure. In this case, I used the simulation to tell me how the antennas should behave, and then verified the performance both in my lab and on my antenna 'test range'. The results were surprisingly accurate - and attest to the quality of the Zeland Fidelity software.

How a Waveguide Antenna Works

A waveguide is a very low loss transmission line. It allows us to propagate signals to a number of smaller antennas (slots). The signal is coupled into the waveguide with a simple coaxial probe, and as it travels along the guide it traverses the slots. Each of these slots allows a little of the energy to radiate. The slots are in a linear array pattern, and the total of all the radiated signals adds up to a very significant power gain over a small range of angles close to the horizon. In other words, the waveguide antenna transmits almost all of its energy at the horizon, usually exactly where we want it to go. Its exceptional directivity in the elevation plane gives it quite high power gain. Additionally, unlike vertical colinear antennas, the slotted waveguide transmits its energy using HORIZONTAL polarization, the best type for distance transmission.

At left we can see a graphical representation of the E field intensity shortly after starting excitation of an 8 slot waveguide. The slots are to the left of the image. The coaxial probe is at the lower end of the image, and the field can be seen to be clumped at maxima every half wavelength as they travel up the waveguide. The waveguide airspace takes up the middle 1/2 of the bluespace, the rest is air infront of (to the left) and behind (to the right) the antenna.

If you click here you can bring up a Windows Media Format Movie version. An MPEG-1 version is at this link. You can see the wave travelling up the waveguide from the probe. The intensity of the E field is given by the color. Here we have primarily blue colors, about -40dB on the final (red) intensity which is achieved once the resonance is fully excited. When the signal first gets to the top and starts reflecting back down the air column it is still green, about -30dB from its ultimate intensity. Reflections are also occuring from the plug at the bottom of the airspace, and the sum effect of all these, including continual drive from the coaxial probe, allows the intensity to build up through yellow and red (0db) signal levels. You can see the signal radiating out the slots at the left of the image. The radiation intensity is less at the top than at the bottom in an 8 slot design, it is hard to radiate perfectly with such a limited number of slots.

Unidirectional Waveguide Antennas

I am going to describe two unidirectional designs. The first has 8 slots and is about 30 inches long. The second has 16 slots and is about 5 feet long. Simple to construct, the 8-slot has been provided as a good starting point for an antenna novice. I built my 8 slot prototype using only hand tools.

Simple 8 slot Unidirectional

High

Performance 16 slot Unidirectional

The 16 slot design has been made to radiate over a wider beamwidth by the addition of "wings" to each side of the guide, flush with the front (slotted) surface. It is, of necessity, higher Q, and the higher gain is obtained over a narrower bandwidth. They can be expanded aluminium or sheet, and should extend 9.6 inches beyond the sides of the guide. They act as a ground plane for the slots. Do not change this dimension, it is two electrical wavelengths.

Omnidirectional Slotted Waveguide Antennas

The slotted waveguide has achieved most of its success when used in an omnidirectional role. It is the simplest way to get a real 15dBi gain over 360 degrees of beamwidth.

Horizontal Polarization in a wide area network can often double the number of users that can interconnect without interference. When using horizontally polarized BiQuads, or Patch antennas (provided that they have been tested for good cross-polarization performance) at the client site, these omnis will be 20 dB stronger than the signal from a similar vertical collinear. Conversely, vertically polarized receiver antennas will prefer the vertically polarized colinear over the slotted waveguide by a similar amount. Transmission on an immediately adjacent channel, (say, channels 5 or 7), normally not permissible because of interference, is now possible. So a judicious intermingling of horizontally polarized clients can talk with a horizontal central station on the same or adjacent channels that other clients are using with vertical polarization.

To make the unidrectional antenna radiate over the entire 360 degrees of azimuth, a second set of slots are cut in the back face of the waveguide. When looking stright at the face of the waveguide you will be able to see straight through both slots.

Unfortunately, unless a lot of slots are used, the antenna becomes more like a bidirectional radiator, rather than an omnidirectional. This antenna was invented in the 40's, and as our simulation and measurement technologies have become more accurate it is apparent that the slotted waveguide designs we have used in the past are far from optimum. The most common defect is a 'tilt' in the radiation pattern at the extreme ends of the frequency range. This occurs when the wavelength of the signal travelling down the guide differs from the slot spacing.

My current favorite uses 32 slots to get 15dBi of gain, radiated in a uniformly omnidirectional manner. The large number of slots makes it easier to dissipate the energy from the waveguide. Like with the 16 slot unidirectional, two sets of "wings (one set at each slot surface) are required to get equal radiation of energy over a full 360 degrees. Note that a higher Q is necessary to get all the slots illuminated evenly.

Note that the gain vs frequency curve is peaked at 2440, and it radiates well over all 14 channels.

Highly Directional Slotted Waveguide Antennas

Sometimes it is useful to have a highly directional antenna. For example, when installing a point-to-point link between two buildings it is not desirable to have a wide angle of coverage. Any interference from other 802.11b devices (or microwave ovens) that are in the radiation zone will affect your link integrity.

The ideal antenna for such a situation is a dish, such such as the Primestar dish. When using my Biquad feed, it is possible to reject interference outside the dish's primary 5 degree cone by 30 dB or more.

But, if a 16 slot waveguide antenna is turned to a horizontal position, parallel with the ground, it will radiate vertical polarization. Its directivity in this plane is extremely good. As you can see from the diagram to the left, most of the spurious lobes are more than 20 dB down from the main signal, and they are very narrow (click to enlarge the image). This performance is comparable with my commercial HP2419G Parabolic Grid Antenna...

So, if you don't have a dish handy, consider the possibility of using a pair of these slotted waveguides, parallel to the ground. They will work well. Very well...

Constructional Details for the 8 Slot Unidirectional Antenna

The base extrusion for all my slotted waveguides is 4 inch by 2 inch O.D. rectangular aluminum tubing with approx 1/8 inch thick walls. Inside dimensions are 3.756x1.756 inches (95.4mm x 44.6mm). These inside dimensions are critical, and must be within +- 0.040 inches or +-1mm if the antenna center frequency is to be +- 1 channel. I cut the end inserts from a 5/16 inch by 1 3/4 inch flat aluminum bar extrusion. There - those are the last dimensions I will give in inches, as millimetres are a much more accurate way to describe the dimensions for a microwave antenna. Waveguide antennas are fairly critical in their constructional dimensions, and are easiest to make with a CNC milling machine. I have computed these designs so that they would be easy to replicate, and if you are plus or minus 1 mm the design will work fine - but you must be careful. I used a jig, a hand operated DeWalt heavy duty cut-out tool, a 1/4 inch router bit, and lots of water to 'machine' my slots, and it worked fine (even if it was a little tedious).

"Please machine this slot to 59.417mm in length"

In the days before computing power was free, engineers spent their whole careers deriving formulae to try and describe the operation and design of Slotted Waveguides. You can find designs specified to 1 or 2 decimal places of a millimeter, but I have rounded everything off to the nearest millimeter. Since it was relatively easy for me to "build" structure after structure in the electromagnetic simulator, an understanding of the inter-dependance of each parameter came quite quickly. That understanding takes away the 'black magic' that used to be associated with design of these antenna systems.

Really folks - plus or minus 1 mm will not kill your antenna!

Coupling the Signal Into the Waveguide

As I said above, we are propagating the WLAN signal down a waveguide and then using it to excite a number of elemental radiators, or slots. The first task is to get the signal into the waveguide with a feed probe. Obtain a suitable N connector, for example, the one from Amphenol in Figure 2 of this catalog page. Take a piece of 20mmx40mm copper or brass shim, cut the red portion and form it into the shape of a cone. Solder it to the inner conductor of your Type N connector (see photo). Its length should be 20mm, its largest diameter about 15mm. When soldered to the N connector it should protrude exactly into the center of the waveguide and no further.

Both ends of the waveguide need to be terminated for RF, and the easiest way I found to do this was to cut 3.75 inch pieces (darn - there are those inches again - I will be excommunicated from the microwave community at this rate...) of 5/16 by 1.75 aluminum bar stock. I do not recommend that you make the end plugs sloppily, but good electrical contact is not required.

Remember not to have any screws protruding into the waveguide for more than 1/8 inch, especially the screws holding down the N connector. They will affect performance.

For the 8+8 slot omnidirectional antenna:

The total length of air inside the 8+8 slot omnidirectional waveguide, from end to end, is 765mm. Mount the N connector in the center of the widest side, 27.5mm from one end (the 'base') of the airspace in the waveguide and offset 10 mm from the centre line of the face, in the direction as the offset of the first slot.. The wavelength of the radiation passing down the waveguide is longer than a wavelength in free air (it is 161mm in this design).

The first slot is centered 1.0 wavelength from the base, at a maximum of the H field in the waveguide. This length is 161mm from the base of the airspace. It is the H component of the field that induces the energy into the slots, and makes them radiate. Each slot is 59mm long, and extends outwards from the centerline for a width of 17mm. The waveguide excites each edge of the slot depending on its position across the wide surface of the guide. If it straddled the exact centre, each edge of the slot would be excited in anti-phase, and there would be no radiation. So we offset the edges of the slots, the more the offset the greater is the energy that is dissipated into each slot. The electrical length of each slot should be 59mm. Do not allow too much kerf at the ends (2 mm radius max). I recommend finishing the cut with a 1/8 inch router bit (or a file). Or you might use the 1/8 bit in a CNC machine to cut the entire rectangular outline. Remember, even though these slots are arranged vertically they radiate horizontal polarization.

For the 8+8 omnidirectional, slots 2 thru 8 are centered at distances of 241, 322, 403, 483, 564, 644 and 724mm from the base of the airspace, staggerred across the centerline. It doesn't matter which direction the first one is cut, but they must alternate. The end plate should create a 765 mm airspace. Looking straight on at the front of the guide you can see right through both the front and back slots.

For the 8 slot Unidirectional:

The total length of air inside the 8 slot unidirectional, from end to end, is 760mm. Mount the N connector in the center of the widest side, 25mm from the base of the airspace in the waveguide. The wavelength of the radiation passing down the waveguide is 160mm in this design. The first slot is centered 1.0 wavelength from the base, at a maximum of the H field in the waveguide. This length is 160mm from the base of the airspace. Each slot is 58mm long, and extends outwards from the centerline for a width of 20mm. The waveguide excites each edge of the slot depending on its position across the wide surface of the guide. If it straddled the exact centre, each edge of the slot would be excited in anti-phase, and there would be no radiation. So we offset the edges of the slots, the more the offset the greater is the energy that is dissipated into each slot. The electrical length of each slot should be 59mm. Do not allow too much kerf at the ends. Remember, even though these slots are arranged vertically they radiate horizontal polarization.

Slots 2 thru 8 are centered at distances of 240, 320, 400, 480, 560, 640 and 720mm from the base of the airspace, staggerred across the centerline. It doesn't matter which direction the first one is cut, but they must alternate. The end plate should be to create a 760mm airspace.

Constructional Details for 16 and 16+16 Slot Design

The correct wavelength for these designs is 161mm. The gain for the 16 slot Unidirectional is 15dBi-17dBi, verified on my test range, across the whole band. On the range the 16 slotter gives slightly higher gain than my Hyperlink Technologies model 2419G Mesh Parabolic, which is "rated" at 19.1dBi gain.

The slot width for the 16 slotter is 15mm, for the 32 slotter is 12mm, otherwise the key dimensions are the same.

Both PDF and DXF versions of the drawings are available for download.
(Many thanks to Jeff LaPlante for doing all this hard work).
More information is available from Jeff LaPlante's Website

The ZIP of drawings for the 32 slot omni can be downloaded by clicking this link.

Designs for different size tubing:

The optimum design for a 16 slot unidirectional with Indian standard 95.24mm x 38.39mm x 3.18mm tubing gives a wavelength of 163mm. This means that the slots are centered at 163mm / 2 = 81.5mm intervals, rather than the 161mm basis which was used in the Autocad drawings. The N connector for the feed is spaced only 25mm from the base of the airspace, and offset 10mm to the left of the centerline of the guide's face. The length of the aircolumn will be 163 x 8.75 = 1426mm. The slot width for the 16 slotter stays the same at 15mm, and the slot length should be 58mm. For the 16+16 slot omni version use a slot width of 12mm.

The feed cone must not protrude more than halfway into the waveguide. With this tubing, the feed cone should not protrude more than 19mm into the tubing. Just use the same drawing as I have shown above, but make it from 17mm X 34mm shim rather than 20x40.

100mm x 50mm x 3mm Metric size tubing: use the same 161mm wavelength and dimensions as for the US designs, but offset the feed point 15mm from center line instead of 10mm to bring the resultant SWR closer to unity.

Tuning screws for tweaking the SWR

You don't have to use them, but, for perfectionists, two screws #10 in diameter are tapped into the waveguide. The first, at 70 mm from the base, the second at 90mm. These can be used to adjust the center frequency downwards from the 2440 nominal to about 2420. More important is the ability of the tuning screws to cancel some of the reactance of the antenna, and reduce the SWR. The smith chart at the right was computed for the 16 slot uni waveguide. and is plotted for a frequency range from 2410 to 2520 in 10MHz steps, without any tuning screw tweaks. Inserting the tuning screws can tune the waveguide to a lower center frequency, and keep the SWR less than 1.5:1 over the entire band.

Those of you who are setting up the CNC files to make more than one or two of these things for your local (non-commercial) FreeNet should email me and set up a tuning session so I can help you get them just right

Weather and your Antenna

Use nylon, aluminum or stainless steel screws and fasteners, as suits your preference, not normal (corrosive) ones. Unless you use some low RF loss tape (like mylar or kapton) to cover the slots, bugs will make their homes in the structure and spin their webs across the slots. There are two approaches to this. Either you dont bother about it, and just hose the antenna clean every year or so, or you use, and regularly replace, the protective tape. One tip - there is relatively little RF energy reaching the end away from the base, and if you mount the antenna upside down you can actually cut holes in the end cap so as to let out water and bugs that might otherwise accumulate there. I have simulated that 4 one half inch diameter holes in each vertex of the far end plug do not affect performance in any measurable way. I also simulated the use of a 2.75 by 1.75 inch plug at the far end (with 1/2 inch gaps for cleaning) and found no noticeable degradation. I don't recommend that you encourage bugs to accumulate near the feed probe, however...

So happy WLANing, and please don't forget to email me with your experiences.

Source : http://trevormarshall.com/waveguides.htm

How To Hack Isp To Use Internet For Free (tools and video tutorial)

2009-08-14T14:41:00.004+09:00

Superscan

Superscan is a free connect-based port scanning software designed to detect open TCP and UDP ports on a target computer, determine which services are running on those ports, and run queries such as whois, ping, ICMP traceroute, and Hostname lookups.

Superscan 4, which is a completely-rewritten update to the other Superscan, features windows enumeration, which can list a variety of important information dealing with Microsoft Windows such as:

* NetBIOS information
* user and Group Accounts
* Network shares
* Trusted Domains
* Services - which are either running or stopped

Superscan is a tool used by both system administrators, crackers and script kiddies to evaluate a computer's security. System administrators can use it to test for possible unauthorized open ports on their computer networks, whereas crackers use it to scan for a potentially insecure port in order to gain illegal access to a system.

Superscan 4 is produced by the Foundstone, a division of McAfee.

Here are some of the new features in this version.

* Superior scanning speed
* Support for unlimited IP ranges
* Improved host detection using multiple ICMP methods
* TCP SYN scanning
* UDP scanning (two methods)
* IP address import supporting ranges and CIDR formats
* Simple HTML report generation
* Source port scanning
* Fast hostname resolving
* Extensive banner grabbing
* Massive built-in port list description database
* IP and port scan order randomization
* A selection of useful tools (ping, traceroute, Whois etc)
* Extensive Windows host enumeration capability

a-Change Mac Address 5.0

Change Mac Address in seconds! Scan Mac Address within any range of IP address. Exports the scanning results from a Mac Address Lookup list. Spoofing the Mac Address of your network card to any new Mac Address.
Wake on Lan. Win Ipconfig.Port Scan.
Scan any range of IP for the proper Mac Address.
Support changing Mac Address of any network cards under Windows NT/2000/XP/95/98/2003.
Support exporting scanning mac address results to txt file.

A-MAC Address Change is a lightweight, easy-use MAC Address scanning and changing software. Don't let its small size fool you! It's filled with features such as:

* It's shockingly easy to use — just a simple input and click, that's it!
* It can scan any range of IP for the proper MAC Address.
* It supports exporting results of your scan to a text file.
* It runs on all Windows™ operating systems.
* It supports any network cards under Windows Me/95/98/NT/2000/XP/2003/Vista.
* It supports changing back to its original physical address.
* It recommends the proper Ethernet network card.
* It displays the information of your computer.
* It automatically checks the legality of IP range.
* It supports changing MAC searching speed.

But what does all this mean to you? Simple...

* You don't blow your time calling the ISP vendor and ask them to update the registered MAC Address to match the new hardware. Some Cable Modem ISP's assign IP addresses base on the PC's MAC addresses. For whatever reason, if you need to swap 2 PC's regularly to connect to the cable modem, it would be a lot easier to spoof MAC Addresses rather than to change Network Interface Card (NIC).
* You can scan the MAC Address of destination computer.
* You can perform security checking on MAC Address based authentication and authorization systems
* You can build Stand-by (offline) systems with the EXACT same Computer Name, IP address, & MAC Address as the Primary Systems. If Stand-by systems should be put online, NO arp table refresh is necessary, which eliminates extra downtime.
* Test network management tools.
* Some software can ONLY be installed and run on the systems with pre-defined MAC address in the license file. Now you can install one of these applications to another system with a different NIC.
* Troubleshoot Network problems: ARP Tables, Routing, Switching, etc.

http://www.filefactory.com/file/b5b7...ee_-_Video_rar
http://www.filefactory.com/file/413dca/n/tools_rar
http://www.filefactory.com/file/f076...uperscan30_rar

About DD-WRT

2009-08-14T14:12:00.001+09:00

DD-WRT is a Linux based alternative OpenSource firmware suitable for a great variety of WLAN routers and embedded systems. The main emphasis lies on providing the easiest possible handling while at the same time supporting a great number of functionalities within the framework of the respective hardware platform used.

The graphical user interface is logically structured, and it is operated via a standard Web browser, so even non-technicians can configure the system in only a few simple steps.

Apart from the simple handling, speed and stability are also in the focus of our development work. Compared to the software preinstalled on many WLAN routers, DD-WRT allows a reliable operation with a clearly larger functionality that also fulfills the demands of professional deployment.

The huge user community gives support to DD-WRT developers and the users themselves in various ways. Thanks to this, potential flaws in the system can be detected very quickly and can thus be corrected without delay. DD-WRT users can find help and suggestions from other users in the user forums, and the Wiki containing further information and how-to guides is being expanded and maintained by the DD-WRT community as well.

For devices mainly used for private purposes, DD-WRT is freely available. Platforms used for commercial purposes require a paid license. Compared to the freely available version, the professional version also allows for configuration of the WLAN parameters, thus opening up the opportunity of creating e.g. reliable and powerful network infrastructures. Special demands can be fulfilled by specifically tailored versions of DD-WRT.

Main characteristics:

supports more than 200 different devices
comprehensive functionality
supports all current WLAN standards (802.11a/b/g/n*)
supports outdoor deployment*
supports enhanced frequencies *
VPN integration
supports various Hotspot systems
bandwidth management
multilingual user interface

DD-WRT is:

Sebastian Gottschall (BrainSlayer, founder, maindeveloper)
Christian Scheele (Chris, CEO)
Peter Steinhäuser (CEO)
Ankush Malhotra (Maksat)
Ales Majdic (Eko, Developer)
Sylvain Bothorel (Botho, router webdesign)
Felix Fietkau (nbd/openwrt, madwifi)
Elke Scheele (Online Shop)
Markus Quint (support)

... and a lot of supporters around the world

Supported Hardware click here...

Block Traceroute and ping from client

2009-08-13T15:58:00.001+09:00

Block Traceroute

You could arrange him in firewall mikrotik, to avoid Traceroute and ping, Along With was the method that most was easy:

/ip firewall filter add chain=forward protocol=icmp icmp-options=11:0 action=drop comment=”Drop Traceroute”
/ip firewall filter add chain=forward protocol=icmp icmp-options=3:3 action=drop comment=”Drop Traceroute”

next you can block ping

/ip firewall filter add chain=input action=accept protocol=icmp limit=50/5s,2

Avoided Port Scanner from Hacker

2009-08-13T15:55:00.003+09:00

To avoid the Port Scanner action from Hacker, then we could arrange in firewall mikrotik, by means of :

1. Make Filter

/ip firewall filter
add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list address-list=”port scanners” address-list-timeout=2w comment=”Port scanners to list ” disabled=no

2. Make Chain

add chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”NMAP FIN Stealth scan”

add chain=input protocol=tcp tcp-flags=fin,syn
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”SYN/FIN scan”

add chain=input protocol=tcp tcp-flags=syn,rst
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”SYN/RST scan”

add chain=input protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”FIN/PSH/URG scan”

add chain=input protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”ALL/ALL scan”

add chain=input protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”NMAP NULL scan”

3. Drop Ip scanning

add chain=input src-address-list=”port scanners” action=drop comment=”dropping port scanners” disabled=no

Mikrotik Firewall

2009-08-13T15:35:00.003+09:00

To pacify router Mikrotik from traffic the virus and excess ping could be used the script firewall mikrotik along with:

1. make script along with used notepad afterwards copy-paste to console mikrotik

/ ip firewall filter
add chain=forward connection-state=established action=accept comment=”allow
established connections” disabled=no
add chain=forward connection-state=related action=accept comment=”allow
related connections” disabled=no
add chain=virus protocol=udp dst-port=135-139 action=drop comment=”Drop
Messenger Worm” disabled=no
add chain=forward connection-state=invalid action=drop comment=”drop invalid
connections” disabled=no
add chain=virus protocol=tcp dst-port=135-139 action=drop comment=”Drop
Blaster Worm” disabled=no
add chain=virus protocol=tcp dst-port=1433-1434 action=drop comment=”Worm”
disabled=no
add chain=virus protocol=tcp dst-port=445 action=drop comment=”Drop Blaster
Worm” disabled=no
add chain=virus protocol=udp dst-port=445 action=drop comment=”Drop Blaster
Worm” disabled=no
add chain=virus protocol=tcp dst-port=593 action=drop comment=”________”
disabled=no
add chain=virus protocol=tcp dst-port=1024-1030 action=drop comment=”________”
disabled=no
add chain=virus protocol=tcp dst-port=1080 action=drop comment=”Drop MyDoom”
disabled=no
add chain=virus protocol=tcp dst-port=1214 action=drop comment=”________”
disabled=no
add chain=virus protocol=tcp dst-port=1363 action=drop comment=”ndm requester”
disabled=no
add chain=virus protocol=tcp dst-port=1364 action=drop comment=”ndm server”
disabled=no
add chain=virus protocol=tcp dst-port=1368 action=drop comment=”screen cast”
disabled=no
add chain=virus protocol=tcp dst-port=1373 action=drop comment=”hromgrafx”
disabled=no
add chain=virus protocol=tcp dst-port=1377 action=drop comment=”cichlid”
disabled=no
add chain=virus protocol=tcp dst-port=2745 action=drop comment=”Bagle Virus”
disabled=no
add chain=virus protocol=tcp dst-port=2283 action=drop comment=”Drop Dumaru.Y”
disabled=no
add chain=virus protocol=tcp dst-port=2535 action=drop comment=”Drop Beagle”
disabled=no
add chain=virus protocol=tcp dst-port=2745 action=drop comment=”Drop
Beagle.C-K” disabled=no
add chain=virus protocol=tcp dst-port=3127 action=drop comment=”Drop MyDoom”
disabled=no
add chain=virus protocol=tcp dst-port=3410 action=drop comment=”Drop Backdoor
OptixPro” disabled=no
add chain=virus protocol=tcp dst-port=4444 action=drop comment=”Worm”
disabled=no
add chain=virus protocol=udp dst-port=4444 action=drop comment=”Worm”
disabled=no
add chain=virus protocol=tcp dst-port=5554 action=drop comment=”Drop Sasser”
disabled=no
add chain=virus protocol=tcp dst-port=8866 action=drop comment=”Drop Beagle.B”
disabled=no
add chain=virus protocol=tcp dst-port=9898 action=drop comment=”Drop
Dabber.A-B” disabled=no
add chain=virus protocol=tcp dst-port=10000 action=drop comment=”Drop
Dumaru.Y, sebaiknya di didisable karena juga sering digunakan utk vpn atau
webmin” disabled=yes
add chain=virus protocol=tcp dst-port=10080 action=drop comment=”Drop
MyDoom.B” disabled=no
add chain=virus protocol=tcp dst-port=12345 action=drop comment=”Drop NetBus”
disabled=no
add chain=virus protocol=tcp dst-port=17300 action=drop comment=”Drop Kuang2″
disabled=no
add chain=virus protocol=tcp dst-port=27374 action=drop comment=”Drop
SubSeven” disabled=no
add chain=virus protocol=tcp dst-port=65506 action=drop comment=”Drop PhatBot,
Agobot, Gaobot” disabled=no
add chain=forward action=jump jump-target=virus comment=”jump to the virus
chain” disabled=no
add chain=input connection-state=established action=accept comment=”Accept
established connections” disabled=no
add chain=input connection-state=related action=accept comment=”Accept related
connections” disabled=no
add chain=input connection-state=invalid action=drop comment=”Drop invalid
connections” disabled=no
add chain=input protocol=udp action=accept comment=”UDP” disabled=no
add chain=input protocol=icmp limit=50/5s,2 action=accept comment=”Allow
limited pings” disabled=no
add chain=input protocol=icmp action=drop comment=”Drop excess pings”
disabled=no
add chain=input protocol=tcp dst-port=1723 action=accept comment=”pptp-server”
disabled=no
add chain=input action=log log-prefix=”DROP INPUT” comment=”Log everything
else” disabled=no
add chain=input action=drop comment=”Drop everything else” disabled=no

Memanfaatkan bekas antena Astro / Indovision untuk WiFi

2009-08-12T09:06:00.009+09:00

Disini kita memanfaatkan sebuah Disc ASTRO yang sudah ga dipakai lagi, daripada kebuang sia-sia mendingan kita pakai buat antena WiFi.

Kita siapkan bahan-bahan dulu…..
Bahan yang dibutuhkan adalah:

1. Pipa PVC ukuran 3”, panjang 24cm
2. Tutup pralon / dop pipa ukuran 3” 2buah
3. Tutup pralon / dop pipa ukuran 1” 1buah
4. Mur Baut panjang 2cm
5. Alumunium foil
6. USB WiFi
7. Kabel UTP panjang max 15 Meter
8. Kabel sambungan USB
Bahan yang utama untuk membuat Antena adalah poin 1 – 6, jika sudah mempunyai kabel perpanjangan USB tidak perlu menyiapkan poin 7 & 8.

Langsung aja kita praktek……

a. Ambil dop pipa ukuran 3” & 1”, kita lubang pas ditengah seukuran baut yg sudah kita siapkan. Lalu kita tempelkan secara berlawanan & baut kencang kedua dop pipa tersebut.

b. Lapisi bagian dalam dop ukuran 3” dengan alumunium foil.

c. Selanjutnya ambil pralon pvc 3”, lubangi seukuran slot USB untuk memasukkan USB
WiFinya, ukuran 5cm dari bibir pralon. Dan buat garis 19cm dari bibir tersebut untuk
area alumunium foil. Dan jangan lupa lapisi bagian luar pralon dengan Alumunium foil.

d. Masukkan USB WiFinya kedalam pralon lalu tutup dengan dop yang telah kita buat tadi. Dop yang ada lapisan alumunium foilnya pasang di sebelah paling dekat dengan lubang USB. Ingat!! Dop paling ujung jangan dilapisi alumunium…..

e. Pasang rangkaian pralon tadi pada tangkai antena ASTRO yang telah kita siapkan.

Selesai sudah prakaria kita, saatnya ujicoba scan sinyal dengan software “Network Stumbler”.

Hasil dari scan sinyal……

Nah selamat berkarya, kalo ada yang bisa bikin lebih sensitif lagi silahkan di share…

source : imfedora.wordpress.com

Mikrotik v3.20 crack

2009-08-12T08:39:00.005+09:00

Tutorial ini saya peroleh dari www.forummikrotik.com dan sudah dicoba dan berhasil

Saya Sudah coba di Hardisk dan berhasil
pake lisensi yang lv6 dan lv4
1. Donwload filenya softwareidcrack-v1.1.rar
2. Install mikrotik seperti biasa, install ROS ver 2.9.51 download di sini
3. ekstrak file softwareidcrack-v1.1.rar hasil downloadnya, didalamnya ada gambar+petunjuknya
4. copy file softwareID crack.v1.1.npk ke mikrotik ROS ver 2.9.51(via Winbox/FTP/WinSCP)
5. reboot mikrotik supaya “softwareID crack” terinstall secara otomatis
6. setelah reboot, buka terminal mikrotik
7. ketik “mikrotik” (tanpa tanda kutip),kalau belum berhasil liat point 15
8. ketik “generate” (tanpa tanda kutip) dan tunggu 10-30 menit
9. biasanya Software ID muncul pertama kali lv.6 dalam 10 menit pertama.
   cocokkan hasil software id dengan daftar yang ada dibawah.
10.kalau berhasil tar ada tulisan Software IDnya berubah
11.jika ada yang lv.6 langsung reboot mikrotiknya, kalo diterusin nanti akan ganti generate lv.5 secara
   otomatis.
12.setelah reboot masuk mikrotik lewat winbox, masukkan key sesuai dengan software id yang di dapat dari
   generate tadi.
   di menu winbox buka System, License, inport key lalu open yang ada dalam daftar dibawah.

13. upgrade ke Mikrotik v3.20

Tutorial upgrade:

   Download package Mikrotik v3.20 disini
   copy file tersebut ke menu FILE mikrotik (via Winbox/FTP/WinSCP)
   setelah di paste di menu FILE kemudian reboot mikrotik.
14. Berhasil (jangan upgrade ver 3.20 keatas, karena key’nya udah di ban ama mikrotik)
15. klo poin 7 ga berhasil ganti commandnya
   mikrotik [enter, lalu] hdb
   mikrotik [enter, lalu] hdc
   mikrotik [enter, lalu] hdd
   mikrotik [enter, lalu] sda
   mikrotik [enter, lalu] sdb
   mikrotik [enter, lalu] sdc
   klo masih gagal coba pindahin Harddisknya dari master ke slave /
   primary ke secondary
16. kalau mau langsung dapet lv.6 pakai command ini:
   mikrotik L6hda
   atau tekan TAB setelah eksekusi command ;mikrotik
   disitu akan tampil aneka command generate.

Cara menfilekan key :

buka notepad kemudian copy file
—–BEGIN MIKROTIK SOFTWARE KEY————
rVV1e2RYxT/OM9SZe9OK/0ij55RlWZIYLLmF2DCnMYlo
RbZUCWy+9YIVHRJuVgb9asNXHTAQ/IcHYiQrpBXvvA==
—–END MIKROTIK SOFTWARE KEY————–

kemudian save dengan nama 798Y-K0N.key (extensi key) contoh disini
________________________________________________________
berikut daftar hasil key berdasarkan generate key:
Level 6 Keys
798Y-K0N
—–BEGIN MIKROTIK SOFTWARE KEY————
rVV1e2RYxT/OM9SZe9OK/0ij55RlWZIYLLmF2DCnMYlo
RbZUCWy+9YIVHRJuVgb9asNXHTAQ/IcHYiQrpBXvvA==
—–END MIKROTIK SOFTWARE KEY————–
AK73-PET
—–BEGIN MIKROTIK SOFTWARE KEY————
x+QmBpjxS9quN4UyI2tP2AdybCYZdYWDpKhnkmVWmBZf
31hfbRA2X7ncrHoUI3yAjl6H6ZLwSJKiHXSf6bJAiD==
—–END MIKROTIK SOFTWARE KEY————–
NNFT-86N
—–BEGIN MIKROTIK SOFTWARE KEY————
QcmFFDMuzh87/l2ngPSvD513huBKwgOLXu5tL8yhqPEl
Jns9gKAjxuZ6/Uy9YVFW09riSb1jrvZ7g0uSTVQkhC==
—–END MIKROTIK SOFTWARE KEY————–
Level 5 Keys
FAVD-NFT
—–BEGIN MIKROTIK SOFTWARE KEY————
ZkjCGcuTi8FWBkMTzD9ZAG9QOnjtEPjKTUckhnhEaZ54
oefDJdAvXP26qVQyTHaxFhB40iNMOI18ThwEuVkO1D==
—–END MIKROTIK SOFTWARE KEY————–
LF15-2JT
—–BEGIN MIKROTIK SOFTWARE KEY————
EquSZBusmZSjWg4+6PY7hxPn6HerKbQPDqhO0HY7dZm9
YMwecIIvf1ezBnQS3LBCG0ZLlnO/sloSUqlInguwPC==
—–END MIKROTIK SOFTWARE KEY————–
UNXC-ELT
—–BEGIN MIKROTIK SOFTWARE KEY————
lZDo1eSf3egdI/T2hY8fY8OygIZ+UJucjVfOS2+CY+RT
McnWOukAdhiQj5HlNLr7+jUlVoEqlqvgACA5X2qbLD==
—–END MIKROTIK SOFTWARE KEY————–
VY3P-XNN
—–BEGIN MIKROTIK SOFTWARE KEY————
kIv65f9YRZE4Q22rtFScDxPT6pji+AT+BYlatE3WAqui
k1jbsrE7vxcoXQc3WjSzz6gQ9NHIPRzRxg2X6dtQ4A==
—–END MIKROTIK SOFTWARE KEY————–