/ip firewall mangle

add chain=prerouting in-interface=ether3 dst-address-list=nice action=mark-

connection new-connection-mark=conn-iix passthrough=yes
add chain=prerouting connection-mark=conn-iix action=mark-packet new-packet-
mark=packet-iix passthrough=no
add chain=prerouting action=mark-packet new-packet-mark=packet-intl passthrough=no

Batasin Download File

/ip firewall layer7-protocol
add name="Extension \" .exe \"" regexp="^.*get.+\\.exe.*\$"
add name="Extension \" .mp4 \"" regexp="^.*get.+\\.mp4.*\$"
add name="Extension \" .rar\"" regexp="^.*get.+\\.rar.*\$"
add name="Extension \" .zip\"" regexp="^.*get.+\\.zip.*\$"
add name="Extension \" .flv\"" regexp="^.*get.+\\.flv.*\$"
add name="Extension \" .mkv\"" regexp="^.*get.+\\.mkv.*\$"

/ip firewall mangle

add action=mark-connection chain=prerouting in-interface=ether3 layer7-
protocol="Extension \" .exe \"" new-connection-mark=download_conn
add action=mark-connection chain=prerouting in-interface=ether3 layer7-
protocol="Extension \" .mp4 \"" new-connection-mark=download_conn
add action=mark-connection chain=prerouting in-interface=ether3 layer7-
protocol="Extension \" .rar\"" new-connection-mark=download_conn
add action=mark-connection chain=prerouting in-interface=ether3 layer7-
protocol="Extension \" .zip\"" new-connection-mark=download_conn
add action=mark-connection chain=prerouting in-interface=ether3 layer7-
protocol="Extension \" .flv\"" new-connection-mark=download_conn
add action=mark-connection chain=prerouting in-interface=ether3 layer7-
protocol="Extension \" .mkv\"" new-connection-mark=download_conn
add action=mark-connection chain=prerouting in-interface=ether3 new-connection-
mark=all_conn
add action=mark-packet chain=prerouting connection-mark=download_conn new-packet-
mark=download_packet
add action=mark-packet chain=prerouting connection-mark=all_conn new-packet-
mark=all_packet

***************** Mangle 1 baris Aja *******************************

/ip firewall layer7-protocol
add comment="Sori Dibatesin" name=donlotan regexp="^.*get.+\.(exe|rar|zip|7z|cab|
asf|mov|wmv|mpg|mpeg|mkv|avi|flv|pdf|wav|rm|mp3|mp4|ram|rmvb|dat|daa|iso|nrg|bin|
vcd|mp2|3gp|mpe|qt|raw|wma|ogg|doc|deb|tar|bzip|gzip|gzip2|0[0-9][0-9]).*\$"

/ip firewall mangle

add action=mark-packet chain=forward comment=Donlotan disabled=no layer7-
protocol=donlotan new-packet-mark=paket-donlot passthrough=no protocol=tcp

Pisahkan Bandwith Browsing dan download

/queue simple
add comment=\
"kasatmata - Memisahkan bandwidth browsing & download file" \
max-limit=128k/1M name=Browsing packet-marks=all_packet target=\
192.168.10.0/24
add max-limit=128k/128k name="Download File" packet-marks=download_packet \
target=192.168.10.0/24