Port Filter di Mikrotik

/ ip firewall filteradd chain=forward protocol=tcp dst-port=135-139 action=drop comment=”” disabled=no
add chain=forward protocol=udp dst-port=135-139 action=drop comment=”” disabled=no
add chain=forward protocol=tcp dst-port=445 action=drop comment=”” disabled=no
add chain=forward protocol=udp dst-port=445 action=drop comment=”” disabled=no
add chain=forward protocol=tcp dst-port=593 action=drop comment=”” disabled=no
add chain=forward protocol=tcp dst-port=1024-1030 action=drop comment=”” disabled=no

Setting MOdem 3G Di LInux

Langkah-langkah konfigurasi 3G modem Huawei E220 pada Linux
 Cek keberadaan modem menggunakan perintah dmesg
rito@rito:~> dmesg | grep usb
usb 1-2: new full speed USB device using uhci_hcd and address 2
usb 1-2: new device found, idVendor=12d1, idProduct=1003
usb 1-2: new device strings: Mfr=1, Product=2, SerialNumber=0
usb 1-2: Product: HUAWEI Mobile
usb 1-2: Manufacturer: HUAWEI Technologies
usb 1-2: configuration #1 chosen from 1 [...]

Log PoRT dI moDEM

Aktivitas Network MOdem Log
5:49:54 Elapsed Time
Port Scan Type- ACK scan, Src:192.168.1.3, Dst:68.142.228.136, Prot:TCP , DPort:80 , Intf: eth-0, ScanCnt:50
5:42:14 Elapsed Time
Port Scan Type-TCP Session scan, Src:192.168.1.3, Dst:81.169.145.74, Prot:TCP , DPort:80 , Intf: eth-0, ScanCnt:207
5:36:43 Elapsed [...]

Silahkan Analisis jaringan anda dari virus !!!

Memastikan jaringan internet aman gunakan minimal netstat. untuk melihat traffinya.
C:\Documents and Settings\Telkom>netstat
Active Connections
Proto Local Address Foreign Address State
TCP nonpot-6abf8526:1034 localhost:1035 ESTABLISHED
TCP [...]

Terjadi Lagi karena pelanggan speedy tidak aware !!!

Ketika speedy di konek
TCP 125.162.83.159:3209 192.5.209.21:25 ESTABLISHED
TCP 125.162.83.159:3216 125.162.94.105:445 TIME_WAIT
TCP 125.162.83.159:3250 143.115.171.77:25 ESTABLISHED
TCP 125.162.83.159:3333 [...]

Virus Attack

System Log

Date/Time Facility Severity Message
Jan 1 00:00:18 user crit kernel: eth0 Link UP.
Jan 1 00:00:18 user crit kernel: ADSL G.994 training
Jan 1 00:00:31 user crit kernel: ADSL G.992 channel analysis
Jan 1 00:00:36 user crit kernel: ADSL link up, interleaved, us=64, ds=384
Jan 1 00:00:38 daemon crit pppd[270]: PPP server detected.
Jan 1 00:00:39 daemon crit pppd[270]: [...]

How to set up a static iP addres on a Windows 2000 computer

It is very important to setup a static ip address, if you are going to use port forwarding. When you have port forwarding setup, your router forwards ports to an ip address that you specify. This will probably work when you initially set it up, but after restarting your computer it may get a [...]

How to set up a static IP addres on a Windows 98 computer

It is very important to setup a static ip address, if you are going to use port forwarding. When you have port forwarding setup, your router forwards ports to an ip address that you specify. This will probably work when you initially set it up, but after restarting your computer it may get a [...]

How to set up a static IP address on a Mac OS X v10.4

It is very important to setup a static ip address, if you are going to use port forwarding. When you have port forwarding setup, your router forwards ports to an ip address that you specify. This will probably work when you initially set it up, but after restarting your computer it may get a [...]

login MOdem Adsl Default

1 D-Link  DSL504T
2     username    admin
3     password    admin
4     IP        192.168.1.1
5
6 Tecom    AR1031
7     username    admin
8     password    admin
9     IP        192.168.1.1
10
11 netlink    adsl router
12     username    admin
13     password    conexant
14     IP        10.0.0.2

Cara Create Host Dota

Karena banyak pertanyaan seputar hal ini , meskipun sebenarnya informasi ini sudah ada di forum indogamers. Jadi untuk lebih mudah dan mudah2an bisa membantu. Tapi kalo masih gak bisa juga , saran gw baca lagi dan baca lagi… selebihnya gunakan forum. okeh. Buat Warnet2 / cybercafe yang blum bisa jadi host dota / create ( [...]

Konfig MIk Rajasetan.net

# jul/09/2007 19:19:08 by RouterOS 2.9.6
# software id = 6DFQ-C8T
#
/ interface ethernet
set Internet name=”Internet” mtu=1500 mac-address=00:C0:26:57:4F:84 \
arp=enabled disable-running-check=yes auto-negotiation=yes full-duplex=yes \
cable-settings=default speed=100Mbps comment=”Ke Modem” disabled=no
set Lan name=”Lan” mtu=1500 mac-address=00:10:B5:88:CC:70 arp=enabled \
disable-running-check=yes auto-negotiation=yes full-duplex=yes \
cable-settings=default speed=100Mbps comment=”Ke LAN” disabled=no

BGP Routing Setup with BGP Communities

This is meant to be an example, and not a complete BGP (Border Gateway Protocol) routing configuration.
Router Diagram
————————— ————————
| +————+ | | +————+ |
| AS [...]

The OSPF Routing Protocol

This document provides background information and an application guide to the Open Shortest Path First (OSPF) routing protocol. It highlights the features and benefits of OSPF, describes the Gated OSPF implementation, explains the difference between OSPF and the Routing Information Protocol (RIP), and describes typical OSPF applications. It is meant for managers and network administrators [...]

Load Balancing Using eBGP Multihop and Loopback IPs

This is meant to be an example, and not a complete BGP (Border Gateway Protocol) routing configuration.
Router Diagram
————————————- ————————
| +———————-+ | | +————+ |
| AS [...]

Using GateD to Pad (Prepend) the AS Path

This is meant to be an example, and not a complete BGP (Border Gateway Protocol) routing configuration.
Router Diagram
————————— ————————
| +————+ | | +————+ |
| AS [...]

Simple eBGP and iBGP Routing Setup

This is meant to be an example, and not a complete BGP (Border Gateway Protocol) routing configuration.
Router Diagram
————————— ————————
| +————+ | | +————+ |
| AS [...]

Simple BGP Routing Setup

This is meant to be an example, and not a complete BGP (Border Gateway Protocol) routing configuration.
Router Diagram
————————— ————————
| +————+ | | +————+ |
| AS [...]

Configuration example for Ethernet DSL with PPPoE

This sample configuration shows an ImageStream router connected to a Digital Subscriber Line aggregation circuit. Each PVC represents a DSL customer terminated on the router. Each PVC is connected to the router via an Ethernet circuit from a DSLAM.
|- RADIUS Server IP: 192.168.1.200
|
====ETHERNET===================== 192.168.1.0/24 ===
|
[...]

Configuration example for ATM DSL with PPPoE

This sample configuration shows an ImageStream router connected to a Digital Subscriber Line aggregation circuit. Each PVC represents a DSL customer terminated on the router. Each PVC is connected to the router via an ATM circuit from a DSLAM.
|- RADIUS Server IP: 192.168.1.200
|
====ETHERNET===================== 192.168.1.0/24 ===
|
[...]

Configuration example for RFC 1483 ATM DSL using SoftCell IMA

This sample configuration shows an ImageStream router connected to Digital Subscriber Line aggregation circuits bonded together using ImageStream’s SoftCell technology and Inverse Multiplexing for ATM (IMA) protocol. In this example, the IMA group includes 3 T1 lines. Each PVC represents a DSL customer terminated on the router. This example uses the “atm route-bridged ip” command. [...]

Configuration example for RFC 1483 ATM DSL

This sample configuration shows an ImageStream router connected to a Digital Subscriber Line aggregation circuit. Each PVC represents a DSL customer terminated on the router. This example uses the “atm route-bridged ip” command. This command automatically sets up a bridge group, binds the ATM subinterface to it. “atm route-bridged ip” also turns off the spanning [...]

Connecting an SSL VPN between an ImageStream Router and a Windows PC Using OpenVPN

ImageStream’s version 4.2 releases include support for the highly secure SSL VPN tunnels. A detailed explanation of basic SSL VPN configurations using the OpenVPN software on ImageStream routers is available in the ImageStream Router Installation Manual. The SSL tunnel interface mode for Inetics devices uses the OpenVPN suite and allows IP packet tunneling [...]

OpenVPN Server Configuration

ImageStream Linux version 4.2.7 includes support for the highly scalable OpenVPN client/server mode. This feature allows multiple clients to establish SSL VPN tunnels to the router using a single UDP or TCP port. It also allows the router in server mode to control IP address assignments and OpenVPN features that can be pushed to the [...]

DHCP Server Configuration

ImageStream Linux version 4.2.7 includes support for the Dynamic Host Control Protocol (DHCP). DHCP allows a router to automatically assign dynamic IP addresses from address pools to DHCP clients.
DNS Servers: 192.168.0.10, 192.168.0.11
DHCP Pool Range: 192.168.0.20 - 192.168.0.254

====ETHERNET===================== 192.168.0.0/24 ===
|
| [...]

Multilink PPP Quick Start and Examples

ImageStream’s Version 4.1.9 release includes support for the Multilink PPP (MLPPP) datalink protocol. MLPPP aggregates multiple physical WAN links into a single multilink bundle. Data is sequenced, split, and transmitted down the individual interfaces that are members of the multilink bundle. On the receive side the information is recombined and resequenced before being passed to [...]

Basic ATM Configuration

An ATM network represents two or more routers interconnected by ATM connections. Each router on the ATM network is connected to the ATM network by a Virtual Channel Connection (VCC). Each router is connected to a ATM switch that in turn connects to the ATM network. Each node on the ATM network is identified by [...]

Frame Relay Configuration

A Frame Relay network represents two or more routers interconnected by a Frame Relay cloud. Each router on the Frame Relay cloud is connected to the Frame Relay network that has a Permanent Virtual Circuit (PVC). The Frame Relay network is connected to a Frame Relay switch that in turn connects to the Frame Relay [...]

Configuration for Bridged LAN/WAN

Point-to-point numbered refers to connections where the interfaces connecting the routers to the WAN have IP addresses. On both WAN ports, the address of the WAN port is set to an IP address on a common IP network, and the destination addresses are set to the IP address of WAN port [...]

Configuration for Numbered WAN Point-to-Point

Point-to-point numbered refers to connections where the interfaces connecting the routers to the WAN have IP addresses. On both WAN ports, the address of the WAN port is set to an IP address on a common IP network, and the destination addresses are set to the IP address of WAN port [...]

Configuration for Numbered WAN Point-to-Point

Point-to-point numbered refers to connections where the interfaces connecting the routers to the WAN have IP addresses. On both WAN ports, the address of the WAN port is set to an IP address on a common IP network, and the destination addresses are set to the IP address of WAN port [...]

Configuration for Fractional DS3 Point-to-Point

This configuration describes a simple point-to-point fractional DS3 connection from an ImageStream 530 series DS3/E3 (531-DE, 532-DE) port to a Cisco PA-T3 port in a 7xxx series router. On both WAN ports, the address of the WAN port is set to an IP address on a common IP network, and the destination addresses [...]

Configuration for Unnumbered WAN Point-to-Point

Point-to-point numbered refers to connections where the interfaces connecting the routers to the WAN have IP addresses. On both WAN ports, the address of the WAN port is set to an IP address on a common IP network, and the destination addresses are set to the IP address of WAN port [...]

Configuration for Numbered WAN Point-to-Point

Point-to-point numbered refers to connections where the interfaces connecting the routers to the WAN have IP addresses. On both WAN ports, the address of the WAN port is set to an IP address on a common IP network, and the destination addresses are set to the IP address of WAN port [...]

Server Load Balancing Example

This is meant to be an example, and not a complete load balancing configuration.
Network Diagram
+—————————————-+
| Router 1 [...]

Routing Using Packet Marking

This is meant to be an example, and not a complete load balancing configuration.
Before You Start
IP network addresses are given to you by your Internet Service Provider, your leased line carrier, or by ARIN. If you do not plan to connect you network to the Internet, you can use an IP network address set aside [...]

Source Routing Example

This is meant to be an example, and not a complete load balancing configuration.
Network Diagram
+——————————————+
| Router 1 [...]

Building an RJ-45 Crossover Cable

This page provides pin out information for a crossover cable for the following:

Connecting two machines (only) via Ethernet without the use of a hub or switch
Connecting two CSU/DSU’s back to back for testing Wide Area Network (WAN) configurations.

Cable Pin out:
    RJ-45        RJ-45
  Connector    Connector
  ———————-
    pin 1   ->   pin 3
    pin 2   ->   pin 6
    [...]

Building a DTE to DTE (Null Modem) Cable

This page provides information for connecting two asynchronous serial (RS-232) Data Terminal Equipment (DTE) devices together (example: two PC’s or a dumb terminal and a ImageStream router). Assuming both DTEs have DB-25 interfaces, each DTE transmits data on pin 2 and receives data on pin 3. Consequently, both DTE devices cannot transmit or receive data [...]

Blocking Nachi/Welchia Worm ICMP Scans

The recent W32/Nachi and W32/Welchia worms perform ICMP scanning in an attempt to identify systems for exploitation. Depending the the number of host infected on the network the ICMP scanning can result in unwanted increase of traffic. These scans could generate enough traffic to create delay on the upstream link(s) and disrupts users. Infected machines [...]

Limiting Peer to Peer Traffic

ImageStream routers support powerful packet matching and traffic limiting techniques in ImageStream Linux version 4.2 and later releases. This document provides examples of identifying and limiting Peer to Peer (P2P) traffic. More in-depth information about the capabilities of the iptables utility is available in other Technical Notes and on the Other On-Line Resources page on [...]

Resolving “ip_conntrack: table full, dropping packet” errors

When enabled through the use of NAT or other stateful inspection rules, netfilter (iptables) under Linux maintains a list of connections passing through the router. Each connection tracking entry contains defined characteristics of the packet, including the source and destination IP address and port number.

iptables Firewalling and Packet-Filtering

Iptables is a powerful packet-filtering tool available on ImageStream routers with ImageStream Linux version 4.0 or later. This document will provide examples on how to use Iptables to add basic firewalling, port forwarding and network address translation (NAT) capabilities to your ImageStream router. More in-depth information is available in the iptables HOWTO linked to [...]

Implementing Quality of Service with iptables CLASSIFY rules

ImageStream’s version 4.2 releases include support for the iptables CLASSIFY directive, making quality of service configuration simpler and more flexible. Instead of using complex matches in the advanced traffic control (tc) utility, you can use ImageStream’s bwinit and bwadd utilities and the powerful iptables utilities to sort traffic into individual queues. In a default [...]

Networking Basics

This page describes general network concepts that you must understand before you configure your ImageStream router. See the glossary linked to our Other Resources page for unfamiliar terms.

Subnet Mask Table

Class B Effective Effective
# bits Mask Subnets Hosts
——- ————— ——— ———
2 [...]

Netmask Conversion Table

Bitmask (Bits)
Dotted Decimal Netmask
Hexadecimal Netmask
Binary Netmask

/0
0.0.0.0
0×00000000
00000000 00000000 00000000 00000000

/1
128.0.0.0
0×80000000
10000000 00000000 00000000 00000000

/2
192.0.0.0
0xc0000000
11000000 00000000 00000000 00000000

/3
224.0.0.0
0xe0000000
11100000 00000000 00000000 00000000

/4
240.0.0.0
0xf0000000
11110000 00000000 00000000 00000000

/5
248.0.0.0
0xf8000000
11111000 00000000 00000000 00000000

/6
252.0.0.0
0xfc000000
11111100 00000000 00000000 00000000

/7
254.0.0.0
0xfe000000
11111110 [...]

Blocking Virus

1;;; BLOCK SPAMMERS OR INFECTED USERS
chain=forward protocol=tcp dst-port=25 src-address-list=spammer
action=drop
2;;; Detect and add-list SMTP virus or spammers
chain=forward protocol=tcp dst-port=25 connection-limit=30,32 limit=50,5 src-address-list=!spammer action=add-src-to-address-list
address-list=spammer address-list-timeout=1d

Chapter 1.1. Introduction To Network

# Internet dapat dibagi menjadi 3 yaitu:

Physical Connection

Dibuat dengan menghubungkan sebuah adaptor card (Modem, NIC) dari PC ke sebuah jaringan.
Contohnya : NIC (Network Interface Card) Modem (Modulator Demulator)
2. Logical Connection
Menggunakan sebuah standar yang di sebut protocol.
Protocol adalah suatu set aturan yang menentukan bagaimana device-device dalam jaringan berkomunikasi antar PC, Contohnya TCP/IP
3. Aplication
Mengimpresentasikan [...]

Tracking at 4:35 pm by Sany Asyari

Sometimes, it’s just not enough to simply know that there’s a Trojan or Virus onboard. Sometimes you need to know exactly why that file is onboard, how it got there - but most importantly, who put it there.