Pasti semua sudah tau di internet banyak konten yang positif dan konten negatif tergantung kita mau cari yang mana. tami masalahnya terkadang kita tidak mencari konten negatif kadang konten itu muncul dengan sendirinya. bayangkan kalau itu dilihat anak dibawah umur, nah utuk itu sebagai admin jaringan tentunya kita bertanggung jawab secara moral.
Oke langsung saja..
Persiapan Alat
1. Mikrotik (RB/ROUTEROS)
2. Laptop / Smart Phone
Skill Yg dibutuhkan
1. Bisa mengoperasikan PC
2. sedikitnya mengerti dan paham tentang Ilmu Jaringan Komputer minimal paham IP Adress
3. Pernah config mikrotik yang penting gak terlalu nol
Next
Buka winbox dan pilih New terminal kemudian Pastekan Script dibawah ini. kemudian tekan enter

/ ip fi tambahkan rem [find list = ip-maksiat]
/ ip fi menambahkan rem [find list = private-lokal]
/ ip fi na rem [temukan komentar ~ "dns"]
/ ip fi fi rem [temukan dst-port = "53,5353"]
/ sys sch rem auto-switch-dns
/ rem bersih alat [temukan komentar ~ "dns"]
/ ip firewall address-list
tambahkan daftar = alamat privat-lokal = 0.0.0.0 / 8
tambahkan daftar = alamat privat-lokal = 10.0.0.0 / 8
tambahkan daftar = alamat privat-lokal = 100.64.0.0 / 10
add list = alamat privat-lokal = 127.0.0.0 / 8
tambahkan daftar = alamat pribadi-lokal = 169.254.0.0 / 16
tambahkan daftar = alamat privat-lokal = 172.16.0.0 / 12
add list = alamat pribadi-lokal = 192.0.0.0 / 24
add list = alamat privat-lokal = 192.0.2.0 / 24
tambahkan daftar = alamat privat-lokal = 192.168.0.0 / 16
tambahkan daftar = alamat privat-lokal = 198.18.0.0 / 15
tambahkan daftar = alamat privat-lokal = 198.51.100.0 / 24
tambahkan daftar = alamat pribadi-lokal = 203.0.113.0 / 24
add list = alamat pribadi-lokal = 224.0.0.0 / 3
/ ip filter firewall
tambahkan action = drop chain = masukan komentar = dns-flood dst-port = 53,5353 protokol = tcp src-address-list =! private-lokal
tambahkan action = drop chain = masukan komentar = dns-flood dst-port = 53,5353 protokol = udp src-address-list =! private-lokal
tambahkan action = drop chain = forward comment = dns-flood dst-port = 53,5353 protokol = tcp src-address-list =! private-lokal
tambahkan action = drop chain = forward comment = dns-flood dst-port = 53,5353 protokol = udp src-address-list =! private-lokal
/ ip dns
set allow-remote-requests = ya server = 103.80.80.248,103.80.80.249
/ ip firewall nat
add action = dst-nat chain = dstnat comment = dns-sehat1 dst-port = 53,5353 protokol = tcp src-address-list = pribadi-lokal ke-alamat = 103.80.80.248 ke-port = 5353
add action = dst-nat chain = dstnat comment = dns-sehat1 dst-port = 53,5353 protokol = udp src-address-list = private-lokal ke-alamat = 103.80.80.248 ke-port = 5353
add action = dst-nat chain = dstnat comment = dns-sehat2 dst-port = 53,5353 protokol = tcp src-address-list = pribadi-lokal ke-alamat = 103.80.80.249 ke-port = 5353
add action = dst-nat chain = dstnat comment = dns-sehat2 dst-port = 53,5353 protokol = udp src-address-list = private-lokal ke-address = 103.80.80.249 ke-ports = 5353
add action = dst-nat chain = dstnat comment = dns-trust1 dst-port = 53,5353 protokol = tcp src-address-list = pribadi-lokal ke-alamat = 103.80.80.243 ke-port = 5353
add action = dst-nat chain = dstnat comment = dns-trust1 dst-port = 53,5353 protokol = udp src-address-list = pribadi-lokal ke-alamat = 103.80.80.243 ke-port = 5353
add action = dst-nat chain = dstnat comment = dns-trust2 dst-port = 53,5353 protokol = tcp src-address-list = pribadi-lokal ke-alamat = 103.80.80.244 ke-ports = 5353
add action = dst-nat chain = dstnat comment = dns-trust2 dst-port = 53,5353 protokol = udp src-address-list = private-lokal ke-address = 103.80.80.244 ke-ports = 5353
add action = dst-nat chain = dstnat comment = dns-open1 dst-port = 53,5353 protokol = tcp src-address-list = privat-lokal ke-alamat = 208.67.220.220 ke-port = 5353
add action = dst-nat chain = dstnat comment = dns-open1 dst-port = 53,5353 protokol = udp src-address-list = private-lokal ke-address = 208.67.220.220 ke-ports = 5353
add action = dst-nat chain = dstnat comment = dns-open2 dst-port = 53,5353 protokol = tcp src-address-list = private-lokal ke-address = 208.67.222.222 ke-ports = 5353
add action = dst-nat chain = dstnat comment = dns-open2 dst-port = 53,5353 protocol = udp src-address-list = private-lokal ke-address = 208.67.222.222 ke-ports = 5353
# host = 8.8.8.8 bisa diganti dengan ip AP atau ip modem yang bisa di ping
/ alat netwatch
add host = 8.8.8.8 interval = 1s up-script = \
"{\ r \
\ nlocal toport [/ ip firewall nat dapatkan 2 to-ports] \ r \
\ nif (\ $ toport = \ "64872 \") lakukan = {\ r \
\ n / ip firewall nat mengatur 2,3 hotspot =! auth \ r \
\ n} \ r \
\ n} "
/ alat netwatch
add comment = dns-sehat1 down-script = "/ ip firewall nat nonaktifkan [temukan comment = \" dns-sehat1 \ "disabled = no]" host = 103.80.80.248 interval = 10s up-script = "/ ip firewall nat aktifkan [temukan komentar = \ "dns-sehat1 \" cacat = ya] "
add comment = dns-sehat2 down-script = "/ ip firewall nat nonaktifkan [temukan comment = \" dns-sehat2 \ "disabled = no]" host = 103.80.80.249 interval = 10s up-script = "/ ip firewall nat aktifkan [temukan komentar = \ "dns-sehat2 \" cacat = ya] "
tambahkan komentar = dns-trust1 down-script = "/ ip firewall nat nonaktifkan [temukan komentar = \" dns-trust1 \ "disabled = no]" host = 103.80.80.243 interval = 10s up-script = "/ ip firewall nat aktifkan [temukan komentar = \ "dns-trust1 \" dinonaktifkan = ya] "
tambahkan komentar = dns-trust1 down-script = "/ ip firewall nat nonaktifkan [temukan komentar = \" dns-trust2 \ "disabled = no]" host = 103.80.80.244 interval = 10s up-script = "/ ip firewall nat aktifkan [temukan komentar = \ "dns-trust2 \" dinonaktifkan = ya] "
tambahkan komentar = dns-open1 down-script = "/ ip firewall nat nonaktifkan [find comment = \" dns-open1 \ "disabled = no]" host = 208.67.220.220 interval = 10s up-script = "/ ip firewall nat aktifkan [temukan komentar = \ "dns-open1 \" disabled = yes] "
tambahkan komentar = dns-open2 down-script = "/ ip firewall nat nonaktifkan [find comment = \" dns-open2 \ "disabled = no]" host = 208.67.222.222 interval = 10s up-script = "/ ip firewall nat aktifkan [temukan komentar = \ "dns-open2 \" disabled = yes] "
{
/ tool fetch url = "https://raw.githubusercontent.com/cespun/ip-maksiat/master/.gitignore/list%3Dip-maksiat" mode = http
/ import file = daftar% 3Dip-maksiat
/ file hapus daftar% 3Dip-maksiat
}
Selesai.
INGAT DNS INI FREE..
SILAHKAN JOIN GROUP DNS SEHAT INDONESIA
https://www.facebook.com/groups/DNS.Sehat.Indonesia/permalink/1191842487536870/