1. Address List (Whitelist & Target)
Daftarkan IP server web Anda agar tidak ikut terblokir saat proses isolasi.
/ip firewall address-list
add address=172.31.254.2-172.31.255.254 list=IP_ISOLASI comment="Range IP Suspend dari Radius"
add address=104.21.73.192 list=WHITELIST_WEB_ISOLIR comment="IP Server Web Isolir 1"
add address=172.67.165.113 list=WHITELIST_WEB_ISOLIR comment="IP Server Web Isolir 2"
2. Firewall NAT (Redirect HTTP)
Mengalihkan trafik HTTP (port 80) ke domain/IP web isolir Anda secara langsung.
/ip firewall nat
add action=dst-nat chain=dstnat comment="Redirect HTTP User Isolir ke Web" \
dst-address-list=!WHITELIST_WEB_ISOLIR dst-port=80 protocol=tcp \
src-address-list=IP_ISOLASI to-addresses=172.67.165.113 to-ports=80
3. Firewall Filter (Blokir Internet Total)
Urutan ini menjamin DNS tetap jalan (agar domain bisa diakses) namun sisa internet lainnya ditutup.
/ip firewall filter
# 1. Izinkan DNS agar domain isolir.nassivanet.my.id bisa di-resolve
add action=accept chain=forward comment="Isolir: Allow DNS UDP" \
dst-port=53,5353 protocol=udp src-address-list=IP_ISOLASI
add action=accept chain=forward comment="Isolir: Allow DNS TCP" \
dst-port=53 protocol=tcp src-address-list=IP_ISOLASI
# 2. Izinkan akses menuju Web Isolir (PENTING: letakkan sebelum Drop)
add action=accept chain=forward comment="Isolir: Allow Access to Web Portal" \
dst-address-list=WHITELIST_WEB_ISOLIR src-address-list=IP_ISOLASI
# 3. Blokir semua akses internet lainnya (TCP & UDP)
add action=drop chain=forward comment="Isolir: Drop Internet TCP" \
dst-address-list=!WHITELIST_WEB_ISOLIR protocol=tcp src-address-list=IP_ISOLASI
add action=drop chain=forward comment="Isolir: Drop Internet UDP" \
dst-address-list=!WHITELIST_WEB_ISOLIR protocol=udp src-address-list=IP_ISOLASI
4. DNS Static (Force Domain)
Memastikan Mikrotik langsung mengarahkan domain tersebut ke IP tujuannya.
/ip dns static
add name=isolir.nassivanet.my.id address=172.67.165.113 comment="Static DNS for Isolir Page"
