Download as txt, pdf, or txt
Download as txt, pdf, or txt
You are on page 1of 8

MMM MMM KKK TTTTTTTTTTT KKK

MMMM MMMM KKK TTTTTTTTTTT KKK


MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK
MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK
MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK
MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK

MikroTik RouterOS 6.27 (c) 1999-2015 http://www.mikrotik.com/

[?] Gives the list of available commands


command [?] Gives help on the command and list of arguments

[Tab] Completes the command/word. If the input is ambiguous,


a second [Tab] gives possible options

/ Move up to base level


.. Move up one level
/command Use command at the base level
Using nice.rsc from www.mikrotik.co.id, 19 March 2015 21:14:09 WIB, 1528 lines.
(414 messages not shown)
mar/20/2018 18:25:51 system,error,critical router was rebooted without proper shut
down
mar/21/2018 09:34:00 system,error,critical router was rebooted without proper shut
down
mar/21/2018 16:32:12 system,error,critical router was rebooted without proper shut
down
mar/21/2018 16:32:13 system,error,critical router was rebooted without proper shut
down
mar/21/2018 16:32:12 system,error,critical router was rebooted without proper shut
down
mar/21/2018 16:32:13 system,error,critical router was rebooted without proper shut
down
mar/21/2018 16:32:13 system,error,critical router was rebooted without proper shut
down
mar/21/2018 16:32:14 system,error,critical router was rebooted without proper shut
down
[admin@MikroTik] > expo
# mar/24/2018 16:53:45 by RouterOS 6.27
# software id = 5WYM-F36B
#
/interface ethernet
set [ find default-name=ether1 ] l2mtu=1526 mac-address=00:0C:42:81:89:04 \
name=ether1-PROXY
set [ find default-name=ether2 ] l2mtu=1524 mac-address=00:0C:42:81:89:05 \
name=ether2-LAN
set [ find default-name=ether3 ] l2mtu=1524 mac-address=00:0C:42:81:89:06 \
name=ether3-BROWSING
set [ find default-name=ether4 ] l2mtu=1524 mac-address=00:0C:42:81:89:07 \
name=ether4-GAME
set [ find default-name=ether5 ] disabled=yes l2mtu=1524 mac-address=\
00:0C:42:81:89:08 name=ether5-FO
/ip firewall layer7-protocol
add name="download extensi" regexp="^.*get.+.(exe|rar|zip|7z|cab|asf|mov|wmv|m\
pg|mpeg|mkv|avi|flv|pdf|wav|rm|mp3|mp4|ram|rmvb|dat|daa|iso|nrg|bin|vcd|mp\
2|3gp|mpe|qt|raw|wma|ogg|doc|deb|tar|bzip|gzip|gzip2|0[0-9][0-9]).*\$"
add name="down exs" regexp="\\\\.(mp3)"
add name=EXE regexp="\\.(exe)"
add name=RAR regexp="\\.(rar)"
add name=ZIP regexp="\\.(zip)"
add name=7z regexp="\\.(7z)"
add name=CAB regexp="\\.(cab)"
add name=ASF regexp="\\.(asf)"
add name=MOV regexp="\\.(mov)"
add name=WMV regexp="\\.(wmv)"
add name=MPG regexp="\\.(mpg)"
add name=MPEG regexp="\\.(mpeg)"
add name=MKV regexp="\\.(mkv)"
add name=AVI regexp="\\.(avi)"
add name=FLV regexp="\\.(flv)"
add name=WAV regexp="\\.(wav)"
add name=RM regexp="\\.(rm)"
add name=MP3 regexp="\\.(mp3)"
add name=MP4 regexp="\\.(mp4)"
add name=RAM regexp="\\.(ram)"
add name=RMVB regexp="\\.(rmvb)"
add name=DAT regexp="\\.(dat)"
add name=DAA regexp="\\.(daa)"
add name=ISO regexp="\\.(iso)"
add name=NRG regexp="\\.(nrg)"
add name=BIN regexp="\\.(bin)"
add name=VCD regexp="\\.(vcd)"
add name=iso regexp="\\.(iso)"
add name=videoplayback regexp=videoplayback
add name=kontens regexp="^.+(exe|rar|zip|7z|cab|asf|mov|wmv|mpg|mpeg|mkv|avi|f\
lv|pdf|wav|rm|mp3|mp4|ram|rmvb|dat|daa|iso|nrg|bin|vcd|mp2|3gp|mpe|qt|raw|\
wma|ogg|doc|deb|tar|bzip|gzip|gzip2|0[0-1][0-1]).*\$"
add name=youtube regexp="^.+(c.youtube.com|googlevideo.com|cdn.dailymotion.com\
|metacafe.com|mccont.com).*\$"
add name="smua donwload n yt" regexp="^.+(c.youtube.com|googlevideo.com|cdn.da\
ilymotion.com|metacafe.com|mccont.com|exe|rar|zip|7z|cab|asf|mov|wmv|mpg|m\
peg|mkv|avi|flv|pdf|wav|rm|mp3|mp4|ram|rmvb|dat|daa|iso|nrg|bin|vcd|mp2|3g\
p|mpe|qt|raw|wma|ogg|doc|deb|tar|bzip|gzip|gzip2|0[0-1][0-1]).*\$"
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
/queue simple
add disabled=yes name=queue1 packet-marks=zz target=ether2-LAN
add disabled=yes dst=ether3-BROWSING name=queue2 target=ether2-LAN
add disabled=yes name=queue3 target=ether3-BROWSING
/queue type
add kind=pcq name=pcq-download pcq-burst-time=5s pcq-classifier=\
src-address,dst-address pcq-dst-address6-mask=64 pcq-rate=384k \
pcq-src-address6-mask=64
add kind=pcq name=pcq-upload pcq-classifier=src-address \
pcq-dst-address6-mask=64 pcq-rate=256k pcq-src-address6-mask=64
add kind=pcq name=pcq_browsing pcq-burst-rate=5M pcq-burst-threshold=2M \
pcq-classifier=dst-address pcq-dst-address6-mask=64 pcq-limit=100 \
pcq-rate=512k pcq-src-address6-mask=64 pcq-total-limit=5k
add kind=pcq name=PCQ pcq-classifier=src-address,dst-address \
pcq-dst-address6-mask=64 pcq-rate=5M pcq-src-address6-mask=64 \
pcq-total-limit=3k
add kind=pcq name=Download pcq-classifier=src-address,dst-address \
pcq-dst-address6-mask=64 pcq-src-address6-mask=64
/queue tree
add disabled=yes max-limit=50M name=A.hit-hc packet-mark="Proxy Hit" queue=\
default
add max-limit=40M name=ALL-DOWN packet-mark=zz parent=global queue=PCQ
add disabled=yes name=B.BROWSING packet-mark=browsing parent=ALL-DOWN \
priority=1 queue=default
add disabled=yes name=C.DOWNLOAD packet-mark=download parent=ALL-DOWN \
priority=7 queue=default
add disabled=yes name=D.YOUTUBE packet-mark=streaming parent=ALL-DOWN \
priority=5 queue=default
add disabled=yes name=UPLOAD packet-mark=all.packet.up parent=global queue=\
pcq-upload
add disabled=yes name=OPERATOR packet-mark=tt parent=ALL-DOWN priority=6 \
queue=PCQ
add disabled=yes name=queue1 packet-mark=GAME queue=default
add disabled=yes max-limit=1M name=queue2 packet-mark=test queue=PCQ
add disabled=yes max-limit=50M name=A.Output packet-mark=output parent=global \
queue=default
add disabled=yes name=queue3 packet-mark="download lan" parent=ALL-DOWN \
queue=pcq-download
add name=queue4 packet-mark=ICMP_PAKET parent=global priority=1 queue=default
/system logging action
set 0 memory-lines=100
set 1 disk-lines-per-file=100
/tool user-manager customer
set admin access=\
own-routers,own-users,own-profiles,own-limits,config-payment-gw
/ip address
add address=192.168.2.2/24 interface=ether3-BROWSING network=192.168.2.0
add address=192.168.3.1/24 interface=ether2-LAN network=192.168.3.0
add address=192.168.1.2/24 interface=ether4-GAME network=192.168.1.0
add address=192.168.5.1/24 interface=ether1-PROXY network=192.168.5.0
add address=192.168.100.2/24 disabled=yes interface=ether5-FO network=\
192.168.100.0
/ip dns
set allow-remote-requests=yes max-udp-packet-size=512 servers=8.8.8.8,8.8.4.4
/ip firewall address-list
add address=103.28.54.0/24 list=DOTA
add address=103.10.124.0/24 list=DOTA
add address=192.69.96.0/24 list=DOTA
add address=208.78.164.0/24 list=DOTA
add address=146.66.152.0/24 list=DOTA
add address=146.66.155.0/24 list=DOTA
add address=209.197.29.0/24 list=DOTA
add address=209.197.25.0/24 list=DOTA
add address=146.66.156.0/24 list=DOTA
add address=103.10.125.0/24 list=DOTA
add address=197.80.200.0/24 list=DOTA
add address=196.38.180.0/24 list=DOTA
/ip firewall filter
add action=drop chain=forward disabled=yes packet-mark=blockir
add action=drop chain=forward content=sexs disabled=yes
add action=drop chain=forward content=seks disabled=yes
add action=drop chain=forward content=orgasme disabled=yes
add action=drop chain=forward content=blue disabled=yes
add action=drop chain=forward content=xxx disabled=yes
add action=drop chain=forward content=teen disabled=yes
add action=drop chain=forward dst-address=122.102.41.0/24
/ip firewall mangle
add action=mark-routing chain=prerouting comment=RF-Elven dst-port=27780 \
in-interface=ether2-LAN new-routing-mark=GAME passthrough=no protocol=tcp
add action=mark-packet chain=prerouting connection-mark=hc.con disabled=yes \
new-packet-mark=proxy-hit passthrough=no protocol=tcp
add action=mark-routing chain=prerouting comment=\
"Point Blank (PB) Garena Indonesia" dst-port=39190,9000-9300,1194 \
in-interface=ether2-LAN new-routing-mark=GAME passthrough=no protocol=tcp
add action=mark-routing chain=prerouting dst-port=40000-40010 in-interface=\
ether2-LAN new-routing-mark=GAME passthrough=no protocol=udp
add action=mark-routing chain=prerouting comment="DOTA 2" dst-port=\
27014-27050 in-interface=ether2-LAN new-routing-mark=GAME passthrough=no \
protocol=tcp
add action=mark-routing chain=prerouting comment=ML dst-port=\
11051,11050,30103 in-interface=ether2-LAN new-routing-mark=GAME \
passthrough=no protocol=tcp
add action=mark-routing chain=prerouting dst-port=\
27000-27050,4380,3478,4379,28000-28052 in-interface=ether2-LAN \
new-routing-mark=GAME passthrough=no protocol=udp
add action=mark-routing chain=prerouting comment="FIFA Online 3" dst-port=\
7770-7790 in-interface=ether2-LAN new-routing-mark=GAME passthrough=no \
protocol=tcp
add action=mark-routing chain=prerouting dst-port=16320-16340 in-interface=\
ether2-LAN new-routing-mark=GAME passthrough=no protocol=udp
add action=mark-routing chain=prerouting comment="Lost Saga" dst-port=\
14000-14050 in-interface=ether2-LAN new-routing-mark=GAME passthrough=no \
protocol=tcp
add action=mark-routing chain=prerouting dst-port=14000-14050 in-interface=\
ether2-LAN new-routing-mark=GAME passthrough=no protocol=udp
add action=mark-routing chain=prerouting comment=\
"DragonNest Online Indonesia" dst-port=14300-14440,4300 in-interface=\
ether2-LAN new-routing-mark=GAME passthrough=no protocol=tcp
add action=mark-routing chain=prerouting dst-port=15100-15150 in-interface=\
ether2-LAN new-routing-mark=GAME passthrough=no protocol=udp
add action=mark-routing chain=prerouting comment=CrossFire dst-port=10009 \
in-interface=ether2-LAN new-routing-mark=GAME passthrough=no protocol=tcp
add action=mark-routing chain=prerouting dst-port=12060-12070 in-interface=\
ether2-LAN new-routing-mark=GAME passthrough=no protocol=udp
add action=mark-routing chain=prerouting comment="Counter Strike Online" \
dst-port=36567,8001 in-interface=ether2-LAN new-routing-mark=GAME \
passthrough=no protocol=tcp src-address=!192.168.3.200
add action=mark-routing chain=prerouting dst-port=8001 in-interface=\
ether2-LAN new-routing-mark=GAME passthrough=no protocol=udp src-address=\
!192.168.3.200
add action=mark-routing chain=prerouting comment=\
"Garena League of Legend (LOL)" dst-port=2080-2099 in-interface=\
ether2-LAN new-routing-mark=GAME passthrough=no protocol=tcp
add action=mark-routing chain=prerouting dst-port=5100 in-interface=\
ether2-LAN new-routing-mark=GAME passthrough=no protocol=udp
add action=mark-routing chain=prerouting comment="X-shot Indonesia" dst-port=\
7320-7350 in-interface=ether2-LAN new-routing-mark=GAME passthrough=no \
protocol=tcp
add action=mark-routing chain=prerouting dst-port=7800-7850,30000 \
in-interface=ether2-LAN new-routing-mark=GAME passthrough=no protocol=udp
add action=mark-routing chain=prerouting comment=Hon dst-port=\
9100-9200,11200-11500 in-interface=ether2-LAN new-routing-mark=GAME \
passthrough=no protocol=udp
add action=mark-routing chain=prerouting comment="Aurora World" dst-port=\
20050-20200 in-interface=ether2-LAN new-routing-mark=GAME passthrough=no \
protocol=tcp
add action=mark-routing chain=prerouting comment="HON Garena" dst-port=11033 \
in-interface=ether2-LAN new-routing-mark=GAME passthrough=no protocol=tcp
add action=mark-routing chain=prerouting dst-port=11255-11450 in-interface=\
ether2-LAN new-routing-mark=GAME passthrough=no protocol=udp
add action=mark-routing chain=prerouting comment=TOUCH dst-port=29001 \
in-interface=ether2-LAN new-routing-mark=GAME passthrough=no protocol=tcp
add action=mark-routing chain=prerouting comment="Ayo Dance" dst-port=\
18901-18909 in-interface=ether2-LAN new-routing-mark=GAME passthrough=no \
protocol=tcp
add action=mark-routing chain=prerouting comment=pokerlounge99 dst-port=\
843,9339,9338,4530,9090 in-interface=ether2-LAN new-routing-mark=GAME \
passthrough=no protocol=tcp
add action=mark-connection chain=forward new-connection-mark=con1 \
src-address=192.168.3.127
add action=mark-packet chain=forward dst-address=!192.168.3.100 in-interface=\
ether3-BROWSING new-packet-mark=zz out-interface=ether2-LAN passthrough=\
no
add action=mark-connection chain=prerouting comment=ICMP_KONEKSI \
new-connection-mark=ICMP_KONEKSI protocol=icmp
add action=mark-packet chain=prerouting comment=ICMP_PAKET connection-mark=\
ICMP_KONEKSI new-packet-mark=ICMP_PAKET passthrough=no protocol=icmp
/ip firewall nat
add action=masquerade chain=srcnat
add action=dst-nat chain=dstnat comment="redirect to hc" disabled=yes \
dst-address-list=!bypass-proxy dst-port=182,90,3128 in-interface=\
ether2-LAN per-connection-classifier=src-address:2/0 protocol=tcp \
src-address-list=!DOTA to-addresses=192.168.5.10 to-ports=8081
add action=dst-nat chain=dstnat comment="redirect to hc" disabled=yes \
dst-address-list=!bypass-proxy dst-port=182,90,3128 in-interface=\
ether2-LAN per-connection-classifier=src-address:2/1 protocol=tcp \
src-address-list=!DOTA to-addresses=192.168.5.10 to-ports=8082
add action=redirect chain=dstnat comment="redirect to hc" disabled=yes \
dst-address-list=!bypass-proxy dst-port=8080,182,90,3128 in-interface=\
ether2-LAN protocol=tcp src-address-list=!DOTA to-ports=8086
add action=dst-nat chain=dstnat comment="redirect to hc port80" disabled=yes \
dst-address-list=!bypass-proxy dst-port=80 in-interface=ether2-LAN \
per-connection-classifier=src-address:2/1 protocol=tcp src-address=\
!192.168.3.200 to-addresses=192.168.5.10 to-ports=8082
add action=dst-nat chain=dstnat comment="redirect to hc port80" disabled=yes \
dst-address-list=!bypass-proxy dst-port=80 in-interface=ether2-LAN \
per-connection-classifier=src-address:2/0 protocol=tcp src-address=\
!192.168.3.200 to-addresses=192.168.5.10 to-ports=8081
add action=redirect chain=dstnat dst-port=53 protocol=tcp to-ports=53
add action=redirect chain=dstnat dst-port=53 protocol=udp to-ports=53
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set pptp disabled=yes
/ip proxy
set cache-administrator="" cache-path=web-proxy1 enabled=yes max-cache-size=\
none parent-proxy=192.168.5.10 parent-proxy-port=8081 port=8086
/ip route
add distance=1 gateway=192.168.1.1 routing-mark=GAME
add distance=1 gateway=192.168.2.1
add distance=1 dst-address=192.168.2.1/32 gateway=192.168.2.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
/system clock
set time-zone-autodetect=no time-zone-name=Asia/Jakarta
/system note
set note="Using nice.rsc from www.mikrotik.co.id, 19 March 2015 21:14:09 WIB, \
1528 lines."
/system ntp client
set enabled=yes primary-ntp=119.82.243.189 secondary-ntp=203.160.128.3
/system scheduler
add disabled=yes interval=12h name=schedule1 on-event=":if ([:len [/file find \
name=nice.rsc]] > 0) do={ /file remove nice.rsc };/tool fetch address=ixp.\
mikrotik.co.id src-path=/download/nice.rsc dst-path=/nice.rsc mode=http;/i\
mport nice.rsc;/sys note set show-at-login=yes note=\"Visit www.adamonline\
.web.id" policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
feb/20/2014 start-time=20:30:42
add interval=30m name="cache flush" on-event=cacheflush policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
apr/03/2015 start-time=07:09:55
add disabled=yes interval=1d name="shutdown malam" on-event=autoshutdown \
policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive \
start-date=sep/06/2016 start-time=02:00:00
add disabled=yes interval=1d name=schedule2 on-event=autoshutdown policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=02:03:00
add disabled=yes interval=1d name=schedule3 on-event=autoshutdown policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=02:06:00
add disabled=yes interval=1d name=schedule4 on-event=autoshutdown policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=02:09:00
add disabled=yes interval=1d name=schedule5 on-event=autoshutdown policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=02:12:00
add disabled=yes interval=1d name=schedule6 on-event=autoshutdown policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=02:15:00
add disabled=yes interval=1d name=schedule7 on-event=autoshutdown policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=02:20:00
add disabled=yes interval=1d name=schedule8 on-event=autoshutdown policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=02:25:00
add disabled=yes interval=1d name=schedule9 on-event=autoshutdown policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=02:30:00
add disabled=yes interval=1d name=schedule10 on-event=autoshutdown policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=02:35:00
add disabled=yes interval=1d name=schedule11 on-event=autoshutdown policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=02:40:00
add disabled=yes interval=1d name=schedule12 on-event=autoshutdown policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=02:45:00
add disabled=yes interval=1d name=schedule13 on-event=autoshutdown policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=02:50:00
add disabled=yes interval=1d name=schedule14 on-event=autoshutdown policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=02:55:00
add disabled=yes interval=1d name=schedule15 on-event=autoshutdown policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=03:05:00
add disabled=yes interval=1d name=schedule16 on-event=autoshutdown policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=03:10:00
add disabled=yes interval=1d name=schedule17 on-event=autoshutdown2 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=03:20:00
add disabled=yes interval=1d name=schedule18 on-event=autoshutdown3 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=03:35:00
add disabled=yes interval=1d name=schedule19 on-event=autoshutdown4 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=03:50:00
add disabled=yes interval=1d name=schedule20 on-event=autoshutdown5 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=04:00:00
add disabled=yes interval=1d name=schedule21 on-event=autoshutdown6 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=04:10:00
add disabled=yes interval=1d name=schedule22 on-event=autoshutdown7 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
sep/06/2016 start-time=04:25:00
/system script
add name=cacheflush policy=ftp,reboot,read,write,policy,test,password source=\
"/ip dns cache flush"
add name=autoshutdown policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=\
"system shutdown"
add name=autoshutdown3 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=\
"system shutdown"
add name=autoshutdown2 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=\
"system shutdown"
add name=autoshutdown4 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=\
"system shutdown"
add name=autoshutdown5 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=\
"system shutdown"
add name=autoshutdown6 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=\
"system shutdown"
add name=autoshutdown7 policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=\
"system shutdown"
/tool netwatch
add comment="web proxy" disabled=yes down-script="/ip firewall nat disable" \
host=192.168.3.200 interval=5s timeout=3ms up-script=\
"/ip firewall nat enable"
add disabled=yes down-script="/ip firewall nat disable [/ip firewall nat find \
comment=\"redirect to hc\"]\r\
\n/ip firewall nat enable [/ip firewall nat find comment=\"fail.over.https\
\"]" host=192.168.5.2 interval=1s timeout=3s up-script="/ip firewall nat e\
nable [/ip firewall nat find comment=\"redirect to hc\"]\r\
\n/ip firewall nat disable [/ip firewall nat find comment=\"fail.over.http\
s\"]"
/tool user-manager database
set db-path=web-proxy1
[admin@MikroTik] >

You might also like