https://wiki.kicap-karan.com/index.php?action=history&feed=atom&title=Allow_DHCP_Dan_DNS_MikroTik 2026-05-17T06:11:08Z Riwayat revisi halaman ini di wiki MediaWiki 1.43.1 https://wiki.kicap-karan.com/index.php?title=Allow_DHCP_Dan_DNS_MikroTik&diff=83&oldid=prev 2025-12-26T17:04:07Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="id"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Revisi sebelumnya</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revisi per 27 Desember 2025 01.04</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l79">Baris 79:</td> <td colspan="2" class="diff-lineno">Baris 79:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Urutan Rule Firewall ==</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== Urutan Rule Firewall ==</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">1. </del>Allow established, related</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"># </ins>Allow established, related</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">2. </del>Allow trusted</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"># </ins>Allow trusted</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">3. </del>Allow DHCP dan DNS</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"># </ins>Allow DHCP dan DNS</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">4. </del>Drop all other input</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"># </ins>Drop all other input</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Pentingnya urutan:</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Pentingnya urutan:</div></td></tr> <!-- diff cache key my_wiki:diff:1.41:old-82:rev-83:php=table --> </table>

Kicap https://wiki.kicap-karan.com/index.php?title=Allow_DHCP_Dan_DNS_MikroTik&diff=82&oldid=prev 2025-12-26T17:03:41Z

<p>←Membuat halaman berisi &#039;== Pengenalan == Dalam jaringan homelab dan jaringan desa, DHCP dan DNS adalah layanan dasar yang harus berjalan lancar. DHCP memberikan alamat IP otomatis kepada perangkat, sedangkan DNS menerjemahkan nama domain ke alamat IP. Tanpa pengaturan firewall yang tepat, layanan ini bisa terganggu. == Pentingnya Mengizinkan DHCP dan DNS == === DHCP (UDP port 67, 68) === * Memungkinkan perangkat mendapatkan IP otomatis * Port 67 → Server DHCP * Port 68 → Client D...&#039;</p> <p><b>Halaman baru</b></p><div>== Pengenalan ==<br /> Dalam jaringan homelab dan jaringan desa, DHCP dan DNS adalah layanan dasar yang harus berjalan lancar. DHCP memberikan alamat IP otomatis kepada perangkat, sedangkan DNS menerjemahkan nama domain ke alamat IP. Tanpa pengaturan firewall yang tepat, layanan ini bisa terganggu.<br /> <br /> == Pentingnya Mengizinkan DHCP dan DNS ==<br /> <br /> === DHCP (UDP port 67, 68) ===<br /> <br /> * Memungkinkan perangkat mendapatkan IP otomatis<br /> * Port 67 → Server DHCP<br /> * Port 68 → Client DHCP<br /> <br /> Konsekuensi jika diblokir:<br /> <br /> * Perangkat tidak mendapat IP otomatis<br /> * Koneksi ke jaringan internal terganggu<br /> * Layanan internal tidak dapat diakses<br /> <br /> === DNS (UDP/TCP port 53) ===<br /> <br /> * Memungkinkan perangkat melakukan resolve nama domain<br /> * UDP 53 → Query standar<br /> * TCP 53 → Transfer zone besar / fallback query<br /> <br /> Konsekuensi jika diblokir:<br /> <br /> * Client tidak bisa mengakses internet berbasis domain<br /> * Layanan berbasis DNS (HTTPS, SMTP, cloud) gagal<br /> <br /> == Studi Kasus Jaringan ==<br /> Interface dan segmen:<br /> <br /> * ether1 : ISP / Internet<br /> * ether2 : Server DHCP / DNS<br /> * ether3 : Client PPPoE<br /> * ether4 : CCTV<br /> * ether5 : Access Point / User<br /> <br /> Target konfigurasi:<br /> <br /> * Semua client boleh request IP dari DHCP server<br /> * Semua client boleh resolve domain melalui DNS server<br /> * Firewall tetap aman dari trafik tidak sah<br /> <br /> == Implementasi Firewall ==<br /> <br /> === Allow DHCP (UDP port 67-68) ===<br /> <br /> &lt;pre&gt;<br /> /ip firewall filter add \<br /> chain=input \<br /> protocol=udp \<br /> dst-port=67-68 \<br /> action=accept \<br /> comment=&quot;Allow DHCP request and reply&quot;<br /> &lt;/pre&gt;<br /> <br /> === Allow DNS UDP (port 53) ===<br /> <br /> &lt;pre&gt;<br /> /ip firewall filter add \<br /> chain=input \<br /> protocol=udp \<br /> dst-port=53 \<br /> action=accept \<br /> comment=&quot;Allow DNS UDP queries&quot;<br /> &lt;/pre&gt;<br /> <br /> === Allow DNS TCP (port 53) ===<br /> <br /> &lt;pre&gt;<br /> /ip firewall filter add \<br /> chain=input \<br /> protocol=tcp \<br /> dst-port=53 \<br /> action=accept \<br /> comment=&quot;Allow DNS TCP queries&quot;<br /> &lt;/pre&gt;<br /> <br /> == Urutan Rule Firewall ==<br /> <br /> 1. Allow established, related<br /> 2. Allow trusted<br /> 3. Allow DHCP dan DNS<br /> 4. Drop all other input<br /> <br /> Pentingnya urutan:<br /> <br /> * Menjamin DHCP/DNS tetap berfungsi<br /> * Mencegah trafik tidak sah mengakses router<br /> <br /> == Hasil Implementasi ==<br /> <br /> * Client mendapatkan IP otomatis<br /> * Client dapat resolve domain dengan benar<br /> * Layanan jaringan internal dan internet berjalan normal<br /> * Router tetap terlindungi dari trafik tidak sah<br /> <br /> == Kesimpulan ==<br /> Mengizinkan DHCP dan DNS di firewall adalah langkah fundamental untuk stabilitas jaringan. Tanpa ini, perangkat dan layanan akan mengalami gangguan serius. Implementasi yang tepat membuat jaringan homelab dan jaringan desa lebih aman, stabil, dan andal.</div>

Kicap