SEO Work file list (Directory Submission)

Directory list link: https://goo.gl/LU2GwE

https://www.dropbox.com/s/mlknwlbmnxz21j8/Seo%20work%203%20.pdf?dl=0

Office 2014

download registry serial:
http://goo.gl/uAXATC

CSE 15'th Batch 4th semister Session (2012-2013)

• CSE-225 (Computer Architecture Slides):

        all slide download link click here

• CSE-223 (DBMS Slides): 

  all slide download link click here

  
  

SEO Free Trusted Directories

http://www.dmoz.org

http://www.lanic.utexas.edu/

http://lanic.utexas.edu/

http://www.products-and-services.com/

http://www.superpages.ca/

http://www.artcyclopedia.com/

http://www.medranks.com/

http://www.dirbull.com/

http://www.cuedirectory.com/

http://www.bluefind.com/

http://www.321webmaster.com

http://www.gogreece.com

http://www.freeprwebdirectory.com

http://www.sitepromotiondirectory.com http://www.submissionwebdirectory.com

http://www.abc-directory.com

http://www.sitepromotiondirectory.com

http://familyvillage.wisc.edu/

http://www.intute.ac.uk/artsandhumanities/

http://envirolink.org/

http://scriptsearch.com/

http://femina.com/

http://dir.yahoo.com/

http://www.ezilon.com/

http://www.directory.ac/

http://www.limboportal.com

http://www.overlandagency.com

http://www.2rss.com

http://www.aardvark.co.za

http://www.anybrowser.com/directory/

http://www.bible-history.com

http://www.business-directory-uk.co.uk

http://www.femina.com

http://www.freelinksdirectory.net

http://www.infotiger.com

http://www.maven.co.il

http://www.nashvillebbb.org

http://www.niceone.com

http://www.nzs.com

http://www.phantis.com

http://www.scrubtheweb.com

http://www.surfsafely.com

http://www.yekey.com

http://www.somuch.com

http://www.directory.edu.vn

http://www.submissionwebdirectory.com

http://www.sercm.org

http://www.archivd.com

www.ukinternetdirectory.ne

http://www.britainbusinessdirectory.com

http://www.yekey.com

http://www.frappr.us/

http://www.ukinternetdirectory.net

http://www.usalistingdirectory.com

http://www.luxpoint.rtl.lu

http://www.marketinginternetdirectory.com

http://www.medicalhealthsites.com

http://www.patient.co.uk/

http://www.mavensearch.com/

http://graydirectory.com/

http://www.bizweb.com/

http://www.psychnet-uk.com/

http://www.somuch.com/

http://www.jayde.com/

http://www.mygreencorner.com/

http://www.thelivinglink.net/

http://www.aitpnetwork.org/

http://www.eurail.com/

http://www.business.com/

http://argos-cruise.com

http://wldirectory.com/

http://www.littlewebdirectory.com

http://www.operationuplink.org

http://www.webxtend.com

http://www.1000websitetools.com

http://www.asialink-eamarnet.com

http://www.bazsites.com

http://www.beammachine.net

http://www.blogdire.com

http://www.blog-directory.org

http://www.blogfesor.org/directorio/

http://www.bloghints.com

http://www.blue.lu

http://www.canadawebdir.com

http://www.canlinks.net

http://www.ccwos.com

http://www.chefsblogs.com/directory/

http://www.cryptcrawl.com

http://www.britainbusinessdirectory.com/

http://www.bigtenu.org/

http://www.dir.webhostinggeeks.com

http://www.director-web.net

http://www.directory.ldmstudio.com

http://www.eastasiadirectory.com

http://www.egyptsearch.com

http://www.ehealthdirectory.eu

http://www.eliteweb.cc

http://www.femeba.net

http://www.freeprwebdirectory.com

http://www.humanrightstools.org/dir/

http://www.i-dio.com

http://www.illumirate.com

http://www.indiecoffeehouse.com/directory/

http://www.info-listings.com

http://www.information.com

http://www.investhz.com

http://www.ipl.org

http://www.irishblogs.com

http://www.itzalist.com

http://www.jjhx.com

http://www.linkdirectory.com

http://www.lublin-online.com

http://www.monachos.net/links/

http://www.nationmultimedia.com/webdir

http://www.newwebdirectory.com

http://www.pcib.com

http://www.photoblogdirectory.net

http://www.planetindie.com

http://www.prolinkdirectory.com

http://www.qlweb.info

http://www.quickblogdirectory.com

http://www.ribcast.com

http://www.rocktheadored.com

http://www.searchsight.com/Directory.htm

http://www.searchwiz.com

http://www.sygol.com

http://www.top5jamaica.com

http://www.translationresearch.com/links/

http://www.transoptix.com

http://www.traveltourismdirectory.net

http://www.turnpike.net/directory.html

http://www.ubdaily.com

http://www.websitedirectory.co.nz

http://www.yxdmw.com

http://www.zoock.net

http://www.tsection.com

http://www.arakne-links.com

http://www.onlinesociety.org

http://www.baikalglobal.com

http://www.subscr.com

http://www.icid2010.org

http://www.surfsafely.com

http://abigdir.com

http://www.umoz.org

http://www.w3catalog.com

http://www.iabolish.com/

http://www.best-in.gr

http://www.bigtenu.org

http://www.comeonaussie.com

http://www.webworldindex.com

http://www.onemission.com

http://www.thetortellini.com

http://www.alistsites.com

http://www.domaining.in

http://www.searcheurope.com

http://www.amray.com

http://www.a-flat.org

http://www.abigdir.com

http://www.allthewebsites.org

http://www.dramba.com

http://www.a1webdirectory.org

http://www.mygreencorner.com

http://www.1abc.org

http://www.1websdirectory.com

http://www.anoox.com/

http://www.re-quest.net/

http://www.webworldindex.com/

http://www.illumirate.com/

http://www.americasbest.com/

http://www.chiff.com/

http://www.zeal.com/

http://www.gimpsy.com/

http://www.canlinks.net/

http://searchsight.com/Directory.htm

http://www.freewebsitedirectory.com/

http://miriblack.com/

http://www.niche-listings.com/

http://www.esearchresearch.info/

http://mastermoz.com/

http://www.domaining.in/

http://www.londovor.com/

http://www.theshoppings.com/

http://www.directory.ldmstudio.com/

http://www.directorydice.com/

http://www.seocourt.com/

http://www.publimix.net/

http://anker-bank.info/

http://www.dirjournal.com/

http://www.dmozzilla.com/

http://www.esjuob.com/

www.uwab.org/‎

http://www.jetjaws.com/

http://www.alistdirectory.com/

http://www.blackabsolute.com

http://triplewdirectory.com/

http://www.zdirectory.net

http://www.magdalyns.com/

http://www.cyprus-net.com

http://www.iqnewsroom.com

http://devoteclub.com

http://www.submit-url.org

http://www.synergy-directory.com

http://searchsight.com

http://www.authml.net

http://www.h-dm.com

http://www.jhucr.org/

http://www.theseoking.com

http://www.txtlinks.com

http://www.2006cigr.org

http://www.a2zwebindex.com

http://www.ab.poznan-online.com

http://www.abc-directory.com

http://www.acoon.com

http://www.admcity.com/search/

http://www.adosinda.com

http://www.adverts.gr/grsearch/pages/

http://www.agaccess.com

http://www.allshops.com

http://www.amidalla.com

http://www.amray.com

http://www.annasinkovska.com/fashion-directory/

http://www.apteka.tarnow.info

http://www.arakne-links.com

http://www.artmam.net

http://www.allscenes.org

http://www.gainweb.org

http://www.suggest-url.net

http://www.ananar.com

http://modelpage.net

http://www.addbusiness.net

http://campagnenouveaudefi.com

http://butchmorris.com

http://www.gateway-worldwide.com

http://www.acewebdirectory.com

http://www.yyool.com

http://www.linkteve.com

http://www.linkandthink.org

http://www.pagenxt.com

http://www.puppyurl.com

http://www.submitlinkurl.com

http://www.gazingus.org

http://red-ibex.com

http://www.linkpartnersdirectory.com

http://www.smoothlisting.com

http://www.directory.gov.vn

http://www.happal.com

http://globallistingsite.com

http://picktu.com

http://www.seanwise.com

http://www.momsdirectory.net

http://www.nonar.com

http://www.popdizzy.com

http://www.bedwan.com

http://www.generalbusinesswebdirectory.com http://www.cademocracyact.org

http://www.mccaincomics.org

http://prompt-seo.com

http://www.xtians.com

http://businessworlddirectory.com

http://nareponline.com

http://www.nandosearch.com

http://ceeti.net

http://www.ismpi.com

http://causeitnow.org

http://www.ewebgazette.com

http://www.fwebdirectory.com

http://www.findez.biz

http://www.acpa-main.org

http://www.polypat.org

http://www.bulldogblog.net

http://www.rdirectory.net

http://www.cyberteddy500.com

http://www.info-listings.com

http://www.voxcap.com

http://www.designxf.com

http://www.211louisiana.com

http://www.concasida2010.org

http://www.digabusiness.com

http://www.topsiteswebdirectory.com

http://www.dipardabali.com

http://www.searchsight.com

http://www.cndanzaperu.org

http://www.prolinkdirectory.com

http://www.fasflight.com

http://www.mvomrat.com

http://www.gogmmarlins.com

http://www.ctap7.org

http://www.downunderindex.com

http://www.aus-emaps.com

http://www.flamesofc.org

http://www.rss-directory.us

http://www.anaximanderdirectory.com

http://www.thalesdirectory.com

http://www.koroglutv.com

http://www.viesearch.com

http://www.intelseek.com

http://www.seoseek.net

http://www.linkcentre.com

http://www.gmdir.com

http://www.linkaddurl.com

http://www.eldirectori.cat

http://www.addsitelink.com

http://www.the-free-directory.co.uk

http://www.madmoc.com

http://www.chiostimes.com

http://www.submission4u.com

http://www.indexireland.com

http://www.backupmd.net

http://www.fsm10.org

http://www.thelivinglink.net

http://www.alistdirectory.com

http://www.freedirectorysubmit.com

http://www.roask.com

http://www.247webdirectory.com

http://www.ribcast.com

http://www.linkroo.com

http://www.triplewdirectory.com

http://www.bigecodirectory.com

http://www.linkspurt.com

http://www.hitwebdirectory.com

http://www.humanediteddirectory.net

http://www.add32.com

http://www.wwwi.co.uk

http://www.yoofindit.com

http://www.sherlockdirectory.com

http://www.suggest-link.net

http://www.allbusinessdirectory.biz

http://www.hitalyzer.com

http://www.piseries.com

http://www.9sites.net

http://www.fat64.net

http://www.seosubmissiondirectory.info

http://www.ranaf.com

http://www.rankdirectory.org

http://www.euroindia-it.org

http://www.h-log.com

http://www.addurlguide.com

http://www.worldwidelist.net

http://www.linkmysite.net

http://www.allstatesusadirectory.com

http://www.nexusdirectory.com

http://www.lawyerlinks.co

http://www.tinydinodirectory.com

http://www.usawebsitesdirectory.com

http://www.wldirectory.com

http://www.webzdirectory.com

http://www.verydirectory.com

http://www.urllib.com

http://www.webdyr.es

http://www.wsportal.net

http://www.bestcatalog.net/

http://www.canadopedia.com/

http://www.earthstation9.com/

http://www.mavicanet.com/

http://www.web-beacon.com/

http://www.clickey.com/

http://www.websavvy.cc/

http://www.cyberwebsearch.com/

http://www.cantufind.com/

http://www.yeandi.com/

http://www.allfreethings.com/

http://www.smartlinks.org/

http://www.arakne-links.com/

http://www.dir-submission.com/

http://websitespromotiondirectory.com/

http://www.environmentpage.com/

http://www.directoryvault.com/

http://www.littlewebdirectory.com/links.asp

http://www.dir365.org/

http://www.123hitlinks.info/

http://www.alistsites.com/

http://www.samsdirectory.com/

http://www.creativeagency.eu/

http://www.prolinkdirectory.com/

http://www.all-linkdirectory.com/

http://www.zunchdirectory.com/

http://www.onemission.com/

http://www.wikidweb.com/

http://www.anaximanderdirectory.com/

http://invo.info/

http://www.makingmoneylibrary.com/

http://474.sytes.net/

http://www.namedirectory.com.ar/

http://www.yhay.com/

http://directory.askbee.net/

http://www.monsterdirectory.com.ar/

http://www.pakadtrader.com/

http://www.treshella.co.uk/

http://www.dreamsubmitting.info/

http://www.exospy.com/

http://www.nicksyear.com/

http://www.blogdire.com/

http://www.peacetags.com/

http://www.philippine-directory.com/directory

http://www.directswift.com/

http://www.infrasec-conf.org/

http://www.add2directories.com/

http://www.azlisted.com/

http://9dir.com/

http://www.lostdirectory.com

http://www.abstractdirectory.org

http://www.vip-pro.com

http://allthewebdirectory.com

http://svguia.com/submit/#

http://www.clickdmoz.com

http://www.directory-free.com

http://www.dirozo.com

http://www.jetlinks.net

http://www.nazcea.com/

http://www.seorange.com

http://www.skypemedia.com

http://www.thedailysubmit.com

http://www.website-services.biz

http://www.wordnewsonline.com

http://www.directoryfever.com

http://revistaparadigma.org

http://www.business-finder.info

http://www.555directory.com

http://www.seodirectoryonline.org

http://www.themeszetaboards.com

http://www.auhana.com

http://www.snapcc.org

http://www.priordirectory.com

http://www.k2hub.info

http://gainesvillesbest.com

http://www.thuanthaopy.com

http://vermontdesignbuild.org

http://www.submitlinkdirectory.org

http://www.siedp.org/

http://www.10directory.com

http://www.ewebresource.com

http://darkdogdesigns.com

http://www.linkresell.com

http://clocalltoaction.com

http://www.directoryint.com

http://www.aresdirectoryresource.com

http://www.buysll.com

http://www.vizem.net

http://www.jameslongstreet.org

http://getindirectory.com

http://www.galyeannursery.com

http://dondir.com

http://authml.net

http://www.websitelibrary.org

http://www.1m1.biz

http://www.h8store.com

http://www.robolinks.com

http://www.omfericit.net

http://www.thedirectorylistings.org

http://www.sitetweets.net

http://www.web-directory-sites.org

http://toprankdirectory.org

http://www.shistlbb.com

http://www.auto-backlink.com

http://www.whytes.net

http://www.forbfd.com

http://vinylcartel.com

http://www.urlcastle.com

http://www.directorybunch.com

http://hakis.net

http://rtsthurnall.com

http://www.ukings.info

http://www.cactusalliance.org

http://www.gaidso.com

http://www.tabugado.com

http://www.martow.com

http://www.saccdirectory.org

http://littlegreensubmarine.com

http://www.linkadded.com/

http://www.ahviit.org

http://www.koitievinoven.com

http://www.mrsun.us

http://www.lumenon.com

http://www.darkdogdesigns.com

http://www.efreedirectory.com

http://www.directory.am

http://www.ccifl.org

http://www.powerfulldirectory.info

http://www.boardse.com

http://www.blavagen.com

http://www.bestfreewebsites.net

http://www.dirweblinks.com

http://www.10startravels.com/

http://socialbook.com/

www.directory.ttra2008.com

http://topweblist.net/

http://www.gurcan.com.tr/

http://huttodirectory.com/

http://www.strongestlinks.com/directories.php

http://www.doharfc.com/

http://clicky.com/

http://www.w3schools.com/css/css_link.asp

http://www.bluchang.com/

http://addurl.amfibi.com/

www.addlinks.org

http://www.adollaralink.com/

http://www.allgoodweb.com/

http://www.asabove.com/

/www.c3t.org‎

http://atomictaekwondo.com/

http://www.taskic.com/

http://www.sourcedirectory.org.uk/kb5/dorset/asch/home.page

http://www.ec123.net/

http://hsmarketing.com/

http://www.networksystemone.com/

http://www.answers.com/

www.subhashghai.com/‎

http://www.pushba.com/

www.gp32wip.com

www.infobert.com

http://www.xegs.com

http://www.mondseetage.com

http://www.corporateeventwines.com/

http://www.pkcat.com

http://www.fxtwits.com

http://www.pxdaj.com

http://www.onlinelinksdirectory.com

http://www.freelinkdir.com

http://www.urlmoz.com/

http://jbdesignoffice.com/

http://directory.ezweb-tools.com

http://seagency.net

http://www.comoestamos.com/

http://www.coulink.info

http://www.eicq.org

http://www.finest4.com

http://www.free-link-directory.info

http://www.free-links-articles-directory.com

http://www.hagase.com

http://www.hahwebdirectory.com

http://www.inteligentd.com

http://www.kent65.com

http://www.lifetimelinks.com

http://www.linksubmission.info

http://www.linkyers.com

http://www.munoa.org/

http://www.pbhelp.com

http://www.quickdirectory.biz

http://www.theloudonroom.com

http://www.submit.biz

http://seowebdirectoryonline.info/

http://buk-mark.com/

www.bukmark.net

top1directory.com

http://vematrimony.com/

www.addallsites.com

www.diralicious.com

http://www.vistasystem.com/USA-Directory.html

www.entireweb.com/free_submission

www.bwua.org

www.bigsites.com

www.bazsites.com/

www.ananor.com

fenixdirectory.com

www.dirnets.com

http://directory100.info/

http://www.cross-raid.com/

www.8y7.net‎

http://www.submitlinkurl.com/

http://www.top10bestwebsitehosting.com/

http://www.bestdirectoryservices.com

http://www.21stguru.com

http://www.webzveno.com

http://www.seoglee.com/

http://www.555775.com

http://www.internether.com

http://www.elektronickits.com

http://www.dothefeedback.com

http://www.expressfreedirectory.com

http://www.dir2me.com

http://www.daranet.com

http://www.tnboat.com

http://www.ipeack.com

http://www.jplinkdirectory.com/

http://www.voicelet.com

http://collective-energy.com

http://www.freedirectory4u.org/

http://www.delphidirectory.com

http://www.intermagnetusa.org

http://www.getfreeweblinks.com

http://www.allworldindex.com

http://www.crazyleafdesign.com

http://www.heasray.com

http://www.linksamurai.info/

http://www.stumbledirectory.com

http://www.linkerto.com/

http://www.srlinks.co.uk

http://freedofollowdirectory.org/

http://myonlinewebdirectory.org/

http://specialwebdirectory.com/

http://standardlisting.com/

http://advertisingwebdirectory.com/

http://recentwebdirectory.com/

http://tokyolinkdirectory.com/

http://unitedkingdomsubmit.com/

http://businessweblisting.com/

http://canadianlinkdirectory.com/

http://www.oomega.com/

http://www.freesitedir.info/

http://www.seo-directory.in/

http://goldenwebdirectory.com/

http://sitepointdirectory.com/

http://www.holdtiteusa.com/

www.globe.com.ph

www.addurl.nu

www.companyprofile4.com

heart.bmj.com

hwebdir.com

www.directorywale.com

www.techiewebs.com/

www.sjeyc.com

www.myspacelayoutsdirectory.com

www.a1directorysearch.com

xdirectorys.com.ip4.bz

www.dandywebdirectory.com/

www.hintdirectory.com

www.beastdirectory.info

www.md1r.com

www.directory4321.com

www.directory-link-4free.com/

Best Online Radio

www.protiva.net/widget/Protiva_Radio/index.php?radio=4

Mikrotik Scripts (Various) (all are tested and working)

Email:

 

/tool e-mail send to=abc@domain.com \
cc=abc@domain.com,abc2@domain.com \
subject="Subject" \

from=Example_Router \
port=587 \
start-tls=yes \
user=youruser@gmail.com \
password=youremailpassword \
body="body"

 

 

LATEST NEW FIREWALL:
/ip firewall filter
add action=drop chain=input comment="outside word dns block in UDP" dst-port=\
    53 in-interface=ether1 protocol=udp src-address=0.0.0.0/0
add action=drop chain=input comment="outside word dns block in TCP" dst-port=\
    53 in-interface=ether1 protocol=tcp src-address=0.0.0.0/0
add action=add-src-to-address-list address-list=PortScanner \
    address-list-timeout=2w chain=input comment="Drop Port Scanner" protocol=\
    tcp psd=21,3s,3,1
add action=add-src-to-address-list address-list=PortScanner \
    address-list-timeout=2w chain=input protocol=tcp tcp-flags=\
    fin,!syn,!rst,!psh,!ack,!urg
add action=add-src-to-address-list address-list=PortScanner \
    address-list-timeout=2w chain=input protocol=tcp tcp-flags=fin,syn
add action=add-src-to-address-list address-list=PortScanner \
    address-list-timeout=2w chain=input protocol=tcp tcp-flags=\
    fin,syn,rst,psh,ack,urg
add action=add-src-to-address-list address-list=PortScanner \
    address-list-timeout=2w chain=input protocol=tcp tcp-flags=syn,rst
add action=add-src-to-address-list address-list=PortScanner \
    address-list-timeout=2w chain=input protocol=tcp tcp-flags=\
    fin,psh,urg,!syn,!rst,!ack
add action=add-src-to-address-list address-list=PortScanner \
    address-list-timeout=2w chain=input protocol=tcp tcp-flags=\
    !fin,!syn,!rst,!psh,!ack,!urg
add action=drop chain=input src-address-list=PortScanner
add action=drop chain=input comment="drop ftp brute forcers" dst-port=21 \
    in-interface=ether1 protocol=tcp src-address=0.0.0.0/0 src-address-list=\
    ftp_blacklist
add chain=output content="530 Login incorrect" disabled=yes dst-limit=\
    1/1m,9,dst-address/1m protocol=tcp
add action=add-dst-to-address-list address-list=ftp_blacklist \
    address-list-timeout=3h chain=input content="530 Login incorrect" \
    in-interface=ether1 protocol=tcp
add action=drop chain=input comment="drop ssh brute forcers" dst-port=22 \
    in-interface=ether1 protocol=tcp src-address-list=ssh_blacklist
add action=add-src-to-address-list address-list=ssh_blacklist \
    address-list-timeout=1w3d chain=input connection-state=new dst-port=22 \
    protocol=tcp src-address-list=ssh_stage3
add action=add-src-to-address-list address-list=ssh_stage3 \
    address-list-timeout=1m chain=input connection-state=new dst-port=22 \
    protocol=tcp src-address-list=ssh_stage2
add action=add-src-to-address-list address-list=ssh_stage2 \
    address-list-timeout=1m chain=input connection-state=new dst-port=22 \
    protocol=tcp src-address-list=ssh_stage1
add action=add-src-to-address-list address-list=ssh_stage1 \
    address-list-timeout=1m chain=input connection-state=new dst-port=22 \
    protocol=tcp
add action=drop chain=input comment="Drop Traceroute" icmp-options=11:0 \
    in-interface=ether1 protocol=icmp
add action=drop chain=input icmp-options=3:3 in-interface=ether1 protocol=\
    icmp
add action=drop chain=input in-interface=ether1 protocol=icmp \
    src-address-list=!Local
add action=drop chain=input comment="Drop ICMP Ping" in-interface=ether1 \
    protocol=icmp
/

Load Balancing Two or More WAN Connections With Failover

Rules:
/ip address
add address=YOUR LAN IP interface=LAN
add address=YOUR WAN1 IP interface=WAN1
add address=YOUR WAN2 IP interface=WAN2


/ip firewall mangle
add chain=input in-interface=WAN1 action=mark-connection new-connection-mark=WAN1_conn
add chain=input in-interface=WAN2 action=mark-connection new-connection-mark=WAN2_conn

add chain=output connection-mark=WAN1_conn action=mark-routing new-routing-mark=to_WAN1
add chain=output connection-mark=WAN2_conn action=mark-routing new-routing-mark=to_WAN2

add chain=prerouting dst-address=YOUR WAN1 SUBNET action=accept in-interface=LAN
add chain=prerouting dst-address=YOUR WAN1 SUBNET action=accept in-interface=LAN

add chain=prerouting dst-address-type=!local in-interface=LAN per-connection-classifier=both-addresses­-and-ports:2/0 action=mark-connection new-connection-mark=WAN1_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=LAN per-connection-classifier=both-addresses­-and-ports:2/1 action=mark-connection new-connection-mark=WAN2_conn passthrough=yes

add chain=prerouting connection-mark=WAN1_conn in-interface=LAN action=mark-routing new-routing-mark=to_WAN1
add chain=prerouting connection-mark=WAN2_conn in-interface=LAN action=mark-routing new-routing-mark=to_WAN2


/ip route
add dst-address=0.0.0.0/0 gateway=YOUR WAN1 GATEWAY routing-mark=to_WAN1 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=YOUR WAN2 GATEWAY routing-mark=to_WAN2 check-gateway=ping

add dst-address=0.0.0.0/0 gateway=YOUR WAN1 GATEWAY distance=1 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=YOUR WAN2 GATEWAY distance=2 check-gateway=ping


/ip firewall nat
add chain=srcnat out-interface=WAN1 action=masquerade
add chain=srcnat out-interface=WAN2 action=masquerade


IF YOU HAVE HOTSPOT ENABLED, ADD THIS

/ip firewall nat
add action=accept chain=pre-hotspot disabled=no dst-address-type=!local hotspot=auth

Standard firewall rule Mikrotik:
/ip firewall filter
add action=accept chain=forward comment="Accepted Connections" \
connection-state=established disabled=no
add action=accept chain=input comment="" disabled=no dst-port=80 protocol=tcp
add action=accept chain=input comment="" disabled=no dst-port=25 protocol=tcp
add action=drop chain=forward comment="Drop invalid connections" \
connection-state=invalid disabled=no

Drop Virus Port

/ip firewall filter
add action=drop chain=forward comment="Drop Virus Port" disabled=no \
dst-port=40016 protocol=udp
add action=drop chain=virus comment="" disabled=no dst-port=135-139 protocol=\
udp
add action=drop chain=virus comment="" disabled=no dst-port=135-139 protocol=\
tcp
add action=drop chain=virus comment="" disabled=no dst-port=1433-1434 \
protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=445 protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=445 protocol=udp
add action=drop chain=virus comment="" disabled=no dst-port=593 protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=1024-1030 \
protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=1080 protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=1214 protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=1363 protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=1364 protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=1368 protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=1373 protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=1377 protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=2745 protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=2283 protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=2535 protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=2745 protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=3127 protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=3410 protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=4444 protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=4444 protocol=udp
add action=drop chain=virus comment="" disabled=no dst-port=5554 protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=8866 protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=9898 protocol=tcp
add action=drop chain=virus comment="" disabled=no dst-port=10080 protocol=\
tcp
add action=drop chain=virus comment="" disabled=no dst-port=12345 protocol=\
tcp
add action=drop chain=virus comment="" disabled=no dst-port=17300 protocol=\
tcp
add action=drop chain=virus comment="" disabled=no dst-port=27374 protocol=\
tcp
add action=drop chain=virus comment="" disabled=no dst-port=65506 protocol=\
tcp

Drop Port Scanner

/ip firewall filter
add action=add-src-to-address-list address-list=PortScanner \
address-list-timeout=2w chain=input comment="Drop Port Scanner" disabled=\
no protocol=tcp psd=21,3s,3,1
add action=add-src-to-address-list address-list=PortScanner \
address-list-timeout=2w chain=input comment="" disabled=no protocol=tcp \
tcp-flags=fin,!syn,!rst,!psh,!ack,!urg
add action=add-src-to-address-list address-list=PortScanner \
address-list-timeout=2w chain=input comment="" disabled=no protocol=tcp \
tcp-flags=fin,syn
add action=add-src-to-address-list address-list=PortScanner \
address-list-timeout=2w chain=input comment="" disabled=no protocol=tcp \
tcp-flags=fin,syn,rst,psh,ack,urg
add action=add-src-to-address-list address-list=PortScanner \
address-list-timeout=2w chain=input comment="" disabled=no protocol=tcp \
tcp-flags=syn,rst
add action=add-src-to-address-list address-list=PortScanner \
address-list-timeout=2w chain=input comment="" disabled=no protocol=tcp \
tcp-flags=fin,psh,urg,!syn,!rst,!ack
add action=add-src-to-address-list address-list=PortScanner \
address-list-timeout=2w chain=input comment="" disabled=no protocol=tcp \
tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg
add action=drop chain=input comment="" disabled=no src-address-list=\
PortScanner

Drop Brute Force

/ip firewall filter
add action=accept chain=output comment="Drop Brute Force" content=\
"530 Login incorrect" disabled=no dst-limit=1/1m,9,dst-address/1m \
protocol=tcp
add action=add-dst-to-address-list address-list=Blacklist \
address-list-timeout=23h chain=output comment="" content=\
"530 Login incorrect" disabled=no protocol=tcp
add action=drop chain=input comment="" disabled=no dst-port=22 protocol=tcp \
src-address-list=Blacklist

Drop Trace route

/ip firewall filter
add action=drop chain=forward comment="Drop Traceroute" disabled=no \
icmp-options=11:0 protocol=icmp
add action=drop chain=forward comment="" disabled=no icmp-options=3:3 \
protocol=icmp
add action=drop chain=input comment="" disabled=no protocol=\
icmp src-address-list=!Local

Drop ICMP Ping

/ip firewall filter
add action=drop chain=input comment="Drop ICMP Ping" disabled=no protocol=\
icmp

Drop Netcut Attack

/ip firewall filter
add action=accept chain=input comment="NETCUT BLOCK" disabled=no dst-port=\
0-65535 protocol=tcp src-address=61.213.183.0/24
add action=accept chain=input comment="" disabled=no dst-port=0-65535 \
protocol=tcp src-address=67.195.134.0/24
add action=accept chain=input comment="" disabled=no dst-port=0-65535 \
protocol=tcp src-address=68.142.233.0/24
add action=accept chain=input comment="" disabled=no dst-port=0-65535 \
protocol=tcp src-address=68.180.217.0/24
add action=accept chain=input comment="" disabled=no dst-port=0-65535 \
protocol=tcp src-address=203.84.204.0/24
add action=accept chain=input comment="" disabled=no dst-port=0-65535 \
protocol=tcp src-address=69.63.176.0/24
add action=accept chain=input comment="" disabled=no dst-port=0-65535 \
protocol=tcp src-address=69.63.181.0/24

Sample Mikrotik Layer7 Protocol

Extension

\.(exe|bin|cab|msi|rar|zip|iso|nrg|img|gz|gzip|7z|tar|mp3|mp4|wmv|avi|mpg|mpeg|flv|mov|3gp|rm|rm1|doc|pdf|ppt|xls|dat|vob|asf)

Video

http/(0\.9|1\.0|1\.1)[\x09-\x0d ][1-5][0-9][0-9][\x09-\x0d -~]*(content-type: video)

Youtube

o-o.preferred.pttelkom-|a.youtube.com|b.youtube.com|c.youtube.com|d.youtube.com|e.youtube.com|f.youtube.com|g.youtube.com|h.youtube.com|i.youtube.com|j.youtube.kom|l.youtube.com

Limit Bandwith using Layer 7-Protocol

SCRIPT I

/ip firewall layer7-protocol
add comment="" name=ISO regexp="\\.(iso)"
add comment="" name=NRG regexp="\\.(nrg)"
add comment="" name=RM regexp="\\.(rm)"
add comment="" name=RM1 regexp="\\.(rm1)"
add comment="" name=MP4 regexp="\\.(mp4)"
add comment="" name=AVI regexp="\\.(avi)"
add comment="" name=WAV regexp="\\.(wav)"
add comment="" name=MPG regexp="\\.(mpg)"
add comment="" name=MP3 regexp="\\.(mp3)"
add comment="" name=MPEG regexp="\\.(mpeg)"
add comment="" name=WMV regexp="\\.(wmv)"
add comment="" name=3GP regexp="\\.(3gp)"
add comment="" name=FLV regexp="\\.(flv)"
add comment="" name=MOV regexp="\\.(mov)"
add comment="" name=IMG regexp="\\.(img)"
add comment="" name=DOC regexp="\\.(doc)"
add comment="" name=PPT regexp="\\.(ppt)"
add comment="" name=PDF regexp="\\.(pdf)"
add comment="" name=EXE regexp="\\.(exe)"
add comment="" name=MSI regexp="\\.(msi)"
add comment="" name=7Z regexp="\\.(7z)"
add comment="" name=BIN regexp="\\.(bin)"
add comment="" name=GZ regexp="\\.(gz)"
add comment="" name=GZIP regexp="\\.(gzip)"
add comment="" name=TAR regexp="\\.(tar)"
add comment="" name=RAR regexp="\\.(rar)"
add comment="" name=ZIP regexp="\\.(zip)"

SCRIPT II

/ip firewall mangle
add action=mark-packet chain=forward comment="EKSTENSI-LAYER-7" disabled=no layer7-protocol=ISO new-packet-mark=ISO passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=NRG new-packet-mark=NRG passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=RM new-packet-mark=RM passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=RM1 new-packet-mark=RM1 passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=MP4 new-packet-mark=MP4 passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=AVI new-packet-mark=AVI passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=WAV new-packet-mark=WAV passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=MPG new-packet-mark=MPG passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=MP3 new-packet-mark=MP3 passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=MPEG new-packet-mark=MPEG passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=WMV new-packet-mark=WMV passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=3GP new-packet-mark=3GP passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=FLV new-packet-mark=FLV passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=MOV new-packet-mark=MOV passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=IMG new-packet-mark=IMG passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=DOC new-packet-mark=DOC passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=PPT new-packet-mark=PPT passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=PDF new-packet-mark=PDF passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=EXE new-packet-mark=EXE passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=MSI new-packet-mark=MSI passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=7Z new-packet-mark=7Z passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=BIN new-packet-mark=BIN passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=GZ new-packet-mark=GZ passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=GZIP new-packet-mark=GZIP passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=TAR new-packet-mark=TAR passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=RAR new-packet-mark=RAR passthrough=no
add action=mark-packet chain=forward comment="" disabled=no layer7-protocol=ZIP new-packet-mark=ZIP passthrough=no

SCRIPT III

/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=256k max-limit=256k name=Limit-Download packet-mark=no-mark parent=global-out priority=8
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=ISO packet-mark=ISO parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=NRG packet-mark=NRG parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=RM packet-mark=RM parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=RM1 packet-mark=RM1 parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=MP4 packet-mark=MP4 parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=AVI packet-mark=AVI parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=WAV packet-mark=WAV parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=MPG packet-mark=MPG parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=MP3 packet-mark=MP3 parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=MPEG packet-mark=MPEG parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=WMV packet-mark=WMV parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=3GP packet-mark=3GP parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=FLV packet-mark=FLV parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=MOV packet-mark=MOV parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=IMG packet-mark=IMG parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=DOC packet-mark=DOC parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=PPT packet-mark=PPT parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=PDF packet-mark=PDF parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=EXE packet-mark=EXE parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=MSI packet-mark=MSI parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=7Z packet-mark=7Z parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=BIN packet-mark=BIN parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=GZ packet-mark=GZ parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=GZIP packet-mark=GZIP parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=TAR packet-mark=TAR parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=RAR packet-mark=RAR parent=Limit-Download priority=8 queue=default
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=ZIP packet-mark=ZIP parent=Limit-Download priority=8 queue=default

How to Block Facebook using Mikrotik

Here this the script for blocked facebook access using mikrotik

IP FIREWALL

/ip firewall
add action=drop chain=forward comment="No-Facebook" content=facebook.com disabled=yes \
dst-port=80 protocol=tcp src-address=192.168.100.0/24

Note:
Content: Facebook.com (you can change it to other site as you want to blocked)
Src-Address: You local IP Rules (change this ip rules with your ip rules)

Limit Download File Extension

IP FIREWALL FILTER
Note: change "192.168.100.0/24" with your Network Rules

/ip firewall filter
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment=\
"Limit Download by using File Extension" content=.exe disabled=no protocol=tcp \
src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.zip disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.arj disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.lzh disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.3gp disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.gz disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.gzip disabled=\
no protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.tar disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.bin disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.mp3 disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.m4a disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.wav disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.rar disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.ram disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.aac disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.aif disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.avi disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.mpg disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.mpeg disabled=\
no protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.qt disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.plj disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.asf disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.mov disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.rm disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.rm1 disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.mp4 disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.wma disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.wmv disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.mpe disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.mpa disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.pdf disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.msi disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.ace disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.iso disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.img disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.ogg disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.7z disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.sea disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.sit disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.doc disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.ppt disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.pps disabled=no \
protocol=tcp src-address=192.168.100.0/24
add action=add-dst-to-address-list address-list=limit-extension \
address-list-timeout=1h chain=forward comment="" content=.flv disabled=no \
protocol=tcp src-address=192.168.100.0/24

IP FIREWALL MANGLE

/ip firewall mangle
add action=mark-packet chain=forward comment="Limit Download" disabled=no \
new-packet-mark=Limit-Download passthrough=no protocol=tcp src-address-list=limit-extension

QUEUE TREE
Note:queue limit is 256k you can change with other limit by change "256000"

/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=256000 \
max-limit=256k name=Limit-Download packet-mark=limit-download parent=\
global-out priority=8 queue=default