Avoided Port Scanner from Hacker

Posted by admin under MIKROTIK TUTORIAL

Avoided Port Scanner from Hacker

To avoid the Port Scanner action from Hacker, then we could arrange in firewall mikrotik, by means of :

1. Make Filter

/ip firewall filter
add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list address-list=”port scanners” address-list-timeout=2w comment=”Port scanners to list ” disabled=no

2. Make Chain

add chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”NMAP FIN Stealth scan”

add chain=input protocol=tcp tcp-flags=fin,syn
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”SYN/FIN scan”

add chain=input protocol=tcp tcp-flags=syn,rst
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”SYN/RST scan”

add chain=input protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”FIN/PSH/URG scan”

add chain=input protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”ALL/ALL scan”

add chain=input protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”NMAP NULL scan”

3.  Drop Ip scanning

add chain=input src-address-list=”port scanners” action=drop comment=”dropping port scanners” disabled=no

Limit Bandwidth with extension in mikrotik

Posted by admin under MIKROTIK TUTORIAL

Apart from an administrator could arrange the limit bandwidth per clinet, a person admin could arrange bandwidth in accordance with extension that in download him, Along With was the method that most was easy:

/ip firewall filter add chain=forward \
src-address=[ip Local ] protocol=tcp content=.exe \
action=add-dst-to-address-list address-list=cekek \
address-list-timeout=01:00:00
/ip firewall filter add chain=forward \
src-address=[ip Local ] protocol=tcp content=.iso \
action=add-dst-to-address-list address-list=cekek \
address-list-timeout=01:00:00
/ip firewall filter add chain=forward \
src-address=[ip Local ] protocol=tcp content=.mpg \
action=add-dst-to-address-list address-list=cekek \
address-list-timeout=01:00:00
/ip firewall filter add chain=forward \
src-address=[ip Local ] protocol=tcp content=.mp3 \
action=add-dst-to-address-list address-list=cekek \
address-list-timeout=01:00:00

make mangel

/ip firewall mangle add chain=forward \
protocol=tcp src-address-list=cekek \
action=mark-packet new-packet-mark=cekek-bw

Now, You can Limit

/queue simple add name=download-files \
max-limit=64000/64000 packet-marks=cekek-bw

Block Scan Winbox and Neighbour Mikrotik

Posted by admin under MIKROTIK TUTORIAL

1. Block Scan Winbox and Neighbour Mikrotik

Apart from Protected router from the virus with configuration in firewall mikrotik , the network administrator also could protect router from scan winbox and neighbor. this was the matter that was important in the network, Along With was the method that most was easy:

copy and paste this script in console mikrotik

admin@mikrotik] interface bridge> filter print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; block discovery mikrotik
chain=forward in-interface=ether1 mac-protocol=ip dst-port=5678
ip-protocol=udp action=drop
1 ;;; block discovery mikrotik
chain=input in-interface=ether1 mac-protocol=ip dst-port=5678
ip-protocol=udp action=drop
2 ;;; block discovery mikrotik
chain=output mac-protocol=ip dst-port=5678 ip-protocol=udp action=drop
3 ;;; block discovery mikrotik
chain=input in-interface=ether1 mac-protocol=ip dst-port=8291
ip-protocol=tcp action=drop
4 ;;; block winbox mikrotik
chain=forward in-interface=ether1 mac-protocol=ip dst-port=8291
ip-protocol=tcp action=drop
5 ;;; block request DHCP
chain=input mac-protocol=ip dst-port=68 ip-protocol=udp action=drop
6 ;;; block request DHCP
chain=forward mac-protocol=ip dst-port=68 ip-protocol=udp action=drop
7 ;;; block request DHCP
chain=output mac-protocol=ip dst-port=68 ip-protocol=udp action=drop
2. Recorded all of IP scanner

To be able to router recorded all of IP scanner and afterwards was put into the IP Address list and was named in group “port scanner”, along with rule in firewall him:

- Script First

add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”Port scanners to list ” disabled=no

- Script two

add chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”NMAP FIN Stealth scan”

add chain=input protocol=tcp tcp-flags=fin,syn
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”SYN/FIN scan”

add chain=input protocol=tcp tcp-flags=syn,rst
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”SYN/RST scan”

add chain=input protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”FIN/PSH/URG scan”

add chain=input protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”ALL/ALL scan”

add chain=input protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”NMAP NULL scan”

3. Script Three

add chain=input src-address-list=”port scanners” action=drop comment=”dropping port scanners” disabled=no’

——————**——————

Blok scan winbox From neighbour

Posted by admin under MIKROTIK TUTORIAL

Blok scan winbox From neighbour

After we install mikrotik router os, and afterwards tried browsing from the client’s computer, we felt that router that already finish. afterwards I was opened winbox from the client’s computer, evidently ip mikrotik router property of all the offices could be seen  . this meant to give the gap to the person that to test   hack the route.

Now you as the network administrator could prevent it, with configuration firewall in mikrotik

1.  setting this configuration

admin@mikrotik] interface bridge> filter print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; block discovery mikrotik
chain=forward in-interface=ether1 mac-protocol=ip dst-port=5678
ip-protocol=udp action=drop
1 ;;; block discovery mikrotik
chain=input in-interface=ether1 mac-protocol=ip dst-port=5678
ip-protocol=udp action=drop
2 ;;; block discovery mikrotik
chain=output mac-protocol=ip dst-port=5678 ip-protocol=udp action=drop
3 ;;; block discovery mikrotik
chain=input in-interface=ether1 mac-protocol=ip dst-port=8291
ip-protocol=tcp action=drop
4 ;;; block winbox mikrotik
chain=forward in-interface=ether1 mac-protocol=ip dst-port=8291
ip-protocol=tcp action=drop
5 ;;; block request DHCP
chain=input mac-protocol=ip dst-port=68 ip-protocol=udp action=drop
6 ;;; block request DHCP
chain=forward mac-protocol=ip dst-port=68 ip-protocol=udp action=drop
7 ;;; block request DHCP
chain=output mac-protocol=ip dst-port=68 ip-protocol=udp action=drop

How to Remote Mikrotik

Posted by admin under MIKROTIK TOOL

Remote Mikrotik via Xp

Mikrotik was some router OS that power full and really was easy to be use.The re-beads method mikrotik here could use various methods one of them used telnet, before we could use him before we must know ip our publicex. 222.124.126.124

1. click start–run—cmd

2. telnet o 222.124.126.124

3.  Log in to mikrotik router os

Graphing Mikrotik

Posted by admin under MIKROTIK TOOL

Graphing Mikrotik

After you had configuration mikrotik router os as gateway server, now to monitor the traffic with graphing was as follows:

1. Log in From winbox

2. set the time to monitoring

/tool graphing set store-every=hour
[admin@MikroTik] tool graphing> print
store-every: hour
[admin@MikroTik] tool graphing>

3. add interface to monitoring

this example : to monitoring Local and Public

[admin@MikroTik] tool graphing interface> add interface=all  store-on-disk=yes
4. Print interace

[admin@MikroTik] tool graphing interface> print
[admin@GateMHS] tool graphing interface> pr
Flags: X - disabled
#   INTERFACE ALLOW-ADDRESS      STORE-ON-DISK
0   all       0.0.0.0/0          yes
[admin@MikroTik] tool graphing interface>

5. To see graphing

http://[Router_IP_address]/graphs/

load balancing mikrotik

Posted by admin under MIKROTIK TUTORIAL

Load Balancing Mikrotik

Server Mikrotik least had 3 NIC

1. ether1 —>Astinet

2. ether2 —>Jardiknas

3. ether3 —>Lan

Steps:

1. Give the name of Interfaces Ether1-3 in Interfaces

[admin@MikroTik] interface> pr

MikroTik RouterOS Export and Import

Posted by admin under MIKROTIK TUTORIAL

MikroTik RouterOS Export and Import

Export and Import the Mikrotik almost same with Back up and Restore file mikrotik, If you as the network administrator, This is very important for the ease configuration without must Repeated from the beginning. Along with this the method  export and import results of the Mikrotik configuration:

Example: If you want to Export file address

1. Look The Ip Address Configuration

[GateMahasiswa] ip address> print
Flags: X - disabled, I - invalid, D - dynamic
  #   ADDRESS              NETWORK            BROADCAST            INTERFACE
  0   192.168.205.2/24     192.168.205.0      192.168.205.255      Public
  1   123.123.123.1/24     123.123.123.0      123.123.123.255      Local

2. Export File
[GateMahasiswa] ip address> export file=address
[GateMahasiswa] ip address>

3.If you want To see the files stored on the router
[GateMahasiswa] file> print
  # NAME                           TYPE    SIZE       CREATION-TIME
  0 address1.script                unknown 128        april/26/2009 16:00:13
  1 address.script                 unknown 354       april/26/2009 15:48:57
[GateMahasiswa] file>

4. If you want To load the saved export file
[GateMahasiswa] > import
file-name: address1.script
[GateMahasiswa] >

Drop and Block ip and Mac address from Mikrotik

Posted by admin under MIKROTIK TUTORIAL

A great number of IP that entered to server, could that client that want to enter. just direct block ip and mac address him from firewall configuration

1. Login to mikrotik used Winbox

2. then from winbox block ip

/ip firewall filter add chain=forward src-address=123.123.123.10 action=drop

3.  Block ip and Mac address

from winbox