Limit Youtube Video Streaming from mikrotik

Posted by admin under MIKROTIK TUTORIAL

Limit Youtube Video Streaming from mikrotik

After we arranged the limit rapidshare, YM, and other now we arrange the limit to youtube

1.  Make http-video layer7-protocol

/ip firewall layer7-protocol
add name=http-video regexp="http/(0\.9|1\.0|1\.1)[\x09-\x0d ][1-5][0-9][0-9][\x09-\x0d -~]*(conte
nt-type: video)"

2. Make Mangle Mark Packet http-video

/ip frewall mangle
add action=mark-packet chain=prerouting comment="http-video mark-packet" \
    disabled=no layer7-protocol=http-video new-packet-mark=http-video \
    passthrough=no

3. Make Queue Simple http-video

/queue simple
add max-limit=0/64000 name=http-video packet-marks=http-video

Avoided Spam SMTP From Virus

Posted by admin under MIKROTIK TUTORIAL

Avoided Spam SMTP From Virus

Many viruses that after infecting our computer will send thousands of emails through our computer went out. This was very damaging we, apart from finished bandwidth we, also very annoying from the side of this email recipient.

We could prevent this matter with firewall Mikrotik

Make 3 Rule in Firewall

1.  Firewall Rule
- Chain : Forward
- Protocol : TCP
- Dst. Port : 25
- Src. Address List : SMTP-EMAIL
- Action : Accept

2. Next Rule

- Chain : Forward
- Protocol : TCP
- Dst. Port : 25
- Action : add src to address list
- Address List : SMTP-EMAIL
- Timeout : 00:05:00

3. Next Rule

- Chain : Forward
- Protocol : TCP
- Dst. Port : 25
- Action : Drop

Block FRIENDSTER

Posted by admin under MIKROTIK TUTORIAL

Block FRIENDSTER

You can block YM in firewall mikrotik,

.  This ip YM

66.94.226.0/24
66.218.70.0/24
68.142.194.0/24
68.142.213.0/24
68.142.233.0/24
72.232.19.0/24
72.246.51.0/24
72.246.53.0/24
206.190.35.0/24
209.62.176.0/24
209.73.166.0/24
209.191.93.0/24
216.152.122.0/24
216.155.193.0/24

2. Make Firewall

Chain : Forward
Src Address : [  IP client  ]

Advanced
Dst Address List : [  address list  ]

Action : pilih DROP.

block YM from mikrotik

Posted by admin under MIKROTIK TUTORIAL

block YM

You can block YM in firewall mikrotik,

1.  This ip YM

209.11.168.112
209.11.168.113
209.11.168.122
209.11.168.123
209.11.168.133
209.11.168.121
2. Make Firewall

Chain : Forward
Src Address : [  IP client  ]

Advanced
Dst Address List : [  address list  ]

Action : pilih DROP.

Avoided Port Scanner from Hacker

Posted by admin under MIKROTIK TUTORIAL

Avoided Port Scanner from Hacker

To avoid the Port Scanner action from Hacker, then we could arrange in firewall mikrotik, by means of :

1. Make Filter

/ip firewall filter
add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list address-list=”port scanners” address-list-timeout=2w comment=”Port scanners to list ” disabled=no

2. Make Chain

add chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”NMAP FIN Stealth scan”

add chain=input protocol=tcp tcp-flags=fin,syn
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”SYN/FIN scan”

add chain=input protocol=tcp tcp-flags=syn,rst
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”SYN/RST scan”

add chain=input protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”FIN/PSH/URG scan”

add chain=input protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”ALL/ALL scan”

add chain=input protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg
action=add-src-to-address-list address-list=”port scanners”
address-list-timeout=2w comment=”NMAP NULL scan”

3.  Drop Ip scanning

add chain=input src-address-list=”port scanners” action=drop comment=”dropping port scanners” disabled=no

Block Traceroute and ping from client

Posted by admin under MIKROTIK TUTORIAL

Block Traceroute

You could arrange him in firewall mikrotik, to avoid Traceroute and ping, Along With was the method that most was easy:

/ip firewall filter add chain=forward protocol=icmp icmp-options=11:0 action=drop comment=”Drop Traceroute”
/ip firewall filter add chain=forward protocol=icmp icmp-options=3:3 action=drop comment=”Drop Traceroute”

next you can block ping

/ip firewall filter add chain=input action=accept protocol=icmp limit=50/5s,2

How to Block Websites From Mikrotik

Posted by admin under MIKROTIK TUTORIAL

How to Block Websites From Mikrotik with Proxy

1. Configure The Proxy

/ip proxy

enabled: yes

src-address: 0.0.0.0

port: 8080

parent-proxy: 0.0.0.0:0

cache-drive: system

			

			
Tags: Block websites from mikrotik | mikrotik firewall
			

Drop and Block ip and Mac address from Mikrotik

Posted by admin under MIKROTIK TUTORIAL

A great number of IP that entered to server, could that client that want to enter. just direct block ip and mac address him from firewall configuration

1. Login to mikrotik used Winbox

2. then from winbox block ip

/ip firewall filter add chain=forward src-address=123.123.123.10 action=drop

3.  Block ip and Mac address

from winbox