dst secara otomatis akan mengisi web access nya. Setting web proxy dan NAT akan kita bahas di bagian tersendiri.īerikut script nya.caranya gampang, buka winbox, klik New Terminal, kopi kan /ip web-proxy access lalu tekan enter, selanjutnya copy paste kan add url=……. web proxy access blocking ini berhubungan dengan IP Firewall NAT ip local anda yang anda redirect ke port 3128/3126/8080 suka suka anda. Perlu diingat bahwa syarat block ini berjalan dg baik jika web proxy anda juga sudah running well. Posted in Port Scanner, Tutorial Mikrotik | 2 Comments 2 Responsesīerikut ini adalah script untuk mem “Block” situs/site/url yang tidak kita inginkan karena alasan tertentu misalnya manakala di akses oleh client akan mengganggu network (flooding ato yg laennya), dan atau karena alasan sekuriti dan porno, sex dan konco2 nya. ip firewall filter add chain=input src-address-list=”port scanners” action=drop comment=”dropping port scanners” disabled=no ip firewall filter add chain=input protocol=tcp tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg action=add-src-to-address-list address-list=”port scanners” address-list-timeout=14d comment=”NMAP NULL scan” ip firewall filter add chain=input protocol=tcp tcp-flags=fin,syn,rst,psh,ack,urg action=add-src-to-address-list address-list=”port scanners” address-list-timeout=14d comment=”ALL/ALL scan” ip firewall filter add chain=input protocol=tcp tcp-flags=fin,psh,urg,!syn,!rst,!ack action=add-src-to-address-list address-list=”port scanners” address-list-timeout=14d comment=”FIN/PSH/URG scan”
ip firewall filter add chain=input protocol=tcp tcp-flags=syn,rst action=add-src-to-address-list address-list=”port scanners” address-list-timeout=14d comment=”SYN/RST scan” ip firewall filter add chain=input protocol=tcp tcp-flags=fin,syn action=add-src-to-address-list address-list=”port scanners” address-list-timeout=14d comment=”SYN/FIN scan” ip firewall filter add chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack,!urg action=add-src-to-address-list address-list=”port scanners” address-list-timeout=14d comment=”NMAP FIN Stealth scan” ip firewall filter add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list address-list=”port scanners” address-list-timeout=14d comment=”Port scanners to list ” disabled=no
0 kommentar(er)
