Memblokir Torrent di Mikrotik dengan Layer 7

Sudah lama tidak update post blog saya dan saya kali ini akan memberikan tutorial cara memblokir torrent pada mikrotik
Kita langsung masuk ke tutorial cara memblokir akses torrent di Mikrotik.
Buka terminal Mikrotik, lalu copas kode di bawah ini.

/ip firewall layer7-protocol
add name=bittorrent-p2p regexp="^(\\x13bittorrent protocol|azver\\x01\$|get /scrape\\\?info_hash=get /announce\\\?info_hash=|get /client/bitcomet/|GET /data\\\?fid=)|d1:ad2:id20:|\\x08'7P\\)[RP]"
   
/ip firewall mangle
add action=mark-connection chain=forward comment=Torrent#Utorrent new-connection-mark=torrent.c passthrough=yes protocol=udp src-port=63754;
add action=mark-connection chain=forward comment=Torrent#Utorrent new-connection-mark=torrent.c passthrough=yes protocol=tcp src-port=63754;
add action=mark-connection chain=forward comment=Torrent#Bittorent new-connection-mark=torrent.c passthrough=yes protocol=udp src-port=23714,27763;
add action=mark-connection chain=forward comment=Torrent#Bittorent new-connection-mark=torrent.c passthrough=yes protocol=tcp src-port=23714,27763;
add action=mark-connection chain=prerouting comment=Torrent layer7-protocol=bittorrent-p2p new-connection-mark=torrent.c passthrough=yes protocol=udp;
add action=mark-connection chain=prerouting comment=Torrent layer7-protocol=bittorrent-p2p new-connection-mark=torrent.c passthrough=yes protocol=tcp;
add action=mark-packet chain=prerouting comment=Torrent connection-mark=torrent.c new-packet-mark=torrent.p passthrough=no;
move [find comment~"Torrent"] destination=0;

/ip firewall filter
add action=drop chain=forward packet-mark=torrent.p comment="Drop Torrent";
add action=drop chain=input packet-mark=torrent.p comment="Drop Torrent";
move [find comment~"Drop Torrent"] destination=1;

/log warning "execute-torrent-succesfull"


Sekian tutorial dari semoga bermanfaat.

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS

0 komentar:

Post a Comment