Blok Situs Dengan Layer 7 Protolol MikroTik

Sebelum kita menggunakan metode Layer 7 (L7) Mikrotik baiknya kita mencoba untuk memahami terlebih dahulu bagaimana konsep kerja dari L7 ini. Ketika kita menerapkan L7 maka mikrotik akan melakukan matcher 10 paket koneksi pertama yang terjadi pada router kita atau 2KB koneksi pertama dan mencari pola data yang sesuai dengan yang telah disediakan. Sehingga jika setelah matcher dilakukan tetapi tidak ditemukan maka matcher tidak akan memeriksa lebih lanjut lagi. Hal ini akan menganggap telah terjadi unknown koneksi. Ketika proses matcher ini berlangsung maka kinerja memory MikroTik akan meningkat dikarenakan banyak koneksi yang terbentuk. Bisa kita simpulkan bahwa layer 7 protocol ini adalah metode untuk mencari pola dalam protocol ICMP / TCP / UDP stream, atau istilah lainnya regex pattern.

Oke kali ini kita akan mencoba untuk melakukan bloking situs youtube.com dan facebook.com. Kita bisa melakukan setting melalui terminal dengan perintah sebagai berikut:

/ip firewall layer7-protocol
add name=youtube.com regexp="^.+(youtube.com).*\$"
add name=facebook.com regexp="^.+(facebook.com).*\$"


Setelah kita buat “matcher” sesuai dengan rule diatas. Selanjutnya kita akan menentukan action terhadap matcher tersebut. Kita bisa melakukan setting ini melalui perintah terminal seperti di bawah:

/ip firewall filter
add action=drop chain=forward layer7-protocol=facebook.com src-address=192.168.5.0/24
add action=drop chain=forward layer7-protocol=youtube.com  src-address=192.168.5.0/24


Dari perintah diatas kita dapat membaca bahwa rule yang kita tambahkan pada mikrotik akan meneruskan paket yang berasal dari IP address 192.168.5.0/24 ketika ditemukan protocol yang melalui L7 facebook.com akan di drop oleh firewall mikrotik. Sehingga client tidak akan bisa mengakses halaman situs tersebut dengan keterangan “this site cannot be reached”

Artikel berikutnya kita akan membahas tentang bagaimana cara blokir situs dengan web proxy MikroTik. Untuk pembahasan kali ini kita cukupkan sekian dulu ya..semoga bermanfaat yaa...amiin

Post a Comment

12 Comments

  1. only aspire to say ones content material may be as amazing. This readability while your pronounce is extremely good and i may think youon a guru for this count. high-surroundings alongside furthermore than your settlement set aside in me to to manipulate off as soon as your present day have enough protection to baby support modified by using simply simply not pretty weblog message. thank you loads loads of alongside next to you must go upon the eye-catching gather the process finished. bandar judi bola terbaik

    ReplyDelete
  2. I can see that you are an expert at your field! I am launching a website soon, and your information will be very useful for me.. Thanks for all your help and wishing you all the success in your business. agen judi online

    ReplyDelete
  3. Thanks so much for sharing this awesome info! I am looking forward to see more postsby you! qq online

    ReplyDelete
  4. Your site is truly cool and this is an incredible rousing article. Much thanks to you to such an extent. situs dominoqq

    ReplyDelete
  5. Sepakbola228 Merupakan Situs Judi Bola Online Terbesar Dan Terlengkap Yang Dimiliki Oleh Bandar Bola Terbesar Dan Terpercaya di Indonesia Dan Disini Anda bisa menikmati 1 Id Semua Game situs judi bola

    ReplyDelete
  6. I admit, I have not been on this web page in a long time... however it was another joy to see It is such an important topic and ignored by so many, even professionals. I thank you to help making people more aware of possible issues. bandarq

    ReplyDelete
  7. I can see that you are an expert at your field! I am launching a website soon, and your information will be very useful for me.. Thanks for all your help and wishing you all the success in your business. 샌즈카지노

    ReplyDelete
  8. This particular is usually apparently essential and moreover outstanding truth along with for sure fair-minded and moreover admittedly useful My business is looking to find in advance designed for this specific useful stuffs… qiu qiu online

    ReplyDelete
  9. I have visited your blog,it seems to be very interesting and effective.I am glad to be here.Thanks for posting such an amazing blog with us. Bandar888VIPBET

    ReplyDelete
  10. Nice post! This is a very nice blog that I will definitively come back to more times this year! Thanks for informative post. Dewa poker

    ReplyDelete
  11. To start off, I recommend that you play the poker game on an Internet Browser. There are a lot of poker games on Internet Browsers, but not all of them will be accurate.

    ReplyDelete
  12. Today, I was just browsing along and came upon your blog. Just wanted to say good blog and this article helped me a lot, due to which I have found exactly I was looking. Layarkaca21

    ReplyDelete