Follow us on...
Follow us on G+ Follow us on Twitter Follow us on Facebook Watch us on YouTube
Register
Results 1 to 7 of 7
  1. #1
    Status
    Offline
    dotter's Avatar
    Member
    Join Date
    Jul 2007
    Location
    WestJog
    Posts
    268
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0

    [ask]block port 80 di IP local tertentu

    saya ada mikrotik setingan standart + pake squid external.
    kalau mau block ip local tertentu yang menuju port 80
    apakah bisa langsung di ip>firewall ?
    atau harus di squid?

    newbie bertanya Click here to enlarge

    trims .

  2. #2
    Status
    Offline
    dotter's Avatar
    Member
    Join Date
    Jul 2007
    Location
    WestJog
    Posts
    268
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    saya sudah pake cara ini juga ga bisa


    googling lagih ah..

  3. #3
    Status
    Offline
    amedya's Avatar
    Member
    Join Date
    Jun 2008
    Location
    0.0.0.0/0
    Posts
    296
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by dotter Click here to enlarge
    saya ada mikrotik setingan standart + pake squid external.
    kalau mau block ip local tertentu yang menuju port 80
    apakah bisa langsung di ip>firewall ?
    atau harus di squid?

    newbie bertanya Click here to enlarge

    trims .
    bisa....di

    /ip firewall
    add chain=forward action=drop src-address-list=xxx.xxx.xxx.xxx dst-port=80 protocol=tcp

  4. #4
    Status
    Offline
    dotter's Avatar
    Member
    Join Date
    Jul 2007
    Location
    WestJog
    Posts
    268
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    /ip firewall
    add chain=forward action=drop src-address-list=xxx.xxx.xxx.xxx dst-port=80 protocol=tcp

    tetep ga bisa pak, sudah saya coba.
    xxx = ip local (10.0.1.207)

  5. #5
    Status
    Offline
    yosanpro's Avatar
    Co-Admin
    Join Date
    Nov 2007
    Location
    Bantul, Bantul, Yogyakarta
    Posts
    2,548
    Reviews
    Read 0 Reviews
    Downloads
    11
    Uploads
    4
    Feedback Score
    1 (100%)
    kalo pake chain=input gimana bro? anyway, itu cara redirect ke proxy external pake dstnat atau parent webproxy? atau metode gimana? coba di post disini, redirect-nya di chain mana?

    Hmm, kalo filter di chain forward, misalnya trus di NAT dstnat redirect ke port katakanlah 3128, dst-port nya keknya otomatis udah bukan 80 lagi tuh paket, tapi 3128... CMIIW...
    Last edited by yosanpro; 05-07-2009 at 21:39.

  6. The Following User Says Thank You to yosanpro For This Useful Post:


  7. #6
    Status
    Offline
    dotter's Avatar
    Member
    Join Date
    Jul 2007
    Location
    WestJog
    Posts
    268
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    pake chain=input juga ga bisa pak.
    redirect ke proxy external pake dstnat.

    print NAT nya:

    Flags: X - disabled, I - invalid, D - dynamic
    0 ;;; ISP
    chain=srcnat out-interface=net action=src-nat to-addresses=202.169.***.*** to-ports=0-65535

    1 ;;; squid
    chain=dstnat in-interface=local protocol=tcp dst-port=80 action=dst-nat to-addresses=10.1.1.2 to-ports=9191

  8. #7
    Status
    Offline
    dotter's Avatar
    Member
    Join Date
    Jul 2007
    Location
    WestJog
    Posts
    268
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    ok pak yosan, clue anda sukses.

    to port 9191

    hehe padaal tadi sempat juga bypass proxy external, tapi ga jadi2.
    thanks alot .

 

 

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [ask] port 22 ter-block?
    By tomkid in forum Beginner Basics
    Replies: 9
    Last Post: 17-04-2013, 07:52
  2. Replies: 14
    Last Post: 09-05-2009, 14:20
  3. Replies: 2
    Last Post: 12-12-2008, 16:53
  4. [ASK] Routing PORT tertentu ...
    By New2MT in forum General Networking
    Replies: 11
    Last Post: 11-08-2008, 01:35
  5. Port block
    By firlando in forum General Networking
    Replies: 1
    Last Post: 19-09-2007, 21:51

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •