Follow us on...
Follow us on G+ Follow us on Twitter Follow us on Facebook Watch us on YouTube
Register
Results 1 to 9 of 9
  1. #1
    Status
    Offline
    3dyx's Avatar
    Newbie
    Join Date
    May 2010
    Posts
    68
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0

    Detek ip Facebook port 80 Pake Layer7

    just share ....
    Bagi teman2 di forum dan para suhu mohon pencerahan lagi kalo ada yang salah

    Trik simple untuk add ip to address list ip address yang di pake facebook pada port 80 menggunakan layer7 ... sudah dicoba dan hasilnya sementara belum ada ip2 yang tidak di inginkan sesat ke address list..

    Lankah
    1. Import url facebook sub domain di layer7 (regexp)

    Code:
    /ip firewall layer7-protocol
    add comment="" name=facebook regexp="\\.fbcdn.net.*\\."
    2. Buat rule di firewall filter pada port 80 untuk scanning regexp tersebut agar di masukkan ke ip address list

    Code:
    /ip firewall filter
    add action=add-dst-to-address-list address-list=nice address-list-timeout=20h chain=forward comment="" disabled=no dst-port=80 layer7-protocol=facebook protocol=tcp
    Click here to enlarge

  2. #2
    Status
    Offline
    karaeng's Avatar
    VIP Member
    Join Date
    Jun 2010
    Posts
    958
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by 3dyx Click here to enlarge
    just share ....
    Bagi teman2 di forum dan para suhu mohon pencerahan lagi kalo ada yang salah

    Trik simple untuk add ip to address list ip address yang di pake facebook pada port 80 menggunakan layer7 ... sudah dicoba dan hasilnya sementara belum ada ip2 yang tidak di inginkan sesat ke address list..

    Lankah
    1. Import url facebook sub domain di layer7 (regexp)

    Code:
    /ip firewall layer7-protocol
    add comment="" name=facebook regexp="\\.fbcdn.net.*\\."
    2. Buat rule di firewall filter pada port 80 untuk scanning regexp tersebut agar di masukkan ke ip address list

    Code:
    /ip firewall filter
    add action=add-dst-to-address-list address-list=nice address-list-timeout=20h chain=forward comment="" disabled=no dst-port=80 layer7-protocol=facebook protocol=tcp
    Click here to enlarge
    kenapa mesti menggunakan layer7 lagi bro
    cukup di filter aja, gunakan content...

  3. #3
    Status
    Offline
    oktama's Avatar
    Forum Guru
    Join Date
    Jul 2008
    Location
    Jayapura
    Posts
    1,929
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by karaeng Click here to enlarge
    kenapa mesti menggunakan layer7 lagi bro
    cukup di filter aja, gunakan content...
    setubuh wkwkwkwkkw
    kl pake L7 dst port 80 kan FB masih bisa dibuka pake https (port 443) jadi untuk mengkomplitkan bisa ditambahkan lagi port 443
    kl sy lebih suka content karena tidak begitu membebani kerja router karena hanya memfilter kata2 fcbdn.net misalnya Click here to enlarge

  4. #4
    Status
    Offline
    3dyx's Avatar
    Newbie
    Join Date
    May 2010
    Posts
    68
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    makasih review nya mas .. soal masih newbie and takut mana tau pulak dengan content itu facebook bisa kemana2 ...

    seep info nya segera di rubah kalo memang bermasalah di beban router ...

    Click here to enlarge

  5. #5
    Status
    Offline
    chabyiolue's Avatar
    Member
    Join Date
    Feb 2010
    Posts
    228
    Reviews
    Read 0 Reviews
    Downloads
    9
    Uploads
    0
    Feedback Score
    0
    Ijin simak Gan ...Click here to enlarge

  6. #6
    Status
    Offline
    kambeeng's Avatar
    Member Senior
    Join Date
    Jan 2008
    Posts
    483
    Reviews
    Read 0 Reviews
    Downloads
    2
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by 3dyx Click here to enlarge
    just share ....
    Bagi teman2 di forum dan para suhu mohon pencerahan lagi kalo ada yang salah

    Trik simple untuk add ip to address list ip address yang di pake facebook pada port 80 menggunakan layer7 ... sudah dicoba dan hasilnya sementara belum ada ip2 yang tidak di inginkan sesat ke address list..

    Lankah
    1. Import url facebook sub domain di layer7 (regexp)

    Code:
    /ip firewall layer7-protocol
    add comment="" name=facebook regexp="\\.fbcdn.net.*\\."
    2. Buat rule di firewall filter pada port 80 untuk scanning regexp tersebut agar di masukkan ke ip address list

    Code:
    /ip firewall filter
    add action=add-dst-to-address-list address-list=nice address-list-timeout=20h chain=forward comment="" disabled=no dst-port=80 layer7-protocol=facebook protocol=tcp
    Click here to enlarge
    ro

    untuk apa perlu ip facebook lagi kalau boleh tau tujuanya buat apa bro Click here to enlarge
    Click here to enlarge

  7. #7
    Status
    Offline
    wie_chang81's Avatar
    Member
    Join Date
    Sep 2009
    Location
    riau
    Posts
    255
    Reviews
    Read 0 Reviews
    Downloads
    2
    Uploads
    0
    Feedback Score
    0
    apa pake layar7 bikin kinerja rb menurun ? Click here to enlarge

  8. #8
    Status
    Offline
    kambeeng's Avatar
    Member Senior
    Join Date
    Jan 2008
    Posts
    483
    Reviews
    Read 0 Reviews
    Downloads
    2
    Uploads
    0
    Feedback Score
    0
    bukan menurun ..besar maksudnya .. tuh resource besar karena mikrotik berfikir 2x atau lebih di banding content. Click here to enlarge

  9. The Following User Says Thank You to kambeeng For This Useful Post:


  10. #9
    Status
    Offline
    3dyx's Avatar
    Newbie
    Join Date
    May 2010
    Posts
    68
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by kambeeng Click here to enlarge
    bukan menurun ..besar maksudnya .. tuh resource besar karena mikrotik berfikir 2x atau lebih di banding content. Click here to enlarge
    Mantap mas ... mungkin pasti berpikir dua kali dia

    terjemahkan layer7 terus terjemah kan conten baru filter

    kalo conten langsung filter ...

    Tapi sementara masih tak pake.... Click here to enlarge

 

 

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [ask] blok port games di facebook
    By minsyang in forum General Networking
    Replies: 3
    Last Post: 28-12-2012, 16:15
  2. Replies: 16
    Last Post: 26-02-2012, 19:06
  3. block facebook pake mikrotik paling ampuh......
    By agso in forum General Networking
    Replies: 21
    Last Post: 15-08-2010, 19:01
  4. [ASK] limit IDM / DAP / lainnya menggunakan Layer7?
    By rendyka in forum General Networking
    Replies: 1
    Last Post: 10-12-2009, 01:58
  5. Pemahaman Dasar Layer7 Protocols
    By Spring in forum Beginner Basics
    Replies: 1
    Last Post: 04-11-2009, 10:33

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •