Thread: Trap ip berdasarkan domain

Sebelumnya mohon maaf kepada rekan forum kalau cara yg ingin saya bagi di sini terbilang basi atau perneh ditemuin dari situs lain. karena memang script ini saya lihat dari situs lain. tapi saya lupa nama situsnya, yg pasti dari situs luar sepertinya.

Ok kita mulai saja.

Tidak sedikit kita memerlukan ip addres yg mungkin kita perlukan untuk blocking, priority ataupun untuk burstable. berikut saya ingin memberikan contoh script yg digunakan untuk trap ip video dan facebook berdasarkan domain dan dari dns cache. untuk trap nya menggunakan scheduler. sehingga berkala.

Code:

/system scheduler
add comment="" disabled=yes interval=15m name=add-video on-event=":foreach i i\
    n=[/ip dns cache find] do={\r\
    \n    :local bNew \"true\";\r\
    \n    :local cacheName [/ip dns cache all get \$i name] ;\r\
    \n#    :put \$cacheName;\r\
    \n\r\
    \n    :if (([:find \$cacheName \"vimeo\"] != 0) || ([:find \$cacheName \"w\
    rzuta\"] != 0) || ([:find \$cacheName \"edgesuite\"] != 0) || ([:find \$ca\
    cheName \"googlevideo\"] != 0) || ([:find \$cacheName \"nba.com\"] != 0) |\
    | ([:find \$cacheName \"dailymotion\"] != 0) || ([:find \$cacheName \"xtub\
    e\"] != 0) || ([:find \$cacheName \"redtube\"] != 0) || ([:find \$cacheNam\
    e \"youtube\"] != 0) || ([:find \$cacheName \"tube8\"] != 0) || ([:find \$\
    cacheName \"pornhub\"] != 0) || ([:find \$cacheName \"youporn\"] != 0) || \
    ([:find \$cacheName \"youjizz\"] != 0) || ([:find \$cacheName \"metacafe\"\
    ] != 0) || ([:find \$cacheName \"porn99\"] != 0)) do={\r\
    \n\r\
    \n        :local tmpAddress [/ip dns cache get \$i address] ;\r\
    \n#\t:put \$tmpAddress;\r\
    \n\r\
    \n# if address list is empty do not check\r\
    \n        :if ( [/ip firewall address-list find ] = \"\") do={\r\
    \n            :log info (\"added entry: \$[/ip dns cache get \$i name] IP \
    \$tmpAddress\");\r\
    \n            /ip firewall address-list add address=\$tmpAddress list=yout\
    ube comment=\$cacheName;\r\
    \n            /ip firewall address-list add address=\$tmpAddress list=not-\
    youtube comment=\$cacheName;\r\
    \n        } else={\r\
    \n            :foreach j in=[/ip firewall address-list find ] do={\r\
    \n                :if ( [/ip firewall address-list get \$j address] = \$tm\
    pAddress ) do={\r\
    \n                    :set bNew \"false\";\r\
    \n                }\r\
    \n            }\r\
    \n            :if ( \$bNew = \"true\" ) do={\r\
    \n                :log info (\"added entry: \$[/ip dns cache get \$i name]\
    \_IP \$tmpAddress\");\r\
    \n                /ip firewall address-list add address=\$tmpAddress list=\
    youtube comment=\$cacheName;\r\
    \n                /ip firewall address-list add address=\$tmpAddress list=\
    not-youtube comment=\$cacheName;\r\
    \n            }\r\
    \n        }\r\
    \n    }\r\
    \n}\r\
    \n" policy=reboot,read,write,policy,test,password,sniff,sensitive \
    start-date=jan/01/1970 start-time=00:00:00
add comment=facebook disabled=yes interval=15m name=add-facebook on-event=":forea\
    ch i in=[/ip dns cache find] do={\r\
    \n    :local bNew \"true\";\r\
    \n    :local cacheName [/ip dns cache all get \$i name] ;\r\
    \n#    :put \$cacheName;\r\
    \n\r\
    \n    :if (([:find \$cacheName \"facebook.com\"] != 0)) do={\r\
    \n\r\
    \n        :local tmpAddress [/ip dns cache get \$i address] ;\r\
    \n#\t:put \$tmpAddress;\r\
    \n\r\
    \n# if address list is empty do not check\r\
    \n        :if ( [/ip firewall address-list find ] = \"\") do={\r\
    \n            :log info (\"added entry: \$[/ip dns cache get \$i name] IP \
    \$tmpAddress\");\r\
    \n            /ip firewall address-list add address=\$tmpAddress list=face\
    book comment=\$cacheName;\r\
    \n        } else={\r\
    \n            :foreach j in=[/ip firewall address-list find ] do={\r\
    \n                :if ( [/ip firewall address-list get \$j address] = \$tm\
    pAddress ) do={\r\
    \n                    :set bNew \"false\";\r\
    \n                }\r\
    \n            }\r\
    \n            :if ( \$bNew = \"true\" ) do={\r\
    \n                :log info (\"added entry: \$[/ip dns cache get \$i name]\
    \_IP \$tmpAddress\");\r\
    \n                /ip firewall address-list add address=\$tmpAddress list=\
    facebook comment=\$cacheName;\r\
    \n            }\r\
    \n        }\r\
    \n    }\r\
    \n}\r\
    \n" policy=reboot,read,write,policy,test,password,sniff,sensitive \
    start-date=jan/01/1970 start-time=00:00:00

dari address list yg terbuat bila di gabung dengan conbyte dan priority saya rasa rekan semuanya dapat membayangkannya kan?
sedangkan selain itu ya dapat anda gunakan juga untuk yg lain. tergantung imajinasi anda.
dan bila ada yg mengatakan bila dibandingkan dengan L7 untuk trapnya bagai mana maka silahkan di coba sendiri
untuk facebook sebaiknya ditambahkan FBCDN juga

kredit hanya untuk forum.

Originally Posted by tyang_dusun

masih beyum paham cara mengimplementaskannya Gannnn ......

belum paham untuk implementasi apanya?

Originally Posted by opiceboy

btw tiap gue post kok capcay gue panjang2 banget yah walau gue cuman ketik 1 kata

maksudnya itu apa ya???

klo mengenai penjelasan gaya anak jalanan ya harap maklum saja bos saya belajar bukan di bangku kuliah jadi gak beraturan kata kata yg keluar

buat rekan yg melalui telkom. ini sedikit address list youtube yg melalui telkom

Code:

# aug/09/2011 19:46:56 by Syaifuddin JW aka ucok_karnadi@yahoo.com
# hanya trap dari DNS saja
#
/ip firewall address-list
add address=118.98.36.94 comment=\
    o-o.preferred.pttelkom-bth1.v17.lscache1.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.23 comment=v9.lscache6.c.youtube.com disabled=no list=\
    youtube
add address=173.194.49.38 comment=v1.nonxt6.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.153 comment=\
    o-o.preferred.pttelkom-bth1.v22.lscache2.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.81 comment=\
    o-o.preferred.pttelkom-bth1.v7.lscache3.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.144 comment=\
    o-o.preferred.pttelkom-bth1.v19.lscache4.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.20 comment=\
    o-o.preferred.pttelkom-bth1.v8.lscache7.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.26 comment=r11.pttelkom-cgk1.c.youtube.com disabled=no \
    list=youtube
add address=118.98.36.155 comment=\
    o-o.preferred.pttelkom-bth1.v16.lscache2.c.youtube.com disabled=no list=\
    youtube
add address=74.125.96.183 comment=\
    o-o.preferred.pttelkom-bth1.v10.lscache2.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.16 comment=\
    o-o.preferred.pttelkom-bth1.v19.lscache8.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.25 comment=\
    o-o.preferred.pttelkom-bth1.v22.lscache6.c.youtube.com disabled=no list=\
    youtube
add address=173.194.49.53 comment=v19.nonxt6.c.youtube.com disabled=no list=\
    youtube
add address=208.117.239.213 comment=tc.v19.cache6.c.youtube.com disabled=no \
    list=youtube
add address=208.117.239.83 comment=tc.v16.cache3.c.youtube.com disabled=no \
    list=youtube
add address=118.98.36.80 comment=v19.lscache8.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.146 comment=\
    o-o.preferred.pttelkom-bth1.v13.lscache3.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.159 comment=\
    o-o.preferred.pttelkom-bth1.v6.lscache1.c.youtube.com disabled=no list=\
    youtube
add address=74.125.96.135 comment=v6.lscache1.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.88 comment=\
    o-o.preferred.pttelkom-bth1.v15.lscache6.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.27 comment=\
    o-o.preferred.pttelkom-bth1.v16.lscache6.c.youtube.com disabled=no list=\
    youtube
add address=74.125.96.248 comment=\
    o-o.preferred.pttelkom-bth1.v15.lscache4.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.95 comment=v6.lscache1.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.151 comment=\
    o-o.preferred.pttelkom-bth1.v9.lscache1.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.93 comment=\
    o-o.preferred.pttelkom-bth1.v11.lscache3.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.91 comment=\
    o-o.preferred.pttelkom-bth1.v16.lscache7.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.19 comment=\
    o-o.preferred.pttelkom-bth1.v2.lscache6.c.youtube.com disabled=no list=\
    youtube
add address=208.117.239.201 comment=tc.v16.cache6.c.youtube.com disabled=no \
    list=youtube
add address=208.117.238.211 comment=tc.v2.cache6.c.youtube.com disabled=no \
    list=youtube
add address=208.117.243.37 comment=tc.v8.cache8.c.youtube.com disabled=no \
    list=youtube
add address=208.117.243.229 comment=tc.v8.cache8.c.youtube.com disabled=no \
    list=youtube
add address=118.98.36.156 comment=\
    o-o.preferred.pttelkom-bth1.v5.lscache2.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.147 comment=\
    o-o.preferred.pttelkom-bth1.v20.lscache1.c.youtube.com disabled=no list=\
    youtube
add address=74.125.235.37 comment=m.youtube.com disabled=no list=youtube
add address=74.125.235.41 comment=m.youtube.com disabled=no list=youtube
add address=74.125.235.34 comment=m.youtube.com disabled=no list=youtube
add address=74.125.235.47 comment=m.youtube.com disabled=no list=youtube
add address=74.125.235.38 comment=m.youtube.com disabled=no list=youtube
add address=74.125.235.36 comment=m.youtube.com disabled=no list=youtube
add address=74.125.235.33 comment=m.youtube.com disabled=no list=youtube
add address=74.125.235.35 comment=m.youtube.com disabled=no list=youtube
add address=74.125.235.39 comment=m.youtube.com disabled=no list=youtube
add address=74.125.235.42 comment=m.youtube.com disabled=no list=youtube
add address=74.125.235.46 comment=m.youtube.com disabled=no list=youtube
add address=74.125.235.44 comment=m.youtube.com disabled=no list=youtube
add address=74.125.235.43 comment=m.youtube.com disabled=no list=youtube
add address=74.125.235.40 comment=m.youtube.com disabled=no list=youtube
add address=74.125.235.45 comment=m.youtube.com disabled=no list=youtube
add address=74.125.235.32 comment=m.youtube.com disabled=no list=youtube
add address=118.98.36.86 comment=\
    o-o.preferred.pttelkom-bth1.v3.lscache8.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.87 comment=\
    o-o.preferred.pttelkom-bth1.v9.lscache7.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.32 comment=\
    o-o.preferred.pttelkom-bth1.v12.lscache5.c.youtube.com disabled=no list=\
    youtube
add address=74.125.96.243 comment=v9.nonxt4.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.22 comment=\
    o-o.preferred.pttelkom-bth1.v21.lscache7.c.youtube.com disabled=no list=\
    youtube
add address=208.117.243.30 comment=tc.v21.cache7.c.youtube.com disabled=no \
    list=youtube
add address=74.125.209.148 comment=v5.cache5.c.youtube.com disabled=no list=\
    youtube
add address=209.85.175.101 comment=m.youtube.com disabled=no list=youtube
add address=209.85.175.102 comment=m.youtube.com disabled=no list=youtube
add address=209.85.175.113 comment=m.youtube.com disabled=no list=youtube
add address=209.85.175.138 comment=m.youtube.com disabled=no list=youtube
add address=209.85.175.139 comment=m.youtube.com disabled=no list=youtube
add address=209.85.175.100 comment=m.youtube.com disabled=no list=youtube
add address=118.98.36.17 comment=\
    o-o.preferred.pttelkom-bth1.v7.lscache6.c.youtube.com disabled=no list=\
    youtube
add address=208.117.238.162 comment=tc.v7.cache6.c.youtube.com disabled=no \
    list=youtube
add address=118.98.36.31 comment=\
    o-o.preferred.pttelkom-bth1.v24.lscache5.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.154 comment=\
    o-o.preferred.pttelkom-bth1.v10.lscache4.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.150 comment=\
    o-o.preferred.pttelkom-bth1.v3.lscache4.c.youtube.com disabled=no list=\
    youtube
add address=74.125.96.238 comment=v3.nonxt4.c.youtube.com disabled=no list=\
    youtube
add address=74.125.96.181 comment=v19.nonxt2.c.youtube.com disabled=no list=\
    youtube
add address=173.194.49.7 comment=v6.nonxt5.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.96 comment=\
    o-o.preferred.pttelkom-bth1.v12.lscache4.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.28 comment=\
    o-o.preferred.pttelkom-bth1.v23.lscache7.c.youtube.com disabled=no list=\
    youtube
add address=173.194.49.78 comment=v23.nonxt7.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.21 comment=\
    o-o.preferred.pttelkom-bth1.v14.lscache6.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.85 comment=v14.lscache6.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.157 comment=\
    o-o.preferred.pttelkom-bth1.v11.lscache2.c.youtube.com disabled=no list=\
    youtube
add address=208.117.243.39 comment=tc.v24.cache5.c.youtube.com disabled=no \
    list=youtube
add address=74.125.209.215 comment=v8.cache7.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.24 comment=v15.lscache8.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.97 comment=\
    o-o.preferred.pttelkom-bth1.v18.lscache8.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.89 comment=\
    o-o.preferred.pttelkom-bth1.v22.lscache4.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.90 comment=v10.lscache8.c.youtube.com disabled=no list=\
    youtube
add address=74.125.209.247 comment=v8.cache8.c.youtube.com disabled=no list=\
    youtube
add address=208.117.243.224 comment=tc.v14.cache8.c.youtube.com disabled=no \
    list=youtube
add address=118.98.36.30 comment=\
    o-o.preferred.pttelkom-bth1.v17.lscache5.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.160 comment=\
    o-o.preferred.pttelkom-bth1.v12.lscache3.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.29 comment=\
    o-o.preferred.pttelkom-bth1.v11.lscache5.c.youtube.com disabled=no list=\
    youtube
add address=208.117.238.24 comment=tc.v19.cache2.c.youtube.com disabled=no \
    list=youtube
add address=208.117.239.146 comment=tc.v11.cache5.c.youtube.com disabled=no \
    list=youtube
add address=208.117.238.23 comment=tc.v11.cache2.c.youtube.com disabled=no \
    list=youtube
add address=118.98.36.158 comment=v17.lscache2.c.youtube.com disabled=no \
    list=youtube
add address=118.98.36.92 comment=\
    o-o.preferred.pttelkom-bth1.v23.lscache5.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.148 comment=\
    o-o.preferred.pttelkom-bth1.v8.lscache1.c.youtube.com disabled=no list=\
    youtube
add address=208.117.243.209 comment=tc.v9.cache8.c.youtube.com disabled=no \
    list=youtube
add address=208.117.238.101 comment=tc.v8.cache4.c.youtube.com disabled=no \
    list=youtube
add address=74.125.209.55 comment=v8.cache2.c.youtube.com disabled=no list=\
    youtube
add address=208.117.243.19 comment=tc.v2.cache6.c.youtube.com disabled=no \
    list=youtube
add address=118.98.36.84 comment=\
    o-o.preferred.pttelkom-bth1.v8.lscache1.c.youtube.com disabled=no list=\
    youtube
add address=173.194.49.6 comment=v21.nonxt5.c.youtube.com disabled=no list=\
    youtube
add address=208.117.239.144 comment=tc.v21.cache5.c.youtube.com disabled=no \
    list=youtube
add address=208.117.238.150 comment=tc.v3.cache7.c.youtube.com disabled=no \
    list=youtube
add address=74.125.209.82 comment=v3.cache3.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.83 comment=\
    o-o.preferred.pttelkom-bth1.v2.lscache7.c.youtube.com disabled=no list=\
    youtube
add address=173.194.49.20 comment=v14.nonxt5.c.youtube.com disabled=no list=\
    youtube
add address=74.125.96.231 comment=v6.nonxt4.c.youtube.com disabled=no list=\
    youtube
add address=208.117.239.20 comment=tc.v22.cache1.c.youtube.com disabled=no \
    list=youtube
add address=74.125.96.138 comment=v22.nonxt1.c.youtube.com disabled=no list=\
    youtube
add address=208.117.243.95 comment=tc.v6.cache4.c.youtube.com disabled=no \
    list=youtube
add address=74.125.209.53 comment=v6.cache2.c.youtube.com disabled=no list=\
    youtube
add address=74.125.209.117 comment=v6.cache4.c.youtube.com disabled=no list=\
    youtube
add address=208.117.243.228 comment=tc.v23.cache8.c.youtube.com disabled=no \
    list=youtube
add address=173.194.49.110 comment=v23.nonxt8.c.youtube.com disabled=no list=\
    youtube
add address=208.117.238.29 comment=tc.v13.cache2.c.youtube.com disabled=no \
    list=youtube
add address=74.125.96.176 comment=v13.nonxt2.c.youtube.com disabled=no list=\
    youtube
add address=118.98.36.18 comment=\
    o-o.preferred.pttelkom-bth1.v13.lscache6.c.youtube.com disabled=no list=\
    youtube
add address=208.117.243.92 comment=tc.v5.cache6.c.youtube.com disabled=no \
    list=youtube
add address=118.98.36.149 comment=v14.lscache4.c.youtube.com disabled=no \
    list=youtube
add address=74.125.209.244 comment=v5.cache8.c.youtube.com disabled=no list=\
    youtube
add address=208.117.238.221 comment=tc.v13.cache6.c.youtube.com disabled=no \
    list=youtube
add address=173.194.49.48 comment=v13.nonxt6.c.youtube.com disabled=no list=\
    youtube
add address=208.117.243.93 comment=tc.v13.cache6.c.youtube.com disabled=no \
    list=youtube
add address=74.125.209.20 comment=v5.cache1.c.youtube.com disabled=no list=\
    youtube

kalau tertarik akan saya lanjut. tapi kalau tidak saya setop sampai disini, karena kalau saya paste disini semua gak akan cukup. sedangkan kalau saya buat cros link akan dapat peringatan lagi

Lanjutttttt.... ... Mantepp.... Gas Pollll langsungg... Mau Dapet Peringkat Ana Masalah.... Lanjut gann...

baiklah berhubung salah satu moderator ada yg mengizinkan. maka saya lanjut.
untuk file addresslist dapat diambil dari server . sruput aja langsung gan sebelum di delet

Originally Posted by astalavista

akambuy mode on

maksudnya apa ini yach