[SHARE]Block ultra surf via mikrotik

Beranda
Komunitas
Tech
Internet Service & Networking
[SHARE]Block ultra surf via mikrotik

ItsMeZul

11-11-2011 10:43

WELCOME TO MY THREAD

Spoiler for "no repost":

Pembukaan

Spoiler for "tentang ultra surf':

Ultrasurf merupakan program free yang di sediakan untuk menghindari blocking, atau bypass proxy jaringan lokal internet anda, program ini bekerja dengan system tunneling atau mencari celah dari jaringan lokal kita untuk dapat menghindari blocking jaringan tersebut. Belum paham dengan istilah proxy dan tunneling silahkan cari di google atau wikipedia.

nah ini bagi admin munkgin akan menjadi momok karena para client tidak melewati atau menggunakan proxy yang sudah d setting. Untuk menghindari hal tersebut maka salah satu cara na adalah dengan block ultra surf via mikrotik [maaf yg ane tahu baru ini ]ane msih newbie d mikrotik jga gan tpi ane cman mau share... oke langsung saja
tahapan2 na :
1. Kita catat ip2 server dari ultrasurf di firewall address

Quote:

ip firewall address-list
add address=65.49.0.0/17 comment="" disabled=no list=UltraSurfServers
add address=204.107.140.0/24 comment="" disabled=no list=UltraSurfServers

2. setelah kita catat ip2 tersebut lalu kita definisikan ip user yang mengakses server ultrasurf tersebut

Quote:

ip firewall mangle
add action=add-src-to-address-list address-list=UltraSurfUsers \
address-list-timeout=5m chain=prerouting comment=UltraSurfUsers disabled=\
no dst-address-list=UltraSurfServers dst-port=443 protocol=tcp

3. Lalu kita drop user2 yang mengakses server ultrasurf tdi di filter rule

Quote:

ip firewall filter
add action=drop chain=forward comment="Block UltraSurf" disabled=no dst-port=\
443 protocol=tcp src-address-list=UltraSurfUsers

mikrotik dsni block ultrasurf yang memakai port 443, dan ane sdah cba d t4 ane dan tested gan..
dan share ini bsa d modif dan bsa d gunakan untuk block https facebook ehheheeh d tnggu share slnjut na gan

testi kaskuser yg udah nyoba :

Quote:

Original Posted By bagus_15►Ane dah coba gan di mikrotik,sejauh ini si ultrasurf belum bisa connect ke servernya

Quote:

Original Posted By s43►Thankz gan atas Infonya... emoticon-Shakehand2

Alhamdulilah Firewall di kantor Ane udah tak bisa di tembus sama ultrasurf lagi.....
emoticon-Cool

Quote:

Original Posted By OPiKdesign►saya coba share settingan mikrotik di clientku (perkantoran),
berserta ip-list server2-nya ultrasurf...

saat dulu sih bekerja 100%, tapi gak tahu saat ini...
belum update lagi...

Spoiler for code:

Code:



/ip firewall address-list

add list=ultrasurf address="1.2.3.4"

remove [find list="ultrasurf"]



add list=ultrasurf address="195.39.222.145"

add list=ultrasurf address="165.12.241.35"

add list=ultrasurf address="210.242.23.5"

add list=ultrasurf address="114.47.116.156"

add list=ultrasurf address="118.168.1.188"

add list=ultrasurf address="122.120.37.86"

add list=ultrasurf address="218.166.99.221"

add list=ultrasurf address="118.161.210.63"

add list=ultrasurf address="59.115.198.99"

add list=ultrasurf address="125.230.35.18"

add list=ultrasurf address="218.169.180.75"

add list=ultrasurf address="220.141.118.201"

add list=ultrasurf address="114.47.120.116"

add list=ultrasurf address="118.160.233.90"

add list=ultrasurf address="114.42.11.146"

add list=ultrasurf address="65.49.2.122"

add list=ultrasurf address="65.49.2.123"

add list=ultrasurf address="65.49.2.118"

add list=ultrasurf address="128.231.210.98"

add list=ultrasurf address="195.33.153.5"

add list=ultrasurf address="64.235.47.65"

add list=ultrasurf address="207.105.75.196"

add list=ultrasurf address="38.144.194.3"

add list=ultrasurf address="61.144.235.3"

add list=ultrasurf address="65.49.2.117"

add list=ultrasurf address="122.124.162.126"

add list=ultrasurf address="114.41.234.49"

add list=ultrasurf address="123.204.75.141"

add list=ultrasurf address="218.160.188.87"

add list=ultrasurf address="218.169.0.236"

add list=ultrasurf address="118.170.66.213"



/ip firewall layer7-protocol

add name=block_ultrasurf regexp="^\\\\16\\\\03\\\\01\\\\00\\\\41\\\\01\\\\00\\\\00\\\\3D\\\\03\\\\01"



/ip firewall mangle

add action=mark-connection chain=prerouting \

 disabled=no dst-port=443 layer7-protocol=\

 block_ultrasurf new-connection-mark=blockir passthrough=yes protocol=tcp

add action=mark-packet chain=prerouting \

 connection-mark=blockir disabled=no \

 new-packet-mark=mark_blockir passthrough=yes



/ip firewall filter

add action=drop chain=input disabled=no \

 in-interface=LAN packet-mark=mark_blockir

add action=drop chain=forward disabled=no \

 in-interface=LAN packet-mark=mark_blockir

add action=drop chain=input disabled=no \

 in-interface=LAN dst-address-list=ultrasurf

add action=drop chain=forward disabled=no \

 in-interface=LAN dst-address-list=ultrasurf

kemudian port 80,3128 dan 8080 di belokkan ke external server,
dan di squid-nya ditambahkan ACL,

Code:



acl numeric_IPs url_regex ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+

http_access deny CONNECT numeric_IPs all

semoga berguna

segitu saja share ane gan, maaf masih blepotan maklum masih newbie jgan d emoticon-Blue Guy Bata (L)

jgan lpa bantu emoticon-Rate 5 Star

ya gan
ane gak nolak emoticon-Blue Guy Cendol (L)

9.9K

Kutip

Balasan

Komentar yang asik ya

Urutan

Terbaru

Terlama

Komentar yang asik ya

Komunitas Pilihan