The word “Sekolah” = school in Indonesia. To create multiple target list you have to use the exact same “name” and click add button to keep adding. I do it by registering local ip target computer one by one in IP>Firewall>AddressList click Add button then type the list name. Create local computer address list to be blocked for youtube.
You need to experiment with your layer7 regexp rules and choose the one that work best for your case. If you dont see this list start populating then stop. You can check if your rules work by visit youtube sites and check your address list they should make automatic list like this: You can open new terminal or type “/” to go to root directory and copy paste this code:Īdd chain=prerouting action=add-dst-to-address-list address-list=YouTube-BL address-list-timeout=1d layer7-protocol=youtube log=no log-prefix=”” Create mangle rules that will create blacklist IP address called “YouTube-BL” Work with my other rules to limiting youtube streaming download:Īdd comment=”” name=youtube regexp=”videoplayback|video” Or this code also work but it may be block all the word “video” I am still experimenting on this one. My understanding layer7 will detect all traffic that contain wording in regexp list. I use Mikrotik RB2011UiAS-2HnD-IN WiFi router firewall to do this. A new IP 1.Sometimes we need to block youtube or other video streaming site for specific IP at specific time schedule. If you already have it, just skip this step.Īssume that you want to limit a user with ip 192.168.1.10 to download an EXE file with 6Mb. In this example, we will use the vendor address “” for our example. The first thing we need to do is install the ezproxy package. But when downloading a file with what files extension. I’ll add a rule to my router, and I can easily see the changes such as adding a specific file type, rar etc. I modify this file as per my requirement, normally named “filter”. By the way, when a user try to download a file that it have already download before, the file will not be downloaded. I confirm the results, all examinations and downloading done. So the users would able to use the proxy. After the all configuration, i let it to start. Then a new iptables rule will be created to access our iptables_module. To make the configuration, service “bgstat.0” must be disabled.
Using the layer 7 protocols.I hope you will tell me if i get it right, and if you meet any problem on it, please do comment here, i will be happy to help you. What you will learn from this blog is how to download a file as a specific type, exe, rar ect. Mikrotik Layer 7 Protocols ((NEW)) Download
0 kommentar(er)
