Showing posts with label Firewall. Show all posts
Showing posts with label Firewall. Show all posts

Wednesday, November 26, 2014

BLOCK HTTPS FACEBOOK

Secara spesifik kita tidak bisa melakukan block HTTPS karena port nya berbeda..,
Tapi lain ceritanya kalo kita block semuanya langsung..,

To the point aja..,
Ini juga bisa langsung di copy paste..

Cara 1 :

/ip firewall address-list
add address=31.13.24.0/21 comment=facebook disabled=no list=facebook
add address=31.13.64.0/18 comment=facebook disabled=no list=facebook
add address=31.13.64.0/19 comment=facebook disabled=no list=facebook
add address=31.13.64.0/24 comment=facebook disabled=no list=facebook
add address=31.13.65.0/24 comment=facebook disabled=no list=facebook
add address=31.13.66.0/24 comment=facebook disabled=no list=facebook
add address=31.13.68.0/24 comment=facebook disabled=no list=facebook
add address=31.13.69.0/24 comment=facebook disabled=no list=facebook
add address=31.13.70.0/24 comment=facebook disabled=no list=facebook
add address=31.13.71.0/24 comment=facebook disabled=no list=facebook
add address=31.13.73.0/24 comment=facebook disabled=no list=facebook
add address=31.13.74.0/24 comment=facebook disabled=no list=facebook
add address=31.13.75.0/24 comment=facebook disabled=no list=facebook
add address=31.13.76.0/24 comment=facebook disabled=no list=facebook
add address=31.13.77.0/24 comment=facebook disabled=no list=facebook
add address=31.13.78.0/24 comment=facebook disabled=no list=facebook
add address=31.13.79.0/24 comment=facebook disabled=no list=facebook
add address=31.13.82.0/24 comment=facebook disabled=no list=facebook
add address=31.13.83.0/24 comment=facebook disabled=no list=facebook
add address=31.13.84.0/24 comment=facebook disabled=no list=facebook
add address=31.13.85.0/24 comment=facebook disabled=no list=facebook
add address=31.13.86.0/24 comment=facebook disabled=no list=facebook
add address=31.13.87.0/24 comment=facebook disabled=no list=facebook
add address=31.13.90.0/24 comment=facebook disabled=no list=facebook
add address=31.13.91.0/24 comment=facebook disabled=no list=facebook
add address=31.13.93.0/24 comment=facebook disabled=no list=facebook
add address=31.13.96.0/19 comment=facebook disabled=no list=facebook
add address=66.220.144.0/20 comment=facebook disabled=no list=facebook
add address=66.220.144.0/21 comment=facebook disabled=no list=facebook
add address=66.220.152.0/21 comment=facebook disabled=no list=facebook
add address=69.63.176.0/20 comment=facebook disabled=no list=facebook
add address=69.63.176.0/21 comment=facebook disabled=no list=facebook
add address=69.63.184.0/21 comment=facebook disabled=no list=facebook
add address=69.171.224.0/19 comment=facebook disabled=no list=facebook
add address=69.171.224.0/20 comment=facebook disabled=no list=facebook
add address=69.171.239.0/24 comment=facebook disabled=no list=facebook
add address=69.171.240.0/20 comment=facebook disabled=no list=facebook
add address=69.171.255.0/24 comment=facebook disabled=no list=facebook
add address=74.119.76.0/22 comment=facebook disabled=no list=facebook
add address=103.4.96.0/22 comment=facebook disabled=no list=facebook
add address=173.252.64.0/19 comment=facebook disabled=no list=facebook
add address=173.252.96.0/19 comment=facebook disabled=no list=facebook
add address=179.60.192.0/22 comment=facebook disabled=no list=facebook
add address=179.60.192.0/24 comment=facebook disabled=no list=facebook
add address=179.60.193.0/24 comment=facebook disabled=no list=facebook
add address=204.15.20.0/22 comment=facebook disabled=no list=facebook
/ip firewall filter
add action=drop chain=forward disabled=no comment=Filter_Rule_to_block_FB_address_LIST dst-address-list=facebook

Untuk bisa bbrp IP melakukan browse ke facebook, tinggal tambahkan sebelum rule BLOCK:

/ip firewall filter
add chain=forward action=accept src-address=(masukan IP yang tidak di block) 

Cara 2 :

/ ip firewall filter add chain=forward action=drop dst-destination-list=facebook
/ ip firewall filter add chain=forward action=drop dst-destination-list=youtube

/ ip firewall filter add chain=forward action=add-dst-to-address-list protocol=tcp src-address=192.168.1.0/24 address-list=youtube address-list-timeout=0s content=youtube.com comment="youtube.com IPs"
/ ip firewall filter add chain=forward action=add-dst-to-address-list protocol=tcp src-address=192.168.1.0/24 address-list=facebook address-list-timeout=0s content=facebook.com comment="facebook.com IPs"
/ ip firewall filter add chain=forward action=add-dst-to-address-list protocol=tcp src-address=192.168.1.0/24 address-list=facebook address-list-timeout=0s content=fbcdn.net comment="Facebooks content delivery network IPs"


Semua akses FB terblock baik port maupun IP..,
100% working..,

Note : Cara 2 memakan CPU Load lumayan besar, sebab otomatis input IP address

Credit buat cara nomor 1 to Syed Jahanzaib https://aacable.wordpress.com/