Skip to main content

The easy way to block the application by Mikrotik Router

What if you encounter cases when it becomes a network admin within the workplace, but many nosy employees or rather stole the work time for idle play or open a web URL or play mediasosial at work, or even some of them breaking it.

While you were assigned by the boss to block access to online games/URLs often used so as to make employees less responsibility for obligations of the respective works. Well the title we will discuss in this article.


Here I will mencontohkannya through the application putty or via telnet. Here I will just give an example how to block Games Applications in Mikrotik Router, so make sure that the router is already connected to the internet with dynamic/static ip-granting to the client.

Please follow up by looking at the pictures already provided.
1. Step One
Open the winbox/putty, here I'll use putty to access the routerboard, as usual the column host name or IP address is filled with IP gateway router and type the connection using the Telnet (up to).
The easy way to block the application by Mikrotik Router

2. Step Two
If a successful access them as usual will be asked for the password and the contents of the corresponding surname on your router. If a successful access them as usual will be asked for the password and the contents of the corresponding surname on your router.

3. Step three
If you are able to login straight we start configuring firewall to block access to some of the game application. Open the menu Filter Rule on IP--> Firewall. Add a new rule. With filling:

[admin@mymikrotik] /ip firewall filter> add chain=forward src-address=192.168.1.0/24 protocol=tcp dst-port=9330-9340 in-interface=ether1 out-interface=ether2 action=drop

Below a description of the command above:

  • Chain filled with forward because the game application packages on passing through the router are not a package that comes in and out
  • Src address filled with ip or network targets, later the target will not be able to access the application these online games. When we enter the ip then only ip it's himself who hit the block but if we wear the network then all it contains the ip network that will be affected by the block.
  • Filled with tcp protocol, yes indeed clash of gaming clans using tcp protocol!! instead of udp
  • Port filled with port number from 9330 to 9340 because access application using port clans clash of such
  • In-filled with interface interface to the client/to the target. Here my target is set on the interface ether1
  • Out interface filled with interface from which the client internet access. Here I get my internet from interface ether2
  • Action filled with drop because Yes ... surely his friends know why filled with action drop. In order to access denied or not allowed then the router will discard the packet.

4. Step Four
Sometimes when you just configure the rule to block an access based on my experience of the rule does not run smoothly he will block access outside of alleged admin. But cases like this are rare. Here I am just to anticipate any time we need to make the rule final after making many rule to block access. The last rule we will create is a rule which will permit all access aside from blocking it's access that has been created. It's easy to make it only with the command below:

[admin@mymikrotik] /ip firewall filter> add chain=forward action=accept

 If you already do step 4 url or certain gaming applications will not be accessible anymore.

Why don't the notification has occurred as above because this application detects that there are still just internet connection port to the game server has been shut down by your mikrotik routerboard.

Easy? easy is not blocking access to a game application. If you want to add to the block game application more lives add to the rule in the firewall the same way as above which distinguished are simply port-number game that wants to be blocked. Hopefully this time the discussion of beneficial.

Comments

Popular posts from this blog

Usability Of Wireless Tools Mikrotik

Usability Of Wireless Tools Mikrotik Explanation of the use of Wireless Tools-Mikrotik Mikrotik Router has Wireless functionality and features that we can take advantage of for communication between devices with Mikrotik wireless communication using the media. But not all Mikrotik Wireless feature can use this, because not all types of Mikrotik is no Wireless Card. Usability Of Wireless Tools Mikrotik Call it Mikrotik RB 750 who only got 5 ethernet interface and without the wireless interface because there is no wireless card. Specific to Mikrotik Pool, most could use Wireless because it features a Mini PCI slot is available for the wireless card. OK, this time we will learn wireless wireless usage i.e. Mikrotik tools standard Mikrotik. Wireless tools is very important in building wireless networks with mikrotik, to monitor and monitor the condition of the wireless network around the US. To use the wireless tools, you can use the winbox and into the Wireless menu. ...

Discussion Of The RoMon Mikrotik

Discussion Of The RoMon Mikrotik RoMON was abbreviated from the Router Management Overlay Network which is a new feature on Mikrotik RouterOS version 6.28. This may still feature RoMON alien to You, because it is available in a new version of RouterOS and WinBox. Well, to find out more what it RoMON Mikrotik, let's discuss in this article. The Meaning Of The RoMON What is RoMON? RoMON (Router Management Overlay Network) is a Mikrotik proprietary protocol (the protocol is only supported on devices Mikrotik), which can make the connection secure layer2 (secure) to MikroTik devices either through Physical connection ( Ethernet) or Layer2 Tunnel.  In addition, RoMON also has the following features: Discovery and management MikroTik devices via Ping, SSH, Winbox (version 3.0. rc 9 and above). Able to do discovery (search) the MikroTik devices enable RoMON which has gone through multiple hops. So with this we can detect RoMON device on WinBox Mikrotik Mikrotik dev...

Select Switching or Bridging of Master/Slave Port?

This question may arise when we want to create multiple interfaces at the Mikrotik to be one segment. There are some options that we can use, including IE can use Bridging techniques or use the Switching harness mode Master Slave port and Port. Both give the same results as if, but actually there is a difference. The configuration of the Master/Slave Switch Port using a special switching chip embedded on RouterBoard, so as not to overload the CPU. Mikrotik will not get too big a burden of switching on the CPU even though his passing traffic is very high. The illustrations were like in the picture above. From the illustration above pictures it can be seen that acts as a Master Port eth2 and eth3-5 as a Slave Port that uses the switching chip. Ilustrasi Switching Master Slave Port The configuration of the Master/Slave Switch Port using a special switching chip embedded on RouterBoard, so as not to overload the CPU. Mikrotik will not get too big a burden of switching on the ...