What if you encounter cases when it becomes a network admin within the workplace, but many nosy employees or rather stole the work time for idle play or open a web URL or play mediasosial at work, or even some of them breaking it.
While you were assigned by the boss to block access to online games/URLs often used so as to make employees less responsibility for obligations of the respective works. Well the title we will discuss in this article.
Here I will mencontohkannya through the application putty or via telnet. Here I will just give an example how to block Games Applications in Mikrotik Router, so make sure that the router is already connected to the internet with dynamic/static ip-granting to the client.
Please follow up by looking at the pictures already provided.
1. Step One
Open the winbox/putty, here I'll use putty to access the routerboard, as usual the column host name or IP address is filled with IP gateway router and type the connection using the Telnet (up to).
2. Step Two
If a successful access them as usual will be asked for the password and the contents of the corresponding surname on your router. If a successful access them as usual will be asked for the password and the contents of the corresponding surname on your router.
3. Step three
If you are able to login straight we start configuring firewall to block access to some of the game application. Open the menu Filter Rule on IP--> Firewall. Add a new rule. With filling:
[admin@mymikrotik] /ip firewall filter> add chain=forward src-address=192.168.1.0/24 protocol=tcp dst-port=9330-9340 in-interface=ether1 out-interface=ether2 action=drop
Below a description of the command above:
- Chain filled with forward because the game application packages on passing through the router are not a package that comes in and out
- Src address filled with ip or network targets, later the target will not be able to access the application these online games. When we enter the ip then only ip it's himself who hit the block but if we wear the network then all it contains the ip network that will be affected by the block.
- Filled with tcp protocol, yes indeed clash of gaming clans using tcp protocol!! instead of udp
- Port filled with port number from 9330 to 9340 because access application using port clans clash of such
- In-filled with interface interface to the client/to the target. Here my target is set on the interface ether1
- Out interface filled with interface from which the client internet access. Here I get my internet from interface ether2
- Action filled with drop because Yes ... surely his friends know why filled with action drop. In order to access denied or not allowed then the router will discard the packet.
4. Step Four
Sometimes when you just configure the rule to block an access based on my experience of the rule does not run smoothly he will block access outside of alleged admin. But cases like this are rare. Here I am just to anticipate any time we need to make the rule final after making many rule to block access. The last rule we will create is a rule which will permit all access aside from blocking it's access that has been created. It's easy to make it only with the command below:
[admin@mymikrotik] /ip firewall filter> add chain=forward action=accept
If you already do step 4 url or certain gaming applications will not be accessible anymore.
Why don't the notification has occurred as above because this application detects that there are still just internet connection port to the game server has been shut down by your mikrotik routerboard.
Easy? easy is not blocking access to a game application. If you want to add to the block game application more lives add to the rule in the firewall the same way as above which distinguished are simply port-number game that wants to be blocked. Hopefully this time the discussion of beneficial.
Comments