Detect and Block UltraSurf program traffic
/ip firewall filter
add action=drop chain=forward comment=”Block UltraSurf” disabled=no dst-port=\
443 protocol=tcp src-address-list=UltraSurfUsers
443 protocol=tcp src-address-list=UltraSurfUsers
/ip firewall mangle
add action=add-src-to-address-list address-list=UltraSurfUsers \
address-list-timeout=5m chain=prerouting comment=UltraSurfUsers disabled=\
no dst-address-list=UltraSurfServers dst-port=443 protocol=tcp
address-list-timeout=5m chain=prerouting comment=UltraSurfUsers disabled=\
no dst-address-list=UltraSurfServers dst-port=443 protocol=tcp
/ip firewall address-list
add address=65.49.0.0/17 comment=”" disabled=no list=UltraSurfServers
add address=204.107.140.0/24 comment=”" disabled=no list=UltraSurfServers
add address=65.49.0.0/17 comment=”" disabled=no list=UltraSurfServers
add address=204.107.140.0/24 comment=”" disabled=no list=UltraSurfServers
————————————————
Block DNS
Block DNS
/ip firewall filter
add action=accept chain=forward comment=DNS disabled=no dst-address=198.153.194.50 dst-port=53 protocol=tcp
add action=accept chain=forward comment=DNS disabled=no dst-address=198.153.194.50 dst-port=53 protocol=udp
add action=accept chain=forward comment=DNS disabled=no dst-address=198.153.192.50 dst-port=53 protocol=tcp
add action=accept chain=forward comment=DNS disabled=no dst-address=198.153.192.50 dst-port=53 protocol=udp
add action=drop chain=forward comment=DNS disabled=no dst-port=53 protocol=tcp
add action=drop chain=forward comment=DNS disabled=no dst-port=53 protocol=udp
add action=accept chain=forward comment=DNS disabled=no dst-address=198.153.194.50 dst-port=53 protocol=udp
add action=accept chain=forward comment=DNS disabled=no dst-address=198.153.192.50 dst-port=53 protocol=tcp
add action=accept chain=forward comment=DNS disabled=no dst-address=198.153.192.50 dst-port=53 protocol=udp
add action=drop chain=forward comment=DNS disabled=no dst-port=53 protocol=tcp
add action=drop chain=forward comment=DNS disabled=no dst-port=53 protocol=udp
0 comments:
Post a Comment