{"id":107,"date":"2021-03-10T09:58:18","date_gmt":"2021-03-10T01:58:18","guid":{"rendered":"https:\/\/blog.wikazo.com\/?p=107"},"modified":"2021-03-11T13:59:41","modified_gmt":"2021-03-11T05:59:41","slug":"block-access-menggunakan-domain-atau-keyword-di-mikrotik","status":"publish","type":"post","link":"https:\/\/blog.wikazo.com\/index.php\/2021\/03\/10\/block-access-menggunakan-domain-atau-keyword-di-mikrotik\/","title":{"rendered":"Block Access Menggunakan Domain atau Keyword di Mikrotik"},"content":{"rendered":"\n
\n\n\n\n

Environment:<\/strong><\/p>\n\n\n\n

Mikrotik Version: 6.43.2<\/p>\n\n\n\n

Mikrotik Series: RB20011UiAS<\/p>\n\n\n\n

\n\n\n\n

Pertama, pastikan user di LAN sudah bisa mengakses internet dengan normal, kemudian ikuti langkah berikut:<\/p>\n\n\n\n

Setting DNS<\/strong><\/p>\n\n\n\n

Checklist Allow Remote Requests<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Setting Firewall<\/strong><\/p>\n\n\n\n

Tambahkan NAT untuk akses DNS (port 53) agar query DNS tersimpan di mikrotik, <\/p>\n\n\n\n

\/ip firewall nat\nadd action=redirect chain=dstnat dst-port=53 protocol=udp to-ports=53<\/pre><\/div>\n\n\n\n
Setting Scheduler<\/strong><\/p>\n\n\n\n
Buka System – Scheduler – Add (+)<\/strong>, Sesuaikan Name<\/strong>, Start Time<\/strong> dan Interval<\/strong>,<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
disini schedule akan disimpan dengan nama BlockSite<\/strong> dan mulai dijalankan pada jam 01:00<\/strong> dengan interval 1 jam<\/strong>. Kemudian pada bagian On Event<\/strong>, isikan script berikut:<\/p>\n\n\n\n
##########################################################################\n# Find all entry on dns cache\n:foreach iDNS in=[\/ip dns cache all find where (name~"netflix" ||  name~"bigo" || name~"tiktok" || name~"mlive" || name~"btc" || name~"bsv" || name~"bch" || name~"northghost" || name~"pool" || name~"tcdn.me" || name~"update.kies.samsung.com" || name~"3g.cn" || name~"browserupdate" || name~"miui" || name~"apple" || name~"mobile-legends" || name~"semi" || name~"nonton" || name~"bioskop" || name~"drakor" || name~"film" || name~"avast" || name~"avira" || name~"vidio" || name~"tv" || name~"smule" || name~"drama" || name~"korea" || name~"instagram" || name~"football" || name~"facebook" || name~"streaming" || name~"soccer" || name~"bola" ||name~"game" || name~"poker" || name~"porn" || name~"qq.com" || name~"qq.net" || name~"qq.org" || name~"roulette" || name~"sbobet" || name~"casino" || name~"xvideos") && (type="A") ] do={\n# find and filtering keyword and only find record for type A\n# for keyword just add keyword || name~"KEYWORD") before && (type="A")\n##########################################################################\n:local tmpDNSsite [\/ip dns cache get $iDNS name] ;\n:local tmpDNSip [\/ip dns cache get $iDNS address];\n:local nameList "BLOCK_SITE";\n# save to local cache by string\n##########################################################################\ndelay delay-time=10ms\n# wait for 10ms\n##########################################################################\n:if ( [\/ip firewall address-list find where address=$tmpDNSip] = "") do={ \n# chek for no more duplicate site on cache\n##########################################################################\n:log warning ("Added site to block on dns: $tmpDNSsite : $tmpDNSip");\n# show info on warning log\n########################################################################## \n\/ip firewall address-list add address=$tmpDNSip list=$nameList comment=$tmpDNSsite timeout=24:00:00;\n# add site to add list entry.\n##########################################################################\n}\n}\n# End Script \n##########################################################################<\/pre><\/div>\n\n\n\n
Simpan schedule tersebut, dan setelah 1 jam maka dibagian Firewall – Address Lists<\/strong> akan ada list domain dan IP Address yang akan di block.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Kemudian tambahkan script berikut untuk mengeksekusi Address Lists tersebut <\/p>\n\n\n\n
\/ip firewall mangle\nadd action=mark-packet chain=prerouting comment=BLOCK_SITE \\\n    dst-address-list=BLOCK_SITE in-interface=ether-LAN new-packet-mark=\\\n    block_pkt passthrough=no\n\/ip firewall filter\nadd action=jump chain=forward comment=BLOCK_SITE jump-target=socmed \\\n\tpacket-mark=socmed_pkt\nadd action=drop chain=socmed comment=BLOCK_SITE packet-mark=socmed_pkt<\/pre><\/div>\n\n\n\n
pada script mangle sesuaikan in-interface yang digunakan untuk akses LAN. Perhatikan counter filter Bytes\/Packet <\/strong>yang baru saja dibuat, jika terus bertambah maka block access menggunakan domain atau keyword telah berhasil.<\/p>\n\n\n\n
Done…<\/p>\n","protected":false},"excerpt":{"rendered":"
Environment: Mikrotik Version: 6.43.2 Mikrotik Series: RB20011UiAS Pertama, pastikan user di LAN sudah bisa mengakses internet dengan normal, kemudian ikuti langkah berikut: Setting DNS Checklist Allow Remote Requests Setting FirewallContinue readingBlock Access Menggunakan Domain atau Keyword di Mikrotik<\/span><\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[18,15,16],"class_list":["post-107","post","type-post","status-publish","format-standard","hentry","category-notes","tag-firewall","tag-mikrotik","tag-script"],"_links":{"self":[{"href":"https:\/\/blog.wikazo.com\/index.php\/wp-json\/wp\/v2\/posts\/107","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.wikazo.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.wikazo.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.wikazo.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.wikazo.com\/index.php\/wp-json\/wp\/v2\/comments?post=107"}],"version-history":[{"count":6,"href":"https:\/\/blog.wikazo.com\/index.php\/wp-json\/wp\/v2\/posts\/107\/revisions"}],"predecessor-version":[{"id":137,"href":"https:\/\/blog.wikazo.com\/index.php\/wp-json\/wp\/v2\/posts\/107\/revisions\/137"}],"wp:attachment":[{"href":"https:\/\/blog.wikazo.com\/index.php\/wp-json\/wp\/v2\/media?parent=107"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.wikazo.com\/index.php\/wp-json\/wp\/v2\/categories?post=107"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.wikazo.com\/index.php\/wp-json\/wp\/v2\/tags?post=107"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}