Tips Block Akses Browsing di Mikrotik dengan Schedule
Ini merupakan salah satu catatan pribadi, dimana untuk ngeblok akses situs atau download file tertentu serta pada jam tertentu. Untuk melakukan blocking ini aku menggunakan web proxy yang ada di mikrotik.
Cara yang aku lakukan :
Buat nat rule untuk webproxy-nya
/ip firewall nat add chain=dstnat protocol=tcp dst-port=80 action=redirect to-ports=8080
enable webproxy-nya
ip web-proxy set enabled=yes
masukkan content yang ingin di blok
/ip web-proxy access add src-address=0.0.0.0/0 dst-address=0.0.0.0/0 url=*.facebook.com* action=deny comment=situs
Lalu create script (system >> script)
Name : bloksiang
Policy : write, read, policy (yang dicentang)
Source:
/ip web-proxy access enable [/ip web-proxy access find comment=situs]
Name : blokmalam
Policy : write, read, policy (yang dicentang)
Source:
/ip web-proxy access disable [/ip web-proxy access find comment=situs]
Buat scheduler yang diinginkan (system >> scheduler).
name=bloksiang
start-date=Jan/01/2010
start-time=08:30:00
interval=1d 00:00:00
on-event= bloksiangname=blokmalam
start-date=Jan/01/2010
start-time=18:30:00
interval=1d 00:00:00
on-event= blokmalam
Nah setelah itu maka liat aja hasilnya maka situs yang masuk di dalam list di web proxy akan terblok. Kalo ada banyak situs atau address atau file yang ingin di blok maka tinggal di add di web proxy serta diberi comment yang sama (dalam hal ini saya menggunakan comment=situs), maka pada waktu yang bersamaan semua situs yang ada list akan terblok.
Misalnya :
/ip web-proxy access add src-address=0.0.0.0/0 dst-address=0.0.0.0/0 url=*.youtube* action=deny comment=situs
/ip web-proxy access add src-address=0.0.0.0/0 dst-address=0.0.0.0/0 url=*mpeg* action=deny comment=situs
/ip web-proxy access add src-address=0.0.0.0/0 dst-address=0.0.0.0/0 url=*exe* action=deny comment=situs
Related posts:





March 31st, 2010 at 11:35 pm
(Hello|Hi) Nice topic and information. To surf anonymous I use Click Here You might want to try it out.
July 12th, 2010 at 4:41 am
good info bro, kunjungi juga download ebook gratis
July 12th, 2010 at 12:16 pm
tq atas kunjungannya
July 26th, 2010 at 10:24 am
Mo tanya ni mas …..
Bagaimana ya caranya agar bisa block akses browsing ke facebook/youtube, cuman nggak semuanya user diblock.
Artinya ada beberapa ip yang diperbolehkan (ip nya user VIP & IT Manager ). ? Mohon dikasih pencerahan ya mas. maklum, masih newbie.
Terima kasih.
August 27th, 2010 at 3:00 pm
If you are planing on doing this from home keep in mind that your connection is likely asymmetrical. Meaning that your upload bandwidth is much less than your download bandwidth. This is great if you are browsing the net because most things are download. But if you are going to run any kind of VPN that slow upload will be the determining factor in overall speed. A VPN requires fast in and out. So a slow out will hamper it’s effectiveness. It’s going to be much more simple and effective to use a commercial personal vpn service like Aside from being fast the multiple server addresses will not get blocked by web filters like your home one will. However, if you really want to give it a shot then I would recommend OpenVPN It’s bullet proof and fast. You could set it up in a virtual machine on either computer and let it run in the background.
April 2nd, 2011 at 7:16 pm
It is legitimate joy to read you blog!
April 13th, 2012 at 9:01 am
mas mw tanya kenapa dalam setting microtik kita menggunakan action=”deny”
April 18th, 2012 at 5:33 am
hal tersebut digunakan untuk access yang tidak di allow atau diperbolehkan