Difference between revisions of "Mikrotik: Layer 7 Protocol L7P"

From OnnoWiki
Jump to navigation Jump to search
Line 22: Line 22:
 
  # add l7 matcher
 
  # add l7 matcher
 
  add action=accept chain=forward comment="" disabled=no layer7-protocol=\
 
  add action=accept chain=forward comment="" disabled=no layer7-protocol=\
     rdp protocol=tc
+
     rdp protocol=tcp
  
 
==Contoh Regex==
 
==Contoh Regex==

Revision as of 19:47, 22 April 2020



Mengaktifkan Regex

/ip firewall layer7-protocol add comment="test" regexp=.youtube 
/ip firewall layer7-protocol print
/ip firewall filter add chain=forward layer7-protocol=test action=drop 


Contoh

/ip firewall layer7-protocol
add name=rdp regexp="rdpdr.*cliprdr.*rdpsnd"
/ip firewall filter
# add few known protocols to reduce mem usage
add action=accept chain=forward comment="" disabled=no port=80 protocol=tcp
add action=accept chain=forward comment="" disabled=no port=443 protocol=tcp
# add l7 matcher
add action=accept chain=forward comment="" disabled=no layer7-protocol=\
    rdp protocol=tcp

Contoh Regex

Referensi

Pranala Menarik