Mikrotik Hotspot Shield ve UltraSurf Engelleme
Hotspot Shield programını tespit eder ve engeller
/ip firewall mangle add action=add-dst-to-address-list address-list=WhiteList \ address-list-timeout=4d4h chain=prerouting comment=WhiteList content=\ !127.0.0.1:895 disabled=no dst-port=80 protocol=tcp add action=add-src-to-address-list address-list=HotSpotShieldUsers \ address-list-timeout=1h chain=prerouting comment=HotSpotShieldUsers \ content=127.0.0.1:895 disabled=no dst-port=80 protocol=tcp add action=add-dst-to-address-list address-list=WhiteList \ address-list-timeout=4d4h chain=prerouting comment=WhiteList content=\ !127.0.0.1:895 disabled=no dst-port=443 protocol=tcp /ip firewall filter add action=drop chain=forward comment="\"Block HotSpot Shield\"" disabled=no \ src-address-list=HotSpotShieldUsers
UltraSurf programını tespit eder ve engeller
/ip firewall filter add action=drop chain=forward comment="Block UltraSurf" disabled=no dst-port=\ 443 protocol=tcp src-address-list=UltraSurfUsers /ip firewall mangle add action=add-src-to-address-list address-list=UltraSurfUsers \ address-list-timeout=5m chain=prerouting comment=UltraSurfUsers disabled=\ no dst-address-list=UltraSurfServers dst-port=443 protocol=tcp /ip firewall address-list add address=65.49.0.0/17 comment="" disabled=no list=UltraSurfServers add address=204.107.140.0/24 comment="" disabled=no list=UltraSurfServers
DNS Engelleme
/ip firewall filter add action=accept chain=forward comment=DNS disabled=no dst-address=198.153.194.50 dst-port=53 protocol=tcp add action=accept chain=forward comment=DNS disabled=no dst-address=198.153.194.50 dst-port=53 protocol=udp add action=accept chain=forward comment=DNS disabled=no dst-address=198.153.192.50 dst-port=53 protocol=tcp add action=accept chain=forward comment=DNS disabled=no dst-address=198.153.192.50 dst-port=53 protocol=udp add action=drop chain=forward comment=DNS disabled=no dst-port=53 protocol=tcp add action=drop chain=forward comment=DNS disabled=no dst-port=53 protocol=udp