How to detect and block Ultra Surf Vpn on Mikrotik

Detect and Block UltraSurf program traffic
/ip firewall filter
add action=drop chain=forward comment=”Block UltraSurf” disabled=no dst-port=\
443 protocol=tcp src-address-list=UltraSurfUsers
/ip firewall mangle
add action=add-src-to-address-list address-list=UltraSurfUsers \
address-list-timeout=5m chain=prerouting comment=UltraSurfUsers disabled=\
no dst-address-list=UltraSurfServers dst-port=443 protocol=tcp
/ip firewall address-list
add address=65.49.0.0/17 comment=”" disabled=no list=UltraSurfServers
add address=204.107.140.0/24 comment=”" disabled=no list=UltraSurfServers
————————————————
Block DNS
/ip firewall filter
add action=accept chain=forward comment=DNS disabled=no dst-address=198.153.194.50 dst-port=53 protocol=tcp
add action=accept chain=forward comment=DNS disabled=no dst-address=198.153.194.50 dst-port=53 protocol=udp
add action=accept chain=forward comment=DNS disabled=no dst-address=198.153.192.50 dst-port=53 protocol=tcp
add action=accept chain=forward comment=DNS disabled=no dst-address=198.153.192.50 dst-port=53 protocol=udp
add action=drop chain=forward comment=DNS disabled=no dst-port=53 protocol=tcp
add action=drop chain=forward comment=DNS disabled=no dst-port=53 protocol=udp

Comments

  1. laustanSeptember 18, 2015 at 11:54 PM

    The client can then scan any Internet webpage regularly utilizing IE. Every single activity channel through the nearby Ultrasurf intermediary. Since the activity in the middle of Ultrasurf and IE is altogether on the localhost, it never goes to the system and can't be hindered by a system gadget.

    Ultrasurf then sets up a scrambled association with a remote server in its system of intermediary servers

    The association with the remote intermediary server is made over port 443, which is the standard HTTPS port


    write my paper for cheap

    ReplyDelete

Post a Comment

Popular posts from this blog

How to Install Windows 7 {Beginners}

Image
Are you installing Windows 7..? You don't need to be a professional or refer to a confusing manual in order to do so. Just follow this guide, and you'll have Windows 7 installed on that computer in no time... rt 1 Installing Using a Windows installation DVD Clean Install A clean install is intended for users who want to freshly install Windows on their computer (by deleting all of the data on the hard disk and then installing Windows) or computers that do not have an operating system yet. 1 Enter your computer's BIOS.  Turn off the computer on which you want to install Windows 7 and then turn it back on. When the BIOS screen appears or you are prompted to do so, press  Del ,  Esc ,  F2 ,  F10 , or  F9  (depending on your computer’s motherboard) to enter the system BIOS. The key to enter the BIOS is usually shown on the screen. 2 Find your BIOS's boot options menu.  The boot options menu of your BIOS may vary in locat...
Read more

Install and Tuning Squid Proxy Server for Windows........

Image
The earlier discussion on the basic of bandwidth management that only uses masquerading on firewall nat to share the internet connection to each client for our network. And then we classify into the various kinds of  connection packets  and give different priorities to them. It depends on how much you want to classify and get your desired priority. One step further more about bandwidth management, using proxy server on the network is going to be very dramatic role in obtaining the satisfaction of our clients in use of the internet connection. Actually, the browser itself has been using this method, but the ability is still limited by making the cache inside. The static data from any sites that have been accessed, the browser will make the cache that stored inside, so if sometimes we access it again the static data from the sites is not requested again except the dynamic data, the result is the loading of the site will be faster compared with the first time ...
Read more