Content based filter as .iso .exe .rar July 29, 2007
Posted by unixgeek in Mikrotik.trackback
/ip firewall nat
add chain=dstnat protocol=tcp dst-port=80 in-interface=”name of interface” action=redirect to-ports=3128
(3128 or 8080, port of your web proxy server)
Code:
/ ip web-proxy access
add url=”:\\.mp\[3g\]\$” action=deny comment=”" disabled=no
add url=”:\\.wm\[av\]\$” action=deny comment=”" disabled=no
add url=”:\\.avi\$” action=deny comment=”" disabled=no
add url=”:\\.pls\$” action=deny comment=”" disabled=no
add url=”:\\.torrent\$” action=deny comment=”" disabled=no
add url=”:\\.nzb\$” action=deny comment=”" disabled=no
add url=”:\\.exe\$” action=deny comment=”" disabled=no
add url=”:\\.rar\$” action=deny comment=”" disabled=no
add url=”:\\.zip\$” action=deny comment=”" disabled=no
And if you don’t known how to configure web proxy, here you are:
Code:
/ ip web-proxy
set enabled=yes src-address=0.0.0.0 port=3128 hostname=”proxy.domain.com” transparent-proxy=yes \
parent-proxy=0.0.0.0:0 cache-administrator=”webmaster@domain.com” \
max-object-size=4096KiB cache-drive=system max-cache-size=none \
max-ram-cache-size=unlimited
Comments»
No comments yet — be the first.