Blocking Filter Firewall

Firewall

Blocking FTP
Blocking SSH
Blocking Telnet
Blocking website menggunakan Address List

========================================================================= 
FTP
#ip firewall filter add chain=input protocol=utp dst-port=21 action=drop

SSH
#ip firewall filter add chain=input protocol=utp dst-port=22 action=drop

Telnet
#ip firewall filter add chain=input protocol=utp dst-port=23 action=drop

Blocking website menggunakan Address List
Untuk menghindari Client tidak mendapatkan DNS buat DHCP Server
Mengetahui IP Address yang ingin di block,
ping website tersebut, contoh ” ping detik.com ” lakukan selama 2x
Membuat Address List
#ip firewall address-list add name=detik address=(copy ip yang tadi di ping) disable=no
#ip firewall address-list add name=detik address=(copy ip yang tadi ping kedua) disable=no
Buat Blockir Website di Firewall
#ip firewall filter add chain=forward content=detik.com action=add-dst-address-list address-list=detik
Blockir client mengakses Website
#ip firewall filter add chain=forward dst-address-list=detik action=drop