ABDURROZAK
ABDURROZAK.MY.ID // LAYER 7 FIREWALL SUPER+10 MODES

DEEP PACKET INSPECTION

MODE 01

BLOCK FB

L7 protocol "facebook". action=drop.

MODE 02

BLOCK YT

L7 protocol "youtube". DPI streaming.

MODE 03

BLOCK TORRENT

L7 protocol "bittorrent". P2P drop.

MODE 04

BLOCK .EXE

Regex ekstensi: \.exe$

MODE 05

TRAFFIC PASS

No match. action=accept.

MODE 06

LOG MONITOR

action=log. Pass but record.

NEW 07

BYPASS ADMIN

Exception rule. IP admin di-allow.

NEW 08

REDIRECT WARN

L7 detect + redirect ke warning page.

NEW 09

ENCRYPTED TLS

HTTPS tidak bisa di-inspect L7 biasa.

NEW 10

CONN LIMIT

Connection limit per IP. Koneksi berlebih ditolak.

CCAPTURE
IINSPECT
MMATCH
AACTION
BROWSER example.com CLIENT 192.168.88.10 HTTP/HTTPS Traffic IDLE MIKROTIK PWR ACT L7 FW L7 ENGINE // regex pattern match facebook|fbcdn WAITING... 1 2 3 4 5 X L7 FIREWALL chain=forward DPI Engine Active SIAP INTERNET WWW Public Network ONLINE

PACKET STATS

0
INSPECTED
0
DROPPED
0
PASSED
0
RULE HITS

CPU LOAD

12%
L7 ENGINE USAGE
Idle:12%
Inspecting:45-65%
Heavy L7:80%+

FIREWALL LOG 0

[--:--:--] Firewall ready. L7 engine active.

L7 PROTOCOLS 7 PROTOS

#NAMEREGEX PATTERN
1facebook^(get|post).*facebook
2youtubeyoutube\.com|ytimg
3bittorrentBitTorrent|peer_id
4instagraminstagram\.com|cdnig
5tiktoktiktok\.com|musical
6http^(get|post|head)
7tls/sslN/A (encrypted)

FILTER RULES 9 RULES

#CHAINMATCHERACTION
1forwardsrc=.88.100accept
2forwardfacebookdrop
3forwardyoutuberedirect
4forwardbittorrentlimit:5
5forward\.exe$drop
6forwardtls/sslaccept
7forwardfacebooklog
8forward-accept

DPI PACKET INSPECTOR

SRC IP192.168.88.10
DST IP157.240.1.35
PROTOCOLTCP/80
PAYLOAD SIZE512 bytes
L7 PROTOCOL-
MATCHED RULE#-
REGEX MATCH-
FINAL ACTIONPENDING
> L7 FIREWALL [SUPER+] INITIALIZED. 10 MODES READY...

TERHUBUNG