Freedom Software

RouterOS General
1

Hi Guys,

Please i really need your advice on how to block www.your-freedom.net software for getting internet access through my network.

I was using window ics for internet sharing when i discovered that some guys uses to get access to the internet using freedoom software. Days back i purchased the mikrotik router os license and configured. I setup the little firewall scripts i saw on the mikrotik guide, but I still can make use of the net via freedoom software.

Please advice what to do to block use of freedoom software.

Thank you

2

you can set up pppoe server in your mikrotik router, and then only people with username and password will be able to connect to the internet.

http://wiki.mikrotik.com/wiki/PPPoE

3

Try this, i’m not sure it works 100% (too lazy to make a free account on your-freedom), but on server search, the only available protocol is https

/ip firewall address-list 
add list=your-freedom address=94.231.80.100
add list=your-freedom address=85.214.22.104
add list=your-freedom address=94.126.16.7
add list=your-freedom address=85.214.151.156
add list=your-freedom address=85.214.149.36
add list=your-freedom address=85.214.45.166
add list=your-freedom address=85.214.149.43
add list=your-freedom address=83.170.96.78
add list=your-freedom address=193.37.152.232
add list=your-freedom address=80.74.137.161
add list=your-freedom address=193.164.133.62
add list=your-freedom address=95.143.192.144
add list=your-freedom address=208.53.158.27
add list=your-freedom address=85.214.149.35
add list=your-freedom address=76.73.125.131
add list=your-freedom address=77.92.78.225
add list=your-freedom address=81.169.130.185
add list=your-freedom address=217.150.244.92
add list=your-freedom address=83.170.105.81
add list=your-freedom address=123.108.109.9
add list=your-freedom address=85.214.143.29
add list=your-freedom address=85.214.116.165
add list=your-freedom address=67.212.67.75
add list=your-freedom address=67.159.5.116
add list=your-freedom address=202.160.120.226
/ip firewall filter
add action=drop chain=forward disabled=no dst-address-list=your-freedom 
add action=drop chain=forward content=your-freedom disabled=no
4

this solution will probably kill connections to the freedom servers, but those “guys” will just find another service. this is why I recommend to make authentication so you always know who uses your connection

5

Guys,

Thank you very much for the support, i will try both solution and i will update you on it outcome.

6

Thanks Guys,

I am able to block the use of the software on my network…

Thank you once again

7

to block the freedom :

/ip firewall layer7-protocol
add name=freedom regexp=“^.+(2yf.de|1yf.de)”
/ip firewall filter
add action=drop comment=“block-freedom-maxupgrade” chain=pre-hs-input layer7-protocol=freedom

To know who use your freedom brogram :
/ip firewall mangle
add action=add-src-to-address-list address-list=freedom address-list-timeout=1d chain=prerouting layer7-protocol=freedom comment=“freedom-maxupgrade”

ahmed mohammed al-alimi | Yemen sana’a

8

Thank you so much Ahmed, but sorry if i may ask; did you ever tried it and its work or you want me just to try and find if its gonna work?

9

you welcome
yes its work 100% , you can try it.

10

ok guys, thanks and God Bless us all, i will impliment right away

11

It will probably “work 100%” for blocking that service, but I think that in practice it will also cause
strange problems when unrelated traffic happens to match that simple expression.

12

Thank you man
If you now how to drop program vpn like “psiphon vpn” buz some users use it to access all of any website that blocked in network.i need to block the psiphon vpn?

13

Thank you
But i need to ask you
From Wayne appreciate Get codes layer 7 like
“2yf.de|1yf.de”
Regards

14

bism allah alruhmin alrahim

I tried the roller at the top but the problem is like what is there, so I used this roller to meet the purpose and give part of the solution by 70% only as I rated it

Here is this roller

/ip firewall layer7-protocol
add name=FREEDOM.CP regexp=“^.+(1yf.de|2yf.de|53r.de|resolution.de|freedom.net|y
our-freedom.de|www.your-freedom.de|www.your-freedom.net)”




/ip firewall filter
add action=drop chain=pre-hs-input comment=STOP-FREEDOM-CENTERPOINT layer7-protocol=FREEDOM.CP
add action=drop chain=input comment=STOP-FREEDOM-CENTERPOINT layer7-protocol=FREEDOM.CP



Source Subject > https://www.hd-tch.com/your-freedom-يعاود-اختراق-الشبكات/

15

/ip firewall layer7-protocol
add name=FREEDOM.CP regexp=“^.+(1yf.de|2yf.de|53r.de|resolution.de|freedom.net|y
our-freedom.de|www.your-freedom.de|www.your-freedom.net)”




/ip firewall filter
add action=drop chain=pre-hs-input comment=STOP-FREEDOM-CENTERPOINT layer7-protocol=FREEDOM.CP
add action=drop chain=input comment=STOP-FREEDOM-CENTERPOINT layer7-protocol=FREEDOM.CP



https://www.hd-tch.com/your-freedom-يعاود-اختراق-الشبكات/