Community discussions

MUM Europe 2020
 
contactaprie
just joined
Topic Author
Posts: 6
Joined: Wed Apr 25, 2012 7:07 am

(Ask) Drop Uploading

Tue Sep 17, 2013 5:19 pm

I am using RB 1200. Ether 0 connect to web server, ether 1 connect to LAN. The web server has "upload" menu. sometimes I need to drop uploading certain file extension (such as exe, etc) from the visitors. Can anyone recommend good firewall setting to do this job?
 
deejayq
Member Candidate
Member Candidate
Posts: 195
Joined: Wed Feb 23, 2011 8:33 am

Re: (Ask) Drop Uploading

Wed Sep 18, 2013 11:01 am

enable transparent web proxy in routeros
you can block downloading by file types using following code:

/ip proxy access add path=*.mp3 action=deny
 
contactaprie
just joined
Topic Author
Posts: 6
Joined: Wed Apr 25, 2012 7:07 am

Re: (Ask) Drop Uploading

Wed Sep 18, 2013 1:29 pm

thanks for reply, but I need to drop uploading not downloading.
 
deejayq
Member Candidate
Member Candidate
Posts: 195
Joined: Wed Feb 23, 2011 8:33 am

Re: (Ask) Drop Uploading

Wed Sep 18, 2013 3:20 pm

my bad,
one method would be to capture some packets from an user initiating an upload of a forbidden file, then analyze them and determine a pattern, with this pattern generate a l7 filter.
but l7 is resource intensive
and it would not work if the connection is https (i don't know if it's possible to upload files via https).
 
null
just joined
Posts: 1
Joined: Thu Sep 19, 2013 8:13 am

Re: (Ask) Drop Uploading

Thu Sep 19, 2013 8:14 am

I am using MB1200

Who is online

Users browsing this forum: No registered users and 51 guests