How to Block TOR Browser Connection in MikroTik

How to Block TOR Browser Connection in MikroTik - This time one of the network admins is confused, the employees in his office are many who try to bypass the internet connection of the office in use for the benefit outside the job affairs. He was confused when he found many office employees using TOR Browser software.

What is TOR Browser?

If you want to browse anonymously, say if your internet connection is limited. With TOR software is the easiest way to overcome it, you are free to surf in a restricted internet network. You can Download TOR Browser Software here.

How to block TOR Browser software connection?

When your network uses mikrotik router and want to block / drop connection software TOR Browser. You can use the setting techniques in mikrotik in this article. I've tried trial and error, for how to detect TOR Browser connection and SUCCESS !!! * till now ^ _ ^.

Setting in MikroTik to Block TOR Browser

First you have to do is detect the connection used TOR software, where the destination IP-IP him or use port how. You can use TORCH tool in mikrotik or the easiest way to know the IP address used tor you can see here List of IP Address TOR Browser . In the list is the IP Server used TOR. You just input the IP-IP server in your mikrotik address-list. Or you can download this scripts , upload them to your mikrotik and import to add IP TOR server list. After you enter the IP-IP list of TOR servers, it's time to drop the connection. 

- This is just an example, download the full address-list here  -

/ ip firewall address-list
add address = 100.0.120.66 comment = "" disabled = no list = IP-TOR
add address = 100.0.180.196 comment = "" disabled = no list = IP-TOR
add address = 100.2.103.234 comment = "" disabled = no list = IP-TOR
add address = 100.33.8.35 comment = "" disabled = no list = IP-TOR
add address = 100.4.25.207 comment = "" disabled = no list = IP-TOR
add address = 101.103.3.201 comment = "" disabled = no list = IP-TOR
add address = 101.140.198.73 comment = "" disabled = no list = IP-TOR
add address = 101.142.85.171 comment = "" disabled = no list = IP-TOR
add address = 101.167.6.96 comment = "" disabled = no list = IP-TOR
add address = 101.55.12.75 comment = "" disabled = no list = IP-TOR
add address = 101.98.158.72 comment = "" disabled = no list = IP-TOR
add address = 103.10.197.50 comment = "" disabled = no list = IP-TOR
add address = 103.15.178.137 comment = "" disabled = no list = IP-TOR
add address = 103.16.26.71 comment = "" disabled = no list = IP-TOR
add address = 103.22.146.158 comment = "" disabled = no list = IP-TOR

The easiest way is to drop the connection to IP-IP Server TOR with the following script:

/ ip firewall filter
add action = drop chain = forward comment = "Drop TOR, www.adamonline.web.id" \
 disabled = no dst-address-list = IP-TOR

If successful, when you open the TOR Browser software it will look like this:

Source

Related Articles: