Hi Guys,

Please i really need your advice on how to block www.your-freedom.net software for getting internet access through my network.

I was using window ics for internet sharing when i discovered that some guys uses to get access to the internet using freedoom software. Days back i purchased the mikrotik router os license and configured. I setup the little firewall scripts i saw on the mikrotik guide, but I still can make use of the net via freedoom software.

Please advice what to do to block use of freedoom software.

Thank you

you can set up pppoe server in your mikrotik router, and then only people with username and password will be able to connect to the internet.

http://wiki.mikrotik.com/wiki/PPPoE

Try this, i'm not sure it works 100% (too lazy to make a free account on your-freedom), but on server search, the only available protocol is https

this solution will probably kill connections to the freedom servers, but those "guys" will just find another service. this is why I recommend to make authentication so you always know who uses your connection

Guys,

Thank you very much for the support, i will try both solution and i will update you on it outcome.

Thanks Guys,

I am able to block the use of the software on my network...

Thank you once again

to block the freedom :

/ip firewall layer7-protocol
add name=freedom regexp="^.+(2yf.de|1yf.de)"
/ip firewall filter
add action=drop comment="block-freedom-maxupgrade" chain=pre-hs-input layer7-protocol=freedom

To know who use your freedom brogram :
/ip firewall mangle
add action=add-src-to-address-list address-list=freedom address-list-timeout=1d chain=prerouting layer7-protocol=freedom comment="freedom-maxupgrade"

-----------------
ahmed mohammed al-alimi | Yemen sana'a

Thank you so much Ahmed, but sorry if i may ask; did you ever tried it and its work or you want me just to try and find if its gonna work?

Thank you so much Ahmed, but sorry if i may ask; did you ever tried it and its work or you want me just to try and find if its gonna work?

you welcome 
yes  its work  100% , you can try it.

ok guys, thanks and God Bless us all, i will impliment right away

Thank you so much Ahmed, but sorry if i may ask; did you ever tried it and its work or you want me just to try and find if its gonna work?

you welcome 
yes  its work  100% , you can try it.

It will probably "work 100%" for blocking that service, but I think that in practice it will also cause
strange problems when unrelated traffic happens to match that simple expression.

to block the freedom :

/ip firewall layer7-protocol
add name=freedom regexp="^.+(2yf.de|1yf.de)"
/ip firewall filter
add action=drop comment="block-freedom-maxupgrade" chain=pre-hs-input layer7-protocol=freedom

To know who use your freedom brogram :
/ip firewall mangle
add action=add-src-to-address-list address-list=freedom address-list-timeout=1d chain=prerouting layer7-protocol=freedom comment="freedom-maxupgrade"

-----------------
ahmed mohammed al-alimi | Yemen sana'a

Thank you man
If you now how to drop program vpn like "psiphon vpn" buz some users use it to access all of any website that blocked in network.i need to block the psiphon vpn?

to block the freedom :

/ip firewall layer7-protocol
add name=freedom regexp="^.+(2yf.de|1yf.de)"
/ip firewall filter
add action=drop comment="block-freedom-maxupgrade" chain=pre-hs-input layer7-protocol=freedom

To know who use your freedom brogram :
/ip firewall mangle
add action=add-src-to-address-list address-list=freedom address-list-timeout=1d chain=prerouting layer7-protocol=freedom comment="freedom-maxupgrade"

-----------------
ahmed mohammed al-alimi | Yemen sana'a

Thank you
But i need to ask you
From Wayne appreciate Get codes layer 7 like
"2yf.de|1yf.de"
Regards

bism allah alruhmin alrahim

I tried the roller at the top but the problem is like what is there, so I used this roller to meet the purpose and give part of the solution by 70% only as I rated it

Here is this roller

/ip firewall layer7-protocol
add name=FREEDOM.CP regexp="^.+(1yf.de|2yf.de|53r.de|resolution.de|freedom.net|y\
our-freedom.de|www.your-freedom.de|www.your-freedom.net)"




/ip firewall filter
add action=drop chain=pre-hs-input comment=STOP-FREEDOM-CENTERPOINT layer7-protocol=FREEDOM.CP
add action=drop chain=input comment=STOP-FREEDOM-CENTERPOINT layer7-protocol=FREEDOM.CP

Source Subject https://www.hd-tch.com/your-freedom-%D9 ... %A7%D8%AA/

/ip firewall layer7-protocol
add name=FREEDOM.CP regexp="^.+(1yf.de|2yf.de|53r.de|resolution.de|freedom.net|y\
our-freedom.de|www.your-freedom.de|www.your-freedom.net)"




/ip firewall filter
add action=drop chain=pre-hs-input comment=STOP-FREEDOM-CENTERPOINT layer7-protocol=FREEDOM.CP
add action=drop chain=input comment=STOP-FREEDOM-CENTERPOINT layer7-protocol=FREEDOM.CP



https://www.hd-tch.com/your-freedom-%D9 ... %A7%D8%AA/