Quantcast
Channel: EdgeRouter topics
Viewing all articles
Browse latest Browse all 20028

Restart or restore traffic-analysis service defaults

$
0
0

I have a firewall rule that blocks custom-category 'youtube'

i disabled DPI because at the beggining started to work well. but from one moment to another he blocked also google

First i disabled the firewall rule that drop this and enabled again, but it does not work.

Then i created and deleted the rule again with the same result. 

In short the blockade stop working.

Someone know a solution first:

- so that trayng to block youtube does no block google

- fix firewall error.

- also i thinking to restart dpi deault or restart service but i don't know how

 

Mi config

 

--------------------------------------------------------------------------------
                                    FIREWALL
--------------------------------------------------------------------------------
firewall {
    all-ping enable
    broadcast-ping disable
    group {
        network-group PRIVATE_NETS {
            network 192.168.0.0/16
            network 172.16.0.0/12
            network 10.0.0.0/8
        }
    }
    ipv6-receive-redirects disable
    ipv6-src-route disable
    ip-src-route disable
    log-martians disable
    modify balance {
        rule 10 {
            action modify
            description "do NOT load balance lan to lan"
            destination {
                group {
                    network-group PRIVATE_NETS
                }
            }
            modify {
                table main
            }
        }
        rule 20 {
            action modify
            description "do NOT load balance destination public address"
            destination {
                group {
                    address-group ADDRv4_eth0
                }
            }
            modify {
                table main
            }
        }
        rule 30 {
            action modify
            description "do NOT load balance destination public address"
            destination {
                group {
                    address-group ADDRv4_eth1
                }
            }
            modify {
                table main
            }
        }
        rule 100 {
            action modify
            modify {
                lb-group G
            }
        }
    }
    name BLOCK_SITES {
        default-action accept
        description BLOCK_SITES
        rule 10 {
            action drop
            application {
                custom-category DROP_YOU
            }
            description BLK_YOUTUBE
        }
    }
    name WAN_IN {
        default-action drop
        description "WAN to internal"
        rule 10 {
            action accept
            description "Allow established/related"
            state {
                established enable
                related enable
            }
        }
        rule 20 {
            action drop
            description "Drop invalid state"
            state {
                invalid enable
            }
        }
    }
    name WAN_LOCAL {
        default-action drop
        description "WAN to router"
        rule 10 {
            action accept
            description "Allow established/related"
            state {
                established enable
                related enable
            }
        }
        rule 20 {
            action drop
            description "Drop invalid state"
            state {
                invalid enable
            }
        }
    }
    receive-redirects disable
    send-redirects enable
    source-validation disable
    syn-cookies enable
}

--------------------------------------------------------------------------------
                                    TRAFFIC ANALYSIS 
--------------------------------------------------------------------------------

    traffic-analysis {
        custom-category DROP_YOU {
            name Youtube
        }
        dpi enable
        export enable
    }

 

 


Viewing all articles
Browse latest Browse all 20028

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>