{"id":413,"date":"2020-10-26T22:00:30","date_gmt":"2020-10-26T21:00:30","guid":{"rendered":"https:\/\/www.main.tk\/?page_id=413"},"modified":"2021-05-22T10:03:09","modified_gmt":"2021-05-22T08:03:09","slug":"blokowanie-adresow-ip-podlug-krajow","status":"publish","type":"page","link":"http:\/\/www.main.tk\/?page_id=413","title":{"rendered":"Blokowanie adres\u00f3w IP pod\u0142ug kraj\u00f3w"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\"><span class=\"has-inline-color has-vivid-red-color\">Wst\u0119p<\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Niestety niekt\u00f3re regiony \u015bwiata maj\u0105 zas\u0142u\u017con\u0105 z\u0142\u0105 s\u0142aw\u0119. Roboty dzia\u0142aj\u0105ce z takich teren\u00f3w powoduj\u0105 chocia\u017cby puchni\u0119cie log\u00f3w urz\u0105dze\u0144 brzegowych, takich jak nasz router. Aby temu zaradzi\u0107, najpro\u015bciej po prostu stworzy\u0107 regu\u0142\u0119, kt\u00f3ra b\u0119dzie skutecznie odcina\u0107 ruch z takich niechcianych pul adresowych.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Stosuj\u0105c to rozwi\u0105zanie nale\u017cy mie\u0107 \u015bwiadomo\u015b\u0107, i\u017c obci\u0105\u017caj\u0105 one router i przy s\u0142abszym sprz\u0119cie mo\u017cemy mie\u0107 op\u00f3\u017anienia. Dlatego warto zawsze zainwestowa\u0107 w sprz\u0119t z pewnym zapasem. kt\u00f3ry pozwoli nam zapomnie\u0107 o takich ograniczeniach.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"pule_adresowe_kraje_ip\"><span class=\"has-inline-color has-vivid-red-color\">Pule adresowe<\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Najpierw musimy zdoby\u0107 pule adresowe tych niechcianych kraj\u00f3w, a s\u0105 ich dziesi\u0105tki tysi\u0119cy. Jest kilka znanych mi miejsc, kt\u00f3re serwuj\u0105 takie dane. Teraz pos\u0142u\u017cymy si\u0119 stron\u0105: <a rel=\"noreferrer noopener\" href=\"https:\/\/mikrotikconfig.com\/firewall\/\" target=\"_blank\"><em><span class=\"has-inline-color has-vivid-green-cyan-color\">https:\/\/mikrotikconfig.com\/firewall\/<\/span><\/em><\/a>. Korzystanie z niej jest klikalne i nie wymaga \u017cadnych opis\u00f3w. Otrzymujemy od niej plik o nazwie <em><span class=\"has-inline-color has-vivid-cyan-blue-color\">IP-Firewall-Address-List.rsc<\/span><\/em>. Jest to plik z rozszerzeniem i w formacie gotowym do zaimportowania do routera. Za pomoc\u0105 oprogramowania <em><span class=\"has-inline-color has-cyan-bluish-gray-color\"><a rel=\"noreferrer noopener\" href=\"https:\/\/www.mikrotik.com\/download\" data-type=\"URL\" data-id=\"https:\/\/www.mikrotik.com\/download\" target=\"_blank\">WinBox<\/a><\/span><\/em> otwieramy menu routera<span class=\"has-inline-color has-vivid-cyan-blue-color\"> <em><strong>Files<\/strong><\/em><\/span>. Metod\u0105 przeci\u0105gnij i upu\u015b\u0107 kopiujemy plik <em><span class=\"has-inline-color has-vivid-cyan-blue-color\">IP-Firewall-Address-List.rsc<\/span><\/em> do routera. Teraz pos\u0142u\u017cymy si\u0119 konsol\u0105 routera <strong><em><span class=\"has-inline-color has-vivid-cyan-blue-color\">New Terminal<\/span><\/em><\/strong> . W linii komend wpisujemy <em><span class=\"has-inline-color has-vivid-cyan-blue-color\">import<\/span><\/em>. Pojawia si\u0119 zach\u0119ta do wpisania nazwy pliku <em><span class=\"has-inline-color has-vivid-cyan-blue-color\">file-name:<\/span><\/em> zatem wpisujemy jak na poni\u017cszym zrzucie i naciskamy <em><span class=\"has-inline-color has-vivid-cyan-blue-color\">Enter<\/span><\/em>.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"389\" src=\"https:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_import_file.jpg\" alt=\"\" class=\"wp-image-420\" srcset=\"http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_import_file.jpg 600w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_import_file-300x195.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><figcaption><em><span class=\"has-inline-color has-luminous-vivid-orange-color\">Import pliku<\/span><\/em><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Chwil\u0119 p\u00f3\u017aniej w<em> <\/em><span class=\"has-inline-color has-vivid-cyan-blue-color\"><em>IP<\/em> -&gt; <em>Firewall<\/em> -&gt; <em>Address<\/em><\/span> List mamy ca\u0142\u0105 nasz\u0105 list\u0119 pul adresowych go\u015bci z niechcianych kraj\u00f3w.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"has-inline-color has-vivid-red-color\">Regu\u0142a firewalla<\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Teraz pos\u0142u\u017cymy si\u0119 graficznym interfejsem Router OS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Otwieramy menu <span class=\"has-inline-color has-vivid-cyan-blue-color\"><em><strong>IP<\/strong><\/em> -&gt; <em><strong>Firewall<\/strong><\/em><\/span><em><strong> <\/strong><\/em>na zak\u0142adce <em><strong><span class=\"has-inline-color has-vivid-cyan-blue-color\">Filter Rules<\/span><\/strong><\/em> dodajemy now\u0105 regu\u0142\u0119 jak poni\u017cej.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"500\" height=\"532\" src=\"https:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/country_blocked_general_rules.jpg\" alt=\"\" class=\"wp-image-423\" srcset=\"http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/country_blocked_general_rules.jpg 500w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/country_blocked_general_rules-282x300.jpg 282w\" sizes=\"auto, (max-width: 500px) 100vw, 500px\" \/><figcaption><em><span class=\"has-inline-color has-luminous-vivid-orange-color\">Dodawanie regu\u0142y firewalla<\/span><\/em><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><em><span class=\"has-inline-color has-vivid-cyan-blue-color\">Input<\/span><\/em> poniewa\u017c chodzi nam o ruch przychodz\u0105cy <em><span class=\"has-inline-color has-vivid-cyan-blue-color\">ether1<\/span><\/em> &#8211; tak nazywa si\u0119 port ethernetowy, kt\u00f3ry s\u0142u\u017cy w tej konfiguracji za port WAN.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"500\" height=\"532\" src=\"https:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/country_blocked_advanced_rules.jpg\" alt=\"\" class=\"wp-image-422\" srcset=\"http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/country_blocked_advanced_rules.jpg 500w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/country_blocked_advanced_rules-282x300.jpg 282w\" sizes=\"auto, (max-width: 500px) 100vw, 500px\" \/><figcaption><em><span class=\"has-inline-color has-luminous-vivid-orange-color\">Dodawanie listy adresowej dla regu\u0142y firewalla<\/span><\/em><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">W zak\u0142adce <em><span class=\"has-inline-color has-vivid-cyan-blue-color\">Advanced<\/span><\/em> jako <em><span class=\"has-inline-color has-vivid-cyan-blue-color\">Source Address List<\/span><\/em> wybieramy<span class=\"has-inline-color has-vivid-cyan-blue-color\"> <em>CountryIPBlocks<\/em><\/span>.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"500\" height=\"532\" src=\"https:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/country_blocked_action_rules.jpg\" alt=\"\" class=\"wp-image-421\" srcset=\"http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/country_blocked_action_rules.jpg 500w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/country_blocked_action_rules-282x300.jpg 282w\" sizes=\"auto, (max-width: 500px) 100vw, 500px\" \/><figcaption><em><span class=\"has-inline-color has-luminous-vivid-orange-color\">Dodawanie akcji do regu\u0142y firewalla<\/span><\/em><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Ostatnim jest podanie akcji jak\u0105 ma wykona\u0107 firewall, w tym przypadku jest to <em><span class=\"has-inline-color has-vivid-cyan-blue-color\">drop<\/span><\/em>. Na pocz\u0105tek mo\u017cna jeszcze w\u0142\u0105czy\u0107 logi dla tych zdarze\u0144 i opatrzy\u0107 odpowiednim <em><span class=\"has-inline-color has-vivid-cyan-blue-color\">Log Prefix<\/span><\/em>. Tak dla ciekawo\u015bci. P\u00f3\u017aniej lepiej to wy\u0142\u0105czy\u0107, bo logi routera puchn\u0105 ponad miar\u0119.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Regu\u0142\u0119 nale\u017cy umie\u015bci\u0107 w odpowiednim miejscu firewalla, jego hierarchii. Najlepiej zrobi\u0107 to przed regu\u0142ami dopuszczaj\u0105cymi ruch dla wa\u017cnych us\u0142ug, jak np. VPN. Przecie\u017c w\u0142a\u015bnie je mamy chroni\u0107 przed natr\u0119tami.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Dzi\u0119kuj\u0119 i zapraszam do zapoznania si\u0119 z innymi opisami.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Wst\u0119p Niestety niekt\u00f3re regiony \u015bwiata maj\u0105 zas\u0142u\u017con\u0105 z\u0142\u0105 s\u0142aw\u0119. Roboty dzia\u0142aj\u0105ce z takich teren\u00f3w powoduj\u0105 chocia\u017cby puchni\u0119cie log\u00f3w urz\u0105dze\u0144 brzegowych, takich jak nasz router. Aby temu zaradzi\u0107, najpro\u015bciej po prostu stworzy\u0107 regu\u0142\u0119, kt\u00f3ra b\u0119dzie skutecznie odcina\u0107 ruch z takich niechcianych pul adresowych. Stosuj\u0105c to rozwi\u0105zanie nale\u017cy mie\u0107 \u015bwiadomo\u015b\u0107, i\u017c obci\u0105\u017caj\u0105 one router i przy s\u0142abszym sprz\u0119cie mo\u017cemy mie\u0107 op\u00f3\u017anienia. Dlatego warto zawsze zainwestowa\u0107 w sprz\u0119t [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":407,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-413","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"http:\/\/www.main.tk\/index.php?rest_route=\/wp\/v2\/pages\/413","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.main.tk\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"http:\/\/www.main.tk\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"http:\/\/www.main.tk\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/www.main.tk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=413"}],"version-history":[{"count":17,"href":"http:\/\/www.main.tk\/index.php?rest_route=\/wp\/v2\/pages\/413\/revisions"}],"predecessor-version":[{"id":1447,"href":"http:\/\/www.main.tk\/index.php?rest_route=\/wp\/v2\/pages\/413\/revisions\/1447"}],"up":[{"embeddable":true,"href":"http:\/\/www.main.tk\/index.php?rest_route=\/wp\/v2\/pages\/407"}],"wp:attachment":[{"href":"http:\/\/www.main.tk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=413"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}