{"id":212,"date":"2025-02-13T15:36:56","date_gmt":"2025-02-13T18:36:56","guid":{"rendered":"https:\/\/seashell-gull-453430.hostingersite.com\/?post_type=ht_kb&#038;p=212"},"modified":"2025-02-13T15:36:57","modified_gmt":"2025-02-13T18:36:57","slug":"basic-rule-of-blocking-service","status":"publish","type":"ht_kb","link":"https:\/\/wiki.anatod.com\/en\/knowledge-base\/regla-basica-de-bloqueo-de-servicio\/","title":{"rendered":"Basic Rule of Service Blocking"},"content":{"rendered":"<p>Configuration for Mikrotik \u2013 PPPoE and use of address list.<\/p>\n\n\n\n<p class=\"wp-block-ht-blocks-messages wp-block-hb-message wp-block-hb-message--withicon is-style-danger\">This is a basic rule for service blocking. Each configuration should be configured according to the network parameters of each MikroTik.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">PPPoE Profile Configuration<a href=\"https:\/\/docs-ispkeeper.anatod.com\/docs\/regla-b%C3%A1sica-de-bloqueo-de-servicio#configuraci%C3%B3n-perfil-pppoe\"><\/a><\/h3>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"452\" height=\"579\" src=\"http:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-37.png\" alt=\"\" class=\"wp-image-213\" title=\"\" srcset=\"https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-37.png 452w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-37-234x300.png 234w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-37-39x50.png 39w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-37-9x12.png 9w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-37-47x60.png 47w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-37-78x100.png 78w\" sizes=\"auto, (max-width: 452px) 100vw, 452px\" \/><\/figure>\n\n\n\n<p>Create a new PPPoE profile with the name you used in the system service blocking rule. Also add the name of the rule you want to use in the Address List field.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"451\" height=\"577\" src=\"http:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-38.png\" alt=\"\" class=\"wp-image-214\" title=\"\" srcset=\"https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-38.png 451w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-38-234x300.png 234w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-38-39x50.png 39w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-38-9x12.png 9w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-38-47x60.png 47w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-38-78x100.png 78w\" sizes=\"auto, (max-width: 451px) 100vw, 451px\" \/><\/figure>\n\n\n\n<p>Additionally, if you wish, you can add a speed limit to the profile. We recommend 1k\/1k.<\/p>\n\n\n\n<p class=\"wp-block-ht-blocks-messages wp-block-hb-message wp-block-hb-message--withicon is-style-alert\">IMPORTANT: Do not use 0k\/0k speed as Mikrotik assumes this is unlimited.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Filter Rules Configuration<a href=\"https:\/\/docs-ispkeeper.anatod.com\/docs\/regla-b%C3%A1sica-de-bloqueo-de-servicio#configuraci%C3%B3n-filter-rules\"><\/a><\/h3>\n\n\n\n<p>Once the Delinquent profile has been created, the rule must be created in the Filter Rules (IP \/ FIREWALL \/ FILTER RULES)<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"658\" height=\"589\" src=\"http:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-39.png\" alt=\"\" class=\"wp-image-215\" title=\"\" srcset=\"https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-39.png 658w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-39-300x269.png 300w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-39-50x45.png 50w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-39-13x12.png 13w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-39-60x54.png 60w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-39-100x90.png 100w\" sizes=\"auto, (max-width: 658px) 100vw, 658px\" \/><\/figure>\n\n\n\n<p>Create the rule as Chain: Forward and in Src. Address List select the rule previously used in the PPPoE profile.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"660\" height=\"591\" src=\"http:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-40.png\" alt=\"\" class=\"wp-image-216\" title=\"\" srcset=\"https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-40.png 660w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-40-300x269.png 300w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-40-50x45.png 50w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-40-13x12.png 13w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-40-60x54.png 60w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-40-100x90.png 100w\" sizes=\"auto, (max-width: 660px) 100vw, 660px\" \/><\/figure>\n\n\n\n<p>On the Action tab, select&nbsp;<strong>DROP<\/strong><\/p>\n\n\n\n<p>You can continue configuring the rule with any other parameters you use; this is a very basic rule for blocking all internet traffic.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Explanation of the use of dynamic rules<a href=\"https:\/\/docs-ispkeeper.anatod.com\/docs\/regla-b%C3%A1sica-de-bloqueo-de-servicio#explicaci%C3%B3n-del-uso-de-regla-din%C3%A1mica\"><\/a><\/h3>\n\n\n\n<p>Once a connection has the service blocking rule, a record will be dynamically created in the Address List and the client will be left without internet access.<\/p>\n\n\n\n<p>In the case of PPPoE, when a client switches from its current speed profile to the blocking profile, a dynamic addlist is generated with the current IP address for blocking the service. If the client restarts its connection, it will always be dynamically reconnected to the IP address it&#039;s currently using. When returning to the original speed profile, this rule disappears, and the client immediately regains access to the Internet.<\/p>\n\n\n\n<p>In the case of DHCP, it works the same way, adding the addlist to the DHCP lease, it is generated automatically, and when you remove it from the lease, it disappears.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"549\" height=\"144\" src=\"http:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-41.png\" alt=\"\" class=\"wp-image-217\" title=\"\" srcset=\"https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-41.png 549w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-41-300x79.png 300w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-41-50x13.png 50w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-41-18x5.png 18w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-41-60x16.png 60w, https:\/\/wiki.anatod.com\/wp-content\/uploads\/2025\/02\/image-41-100x26.png 100w\" sizes=\"auto, (max-width: 549px) 100vw, 549px\" \/><\/figure>\n\n\n\n<p>The D symbol indicates that it is dynamic, meaning that when the configuration of the connection and\/or disconnection of the equipment changes, it disappears.<\/p>","protected":false},"excerpt":{"rendered":"<p>Configuraci\u00f3n para Mikrotik &#8211; PPPoE y utilizaci\u00f3n de address list. Configuraci\u00f3n Perfil PPPoE Crear un nuevo perfil PPPoE con el nombre que utilice en la regla de bloqueo de servicio del sistema. Tambi\u00e9n agregar en el campo Address List el nombre de la regla a utilizar. Adicionalmente si lo desea&#8230;<\/p>","protected":false},"author":1,"comment_status":"open","ping_status":"closed","template":"","format":"standard","meta":{"footnotes":""},"ht-kb-category":[24],"ht-kb-tag":[],"class_list":["post-212","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-internet"],"_links":{"self":[{"href":"https:\/\/wiki.anatod.com\/en\/wp-json\/wp\/v2\/ht-kb\/212","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wiki.anatod.com\/en\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/wiki.anatod.com\/en\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/wiki.anatod.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wiki.anatod.com\/en\/wp-json\/wp\/v2\/comments?post=212"}],"version-history":[{"count":1,"href":"https:\/\/wiki.anatod.com\/en\/wp-json\/wp\/v2\/ht-kb\/212\/revisions"}],"predecessor-version":[{"id":218,"href":"https:\/\/wiki.anatod.com\/en\/wp-json\/wp\/v2\/ht-kb\/212\/revisions\/218"}],"wp:attachment":[{"href":"https:\/\/wiki.anatod.com\/en\/wp-json\/wp\/v2\/media?parent=212"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/wiki.anatod.com\/en\/wp-json\/wp\/v2\/ht-kb-category?post=212"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/wiki.anatod.com\/en\/wp-json\/wp\/v2\/ht-kb-tag?post=212"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}