⏱ O‘qish vaqti: 2 daqiqa
Qisqacha
- Port 4495 ga keluvchi TCP/UDP trafikni belgilash
- Xodim tarmoqlariga yo‘naltirilgan paketlarni up/down sifatida ajratish
- Thumbnails ko‘rinishida bir nechta ekranlarni bir vaqtning o‘zida ko‘rish
- Markalanadigan aloqalar orqali tarmoq monitoringini soddalashtirish
Ko‘pgina kompaniyalarda xodimlarning ish faoliyatini nazorat qilish muhim. MikroTik routerda mangle va port forward sozlamalari yordamida xodim kompyuterlarining ekranlarini real vaqt monitoring qilish mumkin. Bu usul TCP/UDP 4495 port orqali ma’lumotlarni ajratadi va belgilaydi. Natijada bir nechta ekranlarni bir vaqtning o‘zida ko‘rish imkoniyati paydo bo‘ladi.
Talablar
- RouterOS 6 yoki 7 ishlovchi MikroTik router
- Administrator huquqi bilan terminalga kirish
- 192.168.1.0/24 ichki tarmoq
- Port 4495 TCP va UDP ochiq
- Xodim kompyuterlarida monitoring dasturi o‘rnatilgan
Sozlash bosqichlari
1. Port 4495 ga keluvchi aloqalarni belgilash
/ip firewall mangle bo‘limida TCP va UDP protokollar uchun dst-port="4495" ga mos keluvchi aloqalar conn-employeespro nomli connection‑mark bilan belgilangan. Bu qoidalar prerouting zanjirida ishlaydi va keyingi paketlarni ajratish uchun asos bo‘ladi.
The application allows you to see what is currently displayed on an employee computer monitor. This way you can quickly discover if your employees are doing the tasks they are paid for. All employee computer screens can be displayed at once since they can be displayed as thumbnails with configurable size.
Port forward Net Monitoring for employees pro:
TCP/UDP: 4495/4495
/ip firewall mangle
add action=mark-connection chain=prerouting dst-port="4495" new-connection-mark=conn-employeespro protocol=tcp
add action=mark-connection chain=prerouting dst-port="4495" new-connection-mark=conn-employeespro protocol=udp
add action=mark-packet chain=prerouting connection-mark=conn-employeespro new-packet-mark=employeespro_pkt-up passthrough=no src-address=192.168.1.0/24
add action=mark-packet chain=prerouting connection-mark=conn-employeespro dst-address=192.168.1.0/24 new-packet-mark=employeespro_pkt-down passthrough=no
Credit: www.o-om.com2. Belgilangan aloqalar asosida paketlarni up/down ga ajratish
Yuqoridagi connection‑markga ega aloqalar uchun paketlar src-address=192.168.1.0/24 bo‘lsa employeespro_pkt-up, dst-address=192.168.1.0/24 bo‘lsa employeespro_pkt-down packet‑mark bilan belgilangan. Bu paket‑belgilar monitor dasturiga yo‘nalish va yo‘nalish teskari ma’lumotni uzatadi.
The application allows you to see what is currently displayed on an employee computer monitor. This way you can quickly discover if your employees are doing the tasks they are paid for. All employee computer screens can be displayed at once since they can be displayed as thumbnails with configurable size.
Port forward Net Monitoring for employees pro:
TCP/UDP: 4495/4495
/ip firewall mangle
add action=mark-connection chain=prerouting dst-port="4495" new-connection-mark=conn-employeespro protocol=tcp
add action=mark-connection chain=prerouting dst-port="4495" new-connection-mark=conn-employeespro protocol=udp
add action=mark-packet chain=prerouting connection-mark=conn-employeespro new-packet-mark=employeespro_pkt-up passthrough=no src-address=192.168.1.0/24
add action=mark-packet chain=prerouting connection-mark=conn-employeespro dst-address=192.168.1.0/24 new-packet-mark=employeespro_pkt-down passthrough=no
Credit: www.o-om.comTekshirish
/ip firewall mangle bo‘limida conn-employeespro connection‑mark va employeespro_pkt-up/employeespro_pkt-down packet‑marklar mavjudligini tekshiring.
Diqqat:
- Bu sozlamalar maxsus monitoring maqsadida, maxfiylik siyosatiga rioya qiling.
- Port 4495 ni internetga ochish xavfsizlik xavfini oshirishi mumkin.
- Mangle qoidalarini qo‘shishdan oldin tarmoq diagramini tekshiring.
Xulosa
Mangle va port forward yordamida xodim ekranlarini real vaqt monitoring qilish mumkin. Sozlamani sinab ko‘ring va ehtiyojga ko‘ra moslang.
Manba: Mangle and Port Net Monitoring for employees pro — mikrotiktool.github.io
