Article Title: Use RouterOS to block qqbench. Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source.
First, we must know how to log on to QQ:
UDP, destination port 8000 4000 = OICQ Client
TCP mode, destination port 80
VIP mode, destination port 443
QQ servers are divided into three types:
1. UDP 8000 Port Class 7: the fastest speed, the most server.
When QQ goes online, it will send UDP data packets to the seven servers, and select the one with the fastest response speed as the connection server.
Sz sz2: 61.144.238.145 146 156
Sz3 sz4 sz6 sz7: 202.104.129.20.254 252 253
Sz5: 61.141.194.203
2. tcp http connects two servers and uses HTTP port 80 to connect
The two server names start with tcpconn and the domain suffix is tencent.com.
Tcpconn tcpconn3 218.17.209.23
Tcpconn2 tcpconn4 218.18.95.153
Although there are four names, there are only two servers.
3. log on to the server as a VIP and use HTTP 443 for secure connection.
Server IP address 218.17.209.42
I can't choose to log on here because of the 2nd and 3 types. I just obtained the IP address and port through reverse query. As for the 1st types, I have gone through a detailed test, once these seven UDP servers are blocked, QQ cannot log on.
Nslookup-querytype = all www.tencent.com
218.18.95.165
202.96.170.188
202.104.129.246
61.144.238.htm
202.96.170.175
202.103.190.61
202.103.149.40
218.18.95.140
218.18.95.153
61.135.131.240
216.239.33.99
218.17.209.23
202.104.129.20.