I am trying to block Instagram on my MikroTik router; I successfully blocked the Instagram website on my computer, but the Instagram app on my mobile phone remains unblocked and accessible. Please help me resolve this issue, and if there is a script available to block the Instagram app, please let me know.
thanks
taufiq
Hi,
It's impossible with MT devices.
You need a proxy that could spy on each encrypted connection as most of communication is nowadays hidden in https traffic so you have to be able to decrypt it and encrypt back before passing to WAN.
Even DNS queries are not seen by router as secured connections are started to typical addresses eg. 8.8.8.8, 1.1.1.1, 9.9.9.9 and you cann't forbid them. When such a neutral connection is established then YT, FB, INSTA etc connect to dozens CDN based servers to pull data and there is no way to block them as they serve most of internet content and even you block some addresses then you could cut off the wanted traffic as being served from the same addressess.
Search the forum for "block youtube" "or "block facebook" topics.
Other more expensive routers with expensive subscriptions will allow you to do what you wish.
We espouse better parenting as a cost-efficient solution, 
Look for UTM / NGFW solutions which are, as Anav wrote, not cheap and need renewing licence as antivirus and many other security solutions.
Difficult to do, you would need a NGFW which decrypts and inspects https-traffic. Fot this, you need to deploy a certificate on every device (or the encryption in https would be really bad 
).
Try to define on every device your own DNS-resolver and try to block Instagram there. If you dont have the control about the devices it is not possible (because either with a NGFW you need to deploy a cert or you need to set your own DNS-resolver).
If you block via IP, you would have to make rules so broad, you would block a lot more than only Instragm. If we talk about your kids, try to install some kid-control on the end-devices. For adults, let them do whatever they want, we are not north-korea...
If your router aupports containers, run AdGuard, and point all clients to that DNS, and let AdGuard do AdGuard things . . .
This capability is inherent in AdGuard - just flip the toggle for InstaGram..
(If your users are "crafty", they may set a hard DNS server, which will bypass this. Depending on your situation, you could also prohibit forwarding DNS ports . . . If casual, typical DHCP based users, this should do the trick.)
Not to mention the massive amounts of crap that AdGuard will keep off your network!