Block specific URL

RouterOS Scripting
1

Hi,

I would like to block specific URL using layer 7 regex. For example facebook.com/myprofile.
I was able to block facebook.com or youtube.com but not able figure out the regex for a specific profile in facebook.

Anyone successful in doing so?


Thanks,

2

This is not possible because this URL is sent encrypted (https) so you never get to see it in L7.

3

It’s not absolutely true.
Server name is send on tls header.
But all other information are encrypted.
Search for SNI Extension to the TLS. (Server Name Identification)

Enviado de meu SM-G800H usando Tapatalk

4

He already said he could block the server but he now wants to block a specific URL.
Impossible.

5

I block facebook for my portable devices by setting up a DNS server.

You have to enforce that only you DNS can be used. VPN can use a external DNS server so that will slip past you.

I block with DNSmasq using this three lines:

Geen standaard toegang tot Facebook Instagram Whatsapp

server=/facebook.com/fbcdn.net/facbook.com/fb.com/fbsbx.com/facebook.com.edgesuite.net/instagram.com/
server=/facebook.net/instagramstatic-a.akamaihd.net/instagramstatic-a.akamaihd.net.edgesuite.net/
server=/cdninstagram.com/tfbnw.net/whatsapp.com/fb.me/