Hi all,
I am new to mikrotik and have just played with rb450g for 4 days.
Can someone tell me how to block Google Play Store so the users wont be able to download games?
Tried blocking some ports(5228), didnt work…
Thanks in advance
Hi,
Try with following filter rules
/ip firewall filter add action=drop chain=forward content=play.google.com disabled=yes dst-port=80,443 protocol=tcp
i would suggest a layer 7 filter with play.google.com
then add a filter rule to reject all packets going to any ip on port 53 and containing the layer 7 filter you created earlier.
the content option that user asaleh75 suggested would block any packet containing play.google.com, be it text, hyperlink etc.
Hi, You can read http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/L7 to know Layer 7.
Thanks for the tips,
i played around L7, with ‘youtube.com’ in the regexp.
HTTPS for youtube is blocked, and so is Play Store. (Weird)
Below is the filter ( Is this rule ok?)
[admin@RB450G] /ip firewall mangle> print
Flags: X - disabled, I - invalid, D - dynamic
0 X chain=prerouting action=mark-packet new-packet-mark=blockme passthrough=yes layer7-protocol=blockHTTPS
[admin@RB450G] /ip firewall> filter print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; Accept established connections
chain=input action=accept connection-state=established
1 ;;; Accept related connections
chain=input action=accept connection-state=related
2 ;;; Drop invalid connections
chain=input action=drop connection-state=invalid
3 X chain=input action=accept protocol=tcp src-port=443
4 ;;; UDP
chain=input action=accept protocol=udp
5 X ;;; L7 Block Https youtube, but PLAY STORE TOO
chain=forward action=drop packet-mark=blockme
6 ;;; From our private LAN
chain=input action=accept src-address=192.168.101.0/24
7 ;;; Log everything else
chain=input action=log log-prefix=“DROP INPUT”
8 ;;; Drop everything else
chain=input action=drop
\
in addition, this one not working..i can still browse and update my app
could try here http://bit.ly/1zxR32C