Hi,
this blocks FB for everybody:
/ip firewall address-list
add address=66.220.144.0/21 comment="Facebook block AS32934" disabled=no list=\
Block-Facebook
add address=66.220.152.0/21 disabled=no list=Block-Facebook
add address=66.220.159.0/24 disabled=no list=Block-Facebook
add address=69.63.176.0/21 disabled=no list=Block-Facebook
add address=69.63.184.0/21 disabled=no list=Block-Facebook
add address=69.171.224.0/20 disabled=no list=Block-Facebook
add address=69.171.239.0/24 disabled=no list=Block-Facebook
add address=69.171.240.0/20 disabled=no list=Block-Facebook
add address=69.171.255.0/24 disabled=no list=Block-Facebook
add address=74.119.76.0/22 disabled=no list=Block-Facebook
add address=204.15.20.0/22 disabled=no list=Block-Facebook
/ip firewall filter
add action=reject chain=forward comment="deny Facebook" disabled=no \
dst-address-list=Block-Facebook reject-with=icmp-network-unreachable \
place-before=0
or you can select who can’t access (list is same):
/ip firewall filter
add action=reject chain=facebook comment="deny Facebook" disabled=no \
dst-address-list=Block-Facebook reject-with=icmp-network-unreachable
add action=jump chain=forward disabled=no jump-target=facebook \
place-before=0 src-address=1.2.3.0/24
....
List of prefixes you can get http://bgp.he.net/AS32934#_prefixes and http://bgp.he.net/AS32934#_prefixes6 - i need to update for IPv6 day.
–
Petr