Blocking sites and other stuff

RouterOS Beginner Basics
1

Ok, I’m new with this thing so please be nice and clear oh and my English is terrible.
I bought a 2011uias and i’m testing it, before use it.
I have 3 wan:
WAN 1: 18mbps (have 3 adsl balanced with TP-Link 470+, one of them is Static IP and I need it for some specific users), This ADSL lines are in “other” building, so i have no way to bring them individually. Wireless Access point works really good.
WAN 2: 5mbps (Fiber connection)
WAN 3: 2mbps (Fiber connection)

In my test I only use WAN1 in ethernet1, because I canno’t leave users without internet while testing this shit
I set up the mikrotik in 172.16.0.1 and will route in that range (this was no trouble at all)
The Mikrotik automatically set up a bridge interface for WAN1, still need route some users traffic trough Static IP included in WAN 1 (I really don`t know how to do this) Virtual Interface maybe?
In the other hand I need block Youtube and Facebook in all users but one (Social Media Manager).
I try With Layer 7 Firewall and works like a charm but some people say is resource heavily and having in mind that I have 250+ devices connected i need to test some other shit.

IP blocking sounds great if there is a way to obtain and import a list of Youtube and Facebook addresses into the MK.

2

Firewall address list supports domain names and dynamically adds IP entry to same address list.

Provided you use the Mikrotik as the DNS server it will always server up the same IP address/s of the specified domains and subsequently drop the traffic


Add address to block as follows

 ip firewall address-list add address=facebook.com list=blocked




 ip firewall address-list add address=www.facebook.com list=blocked

etc

Then address address to exclude

 ip firewall address-list add address=<IP of device not to block here> list=NoBlock

then add a new firewall rule to drop the traffic except from the NoBlock list and make sure it’s in the right position in your firewall rules

 ip firewall filter add chain=forward dst-address-list=blocked src-address-list=!NoBlock action=drop