Blocking Youtube

RouterOS General
1

hi friends

does anyone know how to configure for blocking youtube…
i want to make there is no one can access to youtube url…
youtube ip should be 208.65.153.251…

i hope there is someone can help me for this problem
thank you..

2

use firewall or webproxy access lists

3

is this my configure correct ?

add chain=forward src-address=208.65.153.251/24 action=drop
add chain=forward dst-address=208.65.153.251/24 action=drop

4

you should use /32 if you need one specific IP and not a subnet

5

oh my god so i have to change /24 to /32 ?

6

when i use this the youtube is blocking

add chain=forward src-address=208.65.153.251/24 action=drop
add chain=forward dst-address=208.65.153.251/24 action=drop

but when i use this, it isnt blocking

add chain=forward src-address=208.65.153.251/32 action=drop
add chain=forward dst-address=208.65.153.251/32 action=drop

7

large websites usually have more than one IP address, please get full list you have to drop.

it seems that with /24 you are blocking all of their ip addresses, and some more, so, to be more precise use some tools to get ip addresses of youtube

8 
C:\Users\Normunds>nslookup youtube.com

Non-authoritative answer:
Name:    youtube.com
Addresses:  208.65.153.253, 208.65.153.251
9

but when i use this

add chain=forward src-address=208.65.153.251/24 action=drop
add chain=forward dst-address=208.65.153.251/24 action=drop

it really blocking my IE to browse youtube..

so have i to reconfigure again ?

is this the right scripts ?

by the way,normis what program u use to know the ip of youtube ?

10

ahh normis you again indulge to our fellow members

11

see above, you have to block more than one IP.

also you can use webproxy to deny access to the youtube website. configure an access list if you use webproxy, here are a few ideas (they talk about caching, but access list rules are very similar)

http://forum.mikrotik.com/t/caching-youtube/11660/1

12

well actually i want permanently block youtube ip,so there is no one buffering…but i want to block more ip like song2play.com.layartancap.com, etc but i need a prog that fast find ip

is it nslookup is a prog or is just a command in dospromt ?

13

never mind, i already figure it out in dos promt

ok can help another problem ?

how to figure the local connection and international connection ?

14

RTM: http://wiki.mikrotik.com/wiki/How_to_apply_different_limits_for_Local/Overseas_traffic

15

i got problem here, how can i find my list of network belonging my ISP ?

16

ask your ISP …

17

OMG

hehehe…is there any solution for finding my ISP list network?

LOL

18

this list is usually public, you should ask local regulators. in baltics we have the NIC, in your country there should be a similar organization. look for the organization/government division which hands out IP spaces.

19

well im in indonesia…

urrrgggghhh my english really bad,so im not really get it what u mean..

20

http://www.apjii.or.id/
http://www.apnic.net

or contact Valens, our consultant:
http://www.mikrotik.com/consultants.html#linxIndonesia