can't block anything

RouterOS General
1

hi
i read the manual for blocking .mp3 .avi

i di this do block mp3

[admin@MikroTik] ip web-proxy access> print
Flags: X - disabled, I - invalid
0 ;;; block telnet & spam e-mail relaying
dst-port=23-25 action=deny

1 url=“add url=”:\\.mp\[3g\]$" action=deny" action=deny


it did’t block


help plz

and what the line be to block .avi and mpg and mpeg

2

Have u configured the Web Proxy Properly.
Please Forward the configuration..I will help u out.

Also Make sure that u have mentioned the Web-proxy IP and Port in your web-browser.

Web browser

Tools->Internet Options->Connections->LAN Settings
Enable Proxy Server Settings, Write down ur Proxy IP ana Port which u have configured in MT Web Proxy.

ASHISH.

3

thanx for ur replay

i cofigured the web proxy with these rules

[admin@MikroTik] ip proxy> print
enabled: no
port: 8080
parent-proxy: 0.0.0.0:1
maximal-client-connecions: 1000
maximal-server-connectons: 1000
[admin@MikroTik] ip proxy> ..
[admin@MikroTik] ip> web-proxy
[admin@MikroTik] ip web-proxy> print
enabled: yes
src-address: 0.0.0.0
port: 3128
hostname: “proxy”
transparent-proxy: yes
parent-proxy: 0.0.0.0:0
cache-administrator: “webmaster”
max-object-size: 15096KiB
cache-drive: system
max-cache-size: unlimited
max-ram-cache-size: unlimited
status: running
reserved-for-cache: 13447168KiB
reserved-for-ram-cache: 2048KiB


firewall
chain=dstnat src-address=192.168.100.0/24 protocol=tcp dst-port=80 action=redirect to-ports=3128


i didn’t put any ip or port in web-browser for users

4

i think this is your problem:

[admin@MikroTik] ip proxy> print
enabled: no

:slight_smile:

5

Maybe i can help u. ur configuration in ip - web proxy is right. You must see this rule to block mp3 (watch the order):

  1. ip web proxy access> add url=“:\.mp[3g]$” action=deny
  2. ip web-proxy access> add src-address=x.x.x.x/x action=allow // specific ip u want to allow download mp3

and then, don’t forget to do this :

  • ex : 3128 - port of your proxy
    ip-firewall-filter
  • chain=input dst-address=“your ip” protocol=tcp dst-port=3128 (for example)
    action=drop // deny rely to your ip port 3128

ip firewall-nat

  • chain=dstnat in-interface=Internal protocol=tcp dst-port=80
    action=redirect to-ports=3128


    i wish u luck, :laughing:
6

you must ENABLE webproxy

7

ENABLE it for god sake …

8

sorry, I see you have enabled webproxy. but your rule looks incorrect, too many slashes. you should type it like in this example:

[admin@MikroTik] ip web-proxy access> add url=“:\.mp[3g]$” action=deny

ferry already explained everything