Firewall filter content

noza · June 24, 2013, 1:19pm

Can I add a lot of words on CONTENT
For example:
Content: facebook youtebe …

cbrown · June 24, 2013, 11:37pm

Yes but it will block ANY page with those words on them.

noza · June 25, 2013, 6:34am

can you show me how can i do this ?

noza · June 26, 2013, 7:02pm

can anyone tell me how to add many words in content ?

c0d3rSh3ll · June 27, 2013, 4:50am

I think is not possible, I tested many method and not working. With a simple word is working

ahmedramze · June 27, 2013, 11:43am

Better to switch to L7 application protocol.

its work like proxy setting

/ip firewall layer7-protocol
add name=rdp regexp="rdpdr.*cliprdr.*rdpsnd"

you can use wildcard like * & $ etc. to define your rule.

noza · June 28, 2013, 2:50pm

i have make l7 with this code ^.+(facebook|youtube|).*$ but, with https still connecting facebook

Sob · June 28, 2013, 9:27pm

That little “s” in https stays for secure, i.e. encrypted, i.e. unreadable by anyone on the way. And as you see, it works great.

mixig · June 30, 2013, 2:50pm

I added addresses list “Facebokk” and block everything with destination address list, every month or two i go and check is there any new subnet : http://bgp.he.net/search?search[search]=facebook&commit=Search

/ip firewall address-list
add address=74.119.76.0/22 disabled=no list=Facebook
add address=69.63.184.0/21 disabled=no list=Facebook
add address=69.63.176.0/24 disabled=no list=Facebook
add address=69.63.176.0/21 disabled=no list=Facebook
add address=69.171.255.0/24 disabled=no list=Facebook
add address=69.171.240.0/20 disabled=no list=Facebook
add address=69.171.239.0/24 disabled=no list=Facebook
add address=69.171.224.0/20 disabled=no list=Facebook
add address=66.220.159.0/24 disabled=no list=Facebook
add address=66.220.152.0/21 disabled=no list=Facebook
add address=66.220.144.0/21 disabled=no list=Facebook
add address=31.13.96.0/19 disabled=no list=Facebook
add address=31.13.86.0/24 disabled=no list=Facebook
add address=31.13.85.0/24 disabled=no list=Facebook
add address=31.13.84.0/24 disabled=no list=Facebook
add address=31.13.83.0/24 disabled=no list=Facebook
add address=31.13.82.0/24 disabled=no list=Facebook
add address=31.13.81.0/24 disabled=no list=Facebook
add address=31.13.80.0/24 disabled=no list=Facebook
add address=31.13.79.0/24 disabled=no list=Facebook
add address=31.13.78.0/24 disabled=no list=Facebook
add address=31.13.77.0/24 disabled=no list=Facebook
add address=31.13.76.0/24 disabled=no list=Facebook
add address=31.13.75.0/24 disabled=no list=Facebook
add address=31.13.74.0/24 disabled=no list=Facebook
add address=31.13.73.0/24 disabled=no list=Facebook
add address=31.13.72.0/24 disabled=no list=Facebook
add address=31.13.71.0/24 disabled=no list=Facebook
add address=31.13.70.0/24 disabled=no list=Facebook
add address=31.13.69.0/24 disabled=no list=Facebook
add address=31.13.68.0/24 disabled=no list=Facebook
add address=31.13.66.0/24 disabled=no list=Facebook
add address=31.13.65.0/24 disabled=no list=Facebook
add address=31.13.64.0/24 disabled=no list=Facebook
add address=31.13.64.0/19 disabled=no list=Facebook
add address=31.13.24.0/21 disabled=no list=Facebook
add address=204.15.20.0/22 disabled=no list=Facebook
add address=74.119.76.0/22 disabled=no list=Facebook
add address=69.63.184.0/21 disabled=no list=Facebook
add address=69.63.176.0/24 disabled=no list=Facebook
add address=69.63.176.0/21 disabled=no list=Facebook
add address=69.171.255.0/24 disabled=no list=Facebook
add address=69.171.240.0/20 disabled=no list=Facebook
add address=69.171.239.0/24 disabled=no list=Facebook
add address=69.171.224.0/20 disabled=no list=Facebook
add address=66.220.159.0/24 disabled=no list=Facebook
add address=66.220.152.0/21 disabled=no list=Facebook
add address=66.220.144.0/21 disabled=no list=Facebook
add address=31.13.96.0/19 disabled=no list=Facebook
add address=31.13.86.0/24 disabled=no list=Facebook
add address=31.13.85.0/24 disabled=no list=Facebook
add address=31.13.84.0/24 disabled=no list=Facebook
add address=31.13.83.0/24 disabled=no list=Facebook
add address=31.13.82.0/24 disabled=no list=Facebook
add address=31.13.81.0/24 disabled=no list=Facebook
add address=31.13.80.0/24 disabled=no list=Facebook
add address=31.13.79.0/24 disabled=no list=Facebook
add address=31.13.78.0/24 disabled=no list=Facebook
add address=31.13.77.0/24 disabled=no list=Facebook
add address=31.13.76.0/24 disabled=no list=Facebook
add address=31.13.75.0/24 disabled=no list=Facebook
add address=31.13.74.0/24 disabled=no list=Facebook
add address=31.13.73.0/24 disabled=no list=Facebook
add address=31.13.72.0/24 disabled=no list=Facebook
add address=31.13.71.0/24 disabled=no list=Facebook
add address=31.13.70.0/24 disabled=no list=Facebook
add address=31.13.69.0/24 disabled=no list=Facebook
add address=31.13.68.0/24 disabled=no list=Facebook
add address=31.13.66.0/24 disabled=no list=Facebook
add address=31.13.65.0/24 disabled=no list=Facebook
add address=31.13.64.0/24 disabled=no list=Facebook
add address=31.13.64.0/19 disabled=no list=Facebook
add address=31.13.24.0/21 disabled=no list=Facebook
add address=204.15.20.0/22 disabled=no list=Facebook
add address=173.252.96.0/19 disabled=no list=Facebook
add address=173.252.70.0/24 disabled=no list=Facebook
add address=173.252.64.0/19 disabled=no list=Facebook

noza · July 3, 2013, 9:31pm

tnx mixig …
can i give same IP to access facebook ?