i have used RouterOS firewall at a client location to allow a few of their corporate websites and Yahoo Mail and Google Mail.
everything is working fine but whenever a user tries to download a attachment in through Yahoo Mail it is not allowed.
no idea why is this happening. i have attached the screenshot of the rules print to this post…
I would guess the attachment is downloaded from a different server than what you have allowed.
how do i get hold of that server?
i tried to see the source… but YAHOO uses so many different servers its getting really difficult to get hold of it??
anyone else here facing any similar problems??
allow *.yahoo.com
when i connected my broad band connection through MicroTik RB 450 G Router, i am not able to access yahoo sites
allow it as DST-HOST??
ok got it… the answer is
allow DST HOST = :ymail
and LO!!! everything is working with Yahoo!
but now i am facing another issue… though the firewall is active and Facebook etc. is blocked… anyone accessing it from his personal mobile phone is able to access it…
rather i also want to block whatsapp etc… through the firewall…
bump:::
routeros firewall working great on the gateway…
but all android phone users on WiFi have full access to Facebook and Whatsapp… how can i block them??
help!! help!! for android…
users with android phones can access everything on internet…
Just Let em. Its a feature. 
A benefit to have android instead of stupid iphone devices. 
true… i also support android phones… 
i use one myself…
but as far as my clients go i have to give them a concrete solution on this issue…
normis!! help me with the problem please…
Wild guess is it because they are not using the proxy ?
well all port 80 traffic has been passed through the web proxy and its transparent…
still they can access websites from mobile and the same is blocked on their laptop.
can you do a packet dump on the firewall
sorry I am a newbie with routeros, this is the way I would do it on a linux box.
packet capture on the inside interface make sure they are coming through the firewall.
then craft a specific firewall rule place at the top of the forward chain, that just logs.
they check the proxy logs to see if the proxy is actually recording it.
The other thing, not sure you can transparent proxy https unless you have a certificate in the middle - that raises another set of problems.
the other thought is is the phone using wifi and not 3g
i m using transparent proxy…
no 3G… only WiFi… and i know routeros firewall is very strong… but its very complex to setup…
need to know how to get this thing through…
normis… where are you?