hot to restrict web sites

im new one in mikrotik and im using mikrotik 2.9.6.i have a problem beacuse i don’t know how to restrict access to some sites (http://www.youtube.com,www.webalbania.com,etc).it is possible to restrict access writing http://www… or only thith IP adress.
pls help me
thnx

First Upgread 2.9.6 to latest version of Mikrotik.

For Blocking Websites,

you need to configure transparent WebProxy in that and after that you can deny websites in /access.

Please ready

http://wiki.mikrotik.com/wiki/How_to_make_transparent_web_proxy

ASHISH.

thnx ashish
but problem is how to configure this ,transparent WebProxy’’ ?
if you have ani eg.how to configure please tell me.
thnx again

Do u user Routerboard or PC .

PC

Use /ip web-Proxy

to configure

[admin@LAN Server] ip web-proxy> pr
enabled: yes
src-address: 0.0.0.0
port: 3128
hostname: “LAN-SERVER”
transparent-proxy: yes
parent-proxy: 0.0.0.0:0 <You can give IP of Parent Proxy, If you have>
cache-administrator: “ASHISH”
max-object-size: 4096KiB
cache-drive: system
max-cache-size: unlimited
max-ram-cache-size: unlimited
status: running
reserved-for-cache: 12898304KiB
reserved-for-ram-cache: 2048KiB

To make it Transparent

/ip firewall nat
0 ;;; Proxy Redirect
chain=dstnat in-interface=LAN protocol=tcp dst-port=80
action=redirect to-ports=3128

Please Block all the Incoming Traffic from Internet for Port 3128 to avoid Open Proxy.

/ip firewall filter

0 ;;; Proxy From Outside
chain=input in-interface=WAN src-address=0.0.0.0/0 protocol=tcp
dst-port=3128 action=drop.

Now to Drop Websites Use,

/ip web-proxy access

add dst-host=www.youtube.com action=deny

Try with this..It will work