how to block pictures (jpg, jpeg,pnp, etc)

RouterOS Beginner Basics
1

Dear sir,

How to block the pictures on each website the user visitng,?

Thanks

2

Follow this guide to set up web proxy:
http://wiki.mikrotik.com/wiki/How_to_Block_Websites_&_Stop_Downloading_Using_Proxy

Add rules to block different kind of picture files:

/ip proxy access
add path=*.jpg action=deny 
add path=*.jpeg action=deny 
add path=*.png action=deny 
add path=*.gif action=deny
3

/ip firewall filter
add action=drop chain=forward comment=“” content=.jpg disabled=no
add action=drop chain=forward comment=“” content=.JPG disabled=no

4

do not use the previous posts syntax without knowing the full effect of it. you will be searching every single packet for the content=, so you probably want to limit it to port 80 and only on PSH packets. You dont want to be searching DNS queries, FTP transfers, etc and causing issues with those. Also, you will have to make sure this is before the Established/Related rules.

/ip firewall filter
add action=drop chain=forward comment=“” dst-port=80 protocol=tcp tcp-flags=PSH content=.jpg disabled=no

… hopefully I explained that so you understand why you never want to use content= without any additional filters.

5

also be aware that pictures can use any extension, not just .jpg and .gif. How about ‘image.aspx?image=dynamicimage’, etc. you probably need to search for mime types instead?

6

changeip it’s on the right way.. the best way to block/deny content it’s with a squid proxy server and squidguard… runnig parallel to mikrotik an receiving all the port 80 redirected requests.