how to block website

RouterOS Beginner Basics
1

hi every body

i have RB 433AH
i wont to know how to block :frowning: websites

thank you inadvance

plz can you help me ?
2

You can block an URL by using the Proxyserver in RouterOS…
Or just block the IP’s of a website by using the firewall filter in RouterOS, and just drop trafic to that IP.

3

create addresslist of sites that you want to block.
now add dst-nat where dst-addresslist is the addresslist of the block sites and and in action choose dst-nat in, to address put 127.0.0.1

;;; dstnat unwanted sites
chain=dstnat action=dst-nat to-addresses=127.0.0.1 
dst-address-list=restricted sites

or you can also do that using the firewall filter in RouterOS as mentioned by QpoX
or you can also do via webproxy
hth

4

thank you for your replay friends
but i wont the proxy blocking
but could you kindly show me the steps with photo

Best Regards

5

[toor@extreme] /ip proxy access> export

mar/16/2009 11:44:07 by RouterOS 3.20

software id = 4H1M-LTT

/ip proxy access
add action=deny comment="" disabled=no dst-host=porn
add action=deny comment="" disabled=no dst-host=sex
add action=deny comment="" disabled=no dst-host=xxx
add action=deny comment="" disabled=no path=porn
add action=deny comment="" disabled=no dst-host=!badoo path=sex
add action=deny comment="" disabled=no path=xxx
[toor@extreme] /ip proxy access>

http://www.mikrotik.com/testdocs/ros/3.0/pnp/proxy_content.php#.4 --> here you have explanetion of the sintax.

Remember that you have to do setup of the webproxy. [and trasparent mode if you want]

6

After blocking the porn, sex sites in web proxy as indicated, i want a situation where anyone dat visits the forbidden site or blocked sites, it will display a custom message to the person.

ERROR: Forbidden

While trying to retrieve the URL http://www.google.com/search?q=xxx&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a:

  • Access Denied.

Instead of displaying above, it will display like, please dont try such sits here, they will not open

7

http://wiki.mikrotik.com/wiki/Manual:IP/Proxy#Access_List

redirect-to (string; Default: ) In case access is denied by this rule, the user shall be redirected to the URL specified here

8

Thanks fewi for your response,
are u saying that if i just put this string “please dont try such sites here, they will not open. Thanks” in the redirect-to , it will display it as I put it there.

I need at least a best option to achieve this. Fewi, You can pm at obinna4god@yahoo.com so that I can ask you some other things are relate to MT.

Thanks

9

No. As the manual clearly states you put a URL there. A URL is the kind of thing you would type into your browser address bar.

So the steps are:

  1. Procure web server
  2. Make website that displays whatever you want it to
  3. Figure out URL to get to that website you created
  4. Drop URL into proxy configuration
10

Thanks,
As sson as i get it will try to implement it

11

Hi,

I want to block the Porn Sites and other Ports then 80 only for hotspot users, can any one suggest how it is possible?? The same user id and password sholuld require to work when they connect with PPPoE Dialer and allow all website also, suggest how can we impliment the same


Nishit

12

Blocking lots of sites via the proxy is unfeasible.

Use OpenDNS for DNS, and set up the account to not permit adult sites.

Then destination NAT all Hotspot DNS traffic to OpenDNS, and let PPPoE users use ‘full view’ DNS servers so they have access to everything.

13

Hi,

I created my open dns account and done require configuration, can you suggest how can i configure on Mikoritk.