how to block websites via url

RouterOS Wireless Networking
1

hi,

I would like to know how can i block access to a specific website like…www.usbank.com…I know it should be done via proxy, but I can do it just with the port like blocking rapidshare pages with the port 53, but how can I do block a specific website?

thanks

2

http://wiki.mikrotik.com/wiki/How_to_Block_Websites_&_Stop_Downloading_Using_Proxy

Always search the wiki.

3

thanks for the link

4

i got a qst. if i olny want to block with this information but only i want to apply it to some specific ips? not to all the traffic… what do i need to do ???

5

In the section where you configure the firewall to redirect to the transparent proxy:

/ip firewall nat
add chain=dstnat protocol=tcp dst-port=80 action=redirect to-ports=8080

add logic to apply the rule only to the IP ranges you want to be filtered.

6

oks…you mean that i can add something like that:
/ip firewall nat
add chain=dstnat src-address=192.168.48.x/x protocol=tcp dst-port=80 action=redirect to-ports=8080

my qst is i got the range 192.168.48.0/22 and i need to block some ips from 192.168.49.x, its better if i made an address-list or something because some ips from other range needs to have all the traffic open… and i need to add some web-pages that they need for work. so i need to block all traffic except the pages that they need for work.. how can i do that…??
i got 3 different segments… first its for agents, second administrators, and third systems
first - ips = 192.168.48.x and 192.168.51.x
second = 192.168.49.x
third = 192.168.50.x
i need to block all the traffic for the first one.. done ..
i need to block some ips from the second ips..
and block all the traffic for the third.. done..
and i need to block all the https pages. and only add the pages that i need to work with.

7

You’re going to find that hard to implement with the built in proxy - it doesn’t support multiple ruleset applied to multiple groups. Your best bet would be to build a Squid proxy and use the parent-proxy feature of the built in proxy to pass all traffic to it. In Squid you can then have arbitrarily complex rules.

8

oks. so i need another program like squid… any body got a manual or something that can help me to configure squid on linux server…???
thanks for the other answers… =)