How To Block youtube.com ???

RouterOS General
1

Hello, Please Help Me To Block youtube.com as my users cannot surf the site http://www.youtube.com.
I am using MT ROS 3.20 I would like to block it by regexp, but I don’t know how.
Help me please solve the problem.

Thanks
Regards Karapet Aznavuryan

2

do you use web-proxy?

3

Yes I Use Proxy, MT Proxy,

4 
/ip proxy access
add disabled=no dst-host=youtube.com action=deny
add disabled=no dst-host=*.youtube.com action=deny

http://www.mikrotik.com/testdocs/ros/3.0/pnp/proxy.php

5

Thanks for Reply

6

not work for me.

i am using mikrotik RT v3.30

1 WAN share internet no web proxy

i want to block the those website like youtube, facebook…

last time it worked for me by just used this /ip firewall filter> add chain=forward action=drop content=youtube

but now it didnt work for me dont kno why. please help.

7

The web proxy method is the best way to go.

8

but when i followed the instruction all redirected to mikrotik page.

9

Well, yes. That’s exactly how it works. If you want to redirect to something else use the ‘redirect-to’ parameter to the proxy access rule. Refer to the manual for details.

10

i followed this

http://wiki.mikrotik.com/wiki/How_to_Block_Websites_&_Stop_Downloading_Using_Proxy

but it block all… when i go to any websites it redirect me to local mikrotik.

11

Then post the output of “/ip proxy export”. The rules in that manual do not block everything.

12

the output of /ip proxy export

always-from-cache=no 
cache-administrator=webmaster 
cache-hit-dscp=4 
cache-on-disk=no 
enabled=no 
max-cache-size=none \
max-client-connections=600 
max-fresh-time=3d 
max-server-connections=600 
parent-proxy=0.0.0.0 
parent-proxy-port=0 port=8080 \
serialize-connections=no src-address=0.0.0.0
13

Uhm. That web proxy isn’t even enabled. There are no access rules to block anything.

14

can u please give me the correct configuration?

well, before i just add firewall rule chain forward and content drop it worked well. but dont kno what happen now.

Thanks

15

Straight from the link you posted yourself:

Enable the proxy:

/ip proxy
set enabled=yes
set port=8080

Make it transparent and make sure it isn’t open:

/ip firewall nat
chain=dstnat protocol=tcp dst-port=80 action=redirect to-ports=8080
/ip firewall filter
chain=input in-interface=<Your WAN Port> src-address=0.0.0.0/0 protocol=tcp dst-port=8080 action=drop

Now deny Youtube:

/ip proxy access
dst-host=www.youtube.com action=deny
16

i have followed yours above, but it still keep bring me to mikrotik login page.

17

what’s parent-proxy?!

i have v2.9.27

This method is compatible with this version 2.9.27?!

waiting

18

you should upgrade. it’s free: http://wiki.mikrotik.com/wiki/Upgrading_RouterOS

19

use any fast proxy setting from punchrocket.com or stayinvisible

20

i have v2.9.27

Yet another crook. Jeeze.