how to deny https://www.youtube.com

i made it in webproxy but not this https://www.youtube.com , i try to add in webproxy
they can access the customers i mean

but http://www.youtube.com , i forbidden for customers it work
there a solution for that

https doesn’t go through webproxy. try blocking at dns with L7 rules. search the forum for many examples of that.

you can also block all the youtube ip addresses, if you can find all of their addresses

u can block … here is your solution

http://wiki.mikrotik.com/wiki/How_to_Block_Websites_%26_Stop_Downloading_Using_Proxy

https doesn’t go through webproxy

thank’s guys but some body know where i can find L7 for that

http://l7-filter.sourceforge.net/protocols
It may be useful but not for url.

I use “facebook” for regexp in layer 7 protocols. then in filter add rule which drops any request with “facebook”. so the users can’t open facebook.com also any search with content “facebook” :slight_smile:

thank’s bro

That could drop too much. You should specifically target facebook dns lookups.

I searched in forum and other websites but nothing achieved!!!
Can you show me some ?

BTW, I think this Topic http://forum.mikrotik.com/t/block-facebook/23780/1
Can be useful.

Something like this for the L7 rule:

/ip firewall layer7-protocol
add comment=“” name=youtube-dns regexp=“^.+(youtube.com|youtu.be|what.ever.other.urls.they.have).*$”

Something like this to apply the L7 rule to DNS:

/ip firewall filter
add action=drop chain=forward comment=“block youtube dns udp” disabled=no dst-port=53 layer7-protocol=youtube-dns protocol=udp
add action=drop chain=forward comment=“block youtube dns tcp” disabled=no dst-port=53 layer7-protocol=youtube-dns protocol=tcp

Note: The TCP/53 rule may not be needed. Does DNS ever actually use the TCP protocol?

I lthink with content is Gr8 block :slight_smile:


go to webpoxy → access

add : dst:www.youtube.com
method : deny
redirect:www.google.com

Did you real All posts? :wink:

thank you all

https does NOT go through webproxy!!!