Hello I have an mikrotik instaled on a pc. 2 network cards.
MikroTik RouterOS 2.7.14 version.
the thing i need help with is.
I have 10 ip classes.
192.168.100.0/24
…
192.168.110.0/24
I created a firewall rule to block facebook and youtube with scr address 0.0.0.0 dst address 0.0.0.0 this blocks everyone i want to make a rule that blocks just 1 ip class.
Second thing i want to ask is if it is possible to block “Counter Strike” from being played local and on the internet.
Sorry to the administrators is there is another thread about this.
thank you.
In routing 0.0.0.0 works like a wildcard that matches each and every IP address. which in your case means: block any source for any destination. define source address i.e. 192.168.100.0/24 as the subnet you want to disallow to access and IP address of the server you want to block access to. Or you may use regex to match at layer7.
You can take the same firewall rule and instead of the SRC address change that to an SRC address list and then add the subnets that way. Sorry, don’t know anything about Counterstrike.
ok got it thanks. now i have another problem https://www.facebook.com works. and i don`t have 7 - layer protocols to block it that way. as i mentioned Mikrotik OS 2.7.