I Want to Block all websites and allow few websites on IP

Hi all,

Currently i am using Mikrotik RB 450G, i want to block all websites except 1 or 2 websites for particular ip ex : 192.168.1.15, please help me to configure.

Thanks in Advance…

Hi,

in case your 2 websites have static IPs you might even skip Layer7 checks.

The rules should be pretty simple like that:

/ip firewall address-list
add address=ip1 comment="address of 1st allowed webservice" list=web-ok
add address=ip2 comment="address of 2nd allowed webservice" list=web-ok
/ip firewall filter
add chain=forward protocol=tcp dst-port=80 in-interface=intranet-if out-interface=isp-if dst-addresslist=!web-ok action=drop

I did not test this rules but I hope you get a rough idea how to do it.

Zap.

I tried but this is not help full…

Please someone ge me a good solutions..

Where are mikrotik experts?

I assume we need more information.
What is your configuration, what did not work with my example?

Zap.

what confiduration you want, i am newbie, please help me..

Hmm ok.

I assume you might not have changed the interface names of your router.

To get those names have a look at the output of

/interface ethernet export

There you get something like this:

set [ find default-name=ether2 ] comment=ether2 [b]name=intranet-if[/b]
set [ find default-name=ether1 ] comment=ether1 [b]name=isp-if[/b]

You probably have one interface where your uplink (ISP or modem) is connected and another, where your clients are on, right?

Zap.