Preventing some users on my network access to facebook

Hello
I have a mikrotik750gl router and i want to prevent access to some of my computers to facebook,but not all. Computers have static ip

Example: i have computers from 10.94.0.1 to 30
I want to block access to http://www.facebook.com and https://www.facebook.com for all except 10.94.0.8

You should use Webproxy.

http://wiki.mikrotik.com/wiki/Manual:IP/Proxy

If i understood correctly, in winbox i have to head to IP>WEB PROXY and configure this, correct ?

Could you please not spam? You have two identical topics in both General and Basics.

sorry i thought the second is in a more appropriate subforum, please merge my topics

Yup,
then you should config transparent proxy and then enjoy blocking :smiley: :smiley:

This is very complicated, either I have no access from a certain computer to internet, or i have no access to internet from all computers.
Can you guide me in a few steps how to prevent certain ip access to facebook. Appreciate you help

web proxy wont work transparently because facebook uses https.

any idea how to solve this?
i want to block some computers on my ip network 10.94.0.1 - 30 , except 8

I have no idea about that, because in my country facebook is blocked :smiley: :smiley: :smiley:

but you should note that by some software like Hotspot shield or Freegate you can bypass everything!!!

but::

in winbox:
IP/firewall/ L7 protocols

Add new L7 protocol and name it like: “facebook blocking”. and add this code as RegeXP:

^.+(facebook.com).*$

then go to Firewall rule and add new rule:

chain: forward
protocol: tcp
dst-port: 80,443
layer7protocol: “facebook blocking” (in advanced mode)
action: drop


and you should get rid of facebook, without webproxy

Hello,

take a look at this thread and adapt it for your configuration : https://aacable.wordpress.com/2014/02/11/blocking-httphttps-facebook-via-automated-address-list/

Bests regards,

no success so far, anyone else ?