RB433 firewall setting

I have RB433 with wireless mini pci, wirless mode=[station wds]. everything is working perfectly but I want to activate some firewall rules to block websites

for example to block facebook:

I did :

firewall filter chain: Forward Protocol : TCP Port:80 Content :www.facebook.com

BUT it is not working

still having the ability to access the website

looks like that rules are not activated or there is no firewall at all

and the requested URL are not passing through the rule

what did I miss?

Best regards

Did you try going to https facebook which your rule would not have worked for. Also, what is the config of your router. If you have ethernet interfaces bridged with your wlan then you will more than likely need to turn on “Use IP Firewall” in your bridge settings.

/interface bridge settings set use-ip-firewall=yes

But that is also not a good way to block facebook. Using Layer 7 you will get a bunch of false positives and block any website with even a facebook link on it. It is better to do something like this.

/ip firewall filter
add action=drop chain=forward comment="Block Facebook" dst-address=173.252.64.0/18
add action=drop chain=forward comment="Block Facebook" dst-address=204.15.20.0/22
add action=drop chain=forward comment="Block Facebook" dst-address=66.220.144.0/20
add action=drop chain=forward comment="Block Facebook" dst-address=31.13.64.0/18
add action=drop chain=forward comment="Block Facebook" dst-address=31.13.24.0/21
add action=drop chain=forward comment="Block Facebook" dst-address=69.171.224.0/19
add action=drop chain=forward comment="Block Facebook" dst-address=74.119.76.0/22
add action=drop chain=forward comment="Block Facebook" dst-address=103.4.96.0/22

Thank you very much for your help. but still not working. do i have to try another thing? thanks again
3.jpg
2.jpg
1.jpg

hi thanks for the help but still not working. any thing new?