redirect problem

RouterOS General
1

Good morning,

I hope you can help me to solve this problem. have this situation:

A Vodafone router (ISP) where mikrotik router is connected lan-wan connection.

mikrotik is connected to the vodafone router with address 192.168.1.2, while from the miktronik router there are two lan networks, one 192.168.10.0 and the other 192.168.20.0.

Internet connection work, i try to block same sites and work, I only have the problem to redirect to a specific url when, for example, they try go on facebook site.

I’ve tried it via web proxy but it doesn’t work for me. I use this settings:

web proxy: enable on port 8080
I went to “access” propertie and I created a rule where dst.host is www.facebook.com, action: deny, redirect to: www.google.it.

then I went to the firewall, then to nat, and entered another rule:

chain: dstnat, port: 80, protocol: tcp, action: redirection, to ports: 8080

where i wrong?

2

Port 80 is only plaintext http, but almost everything now uses encrypted https on port 443. Even worse for you, there’s this thing called HSTS, which is http header sent by server and it tells client to always use https for given website, even if user enters address with http. So any web browser that connected to FB just once won’t even try to use http for it anymore. And if you’re thinking about it, the answers is no, you can’t redirect https the same way you redirect http. Well, you can, but not to proxy in RouterOS, and if you use anything else, you will get certificate errors.

3

ok thanks for the information. You know another way for redirect?