Router Internet blocking for DHCP clients

Have an RB750, and wanting to write a rule that will allow anyone connecting via DHCP to only go to ONE website. Those assigned a static IP will have full Internet address.

Ideas?

Thanks!

James

Websites often (or mostly) embed content from many pages. How would you determine what exactly is “one website”? Other pages redirect you, some still use frames. This is more complicated than you would think.

Please clarify your final goal with this request, maybe we can suggest a better approach?

I’m wanting to block all sites except www.kcscout.com. I have a wireless access point attached to the router as well, and I have given it a static IP and asked the AP to hand out DHCP so wireless can have open Internet if we can make a rule to only allow access to the one website. Within the site, there are many traffic cameras, I am not sure how the website is built, if it has multiple IPs, frames, etc.

In that case it’s easy. Make the DHCP give out a certain IP range which is different from the one that static IP users use. Then make firewall rule for this address range, to allow IP address of kcscout.com and deny everything else (two rules in Firewall Filter)

Okay, so I pinged www.kcscout.net and get 63.172.177.35 as the IP I get the ping response from. This site has a map with all the active cameras that you can monitor live video feed. When you click on a camera, it opens stays on the same page, but the “box” on the website changes, is there a way or a need to see if I can find the IP for that feed, or since it’s embedded in www.kcscout.net is it even needed?

All of the camera feeds seem to be coming from this site:
http://pub2.camera.trafficland.com/image/live.jpg?system=kcscout&webid=5522&pubtoken=166af379a40a917041671cdb327774ef&r=0.9570034695789218

Which according to my DNS server has this address:

trafficland.com 209.222.142.102
pub2.camera.trafficland.com 209.222.142.101

Thanks a lot for checking that out. I am truly a “beginner” when it comes to this, my first Microtik router.

Is there a way to find out the info you sent me without having a DNS server to log into and check?

James

If you have a decent web browser (like Chrome), you can simply right click that camera image, and choose “inspect element”. It will show you the full source of that image. That is what I pasted. Then I simply pinged that address. Both with pub2.camera in front, and without. I did not use any special tools or access to DNS servers.

That’s good to know, thanks for passing it along. I am using Safari on the Mac - will have to see if it does something similar.

If you have the Develop option enabled, then it does the same: