Hello.
I used mikrotik “hAP ac lite” to distribute the Internet to the family.
If my son has good grades in school, he gets Internet without limits.
If the grades are bad - he gets access only to sites from the white list.
I made firewall rules and they work great, but I have to manually enable or disable these rules in not easy interface.
It’s not very convenient.
Please advise me how to make a simple interface to enable or disable firewall rules.
If your son doesn’t have an unlimited data plan on his mobile, you’re good; if he does, he’ll just learn that he can outsmart you.
I would create two scripts, one enabling the rules and the other one disabling them, and run them from a command line login. But if you are a click-only guy, you may want to add a dedicated user, use the “Design Skin” feature to restrict access to WebFig to only a single configuration page (like ip->firewall->address-list), and assign that sking to the dedicated user.
So whenever you log in as that user, you’ll have the disable button for the address list item staring at you right after login.
Or yet another possibility - you can schedule, for a periodical run every 10 seconds or so, a script which checks who is logged in and depending on it, it modifies the configuration by adding a dynamic address-list item effectively enabling some rule in the firewall without rewriting the configuration (dynamic address list items are stored in the RAM only).
So when you log in as a read-only user Permit with an appropriate password and stay logged for long enough for the script to run, you’ll enable the permissive rule; if you log in as user Forbid, you’ll disable the permissive rule. You can even set the same password for both to make your life easier.