Page 1 of 1

Blocking access to google play store

Posted: Fri Sep 20, 2013 11:17 am
by sum1234
Hi all,
I am new to mikrotik and have just played with rb450g for 4 days.
Can someone tell me how to block Google Play Store so the users wont be able to download games?
Tried blocking some ports(5228), didnt work...
Thanks in advance

Re: Blocking access to google play store

Posted: Fri Sep 20, 2013 11:48 pm
by asaleh75
Hi,
Try with following filter rules
/ip firewall filter add action=drop chain=forward content=play.google.com disabled=yes dst-port=80,443 protocol=tcp

Re: Blocking access to google play store

Posted: Sat Sep 21, 2013 12:12 am
by deejayq
i would suggest a layer 7 filter with play.google.com
then add a filter rule to reject all packets going to any ip on port 53 and containing the layer 7 filter you created earlier.
the content option that user asaleh75 suggested would block any packet containing play.google.com, be it text, hyperlink etc.

Re: Blocking access to google play store

Posted: Sat Sep 21, 2013 1:18 pm
by asaleh75
i would suggest a layer 7 filter with play.google.com
then add a filter rule to reject all packets going to any ip on port 53 and containing the layer 7 filter you created earlier.
the content option that user asaleh75 suggested would block any packet containing play.google.com, be it text, hyperlink etc.
Hi, You can read http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/L7 to know Layer 7.

Re: Blocking access to google play store

Posted: Sun Sep 22, 2013 8:37 am
by sum1234
Thanks for the tips,
i played around L7, with 'youtube.com' in the regexp.

HTTPS for youtube is blocked, and so is Play Store. (Weird)

Below is the filter ( Is this rule ok?)
======================================
[admin@RB450G] /ip firewall mangle> print
Flags: X - disabled, I - invalid, D - dynamic
0 X chain=prerouting action=mark-packet new-packet-mark=blockme passthrough=yes layer7-protocol=blockHTTPS

[admin@RB450G] /ip firewall> filter print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; Accept established connections
chain=input action=accept connection-state=established

1 ;;; Accept related connections
chain=input action=accept connection-state=related

2 ;;; Drop invalid connections
chain=input action=drop connection-state=invalid

3 X chain=input action=accept protocol=tcp src-port=443

4 ;;; UDP
chain=input action=accept protocol=udp

5 X ;;; L7 Block Https youtube, but PLAY STORE TOO
chain=forward action=drop packet-mark=blockme

6 ;;; From our private LAN
chain=input action=accept src-address=192.168.101.0/24

7 ;;; Log everything else
chain=input action=log log-prefix="DROP INPUT"

8 ;;; Drop everything else
chain=input action=drop


======================================

Re: Blocking access to google play store

Posted: Sun Sep 22, 2013 8:46 am
by sum1234
Hi,
Try with following filter rules
/ip firewall filter add action=drop chain=forward content=play.google.com disabled=yes dst-port=80,443 protocol=tcp

in addition, this one not working..i can still browse and update my app

Re: Blocking access to google play store

Posted: Sat Jul 19, 2014 4:19 pm
by wardimore
could try here http://bit.ly/1zxR32C