Community discussions

MikroTik App
 
rotten777
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 99
Joined: Thu Dec 17, 2009 5:21 am

General question about filtering web traffic

Thu Dec 17, 2009 5:23 am

I understand there's a proxy built into RouterOS but I'm curious as to the content filtering aspect. I'd like to be able to filter generally non-work friendly sites but also be able to block specific sites I add. Is this a function of the latest versions? I am ready to purchase quite a few routers but I need to ensure they're able to do this.

Cheers
 
roadracer96
Forum Veteran
Forum Veteran
Posts: 730
Joined: Tue Aug 25, 2009 12:01 am

Re: General question about filtering web traffic

Thu Dec 17, 2009 6:00 am

OpenDNS
 
rotten777
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 99
Joined: Thu Dec 17, 2009 5:21 am

Re: General question about filtering web traffic

Thu Dec 17, 2009 6:01 am

OpenDNS
A-ha!

Thanks!!!
 
roadracer96
Forum Veteran
Forum Veteran
Posts: 730
Joined: Tue Aug 25, 2009 12:01 am

Re: General question about filtering web traffic

Thu Dec 17, 2009 6:16 am

FWIW, I use both.

For busines systems, I block all, require using proxy, and allow just select sites using the proxy. For hotspot systems. I redirect to the proxy, but use OpenDNS. If they get to the block.opendns.com website because they tried to go to a porno site, they get redirected to www.disney.com via the proxy redirect feature.

It works in tandem. :D
 
Pada
Member Candidate
Member Candidate
Posts: 150
Joined: Tue Dec 08, 2009 11:37 pm
Location: South Africa, Stellenbosch

Re: General question about filtering web traffic

Thu Dec 17, 2009 10:13 am

Haha brilliant, I love the http://www.disney.com redirection. I never knew it was as simple as using another DNS server to block non-work content.

For those of you that didn't know where to get started with the OpenDNS blocking, see this guide/support article: http://www.opendns.com/support/article/116

I'm just curious: what happens if the users use another DNS server or setup their %windir%\system32\drivers\etc\hosts file to include the IP address of the site that is blocked by OpenDNS? Is the web proxy doing the DNS checking itself, denying any kind of override to the destination IP?
 
roadracer96
Forum Veteran
Forum Veteran
Posts: 730
Joined: Tue Aug 25, 2009 12:01 am

Re: General question about filtering web traffic

Thu Dec 17, 2009 9:35 pm

I redirect all UDP53 traffic to the mikrotik dns server. They could setup a vpn connection and run dns over that. Or some browsers cache dns requests so it could stll get through. But its good enough..

Who is online

Users browsing this forum: GoogleOther [Bot], jaclaz and 98 guests