Community discussions

MikroTik App
 
temka
just joined
Topic Author
Posts: 3
Joined: Thu Mar 21, 2013 7:52 am

How to control internet with Layer7 protocol

Thu Mar 21, 2013 8:30 am

Hello Guys

I need help. I'm using Routerboard 1100AHx2 in Head office and connecting with IPsec tunnel to our 21 branches. Our branches have Routerboard450G. So i have to control our internet using and must deny some pages like youtube , facebook and other. Now i'm using Webproxy but that's not good enough. So that i want to use layer7 protocol but i can't configure it.

i hope someone help me and thank you so much
 
FutileNetworks
newbie
Posts: 36
Joined: Tue Jan 15, 2013 9:14 pm

Re: How to control internet with Layer7 protocol

Thu Mar 21, 2013 10:30 am

Hello Guys

I need help. I'm using Routerboard 1100AHx2 in Head office and connecting with IPsec tunnel to our 21 branches. Our branches have Routerboard450G. So i have to control our internet using and must deny some pages like youtube , facebook and other. Now i'm using Webproxy but that's not good enough. So that i want to use layer7 protocol but i can't configure it.

i hope someone help me and thank you so much
Even if you setup layer 7 rules to block these websites how will you stop users going to https://www.google.com or https://www.facebook.com ? Will you block all port 443 traffic?
 
temka
just joined
Topic Author
Posts: 3
Joined: Thu Mar 21, 2013 7:52 am

Re: How to control internet with Layer7 protocol

Thu Mar 21, 2013 10:43 am

Hello Guys

I need help. I'm using Routerboard 1100AHx2 in Head office and connecting with IPsec tunnel to our 21 branches. Our branches have Routerboard450G. So i have to control our internet using and must deny some pages like youtube , facebook and other. Now i'm using Webproxy but that's not good enough. So that i want to use layer7 protocol but i can't configure it.

i hope someone help me and thank you so much
Even if you setup layer 7 rules to block these websites how will you stop users going to https://www.google.com or https://www.facebook.com ? Will you block all port 443 traffic?


i don't know. But in Webproxy, i redirect port 443 to port 8080 and i can block these sites. So do you have a any idea for blocking HTTPS protocol with Layer7 rule?
 
FutileNetworks
newbie
Posts: 36
Joined: Tue Jan 15, 2013 9:14 pm

Re: How to control internet with Layer7 protocol

Thu Mar 21, 2013 10:54 am

Hello Guys

I need help. I'm using Routerboard 1100AHx2 in Head office and connecting with IPsec tunnel to our 21 branches. Our branches have Routerboard450G. So i have to control our internet using and must deny some pages like youtube , facebook and other. Now i'm using Webproxy but that's not good enough. So that i want to use layer7 protocol but i can't configure it.

i hope someone help me and thank you so much
Even if you setup layer 7 rules to block these websites how will you stop users going to https://www.google.com or https://www.facebook.com ? Will you block all port 443 traffic?


i don't know. But in Webproxy, i redirect port 443 to port 8080 and i can block these sites. So do you have a any idea for blocking HTTPS protocol with Layer7 rule?
That was my point, you can't block websites using https/443 as it's encrypted, so you would have to block the IP addresses and keep the list up to date. Using web proxy should be good enough for blocking port 80 sites http://wiki.mikrotik.com/wiki/How_to_Bl ... sing_Proxy
 
werslybardales
just joined
Posts: 1
Joined: Sat Mar 23, 2013 5:00 am

Re: SOLVED How to control internet with Layer7 protocol - SO

Sat Mar 23, 2013 5:14 am

(usa tu traductor)

hola...

la respuesta la puedes encontrar en:

http://mikrotik-learning.blogspot.com/2 ... U0dh1dn1fR

y Funciona muy bien.

lo que no he logrado es hacerlo funcionar solo para algunas IPs de la red.
 
SamWCL
Frequent Visitor
Frequent Visitor
Posts: 75
Joined: Mon Apr 20, 2009 1:18 pm
Location: Nelson, NZ

Re: SOLVED How to control internet with Layer7 protocol - SO

Sat Mar 23, 2013 12:44 pm

(usa tu traductor)

hola...

la respuesta la puedes encontrar en:

http://mikrotik-learning.blogspot.com/2 ... U0dh1dn1fR

y Funciona muy bien.

lo que no he logrado es hacerlo funcionar solo para algunas IPs de la red.
This actually works, takes a bit to kick in though, only tested in chrome.

Who is online

Users browsing this forum: Google [Bot], GoogleOther [Bot], oskarsk, valyno and 44 guests