Community discussions

MikroTik App
 
User avatar
krisan
newbie
Topic Author
Posts: 28
Joined: Wed Aug 04, 2010 11:06 pm

Blocking social website in mikrotik

Tue Nov 19, 2013 7:03 pm

greetings to everyone in the forum.
I have been trying to block social website on my mk router (RB493) but i cannot achieve it. i have used L7 to block facebook, though it worked for only "www.facebook.com" but could not work on https://facebook.com, as well as linkdin and twitter.
Please i need your various contributions on how i can fix this problem.
Thanks.
 
User avatar
rickfrey
Trainer
Trainer
Posts: 610
Joined: Sun Feb 14, 2010 11:41 pm
Location: Van, Texas
Contact:

Re: Blocking social website in mikrotik

Tue Nov 19, 2013 8:48 pm

Use the web proxy, its a lot easier :-) You can find a very simple example here: http://www.tiktube.com/video/GChD3alGgl ... sDlEonpKD=
Launch your company forward with professional training!
http://rickfreyconsulting.com/product-c ... raining-2/
 
User avatar
krisan
newbie
Topic Author
Posts: 28
Joined: Wed Aug 04, 2010 11:06 pm

Re: Blocking social website in mikrotik

Wed Nov 20, 2013 2:49 pm

I tried using web proxy, i was only able to block www.facebook.com but still able to open https:\\facebook.com and other https domain.
 
User avatar
rickfrey
Trainer
Trainer
Posts: 610
Joined: Sun Feb 14, 2010 11:41 pm
Location: Van, Texas
Contact:

Re: Blocking social website in mikrotik

Wed Nov 20, 2013 4:02 pm

There is a difference between using the web proxy to cache and using it to limit access. Although, it won't cache https traffic, it can block it. You can also use wild cards with the address to block sub pages.
Launch your company forward with professional training!
http://rickfreyconsulting.com/product-c ... raining-2/
 
Neilson
Member Candidate
Member Candidate
Posts: 174
Joined: Tue Nov 06, 2012 10:42 pm
Location: Auckland, New Zealand

Re: Blocking social website in mikrotik

Thu Nov 21, 2013 12:12 am

Or you can grab the prefix lists for Facebook / Twitter / etc and just blackhole those IP Addresses with a simple firewall rule.

Should be at a lower level than L7 filters so less load on your router.

You do need to keep on top of their changes to IP Space but it should be fairly reliable to cut them off completely.

Regards
Alexander
 
User avatar
rickfrey
Trainer
Trainer
Posts: 610
Joined: Sun Feb 14, 2010 11:41 pm
Location: Van, Texas
Contact:

Re: Blocking social website in mikrotik

Thu Nov 21, 2013 4:53 pm

You could black-hole that traffic, but I think you will find that with sites that have a large web presence such as the sites we are talking about, there are more specific IP addresses and IP ranges then would normally be expected. Its much easier to use a URL with a wildcard then to try to block that traffic by IP. Theoretically, you could create a script that resolves the DNS names and then black-holes the updated list. I believe their is a similar script on the wiki that resolves names for adding to the firewall.
Launch your company forward with professional training!
http://rickfreyconsulting.com/product-c ... raining-2/
 
User avatar
krisan
newbie
Topic Author
Posts: 28
Joined: Wed Aug 04, 2010 11:06 pm

Re: Blocking social website in mikrotik

Fri Nov 22, 2013 11:02 am

There is a difference between using the web proxy to cache and using it to limit access. Although, it won't cache https traffic, it can block it. You can also use wild cards with the address to block sub pages.

Please how do i use the wild cards with the address to block sub pages.
Thank you for your suggestion.

Who is online

Users browsing this forum: Google [Bot], ieleja and 187 guests