Community discussions

MikroTik App
 
User avatar
Caribetech
just joined
Topic Author
Posts: 22
Joined: Fri Jan 20, 2017 3:04 am
Location: Colombia
Contact:

Script to block Child Pornography URL through file.txt

Mon Oct 15, 2018 5:58 pm

The Government of my country, through the law prohibits the websites of child pornography, the ministry of communications deliver a .txt list with addresses that by law we must block.
I need the help of a script that uploading the file.txt to mikrotik can block those URLs

I would appreciate the help.
 
User avatar
vecernik87
Forum Veteran
Forum Veteran
Posts: 882
Joined: Fri Nov 10, 2017 8:19 am

Re: Script to block Child Pornography URL through file.txt

Tue Oct 16, 2018 12:58 am

If i understand it correctly, your government willingly distribute list of child porn websites? :lol: thats really twisted...

Anyway, there is not much help unless there are specifications how is it supposed to be done.
  • Typical and easiest way is to simply block DNS (or redirect DNS requests to some other website) for these servers. Despite it can be easily overcome (people use public DNS like 1.1.1.1 or 8.8.8.8 ), you did you job and many governments accept this method of blocking
  • More complicated way is to block IP of every server on that list but that way, you will cause serious collateral damage as many other (legitimate) websites can be hosted on same IP addresses.
  • You can do Layer 7 analysis but that will not work for HTTPS and will consume a lot of your CPU
  • You can use TLS-Host to analyze SNI during HTTPS handshake, but that will work only for servers using SNI
there might be other ways but these are most common. You may find that some websites can be easily and reliably blocked by some way, others by other way. Also it is important to keep in mind that what works now might not work tomorrow - internet is very dynamic and big websites with many visitors will easily notice that you blocked them and they will fight back to enable their services

Who is online

Users browsing this forum: Bing [Bot] and 29 guests