Community discussions

MikroTik App
 
OliverST
just joined
Topic Author
Posts: 19
Joined: Sun Aug 16, 2015 9:14 pm

Block youtube,FB and games

Mon Nov 23, 2020 6:11 pm

Hi, how can i block :
online games
Facebook
Youtube

i try a lot of stuff what i can find on google but no one block really the games or video .


thx for help
 
OliverST
just joined
Topic Author
Posts: 19
Joined: Sun Aug 16, 2015 9:14 pm

Re: Block youtube,FB and games

Wed Dec 09, 2020 2:01 pm

no one?
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 1874
Joined: Sat Dec 24, 2016 11:17 am
Location: jo.overland at gmail.com

Re: Block youtube,FB and games

Wed Dec 09, 2020 3:04 pm

As long a client uses HTTPS, its close to impossible to block FB etc. L7 blocking does not work
You can try to add IP range to block liste, but IP may be used to other services and IP may change.
Block DNS will not work, client can use DOH etc.
VPN will bypass any block.
 
Why do not use Splunk to monitor your MikroTik Router(s)? Look at this page in how to set it up.

MikroTik->Splunk
 
 
User avatar
BartoszP
Forum Guru
Forum Guru
Posts: 1895
Joined: Mon Jun 16, 2014 1:13 pm
Location: Poland

Re: Block youtube,FB and games

Wed Dec 09, 2020 3:19 pm

Idea,
Use iBGP for this.

Install any computer which could expand ASNs of FB, Youtube etc. to current subnets.
Put them into routing table and redirect to blackhole.
Peer it to you router with BGP.

PROS: could be done quite easy.
CONS: YT and Google share resources so blocking YT could block search engine.
Real admins use real keyboards.
To quote or not to quote, there is the topic: viewtopic.php?f=2&t=168474
 
User avatar
jvanhambelgium
Member
Member
Posts: 386
Joined: Thu Jul 14, 2016 9:29 pm
Location: Belgium

Re: Block youtube,FB and games

Wed Dec 09, 2020 3:35 pm

Conclusion : Mikrotik is just not the correct product for such requirements in 2020 and beyond. Using any sort of blocking based on IP's (static, via BGP or any other means) is not the way to go.
Much more advanced products exist that inspect this traffic and know the signatures, understand the dynamics of such traffic (eg. Palo Alto , AppID) and can perfectly control what you want, but we talk a different price-tag.
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 1874
Joined: Sat Dec 24, 2016 11:17 am
Location: jo.overland at gmail.com

Re: Block youtube,FB and games

Wed Dec 09, 2020 5:54 pm

If this is an work environment, you can use SSL decrytion:
https://www.websense.com/content/suppor ... nable.aspx
You will in this case need to have control of all clients.
 
Why do not use Splunk to monitor your MikroTik Router(s)? Look at this page in how to set it up.

MikroTik->Splunk
 
 
OliverST
just joined
Topic Author
Posts: 19
Joined: Sun Aug 16, 2015 9:14 pm

Re: Block youtube,FB and games

Thu Dec 10, 2020 6:45 pm

thx, i will try.

what about a proxy server ?
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 1874
Joined: Sat Dec 24, 2016 11:17 am
Location: jo.overland at gmail.com

Re: Block youtube,FB and games

Sat Dec 12, 2020 4:10 pm

HTTPS does not work with proxy server. HTTP do.
 
Why do not use Splunk to monitor your MikroTik Router(s)? Look at this page in how to set it up.

MikroTik->Splunk
 
 
OliverST
just joined
Topic Author
Posts: 19
Joined: Sun Aug 16, 2015 9:14 pm

Re: Block youtube,FB and games

Mon Jan 11, 2021 6:37 pm

is it possible to block all web site and game ports... andjust the 1 or 2 website would work? for scool ...

Who is online

Users browsing this forum: No registered users and 29 guests