Page 1 of 1

Best Way of Blocking System In mikrotik

Posted: Tue Oct 12, 2021 7:03 am
by kayesar99955
Hi Experts !! I want to know
What is the best method of blocking any sites, using Layer-7 or setting up address lists, or more?
or is there any alternative method for this?
please cooperate with me to have a concept about it!!
Thanks

Re: Best Way of Blocking System In mikrotik

Posted: Tue Oct 12, 2021 8:59 am
by holvoetn
Far from an expert but here is my take:
Layer-7 is rather heavy on your device.
IP addresses are never sure to be 100% correct (and can change).
So I'd say PI-Hole, that way it gets solved using DNS-blocking.

Interested to see other suggestions.

Re: Best Way of Blocking System In mikrotik

Posted: Tue Oct 12, 2021 10:01 am
by rextended
Please cooperate: read all thousand of posts about the same topic, instead to open again another topic for the same reason...

On few words:
You can not block anything until you do not have full control over devices used.
Just blocking the IP is a valid solution, but you must continuosly update the "blacklist",
but the same IP are often shared for more than one service, because all network is moving on CDNs.