Community discussions

MikroTik App
 
fasih
just joined
Topic Author
Posts: 1
Joined: Mon Apr 27, 2020 10:29 am

RB3011 Router Board

Thu Jan 13, 2022 9:11 am

Hello to All

I have RB3011 router and want to block URLs but can't. I did follow the given methods but didn't succeed kindly help me.
Thank You
 
User avatar
jwreno
just joined
Posts: 8
Joined: Wed Jan 12, 2022 11:52 am

Re: RB3011 Router Board

Thu Jan 13, 2022 5:34 pm

In this day and age it's quite hard to block URLs on a network device.

Back in the day we used to redirect port 80 traffic to a proxy that would then filter, but now thanks to the whole web using https everywhere, that's no longer an option.

Tampering with the traffic on https will fail the security. Closest thing we can do now is ssl strip, and sign it yourself but you'd need to create your own certificate authority and install on each device that uses your network.

What most people do now is just block domains. You need to force people to use your DNS server and block traffic to known DNS-over-HTTPS servers. Not an elegant solution because you can only blacklist entire domains, and you can't know every DNS-over-HTTPS server out there.

Who is online

Users browsing this forum: bbs2web, GoogleOther [Bot], jasweb, raiser, unhuzpt and 118 guests