ฝัง
- เผยแพร่เมื่อ 5 มิ.ย. 2017
- Learn MikroTik RouterOs Tutorial Series (english)
In this tutorial, I will show you how to block Facebook without slowing down your router. This is the most efficient way to block facebook.
The L7 code can be found here:
www.tksja.com/how-to-block-facebook/
You will need any one of these Mikrotik routerboard router for this tutorial:
RB951Ui-2nD hAP
RB3011UIAS-RM
RB2011UiAS-2HnD-IN
RB750Gr2
hEX RB750Gr3
RB2011iLS-IN
CRS109-8G-1S-2HnD-IN
hAP lite
hAP ac lite tower
mAP lite
wAP
RB951Ui-2HnD
RB951G-2HnD
RB2011UiAS-2HnD-IN
RB941-2nD-TC - วิทยาศาสตร์และเทคโนโลยี
this is very useful tutorial thank you
You are welcome
Good it worked when I added rule in Mangle too. All other ways were not enough to block website. Thanks
Cool
Good one!
TOP, thank you a lot!
You're welcome
excelent
This is really nice and useful,
please help me with one issues:
I want to block the Internet except few website. I mean only few website will be allowed for Whole Subnet or specific IP.
I already applied one filter rules, Some website's is blocked by MANGLE rules. Now I can't stop the Internet Access for all.
Thanks for the tutorial, It works! but when i try to allow facebook for a specific user it doesn't work, mikrotik block facebook for all users though i put the accept rule on the top of the reject rule. Can you please make a video how to block all website except facebook or any other specific website?
Hi there, please make a tutorial video about which dengrous ports list by default we must to block on microtik firewall. Thnx
Please make a tutorial video about how we can block all incoming traffic from outside or internet to our network for more security. Thnx
Thanks for the tutorial! During the work break (12: 00-12: 20) how can I unblock facebook? Or more complicated from 7:00 to 12:00 and 12:20 to 15:20 be blocked from facebook. (Only during working hours.)
Hi, I follow and watch all your videos when setting up our mikrotik router so far so good. but this tutorial didn't work me is there a newer way of blocking facebook? (posting this 3 years after the video )
I think the mangle rule can be further improved by setting "connection-state=new" otherwise the very expensive L7 regexp function would be executed for each and every packet. What do you think?
Great suggestion, I try it and see how it works.
Won't work, as that will only catch 1st SYN packet, which has no facebook related strings in it
If one has already the accept established and related packets on top of the firewall, wouldnt all the following rules apply only to new packets?
why are you mark traffic before blocking it? is it possible after defining the regex to go directly to filter to block the traffic without first marking it?
Hi TKSja, great video. please can you explain how allow only access for to social media (facebook and Whatapp).
Regards
you need to block all packets leaving the network and allow only those going to facebook and the desired social sites.
If you want to redirect them to an other page?
Hi sir, thank you for video, I want to ask, sometime after rule applied, it pass the packet very lately, i use the same rule as you tell in the video , but first 5 to 10 minutes it doesn't work , after 10 minutes , i see the one packet pass then rule start to work as configured,,, May i know? why the rule start to work lately?
through this microtik, can I see the browsing list any pc, it mean I want to see a specific PC which website they have visited? pls confirm. As a IT manager I need this info. pls help me. thanks in advance. Sazzad
Hello, thank you so much for the video. How can I make an acceptance address list so some ips can connect to facebook
Hi is possible put a example to create vpn lan 2 lan with ipsec¿ very instructive tutos
Hi, thanks for the video you shared, I found that the website blocking failed, some characters in Regexp could not be displayed properly，For example: the characters displayed by keyboard shift+6 are wrong
Thanks for sharing this...Very insightful...However i have a question...why was Prerouting used and not Forwarding?????
I want to know too
I have a problem with my mikrotik. I have two pppoe connections that i would like the mikrotik to dial at certain times using scheduler. Can you make a video on how to do this please?
I will look into it
Great tutorial. Please tell me, cause in this video You made a Mangle rule with Mark Connection but in a tutorial on Your website You're not doing it, just Action - reject and tcp reset. Can You tell me why?
There are many ways to achieve the same result. As long as it works you should be fine.
Yep, it works.
@@TKSJa i have done the tutorial on my mikrotik but still i can access youtube and facebook i dont know what i am missing.
Hello Sir Does the rule also block Facebook when accessing it from Facebook Application installed on Android or it only blocks users accessing it from the browser?
hi TKSJa, so far in you tutorial, you have not mentioned how yould get the code for the l7 protocols, like the tut for youtube and fb, i hope you would make a tut for that, or just a reply for tjis comment, and that would be greatly apreciated.... more power...
+karl gerard Miclat I am sure it was mentioned, anyway here is the link tksja.com/how-to-block-facebook/
TKSJa hi, i am talking about the codes, how did make them? or where did you get the code...
hi TKSJa i hope you could make the video, about how to make the codes..
When I try to put a specific set of address list it doesn't works. It only work when I do not select any list in advance tab of mangle.
How about Limit facebook instead of blocking it? can you make video of it sir? a facebook with a queue tree , in addition to the full bandwitdh management.. thanks in advance
Hi, can I display a page instead of the browser default cant connect message?
+Ver Valiente Yes you can, with dstnat (port forwarding) to a url but it won't work with https sites.
My filter rules to block facebook is not working. I've disabled the FastTrack. Can you help me out ?
If i remove the mangle rule it works , if i enable it facebook will be accessible how come ?
Hello, I hope you're doing great, I wanted to block google with its all domains for example docs, contact, homepage etc but only want to allow maps, could you please guide how do I implement this?
hey please share the code which one you used in L7
www.tksja.com
what is the exact link to find this code?
hi i have a problem this is also blocking my outlook email from sending and reseving
That's not possible, the rule uses a layer 7 regex to determine what to block. You may have have another that is causing this, check again.
It doesn't in android facebook apps but in messenger it does work, any update plz !
Hi there, how to block apps, like telegram or WhatsApp on phone or tablet on microtik firewall router? Please make a tutorial video about that. Thnx
i have 2 wan
how to 1 website for specific gatwaye how to
THANKYOU.... One favor please... Do you text me how to accept an Address List to visit facebook?
Lock download of mp4 and torrent files in MikroTik
How is it done?
Without blocking other sites
How to monitor ip seseon on microtik router ?
Does this cover facebook mobile app ? It seems that this is only applicable for facebook website, right ?
from your Video, How to allow "some host" to facebook?
I tried it works with browse but on Android phone using TH-cam application it doesn't work. What can be the matter ?
Why it blocks on other browsers but not on chrome some users still can use facebook or youtube, some not even if cleared chrome cookies and history...
I have a problem, I´ve done the steps in the tutorial but facebook page still opens...
+Arturo Gomez Ensure that FastTrack is disabled.
@@TKSJa How to ensure this?
@@javedakhter82 Follow this video th-cam.com/video/6LaqhDm6PHI/w-d-xo.html
HELLO, i have followed the example but it's not blocking
It's working now, but it seem it does not apply to facebook app
yo facebook and youtube or etc side block garna ko lagi tyo link kasri verifay garni sir ??
Much appreciated thank you very much,is this same procedure for al MikroTik Model,Sir can you suggest me Mikrotik for 100 user Spcly For Network security like Co working office space
It isn't working for me :(
But i used the same rule for snapchat and it's work but not working for facebook
wont work for me.. blocking facebook
Followed Each step but not working
*it doesn't work in 2020*
How to block facebook APP on mobile?
Find out the ip that it uses and block it.
more effective way to block facebook without using Layer7 is setup tls-host:
comment="drop facebook" chain=forward action=drop protocol=tcp dst-port=80,443 tls-host=*facebook*
Just Write Down the URL of Facebook.... e.g: www.facebook.com ......in Layer 7 Protocol It won't work.
dosent work in 2021
Not working bro
how to block facebook app on phone?
Thanks but facebook app on android still opens. Please help, also youtube please please. Appreciated
There is currently no workaround at this time.
you kill cpu performance man layer 7 is very danger for cpu