I need to block YouTube as much as possible to minimize access to the platform.

Why?

Some business users with limited bandwidth do not want their WAN interface saturated. I have seen this for some businesses with only 15mbps.

@pe1chl indeed, realized my mistake. I quickly edited my post just before seeing yours.

The best way for blocking sites - at least from the results I have been able to accomplish - is as follows. 1) Find all domain names related to a service. This requires some manual input from the user, but there are blocklists on Github. Netify.ai is also very useful . 2) Add all those domain names ...

I saw this has been discussed a few times, but thought I might have a practical solution. Is it possible to add mac address lists ONLY for "/interface bridge filter"? I think adding this would be very practical. Even including a timeout such as the standard "/ip firewall address-lists...

I eventually managed to figure it out. It seems the idea I had of routing everything to the subnet was completely off! Instead you have to add a 'prerouting' mangle rule for each subnet and set the correct route-mark. Such as the below...

I also tried adding a mangle rule, but I never see any packets traveling through it.

Please see the attached snapshots for some idea of my config.

Hi all, I have two VRF's running, main and MTN-Gateway. The former has a gateway IP of 10.255.211.1 and the latter 10.255.212.1. Each of the VRF's are routing to their own gateway, so I have two WAN interfaces, and two LAN. So here's the problem: I'd like to be able to access some of the IP's on 'ma...

As per the title, I am wondering if the RB1100x4 is still in production.

I noticed my local Mikrotik distributor haven't had stock for at least three months, yet actively leave up the product page.

Ah, thanks for this. I'm relatively new to all this networking stuff.

Hi, all So, say I have specified two domain name servers in my MikroTik - 8.8.8.8 first and 8.8.4.4 secondly, how would RouterOS decide which to use first? For my application, I need RouterOS to always use the first specified server, unless it is unreachable. If I specify those two domain name serve...