Community discussions

MikroTik App
 
andrescamino
Member Candidate
Member Candidate
Topic Author
Posts: 198
Joined: Wed Aug 19, 2009 7:07 pm
Location: Guayaquil-Ecuador

how to block websites via url

Fri Aug 28, 2009 1:18 am

hi,

I would like to know how can i block access to a specific website like....www.usbank.com.........I know it should be done via proxy, but I can do it just with the port like blocking rapidshare pages with the port 53, but how can I do block a specific website?

thanks
 
fewi
Forum Guru
Forum Guru
Posts: 7717
Joined: Tue Aug 11, 2009 3:19 am

Re: how to block websites via url

Fri Aug 28, 2009 1:28 am

 
andrescamino
Member Candidate
Member Candidate
Topic Author
Posts: 198
Joined: Wed Aug 19, 2009 7:07 pm
Location: Guayaquil-Ecuador

Re: how to block websites via url

Fri Aug 28, 2009 5:37 pm

thanks for the link
 
ennoc
just joined
Posts: 10
Joined: Thu Jul 30, 2009 12:18 am

Re: how to block websites via url

Fri Sep 11, 2009 7:41 pm

i got a qst. if i olny want to block with this information but only i want to apply it to some specific ips? not to all the traffic... what do i need to do ???
 
fewi
Forum Guru
Forum Guru
Posts: 7717
Joined: Tue Aug 11, 2009 3:19 am

Re: how to block websites via url

Fri Sep 11, 2009 8:27 pm

In the section where you configure the firewall to redirect to the transparent proxy:
/ip firewall nat
add chain=dstnat protocol=tcp dst-port=80 action=redirect to-ports=8080
add logic to apply the rule only to the IP ranges you want to be filtered.
 
ennoc
just joined
Posts: 10
Joined: Thu Jul 30, 2009 12:18 am

Re: how to block websites via url

Fri Sep 11, 2009 9:55 pm

oks...you mean that i can add something like that:
/ip firewall nat
add chain=dstnat src-address=192.168.48.x/x protocol=tcp dst-port=80 action=redirect to-ports=8080

my qst is i got the range 192.168.48.0/22 and i need to block some ips from 192.168.49.x, its better if i made an address-list or something because some ips from other range needs to have all the traffic open... and i need to add some web-pages that they need for work. so i need to block all traffic except the pages that they need for work.. how can i do that...??
i got 3 different segments... first its for agents, second administrators, and third systems
first - ips = 192.168.48.x and 192.168.51.x
second = 192.168.49.x
third = 192.168.50.x
i need to block all the traffic for the first one.. done ..
i need to block some ips from the second ips..
and block all the traffic for the third.. done..
and i need to block all the https pages. and only add the pages that i need to work with.
 
fewi
Forum Guru
Forum Guru
Posts: 7717
Joined: Tue Aug 11, 2009 3:19 am

Re: how to block websites via url

Fri Sep 11, 2009 10:22 pm

You're going to find that hard to implement with the built in proxy - it doesn't support multiple ruleset applied to multiple groups. Your best bet would be to build a Squid proxy and use the parent-proxy feature of the built in proxy to pass all traffic to it. In Squid you can then have arbitrarily complex rules.
 
ennoc
just joined
Posts: 10
Joined: Thu Jul 30, 2009 12:18 am

Re: how to block websites via url

Sat Sep 12, 2009 5:01 pm

oks. so i need another program like squid... any body got a manual or something that can help me to configure squid on linux server...???
thanks for the other answers... =)

Who is online

Users browsing this forum: No registered users and 14 guests