hi
i read the manual for blocking .mp3 .avi

i di this do block mp3

[admin@MikroTik] ip web-proxy access> print
Flags: X - disabled, I - invalid
0 ;;; block telnet & spam e-mail relaying
dst-port=23-25 action=deny

1 url="add url=":\\\\.mp\\[3g\\]$" action=deny" action=deny


it did't block


help plz

and what the line be to block .avi and mpg and mpeg

Have u configured the Web Proxy Properly.
Please Forward the configuration..I will help u out.

Also Make sure that u have mentioned the Web-proxy IP and Port in your web-browser.

Web browser
--------------
Tools->Internet Options->Connections->LAN Settings
Enable Proxy Server Settings, Write down ur Proxy IP ana Port which u have configured in MT Web Proxy.

ASHISH.

thanx for ur replay

i cofigured the web proxy with these rules

[admin@MikroTik] ip proxy> print
enabled: no
port: 8080
parent-proxy: 0.0.0.0:1
maximal-client-connecions: 1000
maximal-server-connectons: 1000
[admin@MikroTik] ip proxy> ..
[admin@MikroTik] ip> web-proxy
[admin@MikroTik] ip web-proxy> print
enabled: yes
src-address: 0.0.0.0
port: 3128
hostname: "proxy"
transparent-proxy: yes
parent-proxy: 0.0.0.0:0
cache-administrator: "webmaster"
max-object-size: 15096KiB
cache-drive: system
max-cache-size: unlimited
max-ram-cache-size: unlimited
status: running
reserved-for-cache: 13447168KiB
reserved-for-ram-cache: 2048KiB


firewall
chain=dstnat src-address=192.168.100.0/24 protocol=tcp dst-port=80 action=redirect to-ports=3128


i didn't put any ip or port in web-browser for users

i think this is your problem:

Maybe i can help u. ur configuration in ip - web proxy is right. You must see this rule to block mp3 (watch the order):

1. ip web proxy access> add url=":\\.mp\[3g\]$" action=deny
2. ip web-proxy access> add src-address=x.x.x.x/x action=allow // specific ip u want to allow download mp3

and then, don't forget to do this :

- ex : 3128 - port of your proxy
ip-firewall-filter
- chain=input dst-address="your ip" protocol=tcp dst-port=3128 (for example)
action=drop // deny rely to your ip port 3128

ip firewall-nat
- chain=dstnat in-interface=Internal protocol=tcp dst-port=80
action=redirect to-ports=3128


i wish u luck,

you must ENABLE webproxy

ENABLE it for god sake ...

sorry, I see you have enabled webproxy. but your rule looks incorrect, too many slashes. you should type it like in this example:

[admin@MikroTik] ip web-proxy access> add url=":\\.mp\[3g\]$" action=deny

ferry already explained everything