Community discussions

MikroTik App
 
User avatar
kayesar99955
just joined
Topic Author
Posts: 11
Joined: Thu May 31, 2018 12:22 pm

Best Way of Blocking System In mikrotik

Tue Oct 12, 2021 7:03 am

Hi Experts !! I want to know
What is the best method of blocking any sites, using Layer-7 or setting up address lists, or more?
or is there any alternative method for this?
please cooperate with me to have a concept about it!!
Thanks
 
holvoetn
Forum Guru
Forum Guru
Posts: 7053
Joined: Tue Apr 13, 2021 2:14 am
Location: Belgium

Re: Best Way of Blocking System In mikrotik

Tue Oct 12, 2021 8:59 am

Far from an expert but here is my take:
Layer-7 is rather heavy on your device.
IP addresses are never sure to be 100% correct (and can change).
So I'd say PI-Hole, that way it gets solved using DNS-blocking.

Interested to see other suggestions.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 12724
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: Best Way of Blocking System In mikrotik

Tue Oct 12, 2021 10:01 am

Please cooperate: read all thousand of posts about the same topic, instead to open again another topic for the same reason...

On few words:
You can not block anything until you do not have full control over devices used.
Just blocking the IP is a valid solution, but you must continuosly update the "blacklist",
but the same IP are often shared for more than one service, because all network is moving on CDNs.