Community discussions

MikroTik App
 
dineshplp
newbie
Topic Author
Posts: 33
Joined: Wed Jan 09, 2008 7:09 am

Block specific URL

Tue Aug 01, 2017 5:54 pm

Hi,

I would like to block specific URL using layer 7 regex. For example facebook.com/myprofile.
I was able to block facebook.com or youtube.com but not able figure out the regex for a specific profile in facebook.

Anyone successful in doing so?


Thanks,
 
pe1chl
Forum Guru
Forum Guru
Posts: 10529
Joined: Mon Jun 08, 2015 12:09 pm

Re: Block specific URL

Tue Aug 01, 2017 7:06 pm

This is not possible because this URL is sent encrypted (https) so you never get to see it in L7.
 
eduardomazolini
newbie
Posts: 31
Joined: Thu Jul 16, 2015 9:14 pm

Re: Block specific URL

Tue Aug 01, 2017 7:37 pm

It's not absolutely true.
Server name is send on tls header.
But all other information are encrypted.
Search for SNI Extension to the TLS. (Server Name Identification)

Enviado de meu SM-G800H usando Tapatalk
 
pe1chl
Forum Guru
Forum Guru
Posts: 10529
Joined: Mon Jun 08, 2015 12:09 pm

Re: Block specific URL

Tue Aug 01, 2017 8:32 pm

It's not absolutely true.
Server name is send on tls header.
But all other information are encrypted.
He already said he could block the server but he now wants to block a specific URL.
Impossible.
 
msatter
Forum Guru
Forum Guru
Posts: 2941
Joined: Tue Feb 18, 2014 12:56 am
Location: Netherlands / Nīderlande

Re: Block specific URL

Tue Aug 01, 2017 8:49 pm

I block facebook for my portable devices by setting up a DNS server.

You have to enforce that only you DNS can be used. VPN can use a external DNS server so that will slip past you.

I block with DNSmasq using this three lines:
# Geen standaard toegang tot Facebook Instagram Whatsapp
server=/facebook.com/fbcdn.net/facbook.com/fb.com/fbsbx.com/facebook.com.edgesuite.net/instagram.com/
server=/facebook.net/instagramstatic-a.akamaihd.net/instagramstatic-a.akamaihd.net.edgesuite.net/
server=/cdninstagram.com/tfbnw.net/whatsapp.com/fb.me/

Who is online

Users browsing this forum: ohilton576 and 5 guests