How to block a hostname or website using mikrotik

 

Blocking a website using a MikroTik script involves creating firewall rules to deny access to specific domains or IP addresses. Here's a step-by-step guide on how to block a website using a MikroTik script:

Step 1: Access MikroTik RouterOS:

Connect to your MikroTik router using Winbox, the web interface, or an SSH client.

Step 2: Create an Address List:

Address lists are used to store the IP addresses or domain names of websites you want to block. Here's how to create an address list:

bash

/ip firewall address-list add list=blocked_websites address=example.com

Replace "example.com" with the domain you want to block.

Step 3: Create a Firewall Rule:

Now, create a firewall rule to block access to the websites in your address list. You'll use the mangle chain for this purpose.

bash

/ip firewall mangle add chain=prerouting src-address=!192.168.1.0/24 dst-address-list=blocked_websites action=mark-connection new-connection-mark=blocked_conn passthrough=no

/ip firewall mangle add chain=prerouting src-address=!192.168.1.0/24 dst-address-list=blocked_websites action=mark-packet new-packet-mark=blocked_pkt passthrough=no

Replace "192.168.1.0/24" with the IP range of your local network. These rules mark connections and packets for traffic going to blocked websites.

Step 4: Create an Input Firewall Rule:

To drop the marked connections and packets, you'll need an input firewall rule. This rule drops the traffic to blocked websites.

bash

/ip firewall filter add chain=input connection-mark=blocked_conn action=drop

/ip firewall filter add chain=input packet-mark=blocked_pkt action=drop

Step 5: Test the Website Block:

After applying the script, you should test whether the website blocking works as expected. Attempt to access the blocked website from a device on your network, and you should be unable to access it.

Step 6: Troubleshooting and Maintenance:

• Ensure that your address list and firewall rules are correctly configured.
• Regularly review and update your address list to add or remove blocked websites.
• Monitor your network to ensure that the blocking rules are effective.

By following these steps and creating a MikroTik script, you can effectively block specific websites on your network. Remember that this method is primarily domain-based, so it may not be suitable for websites that use dynamic IP addresses or content delivery networks (CDNs). For more comprehensive content filtering and blocking, you may consider using a dedicated web filtering solution or proxy server.

 

Viewers

Read Also