I'm doing DNS filtering, first you only allow dns requests to your local dns (router or pihole or other), then you filter facebook related requests. Done! Works perfectly fine for me, doesn't eat up resources.
dear Mr Maher Haddad kindly share the video about the youtube and other social media block in efficient way this video is very helpful for us thanks again for this video kindly make the video for youtube and some other social media block in mikrotik thanks
Awesome tutorial and it works. I use open dns servers. Unfortunately, other Google services cannot be reached, eg, Google Sheets etc when blocking UA-cam a work...
thank you, but what about whatsApp and Instagram which they are already related to facebook and they used the same prefixes, will they also be affected ?
This option can be detect DNS queries and block DNS server, then check port 443/tcp (443/udp maybe) and 80/tcp, also limit "Connection-bytes=0-8000" to check first 8kb before TLS encrypt.
After applying the first rule ,before applying the drop rule .I didnot see any traffic and any ip collected in address lists . What could be the reason sir?
1st question?? Brother, can you make a block website? such as youtube, facebook, google, other browsers and search browsers and others. should the user only be able to use online games??.. but only select users..?? can mikrotik do it?? 2nd question?? is it possible for other users to do everything like games downloading searching, watching and so on???.. but only selected users can use that??
Great job have a nice video i have done by MAC address but i want to know how to add bulk mac address (Scenario i wish to add by mac addresses which one i want to block )
Hi mr. Maher, It looks like facebook use the same IPs for the messanger too. Is it possible to blok facebook but to allow messanger in some way? Looking forward for your reply. ps. Thanks for the video, guideing me in my firs mikrotik steps:)) Best Regards,
Hi. Great video. I'm having a hard time with workers on Facebook and WhatsApp. *First question* that I have: Can you set "none dynamic" to let it collect forever, instead of 96 hours, done in your configuration (could this be set forever)? *Second question* : I watched your other video that blocks WhatsApp. I tried that IP list, but I don't think it's working with WhatsApp... I issued an netstat -a command in Windows and it shows whatsapp-cdn-shv-01-gru1.fbcdn.net that's on IP 157.240.222.60. We can see here that somehow that list needs constant feed since this can only be a new server. The ticks are still going. Would we need new IP information? Is there a way to block WhatsApp by content argument - specially blocking on cell apps. We need to block this... And thank you again for using Mikrotik with this. Many thanks.
I'm doing DNS filtering, first you only allow dns requests to your local dns (router or pihole or other), then you filter facebook related requests. Done! Works perfectly fine for me, doesn't eat up resources.
how did u do that? @sp4c33
this is also a good solution but not everyone has a dns server. this solution is good for those who have mikrotics @@akrammokhtar5912
The first real solution for web and apps. Thank you sir.
dear Mr Maher Haddad kindly share the video about the youtube and other social media block in efficient way this video is very helpful for us thanks again for this video kindly make the video for youtube and some other social media block in mikrotik thanks
Awesome tutorial and it works. I use open dns servers. Unfortunately, other Google services cannot be reached, eg, Google Sheets etc when blocking UA-cam a work...
Yes, me too have same problem when block youtube,, is there solution for this?
great guide
is it possible to block one ip address lan or does it have to be the whole network?
Hi Mr Haddad, I made the settings, but the ip addresses of facebook do not appear in the address list so can not work on dropping
Make sure your router can resolve names. Go to IP DNS add DNS there . Address list should be able to resolve names thereafter and do the blocking
Hi, thanks for your tutorials. I would like to know how to block UA-cam without blocking Google products like Google Drive etc. Thank you very much.
when you did this vid was your mikrotik in bridge mode or router mode
Thank you for the tutorial. It was very helpful. I use this method for youtube . WORKING thanks a lot.
Im very thankful for explaining briefly.sir is their a possibility that we can give access to other department that needs to open a facebook
Does this technique work for Tiktok, UA-cam and other social media websites and Apps?
Thank you for sharing your knowledge this configuration works well for me
what the different if you using raw to get facebook IP to address list?
Can it be redirected to a site instead of blocking it.
funciona para las APP de facebook de ipgone?
How do you look for content for other sites sir? any efficient way to look for them?
capturing using wireshark for example
Amigo tienes la de X actualizada?
Hi Maher, Hope you are well :) How can we create an approved list? Only these 5 sites are allowed?
Hello Sir - is it possible to use same method for torrent sites?
thank you, but what about whatsApp and Instagram which they are already related to facebook and they used the same prefixes, will they also be affected ?
no it is not affected.
how can we allow few users to use Facebook. through this method i have blocked facebook for entire network but need access for few.
in the action tab bellow the address list
you said timeout 96 hours keep
but what is its function ??
I think it has a function not technically but in terms of experience. I think it may be to prevent the device's memory from filling up and swelling.
Hello sir,
Is there any course on troubleshooting mikrotik related.
Dear sir , Is possible if I would like to route facebook destination address list to a specific wan instead of drop, thank you
This option can be detect DNS queries and block DNS server, then check port 443/tcp (443/udp maybe) and 80/tcp, also limit "Connection-bytes=0-8000" to check first 8kb before TLS encrypt.
hi sir thanks for your video appreciate it, can you make a video only to allow youtube on a specific ip on mikrotik
Hello sir,
What if you want to block UA-cam with filter rules?
Does this work on ROS 7.6?
it should.
perfect explained
Thank you. Its working.
nice one sir... can you please show your method in blocking games like Mobile Legend?
After applying the first rule ,before applying the drop rule .I didnot see any traffic and any ip collected in address lists . What could be the reason sir?
do you have a fasttrack rule setup in the firewall? that was the problem for me. I removed it and it started to work.
@@nyozegamon2204 You can explain how to remove fasttrack rule?
@@volkanaydn3685 Did you find it?
@@nyozegamon2204 It was very easy, I found it on the internet.
@@nyozegamon2204 I removed it but I still can't see an ip. what do you think the reason could be
1st question??
Brother, can you make a block website? such as youtube, facebook, google, other browsers and search browsers and others.
should the user only be able to use online games??..
but only select users..?? can mikrotik do it??
2nd question??
is it possible for other users to do everything like games downloading searching, watching and so on???..
but only selected users can use that??
What is 10.0.0.0/24?? Is it your router ip address or something else
Hi Mr Maher HADDAD, what is the best way to block all websites except few ones ?
Great job have a nice video i have done by MAC address but i want to know how to add bulk mac address (Scenario i wish to add by mac addresses which one i want to block )
You should create a group for that.
Thank you for sharing your knowledge,
How about the adult site, how to block on the mikrotik?
sir can you please make a tutorial on how to block torrent traffic on mikrotik.. thanks
Its working butt i am allow to some mac book to used Facebook how it is possible
Lock download of mp4 and torren files
How is it done?
Without blocking other sites
6.49.6?
Hi mr. Maher,
It looks like facebook use the same IPs for the messanger too. Is it possible to blok facebook but to allow messanger in some way?
Looking forward for your reply.
ps. Thanks for the video, guideing me in my firs mikrotik steps:))
Best Regards,
nop!
bunun icin bir firewall almalısın fortinet yada sonicwall gibi
excellent i'm trying to use a similar trick to make a kind of mfa for authorized peripherals on my network
to block facebook i'm using pihole ;)
Will it work on fb app
no
not working with empty address lists
just close fasttack and restart it, that's how I solved this problem
In an ther video of blocking UA-cam. you use different method. That method work fine for me. Why should i use this?
You simply shouldn't :) - Just use the method which works better for you.
Sorry sir, can you please tell us, How we can get these Content?
Thanks too much!
nice so if i want to block whatsapp??please i want to know
Did anyone notice that this guy looks like the Co-founder of "Bharat Pe" Mr. Ashneer Grover.
Thank you.
Welcome
Thanks
How to Allow some users
great
How about block all traffic except Facebook? In other words, only allow Facebook to work while all others are blocked.
Use the exclamation mark on the address list inside the firewall rule
How block netshare app in mikrotik router
Fb app not block using this
it is blocking for me are you using a vlan structure
شكرا بس ماعم يعطي شي عال Address list
Thank you for the tutorial!
You are welcome!
How to Block mp4 Download using mikrotik
Yeah, that could be it.
How is that done?
Without blocking other sites@@PLTYAZILIM
pls limit spotyfi
Truth be told i have blocked UA-cam while watching this tutorial on UA-cam … call me stupid
RM3011 Not Working
Thanks
How to block tiktok please
excuse me content
Perfect, drop in Raw, the best
Hi. Great video. I'm having a hard time with workers on Facebook and WhatsApp. *First question* that I have: Can you set "none dynamic" to let it collect forever, instead of 96 hours, done in your configuration (could this be set forever)? *Second question* : I watched your other video that blocks WhatsApp. I tried that IP list, but I don't think it's working with WhatsApp... I issued an netstat -a command in Windows and it shows whatsapp-cdn-shv-01-gru1.fbcdn.net that's on IP 157.240.222.60. We can see here that somehow that list needs constant feed since this can only be a new server. The ticks are still going. Would we need new IP information? Is there a way to block WhatsApp by content argument - specially blocking on cell apps. We need to block this... And thank you again for using Mikrotik with this. Many thanks.