How do you block TeamViewer with Mikrotik?

Question

Mikrotik

Good day everyone!
Tell me, how do you block TeamViewer using Mikrotik?
I quite successfully used one solution found on the net:

add name=team1 regexp="^(post|get) /d(out|in).aspx\\\?.*client=dyngate"
add name=team2 regexp="^\\\\x17"

But there was a problem. :( Users can't log in to mailra from mozilla. Through explorer and chrome, authorization works fine.
What other methods do you use besides blocking entire subnets?
Maybe there is something more elegant? :)

Answer 1

This option is possible:

1. Enable DNS cache on Mikrotik
   
2. We configure clients to use Mikrotik's DNS cache
   
3. Optionally block DNS requests from clients to other DNS servers
   
4. We prescribe DNS on Mikrotik for the names teamviewer.com and *.teamviewer.com address 127.0.0.1
   

Answer 2

a crutch of course but it seems to work
https://zen.yandex.ru/media/id/5fa8e96d7e8e7f24740...

Answer 3

if mikrotik acts as a dns server ..

/ip dns static add address=127.0.0.1 regexp=".*\\.teamviewer\\.com\$"
/ip dns static add address=127.0.0.1 name=teamviewer.com