A
A
Azizka2018-08-17 14:04:28
Computer networks
Azizka, 2018-08-17 14:04:28

How to block https site on mikrotik?

Hello. in Layer 7 is:
^.+(ok.ru|vk.com|vkontakte|odnoklassniki|odnoklasniki|love.mail|games.mail|amigo|facebook|twitter|mediaget|youtube|rutube|smotri|rad.msn.com |apps.skype.com|vortex-win.data.microsoft.com|settings-win.data.microsoft.com|porn|erotic|sex|pron|adult|youtube.com).*$
But for example youtube.com works over https. What to do?

Answer the question

In order to leave comments, you need to log in

2 answer(s)
R
Ruslan Fedoseev, 2018-08-17
@martin74ua

The request for https is encrypted.
either blocking through the firewall (block the address IP)
or blocking through the DNS (create the necessary domains in your dns server and specify the stub type)
or transparent proxy on http&https and filter in it....

P
poisons, 2018-08-18
@poisons

If the task is to solve the problem with little bloodshed, without proxy and other software, there are 2 excellent tools.
This is actually DNS and address-list.
In dns, you can use regexp, you can enter the domain directly into the address of the sheet, which will also update ip after the ttl expires.
Well, cut outgoing dns requests. This is quite enough, if users are able to get around such prohibitions, then you are clearly doing something wrong.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question