How to block YouTube in mikrotik firewall?

Question

network hardware

I create sheet OtdelBlock and simply Otdel. I add IP addresses of employees to otdel, and I add youtube.com to OtdelBlock, after which microt itself adds IP addresses to block. I create a rule forward, src adress list OtdelBlock , dst adress list Otdel , action Reject. YouTube is working properly, on microte in the statistics I see a small number of packages that fall under the rule.

Answer 1

Replace action Reject with Drop .
If it doesn't help, then remove dst adress list Otdel to check if the rule works as a whole.
If your DNS server is located on the local network, you can wrap all traffic from youtube.com to 127.0.0.1

Answer 2

[[email protected] ~]$ host youtube.com
youtube.com has address 74.125.232.225
youtube.com has address 74.125.232.227
youtube.com has address
74.125.232.238
youtube.com has address 74.125.232.226
youtube.com has address 74.125.232.229 youtube.com has
address 74.125.232.232
youtube.com has address 23.125.com .com has IPv6 address 2a00:1450:4011:80c::1003 what addresses do you say blocked? )

Answer 3

With the address sheets correct.
Next:
/ip firewall filter
add action=drop chain=forward dst-address-list=Otdel src-address-list=OtdelBlock
And don't forget to move the rule up to allow rules.
At the same time, try to register the server 8.8.8.8 in the DNS, you never know, and the eights know exactly where YouTube lives.

Answer 4

Create a rule in layer7 ^.+(youtube).*$
Check packages.
Block packages that contain flags.
Works great.
Don't try to block IP addresses, it's like shooting sparrows with a cannon.