How to block Facebook using Mikrotik

In this article I want to show on how to block Facebook using Mikrotik in three steps. We will use Web Proxy feature included in Mikrotik. We assume the LAN (Local Area Network) address is 192.168.56.0/24 and the IP address of  ’ether1′  which facing to the LAN is 192.168.56.254.

Here are the three steps:

1. Enable Web Proxy

We enable this web proxy without cache on disk.

ip proxy set enabled=yes port=8080 cache-on-disk=no

2. Add proxy access rules

In this step we define which website we want to block. In this case, we want to block Facebook. Remember that Facebook has many sub-domains so we have to block all that sub-domains.

ip proxy access add src-address=192.168.56.0/24 dst-host=*.facebook.com action=deny

The ‘*.facebook.com’ value means all sub-domains of facebook.com.

3. Enable the transparent proxy

In this step we have to redirect all web access to facebook.com coming from the LAN to the web proxy.

ip firewall nat add chain=dstnat  in-interface=ether1 dst-port=80 protocol=tcp action=redirect to-ports=8080

That’s all. You can add as many websites that you want to block as described in step 2.

Incoming search terms for this post:

Share
If you enjoyed this post, please consider leaving a comment or subscribing to the RSS feed to have future articles delivered to your feed reader.

Related Posts

By: Fuad NAHDI Date: April 27, 2010
6:22 pm
Categories: Mikrotik
Post tags: , ,
Our Sponsors Internet Faxing Reviews HP Pavilion Notebooks Free Collaboration Tools
Feedback
Related posts:
Comments
  • Lisa Valentine

    Also on the subject of blocking social media apps on the enterprise network, here’s a helpful resource. It’s a whitepaper called “To Block or Not. Is that the question?”

    http://bit.ly/9f8WOT

    It has lots of insightful and useful information about identifying and controlling Enterprise 2.0 apps (Facebook, Twitter, Skype, SharePoint, etc.)

    Share it with the IT Dept.

    [Reply]

    Reply April 27, 2010 at 9:55 pm
  • sohel

    i blocked website with web proxy,problem is,it is taking more Bandwidth from ISP server.

    [Reply]

    Reply August 19, 2010 at 4:44 pm
Leave a Comment