Web Blocking (Web Proxy Mikrotik)

Web blocking menggunakan MikroTik Web Proxy,

So far jalan untuk melakukan blok port 80 & 8080 (WEB)
Tidak berfungsi bila web yang di tuju menggunakan HTTPS
Bbrp download tidak bisa berfungsi bila klien memakai IDM

/ip firewall nat add action=redirect chain=dstnat disabled=no dst-port=80 protocol=tcp to-ports=8080

/ip firewall filter
add chain=input in-interface=<Your WAN Port> src-address=0.0.0.0/0 protocol=tcp dst-port=8080 action=drop

/ip proxy set always-from-cache=no cache-administrator=webmaster cache-hit-dscp=4 cache-on-disk=no enabled=yes max-cache-size=none max-client-connections=600 max-fresh-time=3d max-server-connections=600 parent-proxy=0.0.0.0 parent-proxy-port=0 port=8080 serialize-connections=no src-address=0.0.0.0

/ip proxy access add action=deny disabled=no dst-port=80 dst-host=*porno* redirect-to=www.google.com

/ip proxy access
add path=*.exe action=deny 
add path=*.mp3 action=deny 
add path=*.zip action=deny 
add path=*.rar action=deny

Copy Paste aja rulenya..,
Sisanya tinggal coba2 sendiri kalo mao eksperimen blok web2 tertentu..

BLOCK HTTPS FACEBOOK

Secara spesifik kita tidak bisa melakukan block HTTPS karena port nya berbeda..,
Tapi lain ceritanya kalo kita block semuanya langsung..,

To the point aja..,
Ini juga bisa langsung di copy paste..

Cara 1 :

/ip firewall address-list
add address=31.13.24.0/21 comment=facebook disabled=no list=facebook
add address=31.13.64.0/18 comment=facebook disabled=no list=facebook
add address=31.13.64.0/19 comment=facebook disabled=no list=facebook
add address=31.13.64.0/24 comment=facebook disabled=no list=facebook
add address=31.13.65.0/24 comment=facebook disabled=no list=facebook
add address=31.13.66.0/24 comment=facebook disabled=no list=facebook
add address=31.13.68.0/24 comment=facebook disabled=no list=facebook
add address=31.13.69.0/24 comment=facebook disabled=no list=facebook
add address=31.13.70.0/24 comment=facebook disabled=no list=facebook
add address=31.13.71.0/24 comment=facebook disabled=no list=facebook
add address=31.13.73.0/24 comment=facebook disabled=no list=facebook
add address=31.13.74.0/24 comment=facebook disabled=no list=facebook
add address=31.13.75.0/24 comment=facebook disabled=no list=facebook
add address=31.13.76.0/24 comment=facebook disabled=no list=facebook
add address=31.13.77.0/24 comment=facebook disabled=no list=facebook
add address=31.13.78.0/24 comment=facebook disabled=no list=facebook
add address=31.13.79.0/24 comment=facebook disabled=no list=facebook
add address=31.13.82.0/24 comment=facebook disabled=no list=facebook
add address=31.13.83.0/24 comment=facebook disabled=no list=facebook
add address=31.13.84.0/24 comment=facebook disabled=no list=facebook
add address=31.13.85.0/24 comment=facebook disabled=no list=facebook
add address=31.13.86.0/24 comment=facebook disabled=no list=facebook
add address=31.13.87.0/24 comment=facebook disabled=no list=facebook
add address=31.13.90.0/24 comment=facebook disabled=no list=facebook
add address=31.13.91.0/24 comment=facebook disabled=no list=facebook
add address=31.13.93.0/24 comment=facebook disabled=no list=facebook
add address=31.13.96.0/19 comment=facebook disabled=no list=facebook
add address=66.220.144.0/20 comment=facebook disabled=no list=facebook
add address=66.220.144.0/21 comment=facebook disabled=no list=facebook
add address=66.220.152.0/21 comment=facebook disabled=no list=facebook
add address=69.63.176.0/20 comment=facebook disabled=no list=facebook
add address=69.63.176.0/21 comment=facebook disabled=no list=facebook
add address=69.63.184.0/21 comment=facebook disabled=no list=facebook
add address=69.171.224.0/19 comment=facebook disabled=no list=facebook
add address=69.171.224.0/20 comment=facebook disabled=no list=facebook
add address=69.171.239.0/24 comment=facebook disabled=no list=facebook
add address=69.171.240.0/20 comment=facebook disabled=no list=facebook
add address=69.171.255.0/24 comment=facebook disabled=no list=facebook
add address=74.119.76.0/22 comment=facebook disabled=no list=facebook
add address=103.4.96.0/22 comment=facebook disabled=no list=facebook
add address=173.252.64.0/19 comment=facebook disabled=no list=facebook
add address=173.252.96.0/19 comment=facebook disabled=no list=facebook
add address=179.60.192.0/22 comment=facebook disabled=no list=facebook
add address=179.60.192.0/24 comment=facebook disabled=no list=facebook
add address=179.60.193.0/24 comment=facebook disabled=no list=facebook
add address=204.15.20.0/22 comment=facebook disabled=no list=facebook
/ip firewall filter
add action=drop chain=forward disabled=no comment=Filter_Rule_to_block_FB_address_LIST dst-address-list=facebook

Untuk bisa bbrp IP melakukan browse ke facebook, tinggal tambahkan sebelum rule BLOCK:

/ip firewall filter

add chain=forward action=accept src-address=(masukan IP yang tidak di block) 

Cara 2 :

/ ip firewall filter add chain=forward action=drop dst-destination-list=facebook
/ ip firewall filter add chain=forward action=drop dst-destination-list=youtube

/ ip firewall filter add chain=forward action=add-dst-to-address-list protocol=tcp src-address=192.168.1.0/24 address-list=youtube address-list-timeout=0s content=youtube.com comment="youtube.com IPs"
/ ip firewall filter add chain=forward action=add-dst-to-address-list protocol=tcp src-address=192.168.1.0/24 address-list=facebook address-list-timeout=0s content=facebook.com comment="facebook.com IPs"
/ ip firewall filter add chain=forward action=add-dst-to-address-list protocol=tcp src-address=192.168.1.0/24 address-list=facebook address-list-timeout=0s content=fbcdn.net comment="Facebooks content delivery network IPs"

Semua akses FB terblock baik port maupun IP..,

100% working..,

Note : Cara 2 memakan CPU Load lumayan besar, sebab otomatis input IP address

Credit buat cara nomor 1 to Syed Jahanzaib https://aacable.wordpress.com/