block all websites except whitelist
Most Relevant Content
MikroTik Blocking All Websites Except a Few Websites
A few days ago, someone asked me how to block all websites except one with MikroTik Firewall. For this, I have decided to discuss about blocking all websites except someone’s whitelist. Unlike firewall devices, MikroTik Firewall by default allows all websites. So, if you need to block any website, you have to create a firewall rule that will block the specific website. Now if we want to block all websites and want to allow a few websites, we have to do reverse work that means we have to create a firewall rule that will block all websites and we have to create another firewall rule that will allow a group of websites through MikroTik Firewall. In this article, I will discuss how to block all websites except a few websites using MikroTik Firewall. MikroTik Firewall Rule to Block All Websites HTTP and HTTPS are responsible to view websites. HTTP works on TCP port 80 and HTTPS works on TCP port 443. So, to block all websites, we have to drop all requests on TCP port 80 and 443 trough MikroTik Firewall. The following steps will show how to drop all requests on TCP port 80 and 443 in MikroTik Firewall. [...]
- »
How to Block NetShare Changing MikroTik TTL | April 19, 2024
Internet user can easily share their net connection to others using their smart phone or Laptop creating Hotspot. Smart phone users especially Android users by default get a net sharing app named Mobile Hotspot to share his net connection to others. Besides Mobile Hotspot, there are many Android Apps like NetShare those can be used to share net connection to others. Sharing net connection to others or friends is a good feature in Smart phone but sometimes users misuse this [...]
- »
How to Install Extra Packages in MikroTik RouterOS | October 10, 2019
MikroTik RouterOS does not always include all the packages those are developed by MikroTik team. So, sometimes you may find that some packages are missing in your RouterOS such as NTP package, DUDE package, Wireless package, CAPsMAN package and so on. Specially, user manager package which is totally a separate MikroTik RADIUS package used to manage user authentication, authorization and accounting is always missing. Also upgrading RouterOS or downgrading RouterOS you may find that some packages are missing there. So, [...]
- »
How to Import SSL Certificate in MikroTik RouterOS | January 16, 2022
SSL/TLS Certificate is used to make secure communication between server and clients. MikroTik RouterOS has a lot of services such OVPN, SSTP VPN, HTTPS, Hotspot and so on those use SSL/TLS certificate. It is possible to create self-signed certificate in MikroTik RouterOS but self-signed certificate faces untrusted CA warning. So, it is always better to use trusted CA either freemium or premium. In my previous article, I discussed how to get a free SSL/TLS certificate from Zero SSL but Zero [...]
- »
MikroTik Hotspot Login by HTTP CHAP, HTTP PAP and HTTPS | July 25, 2020
MikroTik Hotspot uses various types of login methods. Among these login methods HTTP CHAP, HTTP PAP and HTTPS are basic and important login methods. So, a MikroTik system administrator should have proper understanding on Hotspot HTTP CHAP, HTTP PAP and HTTPS login methods. In my previous article I discussed how to configure MikroTik Hotspot using Winbox. In this article I will discuss how to use HTTP CHAP, HTTP PAP and HTTPS login methods properly in MikroTik Hotspot Server. MikroTik Hotspot [...]
- »
Restrict Internet Access Based on MAC Address in MikroTik | February 4, 2017
MikroTik router has a lot of features by which a network administrator can design his network as he likes. As a network administrator, sometimes you may need to allow internet access some specific devices. If other devices try to access internet, they will be rejected by your router. For example, say, you have configured a simple network like below diagram. In this network, you have configured WAN, LAN, Gateway, DNS and NAT. Also you have created queue rules for limiting [...]
- »
MikroTik L2TP/IPsec VPN Configuration (Connecting Remote Client) | February 26, 2018
VPN (Virtual Private Network) is a technology that provides a secure and encrypted tunnel across a public network and using this VPN tunnel a private network user can send and receive data to any remote private network as if his/her network device was directly connected to that private network. MikroTik L2TP server is one of the most popular VPN services. It provides a secure and encrypted tunnel across public network for transporting IP traffic using PPP. L2TP/IPsec is more secure [...]
- »
MikroTik EoIP Tunnel for Bridging LANs over the Internet | April 22, 2018
VPN (Virtual Private Network) is a technology that provides a secure tunnel across a public network. A private network user can send and receive data to any remote private network using VPN Tunnel as if his/her network device was directly connected to that private network. MikroTik provides EoIP (Ethernet over IP) that is used to create a site to site VPN tunnel. EoIP tunneling is a MikroTik RouterOS protocol that creates an Ethernet tunnel between two MikroTik Routers on top [...]
- »
Firewalld Installation and Configuration in Ubuntu Server | May 5, 2022
Firewalld is an awesome host based firewall management tool for Linux Operating System. Firewalld has developed on Fedora but it is now available for almost all Linux distributions. So, Firewalld can be installed in Ubuntu Server although Ubuntu Server has UFW as the default firewall system. Firewalld is more robust and easy to maintain than UFW, I think. So, I am going to discuss how to install and configure Firewalld in Ubuntu Server. Installing Firewalld in Ubuntu Server By default [...]
- »
MikroTik Hotspot Customization | April 5, 2017
Hotspot is one of the most popular services in MikroTik router. MikroTik Hotspot Gateway is a policy to authorize network clients before to access local network resources as well as public network resources through MikroTik router. In a Hotspot network, the user can login or authenticate using almost any web browser, so there is no need to install any additional software to client end. As Hotspot login prompt is a webpage, Hotspot service can effectively be used as an advertising medium of [...]
You May Also Like
