mikrotik blocking websites with tls host

Most Relevant Content

  • MikroTik Blocking Websites with TLS Host Firewall Matcher

    Most of the websites now use https and blocking https websites is so much harder with the MikroTik RouterOS version less than 6.41. But from RouterOS v6.41, MikroTik Firewall introduces a new property named TLS Host that is capable to match https websites so easily. So, blocking https websites like Facebook, YouTube etc. can be easily done with MikroTik Router if RouterOS version is greater than 6.41. In my previous article, I discussed how to block websites with MikroTik Router using layer 7 protocol. In this article, I will discuss how to block https websites with MikroTik Firewall using TLS Host matcher. How to Block HTTPS Websites with TLS Host Matcher The TLS Host is a new property of MikroTik Firewall. So, it is only available RouterOS version greater than 6.41. If your RouterOS version is less than 6.41, upgrade RouterOS to the latest bug free version and then do the following steps to block websites with the TLS Host matcher. Go to IP > Firewall menu item and click on Filter Rules tab and then click on PLUS SIGN (+). New Firewall Rule window will appear. Choose forward from Chain dropdown menu. Choose tcp from Protocol dropdown menu. Click [...]

    READ MORE »

  • You May Also Like

  • »

    MikroTik Hotspot HTTPS Redirect with Free SSL Certificate |   June 21, 2020

    SSL Certificate is required to enable HTTPS Login and HTTPS Redirect in MikroTik Hotspot. In one of my last articles I discussed how to configure MikroTik Hotspot HTTPS redirect and HTTPS login with MikroTik self-signed certificate. But self-signed certificate is not trusted by operating system. So, we get the following two issues if we configure HTTPS Login and HTTPS Redirect with self-signed certificate. Ask to proceed unsafe site: As browsers cannot trust self-signed certificate, it shows a warning message and [...]

    READ MORE »

  • »

    MikroTik VPN Configuration with Site-to-Site PPTP |   February 19, 2018

    VPN (Virtual Private Network) is a technology that provides a secure and encrypted tunnel across a public network and using this VPN tunnel a private network user can send and receive data to any remote private network as if his/her network device was directly connected to that private network. MikroTik PPTP is a popular client-server VPN service that provides a secure and encrypted link across public network. MikroTik PPTP can be applied in two methods. Connecting remote workstation/client: In this [...]

    READ MORE »

  • »

    NGINX and PHP-FPM: A High-Performance Web Hosting Duo |   September 26, 2024

    When it comes to hosting high-performance websites or web applications, Nginx and PHP-FPM are often paired together due to their complementary capabilities. NGINX is a highly efficient web server which works seamlessly with PHP-FPM. PHP-FPM is a FastCGI Process Manager for PHP that is used to deliver fast, reliable, and scalable solutions for dynamic content. What is Nginx? Nginx (pronounced as “engine-ex”) is a lightweight, high-performance web server that is widely used for serving static content, load balancing and reverse [...]

    READ MORE »

  • »

    Red Hat/CentOS Network Configuration |   August 4, 2017

    Red Hat/CentOS network configuration or IP configuration is an important task to a Linux system administrator. After completing RedHat 7/ CentOS 7 fresh installation, you have to first configure your system network so that it can communicate to other network devices. In my previous article, I discussed how to install CentOS 7 core packages successfully on your physical machine. If you are a new CentOS 7 user and yet you have not installed CentOS on your machine, feel free to study [...]

    READ MORE »

  • »

    Why ISPs Should Embrace TR-069 ACS to Stay Ahead of Competitors |   May 22, 2023

    As the telecommunications industry becomes more competitive, local ISPs need to find ways to stay ahead of larger telcos and offer services that meet the changing demands of their customers. One of the solutions to this challenge is to implement TR-069 ACS server to help streamline network management, reduce costs, and increase efficiency. In this article, we’ll explore why the TR-069 ACS server is essential for medium-sized ISPs to stay competitive in today’s market. We’ll examine the challenges these ISPs [...]

    READ MORE »

  • »

    CentOS 8 Networking Configuration Using Cockpit Web Console |   January 11, 2021

    The first task after completing CentOS 8 fresh installation is to configure its networking so that it can be accessed from other network devices. In my previous article, I discussed how to install CentOS 8 Graphical User Interface (GNOME Desktop) with step by step screenshots. If you are a new CentOS 8 user and have not yet installed CentOS 8 on your server machine, feel free to follow that article and install CentOS 8 GNOME Desktop according to the article. [...]

    READ MORE »

  • »

    Port Based Apache Virtual Hosting on RHEL 7 |   July 26, 2019

    Virtual Hosting is a method of hosting multiple domains on single web server. If you have multiple domains (such as domain1.com, domain2.com and so on) and want to host on single web server, Virtual Hosting is your right choice. Apache web server provides an easy way to manage Virtual Hosting. Virtual Hosting can be Name Based, IP Based or Port Based. In Name Based Virtual Hosting, multiple domains can be hosted on single Server and single IP address. On the [...]

    READ MORE »

  • »

    DNS Server Configuration on CentOS 7 (Caching DNS with BIND) |   June 24, 2019

    DNS (Domain Name System) Server is an essential part to any computer network. Today web communication cannot imagine without DNS Server. DNS is a client server protocol where DNS Client requests for the domain name resolution and DNS Server response on it. Every network should have a DNS Server because local DNS Server improves network performance by caching DNS information and serving DNS request locally. DNS Server can be configured either Windows or Linux operating system. In this article, I [...]

    READ MORE »

  • »

    MikroTik Unequal Dual WAN Load Balancing with Failover using ECMP |   September 15, 2019

    MikroTik Router is capable of doing Load Balancing with Failover over multiple gateways. Policy Based Routing, ECMP, PCC and NTH Load Balancing are the popular load balancing methods in MikroTik Router. Among these methods, ECMP is so easy to configure and provides almost 100% load balancing and link redundancy solution. In my previous article, I discussed how to configure Load Balancing and Link Redundancy using ECMP over two equal bandwidth gateways. ECMP method is also capable of doing load balancing [...]

    READ MORE »