Best way to block Facebook traffic on MikroTik RouterOS
HTML-код
- Опубликовано: 4 фев 2025
- mynetworktrain... - In this video, I will show you step by step how you can block Facebook traffic on the MikroTik RouterOS.
Here are the contents that I used in this video:
.facebook.com
.fbcdn.net
.facebook.net
#mikrotik #facebook #firewall
![Felix "Unfair" | [Stray Kids : SKZ-PLAYER]](http://i.ytimg.com/vi/Oswujxm2Ag0/mqdefault.jpg)
I'm doing DNS filtering, first you only allow dns requests to your local dns (router or pihole or other), then you filter facebook related requests. Done! Works perfectly fine for me, doesn't eat up resources.
how did u do that? @sp4c33
this is also a good solution but not everyone has a dns server. this solution is good for those who have mikrotics @@akrammokhtar5912
The first real solution for web and apps. Thank you sir.
It's working! you are the best
dear Mr Maher Haddad kindly share the video about the youtube and other social media block in efficient way this video is very helpful for us thanks again for this video kindly make the video for youtube and some other social media block in mikrotik thanks
Awesome tutorial and it works. I use open dns servers. Unfortunately, other Google services cannot be reached, eg, Google Sheets etc when blocking RUclips a work...
Yes, me too have same problem when block youtube,, is there solution for this?
Hi, thanks for your tutorials. I would like to know how to block RUclips without blocking Google products like Google Drive etc. Thank you very much.
Im very thankful for explaining briefly.sir is their a possibility that we can give access to other department that needs to open a facebook
great guide
is it possible to block one ip address lan or does it have to be the whole network?
Thank you for the tutorial. It was very helpful. I use this method for youtube . WORKING thanks a lot.
Thank you for sharing your knowledge this configuration works well for me
nice one sir... can you please show your method in blocking games like Mobile Legend?
when you did this vid was your mikrotik in bridge mode or router mode
perfect explained
hi sir thanks for your video appreciate it, can you make a video only to allow youtube on a specific ip on mikrotik
Thank you. Its working.
Does this technique work for Tiktok, RUclips and other social media websites and Apps?
Hi Maher, Hope you are well :) How can we create an approved list? Only these 5 sites are allowed?
Thanks
excellent i'm trying to use a similar trick to make a kind of mfa for authorized peripherals on my network
to block facebook i'm using pihole ;)
Hi Mr Haddad, I made the settings, but the ip addresses of facebook do not appear in the address list so can not work on dropping
Make sure your router can resolve names. Go to IP DNS add DNS there . Address list should be able to resolve names thereafter and do the blocking
How do you look for content for other sites sir? any efficient way to look for them?
capturing using wireshark for example
Great job have a nice video i have done by MAC address but i want to know how to add bulk mac address (Scenario i wish to add by mac addresses which one i want to block )
You should create a group for that.
Hello sir,
Is there any course on troubleshooting mikrotik related.
Amigo tienes la de X actualizada?
This option can be detect DNS queries and block DNS server, then check port 443/tcp (443/udp maybe) and 80/tcp, also limit "Connection-bytes=0-8000" to check first 8kb before TLS encrypt.
Can it be redirected to a site instead of blocking it.
Hello Sir - is it possible to use same method for torrent sites?
sir can you please make a tutorial on how to block torrent traffic on mikrotik.. thanks
Thank you for sharing your knowledge,
How about the adult site, how to block on the mikrotik?
thank you, but what about whatsApp and Instagram which they are already related to facebook and they used the same prefixes, will they also be affected ?
no it is not affected.
Hi Mr Maher HADDAD, what is the best way to block all websites except few ones ?
great
Hi mr. Maher,
It looks like facebook use the same IPs for the messanger too. Is it possible to blok facebook but to allow messanger in some way?
Looking forward for your reply.
ps. Thanks for the video, guideing me in my firs mikrotik steps:))
Best Regards,
nop!
bunun icin bir firewall almalısın fortinet yada sonicwall gibi
Thanks too much!
Thank you.
Welcome
1st question??
Brother, can you make a block website? such as youtube, facebook, google, other browsers and search browsers and others.
should the user only be able to use online games??..
but only select users..?? can mikrotik do it??
2nd question??
is it possible for other users to do everything like games downloading searching, watching and so on???..
but only selected users can use that??
funciona para las APP de facebook de ipgone?
what the different if you using raw to get facebook IP to address list?
Dear sir , Is possible if I would like to route facebook destination address list to a specific wan instead of drop, thank you
Thank you for the tutorial!
You are welcome!
how can we allow few users to use Facebook. through this method i have blocked facebook for entire network but need access for few.
After applying the first rule ,before applying the drop rule .I didnot see any traffic and any ip collected in address lists . What could be the reason sir?
do you have a fasttrack rule setup in the firewall? that was the problem for me. I removed it and it started to work.
@@nyozegamon2204 You can explain how to remove fasttrack rule?
@@volkanaydn3685 Did you find it?
@@nyozegamon2204 It was very easy, I found it on the internet.
@@nyozegamon2204 I removed it but I still can't see an ip. what do you think the reason could be
Hello sir,
What if you want to block RUclips with filter rules?
in the action tab bellow the address list
you said timeout 96 hours keep
but what is its function ??
I think it has a function not technically but in terms of experience. I think it may be to prevent the device's memory from filling up and swelling.
Does this work on ROS 7.6?
it should.
What is 10.0.0.0/24?? Is it your router ip address or something else
Did anyone notice that this guy looks like the Co-founder of "Bharat Pe" Mr. Ashneer Grover.
Will it work on fb app
no
nice so if i want to block whatsapp??please i want to know
Its working butt i am allow to some mac book to used Facebook how it is possible
Perfect, drop in Raw, the best
Lock download of mp4 and torren files
How is it done?
Without blocking other sites
Sorry sir, can you please tell us, How we can get these Content?
In an ther video of blocking RUclips. you use different method. That method work fine for me. Why should i use this?
You simply shouldn't :) - Just use the method which works better for you.
6.49.6?
How to Allow some users
not working with empty address lists
just close fasttack and restart it, that's how I solved this problem
How about block all traffic except Facebook? In other words, only allow Facebook to work while all others are blocked.
Use the exclamation mark on the address list inside the firewall rule
Thanks
How to block tiktok please
Truth be told i have blocked RUclips while watching this tutorial on RUclips … call me stupid
Fb app not block using this
it is blocking for me are you using a vlan structure
شكرا بس ماعم يعطي شي عال Address list
How block netshare app in mikrotik router
pls limit spotyfi
How to Block mp4 Download using mikrotik
Yeah, that could be it.
How is that done?
Without blocking other sites@@PLTYAZILIM
RM3011 Not Working
excuse me content
Hi. Great video. I'm having a hard time with workers on Facebook and WhatsApp. *First question* that I have: Can you set "none dynamic" to let it collect forever, instead of 96 hours, done in your configuration (could this be set forever)? *Second question* : I watched your other video that blocks WhatsApp. I tried that IP list, but I don't think it's working with WhatsApp... I issued an netstat -a command in Windows and it shows whatsapp-cdn-shv-01-gru1.fbcdn.net that's on IP 157.240.222.60. We can see here that somehow that list needs constant feed since this can only be a new server. The ticks are still going. Would we need new IP information? Is there a way to block WhatsApp by content argument - specially blocking on cell apps. We need to block this... And thank you again for using Mikrotik with this. Many thanks.