If you want to block any website only on one particular network If there are multiple local networks created on the MikroTik router, the above rule created will block the website across all networks. This step is very important as filte rules work in top to bottom order and you need to make sure the rules are set accordingly. ĭrag this rule above the other essential firewall filter rules. The firewall rule as seen in the images above will be added instantly. Copy and paste the above command in the terminal window and hit enter. The MikroTik terminal command for adding the above rule is as follows: /ip firewall filter add chain=forward protocol=tcp content='facebook' action=reject reject-with=icmp-host-unreachable comment='Block Facebook' In the Action tab, Select Action as reject, then Select Reject With as icmp host unreachable.Ĭlick on Comment to add a label “Block Facebook” to the rule. In the Advanced tab, Enter ‘facebook’ in the content field

Step 2: In the General tab, Select chain as forward, Select protocol as tcp.

In order to block a website for e.g “Facebook” through a MikroTik, the steps are as follows:. This method will try to match packets that contain the specified string in the URL, and then accordingly take an action on these packets as per what action is selected.

This filter can be found in the ‘Advanced’ tab while adding new firewall filter rules. In this method of “Web Filtering”, specific websites can be blocked on MikroTik using the Content Filter Rules. How to block websites through filter rules in Mikrotik

Mikrotik firewall