Best way to block Facebook and Twitter traffic on MikroTik

[Music] hello everyone did this man had that here in this first lap I'm going to show you how you can block Facebook and Twitter from your network that means that all traffic which are going to Facebook and Twitter from your network then it's gonna be blocked and then users are not able to open Facebook or Twitter social medias from your network so as you can see here we have 11 points to do but before I start doing the points let me just show you briefly what is the scenario that we're going to work on so here as you can see our network scenario we have a mikrotik router here connected to the internet so that means that the router is are now connected to the internet without any problem and what I need to do now I need to connect my computer to the router which actually it is already connected and then it should get internet from the router then this PC will be also on the internet so in this case when you are connected to the magnetic router and if you don't have any filtering and also if you don't have any filtering from your ISP then you are able to go to any website or any application that you want but in my case what I need to do I want to block the users which are in my network so in my case this might be see here I want to block it to not be able to go to Facebook and Twitter so what I'm going to do I'm going to the mikrotik router here and I will make what we call an address list and I put in this address list all IP addresses of Facebook and all IP addresses of Twitter servers so the others list is nothing more than like a way to classify all the IP addresses and then I say that anyone who is coming from my internal network to the internet sopia my router and going to the Facebook or Twitter then in this case it will check against this address list and it will check for every single address here if it's matching then in this case I said to the router denied okay that means that do not allow the packet to go from the router to Facebook or Twitter server okay so you are going to drop it and then in this case the router will disallow the users to go to Facebook and to Twitter so this is what I'm going do in this lab let's now go back to the punch and we start doing them one by one point number one go to HTTP slash slash BGP datasheet net and search for Facebook so what does it mean actually what I'm going to do I'm going to take all the IP addresses of server which are for Facebook and later for Twitter and I'm going to put them inside an address list like I already said so whenever someone is trying to go to Facebook it will check this address list and if there is any IP of the Facebook IP addresses or servers is mentioned there then if it's match then it will drop it I will create a rule for filtering to drop the package which is going to Facebook so how can we get all the IP addresses from Facebook actually you need to go to the browser and then you have to go to this website HTTPS BGP dot H e dot map I highly advise you that you go to Google Chrome because when we want to patch now to the excel sheet if you are using any other browser it may make problems for you and I will show you why you need to do that but let's now go to the browser HTTP slash slash busy p dot h te dot map so this is the browser that we need to go to and then here on the search I write Facebook okay so when you write Facebook you can get all the IP addresses of Facebook servers that are available on the Internet alright so what you need to do now we have to select them and paste them but let's first go back to the points what number one is done point number two we have to copy the result that we have seen from the website and paste them as Unicode format to an excel sheet so I have already here opened an excel sheet so this is my excel sheet and I need to go to go first to the here we go to the page of BGP datasheet net and then I will select all this okay so let's go from here I will select start from this level so go down and then you have to select everything here so and then we need to copy that and paste it inside an excel sheet so let's do that I will copy it now everything is copied and I'm still using the Google Chrome browser and then I will copy so see I'll go to the excel sheet and then here what you need to do you have to go to be and not to a because I'm gonna use a in a moment and I'll show you why and then I will have to go to paste special and then you select Unicode text and then I will say okay and okay then you can see everything is pasted here and let's make it this way and then what I need to do now I will clean everything and then I will keep only the IP addresses of Facebook point number two is done pot number three keep only the IP version 4 column so that means I need to delete all the other columns that I have and also the IP version 6 ok so let's do that I will go to the excel sheet first this one I have to see to delete it so everything is deleted here I will clean it so these are the autonomous system here I'll take them out delete and then these are IP version 4 here started IP version 6 so I will select everything which is IP version 6 so to this level here this is IP version 6 and then I will delete them and then the rest will be all I PU version 4 ok so this is what I still have as a list of IP addresses from Facebook so point number 3 is done point number 4 do the same for Twitter so we also need to do the same for Twitter I will go first over here and I will mention this sheet I will name it Facebook ok I will create another one and I will name it here Twitter and then I will go back to the website and on the browser here I have to go up and then I'll have to search this time for Twitter so let's move up and then here I will search for Twitter and then again I will select everything here for Twitter so all this IP addresses that I'm going to use now to be blocked so no one can go to Facebook or to Twitter again and we go now to this sheet for Twitter to be I pay special as Unicode text and then I'll say okay and I will delete this one and let's see if we have any IP version 6 also we take it out so this one is deleted and then we check here here started IP version 6 and there we only have those three I did eat them and then let's check down and this is the list of Twitter one number four is done point number five log to win box go to the terminal and create an address list name at Facebook without an address and copy it do the same for Twitter so what we need now to do we have to create the add richness that means a classification of the IP addresses for Facebook and for Twitter so now I will go here to one box so this is one box I will go to my main router so this one is the one connected to the Internet where I have to make my filtering so I'll put the password ok we go to the terminal and what I need to do here I have to write actually I want to show you what I'm doing here because actually we need to create the address list and the address list is inside IP firewall and you can see it over here so normally if you want to make it manually you can make plus and then here you can name this one for example Facebook and then for every IP that I have in my list you have to paste it here and then you have to do it one by one so if I go here to Facebook so what I need to do I have to take this one copy it and then I will go here and I will put it here then I will create another one also Facebook the same name should have so Facebook and then I will go to here to the second one copy it and paste it here and so forth and this takes a lot of time for us to do it so I'm doing a very fast way to do not make this manually so we go to the terminal here and here I have to say IP firewall address list and question mark here and here I have to say and then I will add a list and we name it Facebook okay and question mark then address equal and then that's it I don't continue the comments so I just need to copy this one so I'm saying that I want to create an in firewall and address list we name it Facebook which have an address and that's it so I would copy this one now I'll go to the excel sheet for Facebook I will paste it here on the column of a okay so we paste it here and then I will make it bigger all right so what I need now to do actually this needs to be on the first one so I will make it here and put it here okay so what I need to do I just have to let this comment go down to the last IP address so to here so you can see I have now a list of a comment that I'm doing for all those that means that every IP you can you see here every network it's now gonna be inside addresses called Facebook then when I then that's what I need to do for Facebook I will do the same for Twitter so I would go here and I will paste the same one so let's do that I will copy this from here copy and then I will go to Twitter and then I will make paste but here I just want to change the address list name I want to be Twitter okay so we make here the address list gonna be Twitter okay and then I will make it like this to the whole IP addresses that I have for Twitter all right so this is what you need to do part number five is done point number six add the copied comment to the excel sheet for Facebook and Twitter also we have done that now we need to have an application called notepad plus plus and paste the Facebook content to it because this contents needs to be pasted inside the Microtech terminal then if it's you copied from the excel sheet and you paste it it doesn't work so you need to have an application which can do that for you and there is an application called notepad plus plus so if we go here and we can search for example for notepad plus plus download ok and then you can see it it's here notepad plus plus download and then you click on it you just download it ok you download it and you install it I have already done that so it's just a very simple application it's for free you can download it and install it and now I have the notepad plus plus open here ok so this is the first one so what I need to do now I have to go to the excel sheet and then I will go to Facebook and then I will copy everything here so all these contents I copy down you see I'm copying this one and then I would go to the notepad plus plus and I paste it here so now it looks really like a comment or comments that I need to put them on mikrotik router ok so then this is done and they ask us here to paste the content of Facebook and also to copy the not bad content and paste it to mikrotik router so it's already now pasted here I will copy everything from notepad plus plus I will go to the my clear outer I will delete this one and then from the terminal here I would just try to click paste and that's it now what happens that these comments are now added to the mikrotik router and we can see here if we go to IP firewall you can see that inside the address this that is analysis called Facebook having all those IP addresses already added you can see them here point seven is done we have the notepad plus plus and we patch the Facebook content to it and then we add them to the terminal we have to do the same for Twitter all right so I will go now to the excel sheet and then to Twitter then I would copy everything so let's do it from here I will copy all those IP addresses let's check if it's copied everything yeah then I will copy that so it's selected and copied now we go to the north path plus plus our create a new one and then paste them and then I would copy those so I select and copy and then I will go to the mikrotik router to new terminal and then I pass them so that's much faster then if you want to add them one by one okay now if I go to the address list we have now the Facebook one and down we have Twitter okay and if you want from here you can also sort out you can say I want just to see Facebook then it shows for your Facebook and you want to see only Twitter then it shows you only Twitter what number nine is done now we need to do the firewall and this final is going to be to drop any packet going to Facebook or to Twitter on the addresses that we have available so we have to go to IP five we will create the rule to drop off Facebook traffic and check if it works and we have to repeat the same for Twitter before I do that I just want to open the browser and here on the browser I want to show you that at this moment if I go to Facebook it is Facebook it is working and if I go to Twitter it is working okay so now we need to do the firewalling I'll go to win box and then from here I will go to IP firewall and then we create a rule okay and this rule is gonna be here forward so follow it means for a traffic going to the Internet via the router so I would say forward for any source address then we go to advanced and then the destination address is Facebook so destination address list that means any any traffic going to the address list that we have created then the action is to drop okay and here you can put a comment block in facebook okay so again I can repeat here we can say here that the for the channel forward that means any traffic going via the router to the internet from any source coming okay which is trying to go to any of the IP addresses of the other stress which is Facebook then the action is to drop down and I would say okay all right and that's check now if Facebook is coming open again so I will create now facebook.com i right here facebook.com and we can see that it's not opening and then if we go here we can see that there is a traffic passing because the filter now is blocking all the traffic for Facebook you can see here the bites are increasing so let's do the same also for Twitter and then we go also we create a filter rule and from here I have to say again forward address destination address Twitter the action is to drop and that's it now if we see that Facebook is not opening and if we try it whitter now twitter.com and we check now also on the filtering so this one is for Twitter actually you can see that the bytes are increasing and we will check in a moment that Twitter also will not work also this will not work as well on your phone if you have smartphone or tablet also this gonna be blocked completely okay while if you open for example youtube.com then it is working okay because there is no any filtering for that if you open linkedin.com it is still working alright so this way is the best way I can show you how we can block Facebook and Twitter from your network because when you trash all the IP addresses and put them in an address list then any packet going to those IP addresses is gonna be blocked pot number 10 is done we have created the firewall rule and we dropped all Facebook traffic and when we have checked that it's not working then point number 11 also we have done the same for Twitter and we have checked that it's not working when we create a filter rule so this is the best way again to show you how you can drop the traffic for Facebook and Twitter from your network whether you are doing that at your home or you want to do it at your company this is the most efficient way to block Facebook and to block Twitter on mikrotik using the address list and then you create the filtering rules to block all traffic going to the list of the other states that you have already created them inside addresses so this is what I wanted to show you in this lab I hope that this lab was informative for you and I will see you in the upcoming lecture

Channel: MAICT Consult

Views: 6,694

Keywords: MikroTik, Best configuration tips, udemy, MAICT, Mynetworktraining, Coupon

Id: 4gxiM9cyjXc

Length: 18min 20sec (1100 seconds)

Published: Tue Sep 18 2018