3

Mikrotik router Model :450g

like as,Access lists :

1.www.google.com

2.www.yahoo.com

3.www.banglalinkgsm.com

Denny list : All sites without access listed sites .

closed as off-topic by Ron Maupin Jul 8 '17 at 18:30

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "NE is a site for to ask and provide answers about professionally managed networks in a business environment. Your question falls outside the areas our community decided are on topic. Please visit the help center for more details. If you disagree with this closure, please ask on Network Engineering Meta." – Ron Maupin
If this question can be reworded to fit the rules in the help center, please edit the question.

4

You can follow this procedure:

Use Firewall > Filter Rules.

For www.google.com access :

1.add a new rule

2.chain: forward

3.Src.Address : LAN Network IP

4.Dst.Address: www.google.com

5.in.Interface : LAN Port Name

6.action: accept

7.apply >OK

For www.yahoo.com access :

1.add a new rule

2.chain: forward

3.Src.Address : LAN Network IP

4.Dst.Address: www.yahoo.com

5.in.Interface : LAN Port Name

6.action: accept

7.apply >OK

For www.banglalinkgsm.com access :

1.add a new rule

2.chain:forward

3.Src.Address : LAN Network IP

4.Dst.Address: www.banglalinkgsm.com

5.in.Interface : LAN Port Name

6.action: accept

7.apply >OK

For Other sites access :

1.add a new rule

2.chain: forward

3.in.Interface : LAN Port Name

4.action: drop

5.apply >OK

  • In RouterOS impossible to use host names in firewall rules. Only IPs. It good solution, if You can build list of allowed IPs. But google and yahoo use changing pols of adresses. – mmv-ru Oct 6 '14 at 16:28
  • 3
    first he/she need to trace the host ip then give the ip access.otherwise he/she can use layer7 rule and call the rule name . – M. Atoar Rahman Oct 6 '14 at 18:48
0

The solution described above does not work, because www.google.com does not have fixe IP address.

Solution is this: https://wiki.mikrotik.com/wiki/Use_host_names_in_firewall_rules

  • Link-only answers are highly discouraged because the links can go bad. Please include the relevant text in your answer, and provide a link to the original to give proper attribution. – Ron Maupin Jul 8 '17 at 18:32

Not the answer you're looking for? Browse other questions tagged or ask your own question.