Therefore, the above would not be very effective. The problem with the above is that Facebook uses multiple IP addresses for access to its servers globally. Here is an example of what that configuration would have looked like.Īdd action=drop chain=forward dst-address=185.60.219.35 In the MIkroTik firewall filter, the Forward chain should be used to capture all traffic passing through the router. If this were the case, we could configure any destination IP address of to be dropped. In a perfect world, Facebook would have only a single IP address and we could configure one simple rule. In our example, we will block all traffic going to Facebook.

One of the most common questions we are asked by new MikroTik users is 'How do I block websites?'. A combination of these and other settings can also be used to achieve more specific results, depending on your requirements. Any traffic leaving the LAN (Internet) will be classified with destination addresses. If you want to filter specific users on your LAN, this can be achieved by using source addresses.

Traffic can either be filtered by source, or destination IP addresses. Traffic Filter on Source or Destination IP Addresses One of the most common techniques is to apply traffic limitations by making use of IP Address Lists.

When using MikroTik RouterOS, there are several ways to achieve this. Traffic filtering is a method of identifying and prioritizing different traffic types passing through a common router by applying filter rules based on your network requirements.

Mikrotik mac address list