General Objective of the Tutorial

Provide students with a deep understanding of how to implement various filtering strategies on MikroTik routers to block access to unwanted web pages, using tools such as Address List, Content option, TLS Host and Layer 7 Protocols.

Objectives by Chapter

1. Blocking via Address List

   • Understand the function and configuration of “Address List” in RouterOS.
   • Learn how to identify and add domains and IP addresses to “Address Lists” for blocking.
   • Develop skills to create and apply effective firewall rules that restrict access to specific websites based on Address Lists.

2. Blocking via the Content option

   • Understand how to use the “Content” option to filter traffic based on specific keywords or text patterns.
   • Identify limitations of the “Content” option against HTTPS traffic and learn strategies for its effective implementation.
   • Gain the ability to configure dynamic “dst-address-list” to facilitate efficient blocking of web pages.

3. Blocking via TLS Host

   • Learn how to use the TLS Host option to filter traffic based on the domain name of the destination server.
   • Understand the limitations of TLS Host, including its incompatibility with certain versions of TLS and browsers.
   • Develop skills to configure firewall rules that use TLS Host to block specific websites.

4. Blocking through Layer 7

   • Understand the concept and application of Layer 7 Protocols for traffic filtering in MikroTik routers.
   • Learn to create regular expressions that identify traffic patterns of specific web applications.
   • Gain the ability to integrate Layer 7 Protocols with mangrove and filtering rules for effective web content blocking.

What the Student Will Get at the End of the Tutorial

Upon completing this tutorial, students will be equipped with:

• A complete understanding of the filtering strategies available on MikroTik routers and how to effectively implement them to control access to web content.
• Practical skills in configuring firewall rules using various filtering techniques such as Address List, Content, TLS Host and Layer 7 Protocols.
• The ability to identify the most appropriate filtering strategy based on different scenarios and technical limitations.
• Experience in testing and adjusting filtering rules to ensure their effectiveness and efficiency on the network.
• Knowledge to improve network security and manage internet usage within an organization by selectively blocking access to unwanted or potentially dangerous websites.

Who is it for?

This tutorial is designed for network administrators, systems engineers, and any individual interested in managing network security and performance using MikroTik routers, providing a solid foundation and advanced skills in implementing firewalls and web content filtering.