Objectives by Chapter

1. Blocking via Address List

• • • Understand the function and configuration of “Address List” in RouterOS.
    • Learn how to identify and add domains and IP addresses to “Address Lists” for blocking.
    • Develop skills to create and apply effective firewall rules that restrict access to specific websites based on “Address Lists.”

2. Blocking via the Content option

• • • Understand how to use the “Content” option to filter traffic based on specific keywords or text patterns.
    • Identify the limitations of the “Content” option regarding HTTPS traffic and learn strategies for its effective implementation.
    • Acquire the ability to configure dynamic “dst-address-lists” that facilitate efficient website blocking.

3. Blocking via TLS Host

• • • Learn how to use the TLS Host option to filter traffic based on the destination server’s domain name.
    • Understand the limitations of TLS Host, including its incompatibility with certain versions of TLS and browsers.
    • Develop skills to configure firewall rules using TLS Host to block specific websites.

4. Blocking via Layer 7

• • • Understand the concept and application of Layer 7 Protocols for traffic filtering on MikroTik routers.
    • Learn how to create regular expressions that identify traffic patterns of specific web applications.
    • Acquire the ability to integrate Layer 7 Protocols with mangle and filtering rules for effective web content blocking.

What the Student Will Gain Upon Completing the Tutorial

Upon completing this tutorial, students will be equipped with:

• A complete understanding of the filtering strategies available on MikroTik routers and how to effectively implement them to control access to web content.
• Practical skills in configuring firewall rules using various filtering techniques such as Address List, Content, TLS Host, and Layer 7 Protocols.
• The ability to identify the most suitable filtering strategy depending on different scenarios and technical limitations.
• Experience in testing and adjusting filtering rules to ensure their effectiveness and efficiency within the network.
• Knowledge to improve network security and manage internet usage within an organization by selectively blocking access to unwanted or potentially dangerous websites.

Target Audience

This tutorial is designed for network administrators, systems engineers, and anyone interested in managing network security and performance using MikroTik routers. It provides a solid foundation and advanced skills in implementing firewalls and web content filtering.