KONFIGURASI BLOK SITUS DI MIKROTIK

Summary

This tutorial demonstrates how to block specific websites, such as Google, on a MikroTik router using Winbox. The process involves enabling the web proxy, creating access rules to deny access to certain sites, configuring firewall rules to block the destination ports, and testing the setup by attempting to access a blocked website. The guide is aimed at helping users configure site blocking effectively on their network, ensuring that only the specified websites are inaccessible while leaving others available for use.

Takeaways

• 😀 Step 1: Use Winbox to connect to the MikroTik router for configuration.
• 😀 Step 2: Enable Web Proxy under 'IP > Web Proxy' and apply the settings.
• 😀 Step 3: Add an access rule to block specific websites, such as Google, by defining source IP and destination host.
• 😀 Step 4: Deny access to the specified destination host and apply the rule.
• 😀 Step 5: Configure the firewall to block web traffic for the targeted site (Google) using the proper protocols.
• 😀 Step 6: Set the destination address to the blocked website (e.g., google.com) and adjust the port settings.
• 😀 Step 7: Apply firewall rules to prevent traffic to the blocked website on port 80 and change it to 5000.
• 😀 Step 8: Test the configuration by attempting to access the blocked website from a client computer.
• 😀 Step 9: Ensure the blocked website (Google) cannot be accessed, while other sites remain available.
• 😀 Step 10: The configuration successfully blocks Google, confirming that only specified sites are restricted while others are not.

Q & A

What is the purpose of this tutorial?

The purpose of the tutorial is to guide users on how to configure website blocking using Mikrotik's web proxy feature.

Which application is used to begin the process of configuring the site blocking?

The process starts by using the Winbox application to connect to the Mikrotik router.

How do you enable the web proxy feature in Mikrotik?

You enable the web proxy by navigating to the IP menu, selecting 'Web Proxy,' and checking the 'Enable' box under the General tab.

What is the purpose of setting the 'Access' menu in the configuration?

The 'Access' menu allows you to specify which network (e.g., the source network) will be blocked from accessing certain websites.

How is the source network defined in the script?

The source network is defined as '192.168.0.0/24,' representing a Class C network that will be blocked from accessing the specified sites.

What destination is chosen for blocking in this tutorial?

The tutorial demonstrates blocking the Google website by setting the destination host to 'google.com' or its equivalent.

What action is taken to block the site access?

The action taken is setting the connection to 'Deny,' which blocks the specified site access from the source network.

What firewall rules are configured to reinforce the site blocking?

A firewall rule is configured where the destination network is set to 'DST Address' with a protocol type of MCCB, and specific ports are modified to ensure the blocking of the website.

Which ports are altered to block access to Google?

The port is changed from 8080 to 5000 to block access to the Google site through the web proxy.

What is the result of the site blocking after the configuration?

After the configuration, any computer client connected to the network will be unable to access Google (google.com) while other websites remain accessible.