0

I am using a MikroTik Router and I tried to do it with firewall but it blocks the whole internet to the client and when i put a filter rule for allowing

One website for him its not working here is my rules:

For blocking whole websites:

ip → firewall → chain = forward → Src.Address = 192.168.2.33 → Action = drop

For allowing one website

chain = forward → src.address = 192.168.2.33 → Layer7protocol = valuefrom layer7proto → action = allow

Please help me.

Uwe Keim
  • 2,370
  • 4
  • 29
  • 46
David
  • 11
  • 1
  • 1

2 Answers2

1

First of all you should allow the client to resolve its DNS queries so make a rule which allow forwarding of DNS (UDP port 53).

Then you should allow TCP port 80 destinated to IP addresses of the websites. Notice that the website maybe contains object from other websites. You should allow then in your firewall rule.

At the end you should put allow rules upper than deny rule.

Jim
  • 63
  • 6
0

I'm not sure if it will be much help as I'm not familiar with your setup but IE has a built in filter called something like Security Advisor or Content Advisor in which you can allow access only to certain sites.

If you uninstall any other browser apart from IE his website access will be fully controlled. The only way to get round it is to install another browser but I'm sure you can figure out a restriction for that as well :)

Mightypup
  • 1
  • 1