Blocking Youtube traffic on MikroTik without the use of Layer 7 Protocol

In this lesson I will show you how you can block KZbin on MikroTik without the usage of Layer 7 Protocol

[@MisaelN74]

Saludos amigo, he estado tratando de bloquear este trafico sin tener del todo exito, pero afortunadamente encontre tu video y me ha ayudado, te agradezco el tiempo que inviertes en enseñar y dar este aporte, si se pudiera te daria miles de likes. Recibe mi agradecimiento.

[@AlexEvstafyev]

Thanks man, I spent a few days trying to block KZbin via Layer 7 rules. And only your way helped. Greetings from Russia.

[@JoseGomez-oj5cn]

Hello for those who are looking for answers... I spent several days trying to solve this problem, trying to solve the problem in the blocking of https pages, this video is the closest to a solution that I have gotten. you have to wait for RouterOs to add the ip addresses in the address list to start working on the https pages. I hope it helps you. Thank you very much for the video, greetings from Venezuela.

[@BogdanDaja]

something was change in this days.... all google service is run over the same ip so ... using TLS will block all google service... reason you get geolocation and then all the service is deliver from a local POP or something like that to decrease latency ... Nice video but can be mixed like TLS filter to get only the trafic you want to filter then apply the Layer 7 so you let other trafic who is not on your target to pass true w/o to be scanned

[@aungkhun3440]

Thanks for Sharing ...very useful video training...

[@ztejstronymarcin]

Works perfectly on your phone's browser as well as pc. And how to block youtube when someone uses the "youtube" application on a smartphone or tablet? Because from what I can see, it unfortunately does not block it.

[@davepickering997]

Good video, well explained. It would be good if this could be done only in working hours; Sunday - Thursday 08h00 - 19h00

[@freultwah]

Look into the system scheduler and enabling/disabling firewall rules when required. There are quite a few examples around. I found this, for example. You'll just have to check that the number of the rule matches. forum.mikrotik.com/viewtopic.php?t=159010

[@IRLP]

Hi! Thank You for this video, works pretty well, yet I'm curious if this applies to Bridge-Mode, since I already have my network all setup and don't want to add/create another LAN segment, I have an RB750r2. Thank in advance

[@mangkanorth]

Thanks for this video! Can you use the address list to create connection marks and packets? Then set a rule to limit the bandwidth?

[@kahitanongmaisip9358]

Yes please answer this please and those list captures is there is config that it will not expire forever?

[@syed9640]

Thank you very much much appreciated very wel explained,i tried different ways to BLOCK YT and FB this works for me but it was easily by pass by VPN proxy

[@worldcricinfo794]

Sir you Do 30 days after 30 the didn’t work are what i can’t Understand and That IP Which you use is this gatway please explain it ? 👏👏

[@felixsantiago6775]

very clear explanation thank you can you make a video of denying unwanted connection in my network ?

[@carlostzul9164]

Thank You very much !!!! worked Great!!!

[@mdhabiburrahman8599]

Blocking other Google service... what's the solution

[@eidzmerpigcaulan6664]

thank you sir ..

[@dreamteamrosario]

A couple of days working perfect, i think the router collects some server where is working Gdrive and some functios of Gmail, because I start to have some problems. Dissabling the rule it started to work well again. I live in Argentina.

[@samuelogedengbe7625]

I don't really understand what src address means i tried the router's IP but nothing is working

[@Kgx6i3]

Awesome bros

[@shahnewaj923]

Thanks

[@SergioHenrique007]

Amigo! Você é muito muito muito bom! Obg! você tem curso na udemy, não os comprei porque não tem tradução para português, mas seu conteúdo é top! thanks you so much

[@rafaelic1405]

excelente el tutorial me funciono en mi pc pero en aplicativos de mi celular en youtube no bloquea

[@syed9640]

i used this method its works but it also block other Google services like Google drive Google hangout,kindly help any solution ??

[@MsComputerengineer]

but when I use TLS to block youtube, the google applications are blocked also. So how can I use TLS to block youtube only and still google applications allowed??

[@iUmarFarooqi]

Can I block certain KZbin channels from being accessed through my WiFi?

[@frankjpsc6863]

If I block TLS host like youtube, googlemap dst address are added. So googlemap blocked also. How can I fix this situation?

[@kxrist2]

it is clear. What to do after 30 days ?

[@kahitanongmaisip9358]

Yeah what happened? It can last forever? I mean it will not gone?

[@Widecommunication]

why google translate and some google services not working after KZbin block. (what is solution)

[@creatin11]

doesn't work, when I create only the list, counter doesn't count packets it stays at 0

[@andysamuel9399]

me too

[@andysamuel9399]

I actually got mixed results, so I'm just guessing it's not perfect, but it works

[@creatin11]

@@andysamuel9399 make sure fasttrack is disabled and these rules are on the top

[@andysamuel9399]

@@creatin11 dont have fasttrack and i dont have any other rules beside these one. I can see there are several IPs registered in the address list. It,'s just that not all youtube videos got detected. Probably there are more tls hosts available. I'm using youtube and googlevideo

[@anakayam6997]

it's running fine but for google drive is also blocked, can you help me?

[@expexe2105]

It also block google. Is there any way only to block youtube but, no google.

[@popovichrush]

Do cache video for wisp I will pay to learn

[@izobemheuwaremevoh1459]

After blocking youtube. I noticed that my Google drive and some good services stopped working. What should I do?

[@MAICT]

Correct, they are all on the same servers. Nothing can be done.

[@SikandarBhatti]

its not gona work ive tried it

[@gokhanunal1668]

Not working in chrome and blocking other google services. what should we do in this situation?

[@MAICT]

try to use this TLS host then: *.googlevideo.com

[@ekramhamouda2080]

@@MAICT could you explain how in details

[@josephchristiantuzon7640]

thanks for the tutorial

[@LukasKisza]

Does not work with IPV6

[@uthasensuphakorn2635]

try drop all website allow just afew website but all very slow

[@shakajanzmabz9476]

its ok but not work for my mikrotik...thanks

[@ahmdnaube3745]

How to block all the VPN Apps both for Android and iPhones using Mikrotik? Anyone knows?

[@frankjpsc6863]

if you ever know the answer at your question please drop here, I need it too.

[@ERolando78]

Excellent, I congratulate you. How could you block pornographic pages using TLS Host, with a list of addresses. Or do you have some other method to perform the lock? Thanks for your time.

[@Vinothmanick]

Rolando Melgarejo use content - porm in the filterrule

[@Vinothmanick]

Also use the family safe dns

[@ERolando78]

@@Vinothmanick ok, thank you

[@piotr424]

Better you use Layer 7 -regexp instead tls-host. l7 is more effective

[@waldimajster7168]

nie działa

[@waldimajster7168]

Działa przepraszam zły format adresu lokalnego miałem wpisany wycina teraz youtuba .Pytanie tylko czy po upływie tych 30 dni wystarczy wpisac na nowo 30 dni czy teraz moge wpisac juz wiecej dni , ale to sie zobaczy dzieki

[@ztejstronymarcin]

@@waldimajster7168 Ja zwyczajnie zamiast 30 dni zostawiłem "none dynamic" i działa. Problem u mnie tylko w tym że fakt yt na przeglądarkach blokuje, ale na aplikacji youtube normalnie filmiki działają.