RouterOS DNS server now has a new feature - adlist. Introduced in version 7.15 it takes URL lists and blocks unwanted web content. help.mikrotik.com/docs/displa...
Пікірлер: 85
@jan.kowalski4 күн бұрын
Amazing! Mikrotik is is the go to technology because they LISTEN to the people.
@ON3RVH4 күн бұрын
but they don't.. they add features nobody in the real world wants/needs instead of fixing their bugs and testing new releases before they come out instead of letting the community do their bug testing...
@jan.kowalski4 күн бұрын
@@ON3RVH Aren't you a little negative person? For instance I'm happy with mikrotik products since early 2000s.
@ON3RVH4 күн бұрын
@@jan.kowalski negative? not really.. I've used tik since a very long time and although I like using tik, ROSv7 has been an absolute nightmare.. With every release they break new things, things that were working before are all of the sudden completely broken and new things that no one needs or wants are being added.. DLNA, adlists, .. all useless for a router. DLNA for example has been obsolete for almost a decade but still the mikrotik team insists on putting money and effort into developing the standard all over a gain instead of fixing what is broken and new releases don't even get tested if you look at the forum.. all the bugs that folks find that are pretty easy to spot if they had done any decent testing of the release before putting it out there..
@user-lg4le8xr4s4 күн бұрын
@ON3RVH how many times have you copy+pasted that on this video now
@ON3RVH4 күн бұрын
@@user-lg4le8xr4s 0 as I don’t copy/paste..
@EvangelosBrempos3 күн бұрын
Thanks for adding more useful features to routeros. You people are awesome.
@thetechdudemc4 күн бұрын
Another use for this is as a content filter for public wifi, schools or libraries. They can import a list of NSFW websites to block and restrict access to, it doesn't have to be just for blocking ads specifically
@mikrotik3 күн бұрын
That’s true. You can make your own list with anything inside
@SoleSur5er4 күн бұрын
Just add a whitelist option and it will be perfect for regular home use!
@Sarcasthik4 күн бұрын
Nice feature ! As others have said, it's not really on par with Pi-hole's features but it's a start ! I personally don't need all the features Pi-hole offers, so just being able to whitelist URLs and check requested URLs per device would be enough for me.
@japanstation14 күн бұрын
That's fantastic! Thank you for adding this feature.
@educ66324 күн бұрын
It would be good for it to download directly to RAM and bypass the flash, so CRS326 with 16MB of flash but enough RAM could use the feature.
@mikrotik3 күн бұрын
The list itself is already stored in RAM.
@byronnarainna6772 күн бұрын
Just tried it out , works perfectly , Mikrotik for the win
@AshAckroyd4 күн бұрын
Excellent, just excellent 😁
@andresdds4 күн бұрын
on hAP ac^2 with RO 7.15.2 Locally hosted adlist - worked correctly, name-count=163299 URL based adlist - same list, name-count=0
@mikrotik4 күн бұрын
Something prevented the download from URL. It could be incorrect SSL configuration, a firewall rule, DNS resolution problem or maybe just a typo in the URL.
@andresdds4 күн бұрын
@@mikrotik I downloaded the file on the device itself without any problems with fetch, I will do more testing, thank you!
@mniewiera4 күн бұрын
@@mikrotik I'm having exactly the same problem. SSL verification is disabled, no firewall rule preventing it, dns resolution and typo can be ruled out since the same url worked when fetching the file on the router.
@mniewiera4 күн бұрын
Same problem here. Also nothing in the logs. Please let me know if you find a solution ;-)
@koalasoftteam4 күн бұрын
same issue for me ( 7.15.2, hAP ac lite, local file OK, url NOK)
@NevaranUniverse4 күн бұрын
Thats pretty awesome, though barebones. It would definitely benefit from the ability to comment each entry, and disable/enable them on-the-fly, just like usual adblock DNS'
@kchiem3 күн бұрын
If a domain is listed in more than one host list, when it's matched, does the match count increment for both lists or just the first one?
@zorganek4 күн бұрын
Super work ... thank.
@maxpain1774 күн бұрын
Wow, perfect!
@kchiem3 күн бұрын
also, some times it's useful to pause ad blocking. can this feature be paused without disabling every single list? EDIT: nevermind, I see there's a pause feature in Winbox. could have mentioned that in the video.
@mikrotik3 күн бұрын
This is coming in one of the next updates
@Graham_Rule4 күн бұрын
My Pihole currently uses a number of lists and merges them (allowing me to keep a list on a server of my own as well as using external list). Is this something that Mikrotik can add?
@mikrotik4 күн бұрын
You can use multiple lists as well
@liosali4 күн бұрын
@@mikrotikdo we use the same method to add multiple lists ?
@BoraHorzaGobuchul4 күн бұрын
@@mikrotik Yes, but does it merge them, avoiding duplication?
@DrewskiusMaxiumusTheThird3 күн бұрын
After adding, it will not download the file. Tried a few different things and ended up manually making the file myself after copying the links to a txt file. That does work but wont auto update. Hopefully that download issue could be fixed or has a fix to get it to work later on.
@mikrotik3 күн бұрын
Probably you forgot to set ssl verify to off
@DrewskiusMaxiumusTheThird2 күн бұрын
@@mikrotik Made that was off actually, also tried via winbox widget instead of cli. Looked over my firewall rules and cant see it getting blocked either.
@RadHard4 күн бұрын
is it possible to do DNS server randomization like in blocky? (golang) That also is quite nice for privacy
@mikrotik3 күн бұрын
You can add as many dns servers as you want
@Maverick87Shaka3 күн бұрын
Can be used to have a kind of "whitelist? so block everything except the urls of a specified list?
@mikrotik3 күн бұрын
Download the list to your computer and edit out the urls you don’t want blocked. Whitelist as a feature is coming soon
@Maverick87Shaka2 күн бұрын
@@mikrotik Thanks for reply! I'll have to wait the whitelist feature, since I have to block everything (especially unknown sites) allowing just the one needed for a specif software to run. There is an ETA or target build for this feature to come?
@4L3xN3t4 күн бұрын
Does it have the same clients grouping and white\blackilst functionalities pi-hole has?
@ON3RVH4 күн бұрын
of course not.. It can't beat Pi-Hole as Pi-hole does so much more and is easier to maintain and troubleshoot The adlist on tik does not even have any features, just add the list and be done with it, while in the real world we need to do so much more and be able to whitelist too
@4L3xN3t4 күн бұрын
@@ON3RVH ok, thanks for the confirmation. I suspected it was a truncated function that this way is practically useless
@orlagh277Күн бұрын
@@4L3xN3ti think it might be better for low ram devices, my ac2 seems to run out of ram from time to time when a container is running, i might just switch to an adlist since i just want to block ad websites
@me.ko.i12794 күн бұрын
Nice feature.
@hoanggiangnguyen93084 күн бұрын
How long until mikrotik starts recursively resolving DNS?
@user-eh8oo4uh8h4 күн бұрын
You can run a lightweight container with unbound/bind9 if you want a recursive DNS server.
@hoanggiangnguyen93084 күн бұрын
@@user-eh8oo4uh8h I did it! I asked if mikrotik could integrate recursive DNS resolution, that would be great!
@biki19734 күн бұрын
how hard is that feature on internal flash memory? just in case i use this feature by downloading lists to connected usb memory and then refreshing adlist, but maybe it would be nice in the future to add option to select temp location for downloaded lists?
@edddy224 күн бұрын
As it uses dns server ram cache, lists being downloaded are only being stored in ram I assume
@EftiarHossain-oo2gq4 күн бұрын
Thanks Mikrotik
@GreDi_PL4 күн бұрын
This functionality does not work if the router has the Use DoH Server configured :sed-pepe:
@mikrotik3 күн бұрын
You can’t “want to use other dns server” and “don’t want to use other dns server” at the same time.
@krillAmorim3 күн бұрын
Can i use RouterOS on my Raspbery or Orange PI?
@mikrotik3 күн бұрын
No, bare metal install is only possible for x86 and AMPERE CPUs.
@krillAmorim2 күн бұрын
@@mikrotik that's why we continue to use pi hole. If it works on my rasp i would buy a level 4 license for routerOS. But don't get me wrong, i'll buy a Mikrotik hap ax model, they're amazing! But i can't decide. Hap AX lite AX2 or AX3. Please Mikrotik make it possible to run RouterOS on my PI devices!
@NGC14334 күн бұрын
Fantastic! Will check it out!
@livankiv4 күн бұрын
Do not forget to add NAT rule, to avoid addlist bypassing :) /ip firewall nat add action=dst-nat chain=dstnat dst-port=53 protocol=udp src-address=! to-addresses=
@RmFrZQ4 күн бұрын
DNS-over-HTTPS will still bypass it. Any advice to mitigate that?
@livankiv4 күн бұрын
@@RmFrZQ this task is for NGFW with DPI
@RmFrZQ4 күн бұрын
@@livankiv I've thought the same...
@realivanjx2 күн бұрын
pihole is more reliable as of now
@omarkhayyam37874 күн бұрын
That’s so cool! Can’t wait to replace pihole with this 😂
@JokeryEU4 күн бұрын
sadly it wont block youtube ads, pihole same wont
@mikrotik3 күн бұрын
It will. Just use a better list
@ON3RVH4 күн бұрын
Let me answer that question: Because Pi-Hole and AdGuard can do so much more than ROS yet another feature we don't need on a router instead of fixing bugs and testing releases before they come out
@mikrotik4 күн бұрын
Not everyone has a server to run pihole 24/7
@ON3RVH4 күн бұрын
@@mikrotik sure they do. A rPi is cheap.
@Rewarpsudomakeinstall4 күн бұрын
@@ON3RVH I may have it, but this is more convenient.
@ON3RVH4 күн бұрын
@@Rewarpsudomakeinstall how so? No way to add whitelists, whitelist a single domain, add device groups, identify devices on your network, ..