Using layer7 to block facebook causes a lot of problems. It is better to block facebook via IP addresses like this.
/ip firewall filter
add action=drop chain=forward comment="Block Facebook" dst-address=\
74.119.76.0/22
add action=drop chain=forward comment="Block Facebook" dst-address=\
173.252.64.0/18
add action=drop chain=forward comment="Block Facebook" dst-address=\
204.15.20.0/22
add action=drop chain=forward comment="Block Facebook" dst-address=\
66.220.144.0/20
add action=drop chain=forward comment="Block Facebook" dst-address=\
69.171.224.0/19
Facebook IP list:
http://bgp.he.net/AS32934#_prefixes
No comments:
Post a Comment