Mikrotik

Blocking Adult Sites Easy in Mikrotik
Creating a healthy internet atmosphere is important. Especially if the stout client of our network is children or school children who can not access adult content. The problem is, a lot of adult sites are circulating on the internet. This will make a headache if we have to block his site one by one.

To be able to block certain sites or content on the internet on Mikrotik can be done by:

What is a VPN? Maybe this question arises when you’ve just heard of a VPN. To explain what is VPN and the working principle of VPN, please refer to the following article:

VPN ( Virtual Private Network ) is a private connection through the public network (in this case the internet). Here are two words that we can underline that is:

• Virtual network, which means that the network is only virtual. There is no real network connection between the 2 points that will be related.
• Private, a network that is formed private where not everyone can access it. The data that is transmitted is encrypted so that it remains confidential even through the public network.

With this VPN we seem to create a network within the network or commonly called tunnel (tunnel). Tunneling is a way of creating private lines using third-party infrastructure. VPN uses one of three existing tunneling technologies: PPTP, L2TP, and the latest standards, Internet Protocol Security (commonly abbreviated as IPSec). VPN is a combination of tunneling and encryption technology.

Virtual Private Network (VPN) is a method for connecting between network nodes by utilizing Internet connection (Public Network / WAN) and using encrypted protocol so it is more secure. VPN is one of the best solutions to connect multiple remote locations to easily take advantage of each location’s Internet connection.

An example of this is when you manage a network for multiple offices in different locations and away from each other. To connect the office ‘A’ using a physical link will certainly require a large cost. Well, by using VPN we can build an inter-office link by utilizing the existing internet network. Links that are formed complete with encryption so as to minimize the possibility of data will be accessed by people who are not responsible.

To prevent your users from accessing blacklist IP addresses, you need to create the following firewall rules. Thus, we protect our users from unnecessary sites.

In order to use any of the following lists you will want to add a rule to your input or forward chains like the following:

/ip firewall  filter add action=drop chain=input 
comment=" Drop new connectionsfrom blacklisted IP's to this router" 
connection-state=new  in-interface=ether1 src-address-list=blacklist

or

/ip firewall filter
add action=drop chain=forward comment=" Drop new connectionsfrom blacklisted 
IP's to this router"  dst-address-list=blacklist

SpamHaus

“Spamhaus Don’t Route Or Peer List (DROP)”

The DROP list will not include any IP address space under the control of any legitimate network – even if being used by “the spammers from hell”. DROP will only include netblocks allocated directly by an established Regional Internet Registry (RIR) or National Internet Registry (NIR) such as ARIN, RIPE, AFRINIC, APNIC, LACNIC or KRNIC or direct RIR allocations.”

To send an email with a regular backup of all system settings, three steps are needed. Firstly you must ensure you have set the outgoing email SMTP server settings in “tool email”, then create the script that generates the backup file itself, lastly is to create a schedule to run that backup script on a regular basis.

First of all, we need to set up email in MikroTik.

winbox the following code we need to write the new terminal.