使用 Mikrotik RouterOS 執行家長管理 (定時網站存取權)

小孩一天倒晚泡在網路上不讀書，限制存取 FB/IG/YOUTUBE/PPT，只允許開放時間

Mikrotik x86 6.41.3 stable

下載
https://drive.google.com/file/d/1yKQIonPAQrqgwS6xDdSM3CzXu4fsIjoh/view?usp=sharing

安裝
gzip -dc rOS_180322.gz | dd of=/dev/sdX


#1 L7 限制網址封包

1. 新增 regExp MY_L7_NAME
^.*\.(youtube|ptt|ytimg|googlevideo|youtu|twitch)\..*$

2. 在 Filter Rules 新增 forward REJCT，L項次選 MY_L7_NAME

#2 限制網址存取

/ip firewall address-list add address=facebook.com list=BLOCKED
/ip firewall address-list add address=m.facebook.com list=BLOCKED
/ip firewall address-list add address=www.facebook.com list=BLOCKED
/ip firewall address-list add address=ptt.cc list=BLOCKED
/ip firewall address-list add address=www.ptt.cc list=BLOCKED
/ip firewall filter add chain=forward dst-address-list=BLOCKED action=reject reject-with=icmp-host-prohibited

#3 阻斷DNS
/ip dns static
add address=192.0.2.1 name=playGame.tw
add address=2001:db8::1 name=playGame.tw

#4 CONTENT FILTER
/ip firewall filter
 add chain=input action=drop comment="DNSBL" protocol=udp dst-port=53 content="samsooong"
 add chain=forward action=drop comment="DNSBL" protocol=udp dst-port=53 content="samsooong"