# Block Facebook with "Layer 7" or "Content" or "TLS" - MikroTik Script RouterOS

    How to Block Facebook with "Layer 7" or "Content" or "TLS"

    Block Facebook With "Layer-7"

    /ip firewall layer7-protocol
    add name=Facebook regexp="^.+(facebook.com|fbcdn.net).*\$"
    /ip firewall filter
    add action=drop chain=forward layer7-protocol=Facebook

    Block Facebook With "Content"

    /ip firewall filter
    add action=drop chain=forward content="facebook.com"
    add action=drop chain=forward content="fbcdn.net"
    add action=drop chain=forward content=".facebook."
    add action=drop chain=forward content=".fbcdn."

    Block Facebook With "TLS"

    /ip firewall filter
    add action=drop chain=forward protocol=tcp tls-host="facebook.com"
    add action=drop chain=forward protocol=tcp tls-host="fbcdn.net"
    add action=drop chain=forward protocol=tcp tls-host="*.facebook.*"
    add action=drop chain=forward protocol=tcp tls-host="*.fbcdn.*"
    Credit: www.o-om.com