Guide for blocking updates for Mikrotik Router users
Posted: Sun Jan 05, 2020 1:00 pm
Just in case, i wanted to give out instructions on a good way to block updates for a samsung tv when using a mikrotik router. With these settings you are still able to use your tv for other services, but the tv wont be able to reach the update servers.
Add layer7 hostnames
/ip firewall layer7-protocol
add name=samsung1 regexp="^.+(msecnd.net).*\$"
add name=samsung2 regexp="^.+(samsungotn.net).*\$"
add name=samsung3 regexp="^.+(otn.samsungcloudcdn.com).*\$"
add name=samsung4 regexp="^.+(samsungcloudsolution.net).*\$"
then block them with firewall rules, since i have static ip for my tv, i have set it to the tv´s ip address.
/ip firewall filter
add action=drop chain=forward comment=samsumg1 layer7-protocol=samsung1 src-address=10.2.0.34
add action=drop chain=forward comment=samsumg2 layer7-protocol=samsung2 src-address=10.2.0.34
add action=drop chain=forward comment=samsumg3 layer7-protocol=samsung3 src-address=10.2.0.34
add action=drop chain=forward comment=samsumg4 layer7-protocol=samsung4 src-address=10.2.0.34
Add layer7 hostnames
/ip firewall layer7-protocol
add name=samsung1 regexp="^.+(msecnd.net).*\$"
add name=samsung2 regexp="^.+(samsungotn.net).*\$"
add name=samsung3 regexp="^.+(otn.samsungcloudcdn.com).*\$"
add name=samsung4 regexp="^.+(samsungcloudsolution.net).*\$"
then block them with firewall rules, since i have static ip for my tv, i have set it to the tv´s ip address.
/ip firewall filter
add action=drop chain=forward comment=samsumg1 layer7-protocol=samsung1 src-address=10.2.0.34
add action=drop chain=forward comment=samsumg2 layer7-protocol=samsung2 src-address=10.2.0.34
add action=drop chain=forward comment=samsumg3 layer7-protocol=samsung3 src-address=10.2.0.34
add action=drop chain=forward comment=samsumg4 layer7-protocol=samsung4 src-address=10.2.0.34