On the slightly older 2820n firmware it was easy to block sites. Now that i've upgrade the firmware to Version 3.3.1.2_232201 I'm not entirely sure how to block certain sites, such as facebook.com.

Has any made a guide or give me any tips on how to do it?

Nick.

It's quite a complicated process.

1) In "Objects Setting/Keyword Object" add a new object with the contents facebook.com.

2) In "CSM/URL Content Filter Profile" add a new profile.

2a) Give it a name.

2b) Choose "Either: URL Access Control First" from the drop-down.

2c) Check the "Enable URL Access Control" box.

2d) Check the "Prevent web access from IP address"

2e) Choose the "Block" option from the "Action" drop-down.

2f) Click the "Edit" button and choose your Facebook keyword from the drop-down menu (note that in your current firmware multiple keywords don't work; only the first keyword in a rule will work. It's a bug).

2g) Click OK in the keyword pop-up.

2h) Click OK in the "URL Content Filter Profile" window.

3) In "Firewall/General Setup" choose the "URL Content Filter" you just created in the drop-down. And click OK.

This will block facebook.com from all the computers in your network. You can block access from only certain machines by creating more specific firewall rules but you should be careful as the firewall in the 2820 firmwares is flaky and broken in random ways (with no indication of interest in fixing it from the Draytek people).

Thanks very much for the help. That's exactly what i was looking for, I have one issue however. With regards to the following point:

3) In "Firewall/General Setup" choose the "URL Content Filter" you just created in the drop-down. And click OK.

The grey drop down boxes are greyed out, any ideas why?

Ignore my previous comment, I just realise I was being an idiot.

Hi, anyone know how to block https://www.facebook.com on a 2820n ver 3.3.1.2. I have set it up to block http and ip access to facebook which works fine. I can't block the port https uses because I need to access other https sites. Thanks

You could set up a separate firewall rule to block the facebook IP addresses maybe?