Regulatory Site Blocking

Government blocking directives (NTC, CICC, PNP-ACG) from receipt to verified enforcement on the MikroTik routers. Nothing is blocked before a compliance administrator approves it.

Total directives

–

Active blocks

–

Pending tickets

–

Waiting verification

–

Waiting approval

–

Successful deployments

–

Failed (7 days)

–

Expired / revoked

–

Routers compliant

–

Last verified sync

–

Compliance workflow

  1. 1.Directive received
  2. 2.Document verification
  3. 3.Legal / scope check
  4. 4.Authorized approval
  5. 5.Policy generated
  6. 6.MikroTik deployment
  7. 7.Enforcement verified
  8. 8.Compliance report

Needs attention

Router compliance

Router Status Policy Last verified

Recent activity

Reference Agency Received Targets Status Implementation Expires

Tickets are entered by hand or imported from the agency's list. Emails and links are never opened or acted on automatically. No official ticket API is connected.

Ticket Agency Received Priority Deadline Status Submission Officer
Target Type Enforced as Status Directive Warnings

Current policy

–

The scheduler also checks every router, repairs drift and retries failed or offline routers automatically.

How a router is blocked

  • Domains: router DNS answers "does not exist" (or the sinkhole address). Works for subscribers who use the router as DNS.
  • IP addresses: address listonekonek-reg-blockand one filter rule at the top of the forward chain.
  • TLS host (optional): best effort for HTTPS; does not work with encrypted client hello / QUIC.
  • Only items with the commentONE-KONEK REG [...]are ever changed. NAT, PPPoE, RADIUS, routing and other firewall rules are left alone. A configuration backup is taken before each change.
Router Enrolled Group Status Policy Entries Last verified

Deployment history

When Router Version Trigger Result Changes Verification

Reports state only what the system recorded: approvals, deployments, verification results and failures. URL targets are reported as enforced on the whole domain.

Generated Covers By Fingerprint (SHA-256) Download

This log can only grow. Each entry carries the fingerprint of the entry before it, so a changed or deleted entry is detected.

# When Person Action What happened
Only a Super Administrator or a Compliance Administrator can change these settings.

Approval and deployment

How blocks are enforced

Router addresses, the portal, the website and RADIUS are protected automatically.

Issuing agencies

Only directives from an agency marked authorized can be verified. Only a Super Administrator can change this list.

Code Name Authorized Official email domains Active