Blocking .zip domains with DNS proxy Background https://www.youtube.com/watch?v=V82lHNsSPww Use Mikrotik DNS proxy for blocking The code snippet below will cause a Mikrotik DNS proxy to return 127.255.255.127 for all .zip domains, including all subdomains. /ip dns static add address=127.255.255.127 comment="block access to all .zip domains" regexp=".+\\.zip\$" ttl=10s The requirement for this to work of course is that all of the hosts on the network only source their DNS through the Mikrotik DNS proxy. #end