RadiusNest › Guides › Free tool
MikroTik address list generator for TikTok, YouTube, games and more
Updated: 18 October 2026 · RouterOS 6.41 and later, and 7 · Free forever
Pick the apps and get one paste-ready script: a firewall address list per app (TikTok, YouTube, Netflix, Facebook and WhatsApp, Telegram, Zoom and Meet calls, PUBG, Free Fire, Call of Duty Mobile, Steam, PlayStation, Xbox, Windows Update, Play Store, App Store), plus optional counters that show which apps use the most data on your network.
1. Choose the apps
2. Paste it on the router
Open the router in Winbox, then New Terminal, paste the whole script and press Enter. Pasting it again later replaces what it added - nothing else.
How the router recognises each app
- By the name the phone asks for. When a phone opens TikTok or YouTube, the first packet of the encrypted connection names the server it wants (for example a
googlevideo.comaddress). A mangle rule withtls-hostsees that name and adds the server to the app's list for a day. Only the first 10 KB of each HTTPS connection are checked, so the router's CPU barely notices. - By known ranges. Facebook, Instagram and WhatsApp run on Meta's own network, and Telegram on its own; their ranges are in the lists from the start.
- By port. Zoom, Google Meet and Teams calls and mobile games use UDP to fixed ports (Call of Duty Mobile 7500-8000, Zoom 8801-8810, Meet 19302-19309).
Once a server is in a list, everything to and from it belongs to that app - video over QUIC included. The lists are named RadiusNest-app-TikTok, RadiusNest-app-YouTube and so on (IP › Firewall › Address Lists).
See which apps use the most data
With counters ticked, each app gets two rules in the rn-apps-count chain - one for download, one for upload. Each packet is counted once, by the first app it matches, and nothing else happens to it: no marks, no drops, no queues. Read the Bytes column in IP › Firewall › Mangle, or in New Terminal:
/ip firewall mangle print stats where chain=rn-apps-count
If your firewall has an enabled fasttrack connection rule, the traffic it speeds up skips mangle rules, so the counters only see part of it.
On RadiusNest you get this as a chart. The Most used page of each router shows TikTok, YouTube, games and updates side by side - today, 7 days and 30 days - and RadiusNest puts the rules on the router for you. It comes with the RadiusNest billing system, free trial included. Start the free trial.
Using the lists in your own rules
The lists work in any firewall, mangle or queue rule. For example, to stop TikTok on the whole network:
/ip firewall filter add chain=forward dst-address-list=RadiusNest-app-TikTok action=drop comment="no TikTok"
Remove everything the generator added with:
Questions
How do I make an address list for TikTok on MikroTik?
Tick TikTok above, generate the script and paste it in New Terminal. The router fills the RadiusNest-app-TikTok list by itself: every TikTok server a phone connects to is added for a day, so the list stays current without updates from you.
Does this block or slow anything?
No. The script only fills address lists and, if you choose, counts traffic. Nothing is dropped, marked or queued until you write a rule of your own that uses the lists.
Which RouterOS versions does it work on?
RouterOS 6.41 and later, and RouterOS 7. The script finds the top of your mangle table by itself and pasting it again replaces only what it added.
How do I see which apps use the most data?
Tick Add usage counters. Each app gets a download and an upload rule in the rn-apps-count chain; read the Bytes column in IP > Firewall > Mangle. On RadiusNest, the Most used page of each router shows the same numbers as a chart for today, 7 days and 30 days.
Why are Facebook, Instagram and WhatsApp one app?
They run on the same Meta servers, so no router can tell their traffic apart by address. They are counted together, which is accurate, rather than split by guesswork.
Why do my counters show less traffic than the interface?
Only the apps you ticked are counted, and traffic sped up by a FastTrack rule skips mangle rules altogether. Disable the fasttrack connection rule in IP > Firewall > Filter to count everything.