Monday 8 June 2015

Drop Torrent, Bittorent L7 di Mikrotik

/ip firewall layer7-protocol
add name=bittorrent regexp="^(\13bittorrent protocol|azver\01\$|get /scrape\\\
    \?info_hash=)|d1:ad2:id20:|\08'7P\\)[RP]"
   
/ip firewall filter
add action=add-src-to-address-list address-list=user-torrent \
    address-list-timeout=1h chain=forward in-interface=ether_warnet \
    layer7-protocol=bittorrent
add action=drop chain=forward dst-port=!53 in-interface=ether_warnet protocol=\
    udp src-address-list=user-torrent
add action=drop chain=forward dst-port=!80,443 in-interface=ether_warnet \
    protocol=tcp src-address-list=user-torrent