Hello,
I need to filter the query, which goes to the Web server through mikrotik.
The query looks like this:
host_name/getList.php?category=-1OR%20%20BENCHMARK(10000000,BENCHMARK(10000000,md5(current_date)))
I created a regexp in Layer7:
^(GET .*BENCHMARK.* /| get .*BENCHMARK.* /| .*BENCHMARK.*)
Then added to the firewall rule:
chain=forward action=drop layer7-protocol=BENCHMARK in /ip firewall filter
but it's does not work
any one can help me ?