This is my pain, too. On RB951Ui-2HnD. Something not worked for me and I delete both USB ports ir Port List. Now I can't get back noone of those ports. Tried reinstall RouterOS, tried downgrade OS, tried downgrade FW, tried all. Only ports appeared when restored config from backup, but both ports ar...

@ hazemamer7 Rules works, but I was made some changes: /queue simple add name=26 packet-marks=download1,download2,download3 queue=\ default/default target=192.168.1.26/32 add max-limit=256k/2M name=all packet-marks=download1,download2,download3 \ queue=pcqmanual/pcqmanual target=192.168.1.0/24 In f...

@ hazemamer7
Yours complete code works very interesting, too! One question - how to mark packets and create queues for disabling some adresses (address-list) from those fine limiting rules?

@ troy
Content-Length
Yes, this could be interesting deal. Allow to download a few kilobytes and then block a connection. Rules with slow down download speed is not what I need.
Sorry, my english is too bad, but I think - you understand me

@ hazemamer7 I do not need too complicated rules and I do not use mangles and queues for that. :) There is part of my firewall rules that works perfectly for me. No more any downloads! Browsing works wherever I have tried. Thank you for working code! /ip firewall layer7-protocol add name=ext1 regex...

@ hazemamer7
Can you write a complete code for at least one line? Begining, i mean. With regexp=. Or what else there need..
Thank you!

It will block any page that mentions ".dat" in it's text. Not just the downloads.

I began to understand, tests continue ... But why downloading *.mp4 from youtube is allowed? In rule text - extension *.mp4 present.

@ hazemamer7 /ip firewall layer7-protocol add name=test regexp="^(.*)(.exe|.rar|.zip|.7z|.iso|.nrg|.daa|.dat|.vcd|.flv|.mp4|.mov|.avi|.asf|.mpg|.mpeg|.wmv|. ra|.rar|.mp3|.wav|.ram|.rmvb|.mkv|.cab|.chm|.ctf|. flg)(.*)\\\$|videoplayback" At first testing minutes - youtube watching is blocked...

All what I know is - TeamViewer & Skype we can't block in any way. Such rules do not exist. No sense to make exceptions for those softs.
My question is - how to block one entire country using Layer-7 protocol (IP's list exist)? It's possible?

Yeah, old topic, but - I have this question, too. What is an answer? It's possible merge all extensions in one line?

Also try the basic to add a new connection mark that is simple at the top in mangle. If it works or not.

with chain=forward connections marks fine. Not with tcp-services, other-services.
OK, it is not a big problem, not need start a new thread Thanks for your help!

Ping via netwatch to google, external GW, local computers, etc. From router, of course. From my computer I ping google.com and connection not marked too. (Sorry for my bad English...)

Of course I see connection marks under firewall connection. There you can see - icmp was not marked as ping, for example.

@ TKITFrank Sorry for this "small offtopic" :) "mark-connection" imho do not works as intended. I do not see connections marked as "winbox", "ping", "skype" for example, etc, etc, etc. (Skype I'd marked with Layer7 Protocol - it is working for now). ...

@ poxx Thanks for this great info about "dBm"! I found this "info" button, but RouterOS says - "Modem couldn't respond". Data Channel was "0", Info Channel was "1". But when I changed Info Channel to "3", info shows up! Modem type: Huawei E...

Yes, all work as intended yet. Exclusion work, another PC's can not leech torrents.

@ TKITFrank You are a genius! Exclusion is working. What you talking about DNS: Now make sure the client uses the google/other dns servers directly and not the DNS server in the Mikrotik. Then it should work.. So if you use a DNS ridirect you have to exclude it as well. Have I exclude address 172.16...

Add an address in "DMZ" is no good idea, right? Or it is not possible for those complicated rules? EDITED: Your rules works like a charm! Down/Up speed=ZERO! P.S. But adding one IP to exclusions after two hours headacke - w/o success... Google hide answer for me. (I mean - your firewall ru...

Yea, I see, edited my post before read your answer.

It is a mangle, i think?
And other simple question - how I can add an exception for 1 IP address?
Oh, no - it is a firewall filter rule, sorry.

http://files.fm/down.php?i=dadfttu&n=Ro ... ck_P2P.rar
In the archive is notepad document, I don't know why I can not post this text here. May be danger code??
Look at this, please and give me a right config for this, OK?
Thanks!

Thanks! I'll try it!
EDITED: Works 50/50. Some minutes speed is zero, some minutes - max. All the time - like a wawe Interesting.

Note you have to enter your external DNS servers here and also the local networks. /ip firewall address-list add address=xxx.xxx.xxx.xxx comment=DNS-servers disabled=no list=dns-externt add address=xxx.xxx.xxx.xxx disabled=no list=dns-externt add address=78.31.0.0/16 comment=Spotify disabled=no lis...

I blocked ports 5938 & 443 and now Teamviewer use port 80... I hate progs, witch are impossible block via RouterOS.

Paldies! Thanks!

Hi there! Tell me, please, what about PCI cards:
1. Linksys WMP54G
2. Planet WL-8317
Those cards are supported by RouterOS to use AP mode?
In hardware support list I'm not found above cards.
Thank you and sorry for my bad english.