How’s the latest bittorrent protocol stand up to the mikrotik? I know that they’ve been working on a new protocol to encrypt it I guess sort of like ipsec so that the traffic can’t be shaped.
Correct it is not possible to shape that encrypted traffic. The only thing you can do is to try to block it.
So I wonder if the traffic will be invisible to a torch? I don’t know if it’s a totally different protocol I guess I’ll have to play with it myself, if anyone else has anything on it let me know.
If I remember correctly, MT responded to the encrypted BT and detect it correctly. They claimed to be one of the first to detect it.
I think we will start to think backwards about this.
Rather than throttling p2p we will have to mangle known traffic protocols to a higher priority and leave unknown traffic to low!
yes, you can detect it and drop it. but you can’t limit the speed of it
Does this mean even if I limit customer to 128kbit/s he will have biger speeds while using encrypted bittorent?
no, but you can’t limit the individual torrent traffic’s speed
Is this encrypted torrent traffic detection in the latest version or which versions did it start at so I can start upgrading.
Can you give an example of the mangle rule and firewall rule to block this new encrypted bittorrent protocol Normunds?
I too would like to see an example of the rules to mark and drop bittorrent
Is this encrypted torrent traffic detection in the latest version or which versions did it start at so I can start upgrading.
I would like to know how to block encrypted Bitorrent but allow normal Bitorrent too. I would like to drop all encrypted p2p actually.
Matthew
I would love to block the encrypted and let the unencrypted past, I don’t think that is possible however. I would like to figure out how to drop the bit-torrent stuff. I have P2P limited, and know that I have to put the new rule before the old one. Do I have to mark it and then make a rule - or what?
???
Droping all bittorent:
/ip firewall filter add chain=forward p2p=bit-torrent action=drop
imho you cannot drop encrypted bittorrent and not plain.
because when making connection only first packet is recognised as bittorrent all other are just realated packages and does not represent themselves as bittorent traffic.