content filter make the system slow down

Hi there,

some of our clients are request to block some contents that nothing to do with their business; such as youtube, facebook, etc.

we did try to put into /ip firewall filter but it make the whole internet process very slow down. Need about 3 minutes to open yahoo, google, etc.

the code inserted are :

add action=drop chain=Restricted comment=“content youtube” content=
http://www.youtube.com > disabled=no out-interface=ether1 time=
8h-15h,mon,tue,wed,thu,fri
add action=drop chain=Restricted comment=“content facebook” content=
http://www.facebook.com > disabled=no out-interface=ether1 time=
8h-15h,mon,tue,wed,thu,fri
add action=drop chain=Restricted comment=“content twitter” content=
http://www.twitter.com > disabled=no out-interface=ether1 time=
8h-15h,sun,mon,tue,wed,thu,fri,sat
add action=jump chain=forward comment=“jump to Restricted chain” disabled=yes
jump-target=Restricted

is anyone know the problem source ?

Paul

yes, narrow down your search. only search tcp packets, no reason to search icmp, udp, gre, etc. also only search for packets on port 80, etc. currently you are probably searching every single packet which is crazy.