detection and mark .exe .jbg or address like http://www.hotmail.com http://www.ayhoo.com
in firewall is that possible
only in Proxy. you may try to use L7 matcher, but it’s useless for alive http connections…
can someone tell me where there problem
if we use firewall layer7 to specific this extensions and mark it to be unlimited
html|htm|jpg|gif|jpeg|png|xml|php|bmp|ico|css|js
and all file other well be limited like exe zip rar
sorry but what that mean
i use l7 in that way is that right
/ip firewall layer7-protocol add comment=“” name=rm regexp=rm
/ip firewall mangle
add action=mark-packet chain=input comment=“” disabled=no layer7-protocol=rm new-packet-mark=limit passthrough=no
/queue simple
add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment=“” direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=0/0 max-limit=10k/10k name=queue11
packet-marks=limit parent=none priority=1 queue=default-small/default-small total-queue=default-small
when you open webpage in modern browser, connection is not closed after every request, so many files can pass through it. but L7 inspects only first few packets or bytes of connection - so it won’t match second and further files…