Firewall content property and filtering out bytes

Hello :slight_smile:

How do I filter out packets that contain certain bytes? Let’s say I want to drop packets that are passing through forward chain and contain the following array of bytes: { 0x41, 0x41, 0x41, 0x41 }.

Neither of these rules work:

chain=forward action=drop content=\41\41\41\41

chain=forward action=drop content="\41\41\41\41"

chain=forward action=drop content=\x41\x41\x41\x41

chain=forward action=drop content="\x41\x41\x41\x41"

chain=forward action=drop content=potato

Yes, I can add a new Layer7 protocol with \x41\x41\x41\x41 regexp, but I’m wondering if I can do the same by using content property.

I am using RB951G-2HnD with RouterOS v5.26. Thanks.