Hello ![]()
How do I filter out packets that contain certain bytes? Let’s say I want to drop packets that are passing through forward chain and contain the following array of bytes: { 0x41, 0x41, 0x41, 0x41 }.
Neither of these rules work:
chain=forward action=drop content=\41\41\41\41
chain=forward action=drop content="\41\41\41\41"
chain=forward action=drop content=\x41\x41\x41\x41
chain=forward action=drop content="\x41\x41\x41\x41"
chain=forward action=drop content=potato
Yes, I can add a new Layer7 protocol with \x41\x41\x41\x41 regexp, but I’m wondering if I can do the same by using content property.
I am using RB951G-2HnD with RouterOS v5.26. Thanks.