firewall mangle problem in 6.24 and 6.25

RouterOS General
1

hi
i have a problem with new version 6.24
the problem is that the mangle:

chain=prerouting action=add-src-to-address-list p2p=all-p2p 
      src-address=192.168.6.0/24 address-list=torrent_block 
      address-list-timeout=1d log=no log-prefix=""

add routerbord IP address to “address list”


this problem i have in four routerboard after updated to 6.24 :
rb750gl
rb2011uias
rb751g-2hnd
rb951g-2hnd

all routers have different address from 192.168.x.1 (192.168.6.100; 192.168.5.51; 192.168.2.100 and 192.168.1.100) becouse this address is set to server

i’m from Bulgaria and I apologize that my English is not very good

2

hi , you didn’t tell us more details about your network design , but may be using forward chain may help you

3

same problem so I downgrade

4

Network design is very simple: ISP → routerboard → switch → computers




I use this mangle’s to block all torrent with:

 ip f m pr 
Flags: X - disabled, I - invalid, D - dynamic 
 
 0    ;;; Add src address to list if  match  torrent-DTH-Out-Magnet  d1:ad2:id20:
      chain=prerouting action=add-src-to-address-list protocol=udp 
      src-address=192.168.5.0/24 address-list=torrent_block 
      address-list-timeout=12h dst-port=1025-65535 content=d1:ad2:id20: 
      packet-size=95-190 log=no log-prefix="" 

 1    ;;; Add src address to list if  match  torrent  / announce...
      chain=prerouting action=add-src-to-address-list protocol=tcp 
      src-address=192.168.5.0/24 address-list=torrent_block 
      address-list-timeout=12h dst-port=2710,80 content= info_hash log=no 
      log-prefix="" 

 2    ;;; Add src address to list p2p-all
      chain=prerouting action=add-src-to-address-list p2p=all-p2p 
      src-address=192.168.5.0/24 address-list=torrent_block

with this filter:

 ip f f pr
Flags: X - disabled, I - invalid, D - dynamic 
0    ;;; Block_torrent_users_list
      chain=forward action=drop src-address-list=torrent_block log=no 
      log-prefix=""

from here: http://forum.mikrotik.com/t/how-to-block-torrent-100-only-2-lines-it-is-solved/66890/1

Adding routerboard IP to this “address list” is not fun.

EDIT:

Hm, Now I check “address list” in all routers and i see that now routerboard IP is not listed. It is very strange for me.

5

Update to 6.25 - problem not solved :frowning: