Help blocking P2P traffic

RouterOS General
1

Edit: Duplicate post, attempted to delete but it wouldn’t let me.

We’re having problems blocking P2P traffic and I volunteered to help even though I’m much more familiar with IOS & Meraki than with RouterOS. ISPs are sending notifications that our wireless users are downloading movies from honeypots and we need to mitigate this problem or else they may cancel our service.

Version: 6.40.4
Model: 951Ui-2HnD
Firmware type: ar9344
Factory firmware: 3.22
Current firmware: 3.22
Upgrade firmware: 3.41

I found this L7 rule:
^(\x13bittorrent protocol|azver\x01$|get /scrape?info_hash=get /announce?info_hash=|get /client/bitcomet/|GET /data?fid=)|d1:ad2:id20:|\x08’7P)[RP]

Thank you for any suggestions.

2

look for this presentation from MUM. https://mum.mikrotik.com/presentations/RU17M/presentation_4715_1508314218.pdf

3

Thanks for that link. In the interest of merging the threads, please add new replies to the following link, where I’ve posted more questions.

http://forum.mikrotik.com/t/blocking-p2p-traffic-scheduling-access/113488/3

4

mangle
add action=mark-connection chain=forward comment=“other-con _(Bit-Torrent)” new-connection-mark=other-con passthrough=yes

address-liste
Bit-Torrent=add pool


filter
add action=add-src-to-address-list address-list=Bit-Torrent_user address-list-timeout=0s chain=forward comment=Bit-Torrent_users p2p=all-p2p src-address-list=Bit-Torrent
add action=drop chain=forward comment=“Kill P2P” disabled=yes p2p=all-p2p
add action=drop chain=forward comment=“Kill P2P other-con” connection-mark=other-con disabled=yes src-address-list=Bit-Torrent