How to block VOIP Calls

RouterOS General
1

Hi,

I have round about 100 home and corporate customers and they are using private IP. for each customer i have created separate IP pool and on my Mikrotik WAN i have public ip. for the last 10 days my public ip is continuously blocking for 30 minutes and when change the ip its starts work. when i contact to the upstream they told me that you are using VOIP and that’s why your ip has been blocked and the internet becomes down. In Afghanistan VOIP is illegal.

any body know how can i block VOIP traffic in Mikrotik.

2

If they’re using SIP, you could at least block their initialization with these rules:
/ip firewall filter
add action=drop chain=forward !connection-bytes !connection-limit
!connection-mark !connection-rate !connection-state !connection-type
!content disabled=no !dscp !dst-address !dst-address-list
!dst-address-type !dst-limit dst-port=5060 !fragment !hotspot
!icmp-options !in-bridge-port !in-interface !ingress-priority
!ipv4-options !layer7-protocol !limit !nth !out-bridge-port
!out-interface !p2p !packet-mark !packet-size !per-connection-classifier
!port !priority protocol=tcp !psd !random !routing-mark !routing-table
!src-address !src-address-list !src-address-type !src-mac-address
!src-port !tcp-flags !tcp-mss !time !ttl
add action=drop chain=forward !connection-bytes !connection-limit
!connection-mark !connection-rate !connection-state !connection-type
!content disabled=no !dscp !dst-address !dst-address-list
!dst-address-type !dst-limit dst-port=5061 !fragment !hotspot
!icmp-options !in-bridge-port !in-interface !ingress-priority
!ipv4-options !layer7-protocol !limit !nth !out-bridge-port
!out-interface !p2p !packet-mark !packet-size !per-connection-classifier
!port !priority protocol=tcp !psd !random !routing-mark !routing-table
!src-address !src-address-list !src-address-type !src-mac-address
!src-port !tcp-flags !tcp-mss !time !ttl
add action=drop chain=forward !connection-bytes !connection-limit
!connection-mark !connection-rate !connection-state !connection-type
!content disabled=no !dscp !dst-address !dst-address-list
!dst-address-type !dst-limit dst-port=5060 !fragment !hotspot
!icmp-options !in-bridge-port !in-interface !ingress-priority
!ipv4-options !layer7-protocol !limit !nth !out-bridge-port
!out-interface !p2p !packet-mark !packet-size !per-connection-classifier
!port !priority protocol=udp !psd !random !routing-mark !routing-table
!src-address !src-address-list !src-address-type !src-mac-address
!src-port !tcp-flags !tcp-mss !time !ttl
add action=drop chain=forward !connection-bytes !connection-limit
!connection-mark !connection-rate !connection-state !connection-type
!content disabled=no !dscp !dst-address !dst-address-list
!dst-address-type !dst-limit dst-port=5061 !fragment !hotspot
!icmp-options !in-bridge-port !in-interface !ingress-priority
!ipv4-options !layer7-protocol !limit !nth !out-bridge-port
!out-interface !p2p !packet-mark !packet-size !per-connection-classifier
!port !priority protocol=udp !psd !random !routing-mark !routing-table
!src-address !src-address-list !src-address-type !src-mac-address
!src-port !tcp-flags !tcp-mss !time !ttlBut normally it’s just a matter of time when they find ways around this…

3

hi,
It will block skype and viber calls are not