Hi all,
I added 2 L7 filters as suggested by another poster:
/ip firewall layer7-protocol
add comment=“” name=BITTORRENT regexp=“^(\x13bittorrent protocol|azver\x01$
|get /scrape\?info_hash=get /announce\?info_hash=|get /client/bitcomet
/|GET /data\?fid=)|d1:ad2:id20:|\x08’7P\)[RP]”
add comment=“” name=“torrent announc” regexp=^get.+announce.
The idea being to block torrents.
It works perfectly even encrypted torrents are bolcked.
However.
It also causes a problem with some websites. eg: http://www.yahoo.co.uk
It blocks all external content from the page and leaves you with a kind of text only page.
I think it is something to do with the redirect to http://uk.yahoo.com
Can anybody see the problem in the above expressions??
I would love to use these rules as they really do block Torrents