layer 7 protocols exception

RouterOS General
1

Hi there , I have a comment for block video stream , but I want to make an exception for a PC by MAC address , how can I make it .


5555.gif

2

You can only do exceptions for IP address, see http://forum.mikrotik.com/t/mikrotik-mac-address-list/108024/1

3

That topic is about list of MAC addresses and RouterOS doesn’t have that. But you can use src-mac-address option for one MAC address and it works (for directly connected devices of course).

4

How ?

5

If you have:

/ip firewall filter
add action=drop chain=forward layer7-protocol=streaming <other options>

Then:
a) If you need only one exception, change it to:

/ip firewall filter
add action=drop chain=forward layer7-protocol=streaming <other options> src-mac-address=!<MAC address>

b) If you need more, add rules like this before the original one:

/ip firewall filter
add action=accept chain=forward src-mac-address=<MAC address>

The latter might interfere with other firewall rules, if you have something more complex.