macgaviers rule :) not working

[titius]

well Im still not shure can I block encrypted p2p as well.
macgavier our frined , written a fw rule that should block all p2p connections and I copied that rule into my MT box, To some point I can see the difference, I can surf the web , and I couldnt do that before , but I still can see p2p established connections in connection tracking?? is this normal??

[titius]

@ MikroTik team

please if you want to get rid of us p2p annoyers , please install torrent software and figure out how to drop it, because I cant fid the way to block it.

[macgaiver]

Wow, I am popular

Those rules was not ideal - that was best you can do by only adding several rules for p2p detection!

Only other way is to mark all necessary traffic and prioritize it before other traffic (including p2p). And it is lot of work and lot of time to adjust your rules for all traffic types

And then use QoS like I described here:

@macgaiver

Let me explain how to realize QoS in 2 steps

\

1. traffic prioritization - mangle traffic by type (first 200k, last 200k, p2p, icmp etc) in prerouting and prioritize it in global-in (using only queue tree) - WITHOUT ANY LIMITATION - only priorities - this way all packets will be arranged in to your determined sequence!

2. traffic shaping - RE-MANGLE traffic by users in mangle chain forward, and place limitation on the interface queues (using PCQ for example) - this way you will be dropping last traffic from the sequence you made earlier

Thats all folks!!! It took me one Mikrotik Advanced QoS training + 2 weeks to handle

[janisk]

and - where you did add these rules?

if after accepting established connections - sure they will NOT be dropped, you have to ensure that ll p2p connections are made AFTER you add rules.

any new connections should not be established.

and yes, macgaivers suggestions about QoS is good one