MT *NOT* Dropping Bit-Torrent

RouterOS General
1

Hi,
I’ve created an IP Firewall Chain rule, action=drop, for p2p=bit-torrent, in the PC-based Mikrotik that is acting as a transparent traffic shaper (bridge) for my WISP network. I’m currently using version 2.9.22.

Even after a reboot of the system, there is still one customer listed in IP Firewall Connections that has Bit-Torrent connections to the outside world marked as “Established”.

I want to completely drop Bit-Torrent traffic and should be able to do this. Any idea why it isn’t it working?

2

try bridge firewall maybe?

3

What is bridge firewall?

4

Ok, found IP Bridge Filter, and added chain=forward packet-mark=all_p2p action=drop. It didn’t solve my problem, the same customer has dozens of “established” bit-torrent connections still. I don’t see any traffic hitting this rule at all through Winbox.

5

It wont work right away, select all of the P2P marked connections and remove them - the rule will only take affect on new connections not ones that already exsist - They will hang around for 5 days IIRC