P2P Bit-torrent are detected but not dropped in 2.9RC9

RouterOS General
1

Hi all,
With this rule I thought I blocked all P2P connection trough the router:
0 chain=forward p2p=all-p2p action=drop.
When I check in the connection table, I see allot of bit-torrent connections.
In RC6 this worked fine, but now in RC9, it don’t.
Does anyone know if this is a bug?

BR, Paul

2

i have the same thing on in my rc6 box.
i have thousands of connections labled as bit-torrent and i have the same firewall rule.
Is there is a better way to stop this?
I added rules to drop TCP dst-port 6881 and 6882. this seems to help.
This box had over 5500 conections on it today.

3

you will see these connections (better said: connection attempts) from clients, because there is no way how to stop them from TRYING to connect. If their tries are successfull, that’s another story.

I just want to say : if you see thousands of BitTorrent connections, verify whether these are just SYN packets sent from client and dropped by your server or whether these are actual live connections transferring data.

4

The connections are established, so it’s not only SYN packets. The connections are identified as bit-torrent, if a unchek the P2P-option the packets are dropped.