P2P Blocked, still showing in connection tracker

RouterOS General
1

I have the basic “block p2p” firewall rules in place:
if p2p then mark connection, if connection-mark then mark packet, if packet-mark then drop

and it seems to be working for the most part, however I still see things ROS identifies as p2p (bit torrent, edonkey) showing up in the connection tracker occasionally!

If ROS is properly identifying these connections as p2p then why isn’t it dropping them even though it drops most others?

2

Did you see the P2P requirement geting connection?

After you firewall rule work, the P2P requirement just be syn sent and never come to connection state.