Hi!
I’ve purchased RB951Ui-2nD which is preconfigured as AP and thats fine. I’ve connected modem from my internets provider to ether1, change ssid and password - works perfectly.
My question is. Is it possible to block torrent traffic and some keywords on my wifi? I’ve tried this but it’s not working or I’m doing something wrong?
/ip firewall address-list
add name=torrentsites regexp="^.*(get|GET).+(torrent|thepiratebay|isohunt|entertane|demonoid|btjunkie|mininova|flixflux|torrentz|vertor|h33t|btscene|bitunity|bittoxic|thunderbytes|entertane|zoozle|vcdq|bitnova|bitsoup|meganova|fulldls|btbot|flixflux|seedpeer|fenopy|gpirate|commonbits).*\$"
/ip firewall filter
add chain=forward src-address=192.168.1.0/24 layer7-protocol=torrentsites action=drop comment=torrentsites
add chain=forward src-address=192.168.1.0/24 protocol=17 dst-port=53 layer7-protocol=torrentsites action=drop comment=dropDNS
add chain=forward src-address=192.168.1.0/24 content=torrent action=drop comment=keyword_drop
add chain=forward src-address=192.168.1.0/24 content=tracker action=drop comment=trackers_drop
add chain=forward src-address=192.168.1.0/24 content=getpeers action=drop comment=get_peers_drop
add chain=forward src-address=192.168.1.0/24 content=info_hash action=drop comment=info_hash_drop
add chain=forward src-address=192.168.1.0/24 content=announce_peers action=drop comment=announce_peers_drop
# also use default rule to drop p2p traffic which alone is not working for me
add chain=forward src-address=192.168.1.0/24 p2p=all-p2p action=drop comment=p2p_drop
And i don’t know what src-address I need to input, mikrotik ip is 192.168.1.3 and wifi is 192.168.88.1, i’ve tried both.
I would appreciate if someone could help me.
Thanks!