Community discussions

 
evcass
just joined
Topic Author
Posts: 6
Joined: Thu Oct 26, 2017 6:17 pm

Help blocking P2P traffic

Thu Oct 26, 2017 7:08 pm

Edit: Duplicate post, attempted to delete but it wouldn't let me.

We're having problems blocking P2P traffic and I volunteered to help even though I'm much more familiar with IOS & Meraki than with RouterOS. ISPs are sending notifications that our wireless users are downloading movies from honeypots and we need to mitigate this problem or else they may cancel our service.

Version: 6.40.4
Model: 951Ui-2HnD
Firmware type: ar9344
Factory firmware: 3.22
Current firmware: 3.22
Upgrade firmware: 3.41

I found this L7 rule:
^(\x13bittorrent protocol|azver\x01$|get /scrape\?info_hash=get /announce\?info_hash=|get /client/bitcomet/|GET /data\?fid=)|d1:ad2:id20:|\x08'7P\)[RP]

Thank you for any suggestions.
 
Shadeofspirit
Member Candidate
Member Candidate
Posts: 204
Joined: Fri May 27, 2016 12:15 am
Location: Minsk
Contact:

Re: Help blocking P2P traffic

Thu Oct 26, 2017 7:16 pm

Edit: Duplicate post, attempted to delete but it wouldn't let me.

We're having problems blocking P2P traffic and I volunteered to help even though I'm much more familiar with IOS & Meraki than with RouterOS. ISPs are sending notifications that our wireless users are downloading movies from honeypots and we need to mitigate this problem or else they may cancel our service.

Version: 6.40.4
Model: 951Ui-2HnD
Firmware type: ar9344
Factory firmware: 3.22
Current firmware: 3.22
Upgrade firmware: 3.41

I found this L7 rule:
^(\x13bittorrent protocol|azver\x01$|get /scrape\?info_hash=get /announce\?info_hash=|get /client/bitcomet/|GET /data\?fid=)|d1:ad2:id20:|\x08'7P\)[RP]

Thank you for any suggestions.
look for this presentation from MUM. https://mum.mikrotik.com/presentations/ ... 314218.pdf
MTCNA, MTCWE
 
evcass
just joined
Topic Author
Posts: 6
Joined: Thu Oct 26, 2017 6:17 pm

Re: Help blocking P2P traffic

Thu Oct 26, 2017 10:02 pm

Thanks for that link. In the interest of merging the threads, please add new replies to the following link, where I've posted more questions.

viewtopic.php?f=2&t=127107&p=625061#p625061
 
User avatar
nichky
Long time Member
Long time Member
Posts: 531
Joined: Tue Jun 23, 2015 2:35 pm

Re: Help blocking P2P traffic

Fri Oct 27, 2017 9:14 am

mangle
add action=mark-connection chain=forward comment="other-con _(Bit-Torrent)" new-connection-mark=other-con passthrough=yes

address-liste
Bit-Torrent=add pool


filter
add action=add-src-to-address-list address-list=Bit-Torrent_user address-list-timeout=0s chain=forward comment=Bit-Torrent_users p2p=all-p2p src-address-list=Bit-Torrent
add action=drop chain=forward comment="Kill P2P" disabled=yes p2p=all-p2p
add action=drop chain=forward comment="Kill P2P other-con" connection-mark=other-con disabled=yes src-address-list=Bit-Torrent
Nikola Suminoski
MikroTik Consultan
MTCRE l MTCWE

!) Safe Mode is your friend;

Who is online

Users browsing this forum: No registered users and 88 guests