Script:
/ip firewall layer7-protocol
add name=L7-IDM regexp="get /.*(user-agent: mozilla/4.0|range: bytes=)"
add name=L7-Youtube regexp=youtube.com|googlevideo.com
add name=L7-Facebook regexp=fbcdn.net|facebook.com
/ip firewall filter
add action=drop chain=forward comment="Block IDM" connection-limit=2,32 \
disabled=yes layer7-protocol=L7-IDM
add action=drop chain=forward comment="Block Youtube" connection-limit=2,32 \
disabled=yes layer7-protocol=L7-Youtube
add action=drop chain=forward comment="Block Facebook" connection-limit=2,32 \
disabled=yes layer7-protocol=L7-Facebook
Note:
If you want to block for specific user/ip, you can add that ip to filter rule.
Ex.
/ip firewall filter
add action=drop chain=forward comment="Block IDM" connection-limit=2,32 \
disabled=yes layer7-protocol=IDM-Down src-address=192.168.88.103
add action=drop chain=forward comment="Block Youtube" connection-limit=2,32 \
disabled=yes layer7-protocol=L7-Youtube src-address=192.168.88.103
add action=drop chain=forward comment="Block Facebook" connection-limit=2,32 \
disabled=yes layer7-protocol=L7-Facebook src-address=192.168.88.103
No comments:
Post a Comment