Script:
/ip firewall address-list
add address=13.107.4.50 list=WIN_UP
/ip firewall mangle
add action=mark-connection chain=prerouting comment="Limit Window Update" dst-address-list=WIN_UP new-connection-mark=Win_UP-Conn passthrough=yes
add action=mark-packet chain=prerouting comment="Limit Window Update" connection-mark=Win_UP-Conn new-packet-mark=Win_UP-Pack passthrough=no
/queue simple
add comment="Limit Window Update" max-limit=1M/1M name=WIN_UP packet-marks=Win_UP-Pack target=""
Note:You can use Layer 7 to filter it:
/ip firewall layer7-protocol
add name=MicrosoftUpdates regexp="^.+(update.microsoft|windowsupdate|download.microsoft|wustat|ntservicepack).*\$"
/ip firewall mangle
add action=mark-packet chain=prerouting comment="Limit Window Update" layer7-protocol=MicrosoftUpdates new-packet-mark=Win_UP-Pack passthrough=no
Ref:
https://forum.mikrotik.com/viewtopic.php?t=51802
No comments:
Post a Comment