Dear Mikrotik,

I don't find a good answer to my question after searching the whole forum what are methods are mention is not working.

I want to know how can be block access with layer 7 protocol like user-agent based.

Like User-Agent=uTorrent

This feature is available in ISA server and sonic wall firewalls were we can defined the user-agents to block once we see it in the proxy debug log and we can also monitor the user-agents in IP/Firewall/connection if we found any P2P connection then we can get the user-agent in log proxy.

Any comments from Mikrotik on the same.

Please help in this regard as my customer are using uTorrent for download illegal software and porn moves .

Birender

This pattern works fine.
But if your life is too easy, then you can detect new log entries, parse web proxy logs and add ip address from the log entry to the address list. Then set up firewall rules to block IPs from the address list.

BTW: torrents are also used for legal downloads, which is much faster then http download.

This pattern works fine.
But if your life is too easy, then you can detect new log entries, parse web proxy logs and add ip address from the log entry to the address list. Then set up firewall rules to block IPs from the address list.

BTW: torrents are also used for legal downloads, which is much faster then http download.

Ya i agree with you that torrents also for legal downloads like your own mikrotik router os downloads but in my case my clients are 18 to 28 year and all are downloading nonsense.

Can you give me some example how to use this http://l7-filter.sourceforge.net/layer7 ... orrent.pat because i try to use it earlier also but fail to do so.

Can you please give me a sample example.

regards,

Birender

Here you can find usage example:
http://wiki.mikrotik.com/wiki/Manual:IP ... ge_example

sadly, I think the new uTorrent v2 encryption system is undetectable (yet).

So ... you have to find other ways. Drop everything except good and known ports. Allow only certain number of connections per client. Give client a speed limit.

If you do that, you won't even have to worry what they download. They won't disturb anyone else.

sadly, I think the new uTorrent v2 encryption system is undetectable (yet).

So ... you have to find other ways. Drop everything except good and known ports. Allow only certain number of connections per client. Give client a speed limit.

If you do that, you won't even have to worry what they download. They won't disturb anyone else.

How to limit the number of sessions from the client in the Hot Spot network, limited only by the TCP session, how to be UDP?

http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter

connection-limit (integer,netmaks; Default: ) Restrict connection limit per address or address block

http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter

connection-limit (integer,netmaks; Default: ) Restrict connection limit per address or address block

connection limit works only with tcp!!!!!

http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter

connection-limit (integer,netmaks; Default: ) Restrict connection limit per address or address block

connection limit works only with tcp!!!!!

Which is generally what file sharing uses.