Drop Download in mikrotik

MOJIX · Sat May 28, 2016 6:17 am

How can I set my network in a way that whoever downloads more than 200 mb, would be dropped and at the same time, this rule wouldn't be applied on my own IP.

savadious · Sat May 28, 2016 6:24 am

How can I set my network in a way that whoever downloads more than 200 mb, would be dropped and at the same time, this rule wouldn't be applied on my own IP.

This should get you up and running with user quotas.

Give the thread a look

http://forum.mikrotik.com/viewtopic.php ... 40#p540040

enjoy

mjsabri · Sat May 28, 2016 7:21 am

Hello
Local IP =192.168.0.0/24

/ip firewall filter

add action=add-src-to-address-list address-list=Src address-list-timeout=1h \
chain=forward connection-bytes=1970000-0 disabled=no protocol=tcp \
src-address=192.168.0.0/24

add action=add-dst-to-address-list address-list=Dst address-list-timeout=1h \
chain=forward connection-bytes=1970000-0 disabled=no protocol=tcp \
src-address=192.168.0.0/24

add action=drop chain=forward disabled=no dst-address-list=Dst protocol=tcp \
src-address-list=Src

In My Example , I Assign Every Users In 192.168.0.0/24 Subnet , They have more that 10 MB size to Download After that , in Last Rule , I Block That Session To block Download for 1 Hour .
If users want to download 40 MB file , every 10MB file downloaded , they need wait to 1 Hours , Also You can Change Connection Bytes Value And Address list Time out Value .

MOJIX · Sat May 28, 2016 9:26 am

Thanks about this, is it possible to exclude some of the ips from this limitation rule? Also, can I omit the time out rule?

MOJIX · Sat May 28, 2016 9:30 am

Thanks about this, is it possible to exclude some of the ips from this limitation rule? Also, can I omit the time out rule?

freemannnn · Sat May 28, 2016 12:25 pm

Yes but with these rules even video streaming or internet radio is blocked and much more maybe.