COUNTER STRIKE
Counter strike uses
TCP prot 27015 by default. But at some palces, CS admins uses different port, You can monitor its usage by TORCH tool too.
To block the default port of CS, use the following code ...
/ip firewall filter
add chain=input action=drop dst-port=27015 protocol=tcp
add chain=forward action=drop dst-port=27015 protocol=tcp
As
normis said, Blocking
Skype 100% without blocking something else is a bit difficult in long terms. You have to do some extensive monitoring in order to block the right skype hosts. SKYPE is using whole block of IP addresses from various ranges. Using Wireshark & some digging I found following pools which skype is using for its various functions.BUT do remember that with new updates/ver more hosts can be added. for this purpose you can use Catch Skype Script on mikrotik to detect new addresses and add them to the list.
Also it is possible that some valid/legitimate sites may get blocked with this approach, just find the right ip address of the particular site, and allow it before the deny rule.
Use following code and then try to connect to SKYPE and watch the results. This is purely Hit & Trial method , try it and post your comments or if you have some better way to block SKYPE do let me know.SKYPE have different server's for different regions, so probably these destinations may not work for you, but at least they are working in Pakistan.
Regard's
Syed Jahanzaib
/ip fi ad
add address=111.221.74.0/24 comment=disable_skype disabled=no list=skype_servers_z
add address=111.221.77.0/24 comment=disable_skype disabled=no list=skype_servers_z
add address=157.55.130.0/24 comment=disable_skype disabled=no list=skype_servers_z
add address=157.55.235.0/24 comment=disable_skype disabled=no list=skype_servers_z
add address=157.55.56.0/24 comment=disable_skype disabled=no list=skype_servers_z
add address=157.56.52.0/24 comment=disable_skype disabled=no list=skype_servers_z
add address=194.165.188.0/24 comment=disable_skype disabled=no list=skype_servers_z
add address=195.46.253.0/24 comment=disable_skype disabled=no list=skype_servers_z
add address=213.199.179.0/24 comment=disable_skype disabled=no list=skype_servers_z
add address=63.245.217.0/24 comment=disable_skype disabled=no list=skype_servers_z
add address=64.4.23.0/24 comment=disable_skype disabled=no list=skype_servers_z
add address=65.55.223.0/24 comment=disable_skype disabled=no list=skype_servers_z
/ip firewall filter
add action=drop chain=forward disabled=no dst-address-list=skype_servers_z
Read this too.
http://aacable.wordpress.com/2013/12/09 ... -mikrotik/