MikroTik

Hello
i was using layer 7 based traffic prioritization on ros v 5.22 and was working fine
but in ROS v6 rc6 it's not working

i used the guide at
http://wiki.mikrotik.com/wiki/Basic_tra ... _protocols

You have to specify used pattern at least, however note that most of l7 protocol does not provide 100% effect for marking traffic.

the pattern is already specified in the example

and also it was working in v 5.22

Example has too much layer7 patterns. Please be more specific about pattern that does not work.

none of the pattern are working as of now
that is why i told "Layer 7 protocols filter not working"

I've used default patter for HTTP,

/ip firewall layer7-protocol> print detail
0 ;;; http
name="http" regexp="http/(0\.9|1\.0|1\.1) [1-5][0-9][0-9] [\x09-\x0d -
~]*(connection:|content-type:|content-length:|date:)|post [\x09-\x0d -
~]* http/[01]\.[019]"

/ip firewall filter> print
Flags: X - disabled, I - invalid, D - dynamic
1 chain=forward action=log layer7-protocol=http log-prefix=""
[admin@MikroTik] /ip firewall filter> print d

/ip firewall filter> print stats
Flags: X - disabled, I - invalid, D - dynamic
# CHAIN ACTION BYTES PACKETS
1 forward log 44 920 191

/system package print detail
5 name="system" version="6.0rc7" build-time=jan/09/2013 14:32:00
scheduled=""

ok i deleted all entry and created again
and surprisingly it worked

Thank you all

revival of a dead thread.

I have blocked FB via a drop rule in the forward chain as FB does not play as well as I had hoped with layer 7 packet matching and blocks other sites required for business here.

I have added an exception for my machine at the top of the chain. the above does not function or allow my traffic through.

however, if I modify this to not have the src-port set, the rule matches and works as expected. Now the fun part.

I have a layer 7 rule to match 'twitter'
the regular expression for matching states: and it is enabled in the forward chain it is matched and blocks traffic even despite the exception for my specific ip address above.

What am I missing within the configuration here in order to allow exceptions to work for both direct forward chain rules as well as layer 7 rules?

Thank-You,