Setup guide
Packages required: system
License required: level1 (Limited to 1 firewall rule), level3
ip firewall, /ip firewall mangle, /queue
Hardware usage: Increases with rule count
Related Documents
• Firewall Filters
• Bandwidth Control
• Packet Marking (Mangle)
Description
RouterOS is able to recognize connections of the most popular P2P protocols:
• Fasttrack (Kazaa, KazaaLite, Diet Kazaa, Grokster, iMesh, giFT, Poisoned, mlMac)
• Gnutella (Shareaza, XoLoX, , Gnucleus, BearShare, LimeWire (java), Morpheus, Phex,
Swapper, Gtk-Gnutella (linux), Mutella (linux), Qtella (linux), MLDonkey, Acquisition (Mac
OS), Poisoned, Swapper, Shareaza, XoloX, mlMac)
• Gnutella2 (Shareaza, MLDonkey, Gnucleus, Morpheus, Adagio, mlMac)
• DirectConnect (DirectConnect (AKA DC++), MLDonkey, NeoModus Direct Connect,
BCDC++, CZDC++ )
• eDonkey (eDonkey2000, eMule, xMule (linux), Shareaza, MLDonkey, mlMac)
• Soulseek (Soulseek, MLDonkey)
• BitTorrent (BitTorrent, BitTorrent++, Shareaza, MLDonkey, ABC, Azureus, BitAnarch,
SimpleBT, BitTorrent.Net, mlMac)
• Blubster (Blubster, Piolet)
• WPNP (WinMX)
Notes
The Connection Tracking facility (/ip firewall connection tracking) must be enabled if you want
to use NAT.
Please also note, that it is impossible to recognize peer-to-peer traffic from the first packet. Only
already establilished connections can be matched.
The filter will work only if it sees the traffic coming from both directions.
Traffic Marking
ip firewall mangle
Description
Peer-to-peer traffic marking provided by Mangle facility labels the traffic for future processing
aginst the firewall filters or queues.
Property Description
p2p (any | all-p2p | bit-torrent | direct-connect | fasttrack | soulseek | blubster | edonkey | gnutella;
default: any) - match Peer-to-Peer (P2P) connections: