#Command 
/ip firewall layer7-protocol
add comment="" name=bittorrent regexp="^(\\x13bittorrent protocol|azver\\x01\$\
    |get /scrape\\\?info_hash=get /announce\\\?info_hash=|get /client/bitcomet\
    /|GET /data\\\?fid=)|d1:ad2:id20:|\\x08'7P\\)[RP]"
add comment="" name=bit regexp=\
    "^(\\x13bittorrent protocol|azver\\x01\$|get /scrape\\\?info_hash=)"
 
 
/ip firewall filter
add action=add-dst-to-address-list address-list=bit_addr \
    address-list-timeout=1d chain=forward comment="block bit" disabled=no \
    dst-address=!192.168.110.0/24 p2p=all-p2p
add action=add-dst-to-address-list address-list=bit_addr \
    address-list-timeout=1d chain=forward comment="block bit" disabled=no \
    dst-address=!192.168.110.0/24 layer7-protocol=bittorrent
add action=add-dst-to-address-list address-list=bit_addr \
    address-list-timeout=1d chain=forward comment="block bit" disabled=no \
    dst-address=!192.168.110.0/24 layer7-protocol=bit
add action=drop chain=forward comment="block bit" disabled=no \
    dst-address-list=bit_addr
add action=drop chain=forward comment="block bit" disabled=no \
    src-address-list=bit_addr
add action=drop chain=input comment="block bit" disabled=no src-address-list=\
    bit_addr
add action=drop chain=input comment="block bit" disabled=no dst-address-list=\
    bit_addr
 
#Remark 192.168.110.0/24 = Network LAN