#Command
/ip firewall layer7-protocol
add comment="" name=bittorrent regexp="^(\\x13bittorrent protocol|azver\\x01\$\
|get /scrape\\\?info_hash=get /announce\\\?info_hash=|get /client/bitcomet\
/|GET /data\\\?fid=)|d1:ad2:id20:|\\x08'7P\\)[RP]"
add comment="" name=bit regexp=\
"^(\\x13bittorrent protocol|azver\\x01\$|get /scrape\\\?info_hash=)"
/ip firewall filter
add action=add-dst-to-address-list address-list=bit_addr \
address-list-timeout=1d chain=forward comment="block bit" disabled=no \
dst-address=!192.168.110.0/24 p2p=all-p2p
add action=add-dst-to-address-list address-list=bit_addr \
address-list-timeout=1d chain=forward comment="block bit" disabled=no \
dst-address=!192.168.110.0/24 layer7-protocol=bittorrent
add action=add-dst-to-address-list address-list=bit_addr \
address-list-timeout=1d chain=forward comment="block bit" disabled=no \
dst-address=!192.168.110.0/24 layer7-protocol=bit
add action=drop chain=forward comment="block bit" disabled=no \
dst-address-list=bit_addr
add action=drop chain=forward comment="block bit" disabled=no \
src-address-list=bit_addr
add action=drop chain=input comment="block bit" disabled=no src-address-list=\
bit_addr
add action=drop chain=input comment="block bit" disabled=no dst-address-list=\
bit_addr
#Remark 192.168.110.0/24 = Network LAN