# MAS APORTES EN

# AUTOR: ARSYSTEL
# Facebook: https://www.facebook.com/arsystelbolivia/
# Grupo: https://www.facebook.com/groups/270091610277909/?
ref=pages_groups_card&source_id=1415050895215125

/ip firewall layer7-protocol

add name=block-update-ms regexp=".(stats|ntservicepack|update|download|
windowsupdate|v4.windowsupdate).(microsoft|windowsupdate)"
add name=block-update-msw regexp=".(wustat|ws|v4.windowsupdate.microsoft|
windowsupdate.microsoft).(nsatc|windows|microsoft)"
add name=Speedtest regexp="^.+(speedtest.net).*\$"
add name=google_ads_1 regexp="^.+(adservices.com|doubleclick.net|nexage.com|
akadns.net).*\$"
add name=Windows_Update_Win10 regexp=\
"^.+(microsoft.com|windows.com|akadns.net|edgekey.net|akamaiedge.net|
windowsphone.com|nsatc.net|akamaiedge.net|windowsupdate.com|msedge.net).*\$"
add name=Publicidad regexp="(doubleclick|google-analytics|googleadservices|
googlesyndication)\\.(net|com)"
add name=Chrome regexp="^.+(chrome).*\$"
add name=Mozilla regexp="^.+(mozilla.org).*\$"
add name=Youtube regexp="^..+\\.(youtube.com|googlevideo.com|akamaihd.net|
youtu.be).*\$"
add name=Facebook regexp="^..+\\.(facebook.com|facebook.net|fbcdn.com|fbsbx.com|
fbcdn.net|fb.com|tfbnw.net).*\$"
add name=demo
add name="google_ads " regexp="(doubleclick|google-analytics|googleadservices|g\r\
\nooglesyndication)\\.(net|com)"
add name=NetFix regexp="^..+\\.(netflix.com).*\$"

/ip firewall filter

add action=accept chain=input comment="E R INPUT" connection-
state=established,related
add action=drop chain=input connection-state=invalid
add action=add-dst-to-address-list address-list=Speedtest-List address-list-
timeout=8m chain=forward comment=Dst-Speedtest-List in-interface-list=local layer7-
protocol=\
Speedtest
add action=drop chain=forward comment="Block Android Update" dst-port=5228
protocol=tcp
add action=drop chain=forward dst-port=5228 protocol=udp
add action=drop chain=forward comment=Block-Update-Windows layer7-protocol=block-
update-ms
add action=drop chain=forward layer7-protocol=block-update-msw
add action=drop chain=forward disabled=yes layer7-protocol=Windows_Update_Win10
add action=drop chain=forward comment="Google AdSense" layer7-protocol=google_ads_1
protocol=tcp
add action=drop chain=forward layer7-protocol="google_ads " protocol=tcp
add action=accept chain=forward comment="Google Pay" disabled=yes layer7-
protocol=Youtube
add action=drop chain=forward disabled=yes dst-address-list="Google Pay"
protocol=tcp src-port=30500-58000

/ip firewall mangle

add action=change-ttl chain=postrouting comment="Bloqueo bluetooth" disabled=yes
dst-address=192.168.20.0/24 new-ttl=set:1 passthrough=yes
add action=mark-connection chain=prerouting comment=Speedtest connection-state=new
dst-address-list=Speedtest-List new-connection-mark=Speedtest_mark_conn
passthrough=yes
add action=mark-packet chain=prerouting connection-mark=Speedtest_mark_conn new-
packet-mark=Speedtest_mark_pak passthrough=no
add action=mark-connection chain=prerouting comment=Whatsapp dst-address-
list=Whatsapp new-connection-mark=Whatsapp passthrough=yes
add action=mark-connection chain=prerouting content=whatsapp.net new-connection-
mark=Whatsapp passthrough=yes
add action=mark-connection chain=prerouting content=whatsapp.com new-connection-
mark=Whatsapp passthrough=yes
add action=mark-packet chain=prerouting connection-mark=Whatsapp new-packet-
mark=Whatsapp passthrough=no
add action=mark-connection chain=prerouting comment=NetFlix layer7-protocol=NetFix
new-connection-mark=netfix passthrough=yes
add action=mark-packet chain=prerouting connection-mark=netfix new-packet-
mark=NetFix_con passthrough=no
add action=mark-connection chain=prerouting comment=Facebook layer7-
protocol=Facebook new-connection-mark=Facebook passthrough=yes
add action=mark-packet chain=prerouting connection-mark=Facebook new-packet-
mark=Facebook passthrough=no
add action=mark-connection chain=prerouting comment=Youtube layer7-protocol=Youtube
new-connection-mark=Youtube passthrough=yes
add action=mark-packet chain=prerouting connection-mark=Youtube new-packet-
mark=Youtube passthrough=no
add action=mark-connection chain=prerouting comment=Navegacion connection-mark=no-
mark dst-port=80,443 new-connection-mark=Navegacion passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting connection-mark=Navegacion new-packet-
mark=Navegacion_tcp passthrough=no
add action=mark-connection chain=prerouting comment=DNS dst-port=53 new-connection-
mark=dns passthrough=yes protocol=udp
add action=mark-packet chain=prerouting connection-mark=dns new-packet-mark=dns
passthrough=no
add action=mark-connection chain=prerouting comment=PING_ICMP new-connection-
mark=ping_icmp passthrough=yes protocol=icmp
add action=mark-packet chain=prerouting connection-mark=ping_icmp new-packet-
mark=ping_icmp passthrough=no
add action=mark-connection chain=prerouting comment=Juegos connection-mark=no-mark
dst-port=1600-40999 new-connection-mark=Juegos_tcp passthrough=yes protocol=tcp
add action=mark-packet chain=prerouting connection-mark=Juegos_tcp new-packet-
mark=Juegos passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark connection-
state="" dst-port=1600-40999 new-connection-mark=Juegos_udp passthrough=yes
protocol=udp
add action=mark-packet chain=prerouting connection-mark=Juegos_udp new-packet-
mark=Juegos passthrough=no
add action=mark-connection chain=prerouting comment=Otros connection-mark=no-mark
new-connection-mark=Otros passthrough=yes
add action=mark-packet chain=prerouting connection-mark=Otros new-packet-mark=Otros
passthrough=no

/queue tree
add max-limit=100M name=Descargas parent=global
add name=Speedtest_Dow packet-mark=Speedtest_mark_pak parent=Descargas priority=2
add name=Navegacion_Dow packet-mark=Navegacion_tcp parent=Descargas priority=7
add name=Juegos_Dow packet-mark=Juegos parent=Descargas priority=3
add name=Dns_Dow packet-mark=dns parent=Descargas priority=1
add name=Youtube_Dow packet-mark=Youtube parent=Descargas
add max-limit=100M name=Subida parent=ether1-WAN
add name=Dns packet-mark=dns parent=Subida priority=1
add name=Juegos_Up packet-mark=Juegos parent=Subida priority=3
add name=Navegacion_Up packet-mark=Navegacion_tcp parent=Subida priority=7
add name=Speedtest_Up packet-mark=Speedtest_mark_pak parent=Subida priority=2
add name=Youtube_Up packet-mark=Youtube parent=Subida
add name=Whatsapp_Dow packet-mark=Whatsapp parent=Descargas priority=2
add name=Whatsapp_Up packet-mark=Whatsapp parent=Subida priority=2
add name=Facebook_Dow packet-mark=Facebook parent=Descargas
add name=Facebook_Up packet-mark=Facebook parent=Subida
add name=Otros_Dow packet-mark=Otros parent=Descargas
add name=Otros_Up packet-mark=Otros parent=Subida
add name=Ping_Dow packet-mark=ping_icmp parent=Descargas priority=1
add name=Ping_Up packet-mark=ping_icmp parent=Subida priority=1
add name=NetFix_Dow packet-mark=NetFix_con parent=Descargas
add name=NetFlix_Up packet-mark=NetFix_con parent=Subida

# MAS APORTES EN
# AUTOR: ARSYSTEL
# Facebook: https://www.facebook.com/arsystelbolivia/
# Grupo: https://www.facebook.com/groups/270091610277909/?
ref=pages_groups_card&source_id=1415050895215125