/ip firewall layer7-protocol

add name=youtube regexp="^.+(youtube.com).*\$"

add name=facebook regexp="^.+(facebook.com).*\$"
add name=snapchat regexp=\
"\"(snapchat.com|snapads.com|snap-storage-cdn.l.google.com).*\""
add name=instagram regexp="^.+(instagram.com).*\$"
add name=spotify regexp="^.+(spotify.com).*\$"

/ip firewall filter

add action=drop chain=forward comment="BLOQUEO DE FACEBOOK" packet-mark=\
facebook_pack
add action=drop chain=forward comment="BLOQUEO DE YOUTUBE" packet-mark=\
youtube_pack
add action=drop chain=forward comment="BLOQUEO DE SNAPCHAT" packet-mark=\
snapchat_pack
add action=drop chain=forward comment="BLOQUEO DE INSTAGRAM" packet-mark=\
instagram_pack
add action=drop chain=forward comment="BLOQUEO DE SPOTIFY" packet-mark=\
spotify_pack
/ip firewall mangle
add action=mark-connection chain=prerouting comment="BLOQUEO DE FACEBOOK" \
connection-mark=no-mark layer7-protocol=facebook new-connection-mark=\
facebook_conn passthrough=yes
add action=mark-packet chain=prerouting connection-mark=facebook_conn \
new-packet-mark=facebook_pack passthrough=no
add action=mark-connection chain=prerouting comment="BLOQUEO DE YOUTUBE" \
connection-mark=no-mark layer7-protocol=youtube new-connection-mark=\
youtube_conn passthrough=yes
add action=mark-packet chain=prerouting connection-mark=youtube_conn \
new-packet-mark=youtube_pack passthrough=no
add action=mark-connection chain=prerouting comment="BLOQUEO DE INSTAGRAM" \
connection-mark=no-mark layer7-protocol=instagram new-connection-mark=\
instagram_conn passthrough=yes
add action=mark-packet chain=prerouting connection-mark=instagram_conn \
new-packet-mark=instagram_pack passthrough=no
add action=mark-connection chain=prerouting comment="BLOQUEO DE SNAPCHAT" \
connection-mark=no-mark layer7-protocol=snapchat new-connection-mark=\
snapchat_conn passthrough=yes
add action=mark-packet chain=prerouting connection-mark=snapchat_conn \
new-packet-mark=snapchat_pack passthrough=no
add action=mark-connection chain=prerouting comment="BLOQUEO DE SPOTIFY" \
connection-mark=no-mark layer7-protocol=spotify new-connection-mark=\
spotify_conn passthrough=yes
add action=mark-packet chain=prerouting connection-mark=spotify_conn \
new-packet-mark=spotify_pack passthrough=no

/ip firewall mangle

add action=mark-packet chain=forward comment=CAMARA new-packet-mark=\
"CAMARA UP" passthrough=no src-address=10.45.34.70
add action=mark-packet chain=forward dst-address=10.45.34.70 new-packet-mark=\
"CAMARA DOWN" passthrough=no
/queue tree
add max-limit=1M name=DOWN_PADRE parent=global queue=pcq-download-default
add max-limit=1M name=UP_PADRE parent=global queue=pcq-upload-default
add limit-at=128k max-limit=1M name="CAMARA 1M" \
packet-mark="CAMARA DOWN" parent=DOWN_PADRE queue=pcq-download-default
add limit-at=128k max-limit=1M name="CAMARA UP" packet-mark="CAMARA UP" \
parent=UP_PADRE queue=pcq-upload-default