/ip firewall layer7-protocol
add name=bittorrent regexp="^(\13bittorrent protocol|azver\01\$|get /scrape\\\?
info_hash=)|d1:ad2:id20:|\08'7P\\)[RP]"
add name=torrent-wws regexp="^.*(get|GET).+(torrent|info_hash|thepiratebay|isohunt|
entertane|demonoid|btjunkie|mininova|flixflux|vertor|h33t|zoozle|bitnova|bits\
oup|meganova|fulldls|btbot|fenopy|gpirate|commonbits).*\$"
add name=torrent-www regexp="^.+(torrent|thepiratebay|isohunt|entertane|demonoid|
btjunkie|mininova|flixflux|vertor|h33t|zoozle|bitnova|bitsoup|meganova|fulldls|\
btbot|fenopy|gpirate|commonbits).*\$"
/ip firewall filter
add action=reject chain=forward disabled=no p2p=all-p2p reject-with=icmp-network-
unreachable
add action=reject chain=forward disabled=no layer7-protocol=bittorrent reject-
with=icmp-network-unreachable
add action=reject chain=forward disabled=no layer7-protocol=torrent-wws reject-
with=icmp-network-unreachable
add action=reject chain=forward disabled=no layer7-protocol=torrent-www reject-
with=icmp-network-unreachable