layer7 full

http://www.mikrotik.com/download/l7-protos.rsc
/ip firewall mangle
add comment="" name="Extension \" .exe \"" regexp="\\.(exe)"
add comment="" name="Extension \" .rar \"" regexp="\\.(rar)"
add comment="" name="Extension \" .zip \"" regexp="\\.(zip)"
add comment="" name="Extension \" .7z \"" regexp="\\.(7z)"
add comment="" name="Extension \" .cab \"" regexp="\\.(cab)"
add comment="" name="Extension \" .asf \"" regexp="\\.(asf)"
add comment="" name="Extension \" .mov \"" regexp="\\.(mov)"
add comment="" name="Extension \" .wmv \"" regexp="\\.(wmv)"
add comment="" name="Extension \" .mpg \"" regexp="\\.(mpg)"
add comment="" name="Extension \" .mpeg \"" regexp="\\.(mpeg)"
add comment="" name="Extension \" .mkv \"" regexp="\\.(mkv)"
add comment="" name="Extension \" .avi \"" regexp="\\.(avi)"
add comment="" name="Extension \" .flv \"" regexp="\\.(flv)"
add comment="" name="Extension \" .pdf \"" regexp="\\.(pdf)"
add comment="" name="Extension \" .wav \"" regexp="\\.(wav)"
add comment="" name="Extension \" .rm \"" regexp="\\.(rm)"
add comment="" name="Extension \" .mp3 \"" regexp="\\.(mp3)"
add comment="" name="Extension \" .mp4 \"" regexp="\\.(mp4)"
add comment="" name="Extension \" .ram \"" regexp="\\.(ram)"
add comment="" name="Extension \" .rmvb \"" regexp="\\.(rmvb)"
add comment="" name="Extension \" .dat \"" regexp="\\.(dat)"
add comment="" name="Extension \" .daa \"" regexp="\\.(daa)"
add comment="" name="Extension \" .iso \"" regexp="\\.(iso)"
add comment="" name="Extension \" .nrg \"" regexp="\\.(nrg)"
add comment="" name="Extension \" .bin \"" regexp="\\.(bin)"
add comment="" name="Extension \" .vcd \"" regexp="\\.(vcd)"
/ip firewall mangle
add action=mark-connection chain=prerouting comment="7z DOWNS" disabled=no layer
7-protocol="Extension \" .7z \"" new-connection-mark="7z DOWNS" passthrough=yes
protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="7z DOWNS" d
isabled=no new-packet-mark=7z passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="asf DOWNS" disabled=no laye
r7-protocol="Extension \" .asf \"" new-connection-mark="asf DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="asf DOWNS"
disabled=no new-packet-mark=asf passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="avi DOWNS" disabled=no laye
r7-protocol="Extension \" .avi \"" new-connection-mark="avi DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="avi DOWNS"
disabled=no new-packet-mark=avi passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="bin DOWNS" disabled=no laye
r7-protocol="Extension \" .bin \"" new-connection-mark="bin DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="bin DOWNS"
disabled=no new-packet-mark=bin passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="flv DOWNS" disabled=no laye
r7-protocol="Extension \" .flv \"" new-connection-mark="flv DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="flv DOWNS"
disabled=no new-packet-mark=flv passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="iso DOWNS" disabled=no laye
r7-protocol="Extension \" .iso \"" new-connection-mark="iso DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark= "iso DOWNS"
disabled=no new-packet-mark=iso passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="mkv DOWNS" disabled=no laye
r7-protocol="Extension \" .mkv \"" new-connection-mark="mkv DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="mkv DOWNS"
disabled=no new-packet-mark=mkv passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="exe DOWNS" disabled=no laye
r7-protocol="Extension \" .exe \"" new-connection-mark="exe DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="exe DOWNS"
disabled=no new-packet-mark=exe passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="mov DOWNS" disabled=no laye
r7-protocol="Extension \" .mov \"" new-connection-mark="mov DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="mov DOWNS"
disabled=no new-packet-mark=mov passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="mp3 DOWNS" disabled=no laye
r7-protocol="Extension \" .mp3 \"" new-connection-mark="mp3 DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="mp3 DOWNS"
disabled=no new-packet-mark=mp3 passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="mp4 DOWNS" disabled=no laye
r7-protocol="Extension \" .mp4 \"" new-connection-mark="mp4 DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="mp4 DOWNS"
disabled=no new-packet-mark=mp4 passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="mpeg DOWNS" disabled=no lay
er7-protocol="Extension \" .mpeg \"" new-connection-mark="mpeg DOWNS" passthroug
h=yes protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="mpeg DOWNS"
disabled=no new-packet-mark=mpeg passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="mpg DOWNS" disabled=no laye
r7-protocol="Extension \" .mpg \"" new-connection-mark="mpg DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="mpg DOWNS"
disabled=no new-packet-mark=mpg passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="nrg DOWNS" disabled=no laye
r7-protocol="Extension \" .nrg \"" new-connection-mark="nrg DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="nrg DOWNS"
disabled=no new-packet-mark=nrg passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="pdf DOWNS" disabled=no laye
r7-protocol="Extension \" .pdf \"" new-connection-mark="pdf DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="pdf DOWNS"
disabled=no new-packet-mark=pdf passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="ram DOWNS" disabled=no laye
r7-protocol="Extension \" .ram \"" new-connection-mark="ram DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="ram DOWNS"
disabled=no new-packet-mark=ram passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="rar DOWNS" disabled=no laye
r7-protocol="Extension \" .rar \"" new-connection-mark="rar DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="rar DOWNS"
disabled=no new-packet-mark=rar passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="rm DOWNS" disabled=no layer
7-protocol="Extension \" .rm \"" new-connection-mark="rm DOWNS" passthrough=yes
protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="rm DOWNS" d
isabled=no new-packet-mark=rm passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="rmvb DOWNS" disabled=no lay
er7-protocol="Extension \" .rmvb \"" new-connection-mark="rmvb DOWNS" passthroug
h=yes protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="rmvb DOWNS"
disabled=no new-packet-mark=rmvb passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="wav DOWNS" disabled=no laye
r7-protocol="Extension \" .wav \"" new-connection-mark="wav DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="wav DOWNS"
disabled=no new-packet-mark=wav passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="wma DOWNS" disabled=no laye
r7-protocol="Extension \" .wma \"" new-connection-mark="wma DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="wma DOWNS"
disabled=no new-packet-mark=wma passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="wmv DOWNS" disabled=no laye
r7-protocol="Extension \" .wmv \"" new-connection-mark="wmv DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="wmv DOWNS"
disabled=no new-packet-mark=wmv passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="zip DOWNS" disabled=no laye
r7-protocol="Extension \" .zip \"" new-connection-mark="zip DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="zip DOWNS"
disabled=no new-packet-mark=zip passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="youtube DOWNS" disabled=no
layer7-protocol="YouTube " new-connection-mark="youtube DOWNS" passthrough=yes p
rotocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="youtube DOW
NS" disabled=no new-packet-mark=youtube passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="daa DOWNS" disabled=no laye
r7-protocol="Extension \" .daa \"" new-connection-mark="daa DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="daa DOWNS"
disabled=no new-packet-mark=daa passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="dat DOWNS" disabled=no laye
r7-protocol="Extension \" .dat \"" new-connection-mark="dat DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="dat DOWNS"
disabled=no new-packet-mark=dat passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="vcd DOWNS" disabled=no laye
r7-protocol="Extension \" .vcd \"" new-connection-mark="vcd DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="vcd DOWNS"
disabled=no new-packet-mark=vcd passthrough=no protocol=tcp
add action=mark-connection chain=prerouting comment="cab DOWNS" disabled=no laye
r7-protocol="Extension \" .cab \"" new-connection-mark="cab DOWNS" passthrough=y
es protocol=tcp
add action=mark-packet chain=postrouting comment="" connection-mark="cab DOWNS"
disabled=no new-packet-mark=cab passthrough=no protocol=tcp
/ip firewall mangle
add action=mark-routing chain=prerouting comment="Team Speak" disabled=no layer7
-protocol=teamspeak new-routing-mark=Unshaped passthrough=yes
add action=mark-routing chain=prerouting comment="CSS Source" disabled=no layer7
-protocol=\
counterstrike-source new-routing-mark=Unshaped passthrough=yes
add action=mark-routing chain=prerouting comment=BF1942 disabled=no layer7-proto
col=battlefield1942 \
new-routing-mark=Unshaped passthrough=yes
add action=mark-routing chain=prerouting comment=BF2 disabled=no layer7-protocol
=battlefield2 \
new-routing-mark=Unshaped passthrough=yes
add action=mark-routing chain=prerouting comment="Day of Defeat" disabled=no lay
er7-protocol=\
dayofdefeat-source new-routing-mark=Unshaped passthrough=yes
add action=mark-routing chain=prerouting comment="Half life deathmatch" disabled
=no layer7-protocol=\
halflife2-deathmatch new-routing-mark=Unshaped passthrough=yes
add action=mark-routing chain=prerouting comment="Quake half life" disabled=no l
ayer7-protocol=\
quake-halflife new-routing-mark=Unshaped passthrough=yes
add action=mark-routing chain=prerouting comment=Quake1 disabled=no layer7-proto
col=quake1 \
new-routing-mark=Unshaped passthrough=yes
add action=mark-routing chain=prerouting comment="skype out" disabled=no layer7-
protocol=skypeout \
new-routing-mark=Unshaped passthrough=yes
add action=mark-routing chain=prerouting comment=SkypetoSKype disabled=no layer7
-protocol=\
skypetoskype new-routing-mark=Unshaped passthrough=yes
add action=mark-routing chain=prerouting comment=Teamspeak disabled=no layer7-pr
otocol=teamspeak \
new-routing-mark=Unshaped passthrough=yes
add action=mark-routing chain=prerouting comment="world of warcraft" disabled=no
layer7-protocol=\
worldofwarcraft new-routing-mark=Unshaped passthrough=yes
add action=mark-routing chain=prerouting comment=xboxlive disabled=no layer7-pro
tocol=xboxlive \
new-routing-mark=Unshaped passthrough=yes
/ ip firewall mangle
add chain=prerouting action=mark-routing new-routing-mark="HTTP traffic" passthr
ough=no dst-port=80 protocol=tcp comment="" disabled=no
add chain=prerouting action=mark-routing new-routing-mark="SSL traffic" passthro
ugh=no dst-port=443 protocol=tcp comment="" disabled=no
add chain=prerouting action=mark-routing new-routing-mark="POP3 traffic" passthr
ough=no dst-port=110 protocol=tcp comment="" disabled=no
add chain=prerouting action=mark-routing new-routing-mark="SMTP traffic" passthr
ough=no dst-port=25 protocol=tcp comment="" disabled=no
add chain=prerouting action=mark-routing new-routing-mark="P2P traffic" passthro
ugh=no p2p=all-p2p comment="" disabled=no
add chain=prerouting action=mark-routing new-routing-mark="Unknown traffic" pass
through=no comment="" disabled=no
LikeLike