Why it is a bad idea to drop packets using l7-filter on mikrotik
[caption id="attachment_1079" align="alignleft" width="300"] picture from wikipedia[/caption] This article will explain the effect on RouterOS if you drop packets using l7-filter on mikrotik. As we know from previous articles here, mikrotik supports Regex for pattern matching. one of its purpose to match traffic based on information on layer 7 (application layer). Mikrotik has wiki page that explain how the L7 filter works. and on that page, they already warns user that using l7-filter for dropping packet will increase CPU usage and cause router instability. (more…)