Postado originalmente por
Mr. RG
Use a address list somente para os bloqueados, daí só add os ip a serem barrados.
/ip firewall address-list
add address=10.10.10.3 comment="" disabled=no list=Msn-Bloqueado
/ip firewall filter
add action=drop chain=forward comment= "Bloqueia Msn" disabled=no layer7-protocol=MSN src-address-list=Msn-Bloqueado
/ip firewall layer7-protocol
add comment="MSN Messanger" name=MSN regexp="ver [0-9]+ msnp[1-9][0-9]\? [\\x0\
9-\\x0d -~]*cvr0\\x0d\\x0a\$|usr 1 [!-~]+ [0-9. ]+\\x0d\\x0a\$|ans 1 [!-~]\
+ [0-9. ]+\\x0d\\x0a\$"
add comment="MSN File Transfer" name="MSN_FT" regexp=\
"^(ver [ -~]*msnftp\\x0d\\x0aver msnftp\\x0d\\x0ausr|method msnmsgr
"