/import l7-protos.rsc

/ip firewall filter add chain=forward in-interface=hotspot layer7-protocol=bittorrent action=add-src-to-address-list address-list=user-nakal address-list-timeout=1d

/ip firewall filter add chain=forward protocol=udp in-interface=hotspot dst-port=!53,123 src-address-list=user-nakal action=drop

/ip firewall filter add chain=forward protocol=tcp in-interface=hotspot dst-port=!80,443 src-address-list=user-nakal action=drop