/ip firewall layer7-protocol
add name=rtmp regexp="^\\x03.
+\\x14.+\\x02.+\\x07.(connect)\?.
+(app)\?"
/ip firewall filter
add action=drop chain=forward
comment=facebook.com/
mikrotikyemen dst-address-
list=!unrestricted \
in-interface=in layer7-
protocol=rtmp src-address-
list=!unrestricted
add action=drop chain=forward
comment=psiphon
content=psiphon \
dst-address-list=!unrestricted src
-address-list=!unrestricted
المصدر : ميكروتك يمن