I'm pretty sure you'd want to do a simple firewall rule with the address
list.  A layer 7 would be WAY more inefficient.

Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373


On Thu, Nov 7, 2019 at 1:17 PM Adam Moffett <[email protected]> wrote:

> Is it more expensive to have a layer7 content match, or match source
> IP's against an address list with 8000 entries?  I can do either one of
> these with one rule.
>
> I could go to the Mikrotik forum, but then I'd have to wade through all
> the dumb chatter whereas I know the smart people live here already.
>
> -Adam
>
>
>
> --
> AF mailing list
> [email protected]
> http://af.afmug.com/mailman/listinfo/af_af.afmug.com
>
-- 
AF mailing list
[email protected]
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Reply via email to