How to block Fortnite servers on Mikrotik?

Question

network hardware

Hello my dears.))
I have a problem in the form of the game Fortnite.
I need to block game servers on Mikrotike.
Here are all server IPs

Fortnite uses AWS ( amazon web servers ) and here is the AWS ip
US East (US East 1) (Virginia) 52.119.233.18
US East (US East 2) (Ohio) 52.94.4.78
US West (US West 1) (California) 52.94.12.150
US West (US West 2) (Oregon) 52.94.10.118
Canada (Ca Central 1) (Central) 52.94.14.110
South America (SA East 1) (Sao Paulo) 52.94.7.70
Europe (EU West 1) (Ireland ) 52.94.5.150
Europe (EU West 2) (London) 52.94.15.16
Europe (EU Central 1) (Frankfurt) 52.94.17.134
Europe (EU West 3) (Paris) 52.94.16.4
Asia Pacific (AP South 1) (Mumbai) 52.94.20.72
Asia Pacific (AP NorthEast 1) (Tokyo) 52.94.8.34
Asia Pacific (AP NorthEast 2) (Seoul) 52.94.6.80
Asia Pacific (AP NorthEast 3) (Osaka Local) 52.94.19.20
Asia Pacific (AP SouthEast 1) (Singapore) 52.94.11.98
Asia Pacific (AP SouthEast 2) (Sydney) 52.94.13.132
China (CN North 1) (Beijing) 54.222 .57.136
China (CN NorthWest 1) (Ningxia) 52.82.187.74
AWS GovCloud (US Gov West 1) (US) 52.94.9.3
Also u can use this adress to see what ping u have with these servers
https://www.cloudping .info/
or u can just use cmd or other pinging softwares and sites

So I decided that if I block the IP data in IP / Firewall / Filter Rules, then my problem will be solved, but it wasn’t there that the game starts normally and without any problems. Maybe someone has already encountered this problem. And yes, do not offer the "go and delete the game" method - it does not fit.

Answer 1

So guys, I found a solution and now I will share it with you.
The Fortnie game itself launches with the EpicGame launcher. So I thought, what if you block the launcher and not the game itself, anyway, the game without a launcher and authorization will not start.
Create a regular expression rule for Layer7
/i p firewall layer7-protocol
add name=FortBan regexp="^.+(www.epicgames.com|easyanticheat.net|fortnitegame.com).*$"
Next, create rules for marking connections
/ ip firewall filter
add action=drop chain=forward packet-mark=FortBan
And that's it!! Thank you all for your help.

Answer 2

Why such a list of servers? And where did you get the idea that it is static? They can raise / extinguish virtual machines, depending on the load, add entire ranges.
It would be nice to try to capture the client's traffic, where it breaks, on which ports, ideally, to catch the domain name where the client breaks and pulls the current configuration. I doubt that it is the ip addresses of the servers that are hardcoded into the client, I can assume that the client initially tries to sober up an address like lobby.gamename.com, from there it drags a list of current and active game servers.
In short wireshark in hand.

Answer 3

You can check whether it worked or not here https://fortniteserverstatus.com

Answer 4

It is sad when a system administrator is entrusted with the task of maintaining labor discipline.
And if it's relevant, check that you are blocking forward, and also check that the deny rules are higher than the allow ones. I hope you understand that any vpn will nullify your efforts?

Answer 5

You are not going that way. Such problems are solved by organizational measures, not technical ones. Today is fortnite, tomorrow is quake, the day after tomorrow is call of duty, etc. Are you serious about following toy trends in the workplace? What about offline games? And if someone brings a prefix? And if someone does not play, but watches books and reads films? An order / regulation / regulation is issued for the enterprise, which deprives part of the bonus (for example) if they sleep for such an occupation at the wrong time (for example, if not during a break, not after / before work, not in the absence of work tasks, etc. conditions), give for review and signature. If the enterprise is large and there really is a need for this, then in addition to the order / regulation / regulation / etc. you can use expensive technical solutions to collect evidence for deprecation,