RB1100AHx2 multiple public addresses on ethernet 12, after upgrade only some of them are reachable. Packet sniffer shows incoming traffic to eth12/respective IP but no activity in mangle prerouting. Before upgrade and after downgrade (from 6.37.5(stable)) all is working fine.

As far as i know Windows update is using standart http (TCP 80) for updates. So from https://technet.microsoft.com/cs-cz/library/bb693717.aspx i made Layer7 filter /ip firewall layer7-protocol add name=WinUpl7 regexp="^.*(get|GET).+(windowsupdate.microsoft.com|update.microsoft.com|download.micr...