apologies, left out the reference to the variable ($i) in the "do" statement, try below: { :foreach i in=[/ip firewall nat find where action="masquerade" && chain="srcnat" && !src-address-list && !dst-address-list] \ do={/ip firewall nat set $i ...

This should set src/dst address lists where both are none { :foreach i in=[ip firewall nat find where action="masquerade" && chain="srcnat" && !src-address-list && !dst-address-list] do={/ip firewall nat set src-address-list=AllowedSrc dst-address-list=Al...

I believe that's what you're looking for:

Code: Select all

find !src-address-list !dst-address-list

Dear Chupaka

unfortunately, it doesn't work.

Bests Regards

You know I have more than 500 Mikrotik routers that most of them haven't any comment in the NAT and some of them have just one NAT line and most of them have 3 or 4 NAT lines I have to run a script which does an action on the exact NAT line that I want. Is it possible to run any script which checks ...

I mean that I want to edit just one NAT line and set AllowedSrc & AllowedDst but according to the script it doesn't do any action: { /ip firewall nat set [find action=masquerade chain=srcnat dst-address-list="" src-address-list=""] src-address-list="AllowedSrc" dst-...

{ /ip firewall nat set [find action=masquerade chain=srcnat src-address-list!="" dst-address-list=""] src-address-list="AllowedSrc" set [find action=masquerade chain=dstnat dst-address-list!="" src-address-list=""] dst-address-list="AllowedDst&...

{ /ip firewall nat [set [find masquerade chain=srcnat] src-address-list="AllowedSrc" dst-address-list="AllowedDst"] } My guess. Dear msatter, BINGO!!! That is a good solution and answered. Thanks a million for your idea. It helps me a lot. :) But the point is that it set src-add...

Dear CZFan Many thanks for your response, Unfortunately, it didn't solve the issue. If I use below script I have to add number but I cant because I have many Mikrotik routers with several NAT I have to add src and dst address list by one script. :if [/ip firewall nat find action=masquerade chain=src...

Dears, I am trying to use this script to check two-parameter but it just executes without any action. :foreach i in=[ip firewall nat find action=masquerade chain=srcnat src-address-list=no dst-address-list=no ] do={/ip firewall nat set src-address-list=AllowedSrc dst-address-list=AllowedDst} I'd lik...

Hi Dears I have a problem and I was thankful if someone helps me. I have several numbers of 951 routers as my clients and I want to remove some useless routes in them without any disconnection or remove other routes. The point is that some of these useless route's gateways were PPTP and L2TP which t...