Community discussions

MikroTik App
 
abuumarselo
newbie
Topic Author
Posts: 36
Joined: Wed Aug 21, 2019 3:11 pm

Timed Firewall Rul

Mon Nov 04, 2019 10:21 am

I use Firewall rules with address list to block/allow certain sites such as youtube from internal network

I need to Allow certain computer for youtube for 15 days ( according to managers email )

I have field in the address list called timeout I put the value
15d 00:00:00
in it but the access rule is removed automatically after 24 hours

I use rb2011 version 6.45.6 and I've just upgraded to 6.45.7 before this post

note that when I use timeout for 2 hours or 4 hours the behavior is fine

Please instruct me the correct way
 
dmitris
Member Candidate
Member Candidate
Posts: 130
Joined: Mon Oct 09, 2017 1:08 pm

Re: Timed Firewall Rul

Mon Nov 04, 2019 10:35 am

Seems like your router is rebooted every 24h, can you confirm that? If yes this is why your address-list with timeout is gone.

Instead you can use scheduled script which will disable allowing rule.
 
abuumarselo
newbie
Topic Author
Posts: 36
Joined: Wed Aug 21, 2019 3:11 pm

Re: Timed Firewall Rul

Mon Nov 04, 2019 11:02 am

Seems like your router is rebooted every 24h, can you confirm that? If yes this is why your address-list with timeout is gone.

Instead you can use scheduled script which will disable allowing rule.
I didn't enter to reboot settings please explain how I can check that

Pleas teach me how I can do the script
 
dmitris
Member Candidate
Member Candidate
Posts: 130
Joined: Mon Oct 09, 2017 1:08 pm

Re: Timed Firewall Rul

Mon Nov 04, 2019 11:14 am

Why you don't even try to search on the forum?
viewtopic.php?t=37522

When script is ready, you need setup scheduled start of this script.
In winbox : System>Scheduler

P.S
You should know that time-outed address-lists are dynamical entries, if router rebooted then it will dissapear.
 
abuumarselo
newbie
Topic Author
Posts: 36
Joined: Wed Aug 21, 2019 3:11 pm

Re: Timed Firewall Rul

Mon Nov 04, 2019 11:50 am

Why you don't even try to search on the forum?
viewtopic.php?t=37522

When script is ready, you need setup scheduled start of this script.
In winbox : System>Scheduler

P.S
You should know that time-outed address-lists are dynamical entries, if router rebooted then it will dissapear.
first your note is good to consider

second I didn't got it well why I have to do script that I can do easier with winbox graphical interface most of scripts that I saw can be done using winbox graphical interface

by reviewing router config the only reboot is made by router watch dog and there is no scheduled tasks at all in my router
 
dmitris
Member Candidate
Member Candidate
Posts: 130
Joined: Mon Oct 09, 2017 1:08 pm

Re: Timed Firewall Rul

Mon Nov 04, 2019 12:05 pm

How many times you tried to re-insert address-list already?

i'm also using dynamically created lists with 30 days timeout and they works like a charm until reboot or timeout expiration..
 
abuumarselo
newbie
Topic Author
Posts: 36
Joined: Wed Aug 21, 2019 3:11 pm

Re: Timed Firewall Rul

Mon Nov 04, 2019 12:57 pm

How many times you tried to re-insert address-list already?

i'm also using dynamically created lists with 30 days timeout and they works like a charm until reboot or timeout expiration..
for now 1 computer about 3 times it has allowance for just 15 days

the problem If I'm in a leave and the rule deleted no one has the router password and I suspect that my time setting is wrong I didn't imagine it has something to do with reboot
 
abuumarselo
newbie
Topic Author
Posts: 36
Joined: Wed Aug 21, 2019 3:11 pm

Re: Timed Firewall Rul

Mon Nov 04, 2019 12:59 pm

why watch dog reboots the router and how I can know if there is a problem need to be solved
 
dmitris
Member Candidate
Member Candidate
Posts: 130
Joined: Mon Oct 09, 2017 1:08 pm

Re: Timed Firewall Rul  [SOLVED]

Mon Nov 04, 2019 1:28 pm

Go the System>Watchdog is there any IP-address specified ?

Watchdog reboot device when your device run in some troubles. (hardware or software).
If you didn't specify IP-address under watchdog and reboot was initiated by watchdog then you should see "suppout.rif" under Files menu.

https://wiki.mikrotik.com/wiki/Manual:System/Watchdog
 
abuumarselo
newbie
Topic Author
Posts: 36
Joined: Wed Aug 21, 2019 3:11 pm

Re: Timed Firewall Rul

Mon Nov 04, 2019 1:39 pm

Go the System>Watchdog is there any IP-address specified ?

Watchdog reboot device when your device run in some troubles. (hardware or software).
If you didn't specify IP-address under watchdog and reboot was initiated by watchdog then you should see "suppout.rif" under Files menu.
no the ip address is grey and has no value

there is a check on watchdog timer
ping after boot 00:10:00
ping timeout 120s
automatic supout checked

auto send not checked and the three field below is blank and greyed

and no suppout.rif in files menu

Thank you I've studied that page

Who is online

Users browsing this forum: No registered users and 34 guests