Community discussions

MikroTik App
 
sejtam
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 67
Joined: Sun Dec 14, 2014 4:23 pm

Are add-*-to-address-list actions terminal

Sun Feb 08, 2015 11:31 am

ie, do they stop further processing of the chain?

I couldn't find that just now.

The 'mark packet' actions have a passthrough option, but the above don't .
 
sejtam
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 67
Joined: Sun Dec 14, 2014 4:23 pm

Re: Are add-*-to-address-list actions terminal

Mon Feb 09, 2015 1:33 pm

Ok. just found out they are not terminal.

Next question:

Say I have an address already in a list
A.B.C.D 1h

and now the same address gets executed with
Add-*-to*list address=A.B.C.D timeout=2h

will this
a) fail (and keep the original timeout
b) extend the timeout to 2H
c) add the timeouts to make 3h?

What if the new timeout is shorter (say 30 mins) , will it
c) reduce the timeout (effectively overriding the old entry)
d) keep it at the old value?
e) addthe shorter timeout to the exiting one (making it 1:30:00 from now)?
 
User avatar
strods
MikroTik Support
MikroTik Support
Posts: 1661
Joined: Wed Jul 16, 2014 7:22 am
Location: Riga, Latvia

Re: Are add-*-to-address-list actions terminal

Mon Feb 09, 2015 2:37 pm

If you will have two rules and both of them will add same address to same address list, then timeout will be max value of both timeouts. Timeout of address list entry can only be increased.
In what kind of configuration it would be useful to add same address to address list twice?
 
sejtam
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 67
Joined: Sun Dec 14, 2014 4:23 pm

Re: Are add-*-to-address-list actions terminal

Mon Feb 09, 2015 3:56 pm

It would be important to know if a firewall detection catches the same address twice.
In most cases it shoudl extend the entry time IMHO.

I also noticed that if the entry is untimed, it won't be changed to timed, ie untimed is effectively 'infinite'