/ip firewall connection
:foreach ip in=[get [find] src-address] do={
:local src [:pick $ip [:find $ip "10.0.4.240"] ([:len $ip] - 6)]
:local dstResult [/ip firewall connection get [find src=$src] dst-address]
:log warning $dstResult
}
/ip firewall connection
:foreach idc in=[find where (timeout>2) and src-address~"0.0.0.0"] do={
:log warning [get $idc dst-address]
}
/ip firewall nat
add action=add-dst-to-address-list address-list=thisaddlist address-list-timeout=none-dynamic chain=srcnat dst-address-list=!thisaddlist \
src-address=10.0.4.240
/tool torch
:foreach idc in=[find where interface="vlan10-Hotspot" and src-address~"12.0.4.240" and (timeout>2) ] do={
/file print file="dst-address.txt"
/file set "dst-address.txt" content=$idc
}
so much appreciated sir, ill try it too. thankyou so muchYou can add this on top of your nat rules, it add dynamically any contacted IP, of any protocol, to one firewall address-list thisaddlist
Code: Select all/ip firewall nat add action=add-dst-to-address-list address-list=thisaddlist address-list-timeout=none-dynamic chain=dstnat dst-address-list=!thisaddlist \ src-address=10.0.4.240
It works sir, thankyou so much, so so so much appreciated!!!Sorry, my error, on previous post the chain=srcnat, already fixed.
Salamat!It works sir, thankyou so much, so so so much appreciated!!!
No, you are always kind, and to be kind I wanted to thank you in your languagewoah , you know tagalog sir ? are you a Filipino ?
