Hello all!

In 6.39 changelog I see that: *) log - added warning when Winbox/Dude sessions were denied;
But I didn't expect it to work it even if /ip service rule do not allow access to winbox port from that specific IP.

I think that this kind of logs must not be generated if the port is unreachable because of /ip service. Much like ssh or telnet do.
What do you think?

Seen on a router running 6.40.4

Hi
Not understanding too...
/ip service winbox is restricted from one IP address.

This log message appears "winbox/dude" which is denied from internet other IP....

What do you think about that ?

Same issue here.
I’m currently using winbox 3.17 and all routers are running ROS 6.40.8, with firmware also updated.

I believe safer way is to block access in /ip firewall.
The /ip service does not necessarily blocks packets from reaching the service. It just says that the service will refuse all but whitelisted addresses.