MikroTik

Posted: **Thu Jun 21, 2007 12:07 pm**

Hi,

I experienced a problem with firewall-filter rules and ros-v3beta9.

when this rule is added nothing happens:

/ip firewall filter add chain=forward protocol=tcp p2p=all-p2p tcp-flags=syn connection-limit=11,32 action=drop

this rule should drop all p2p-connections >10 but byte and packet counter is already zero. there are many connections classified as p2p (more than 10 per ip) but nothing happens.

connection tracking is enabled, I even tried changing the chain to output and input with the same result.

Is this a bug in beta9?

best regards
chris

Posted: **Mon Jun 25, 2007 3:12 pm**

I'm having the same problem in Beta8, i'll create a firewall rule to drop all traffic from a certain IP, and it does nothing.

Posted: **Fri Jun 29, 2007 10:21 am**

I've changed the rule to

 0   chain=forward protocol=tcp p2p=all-p2p connection-limit=11,32 action=drop

but it doesn't work too, then I did a system-reboot, after that the rule drops connections like it should.

MikroTik

Firewall Filterrule ros-v3beta9

Firewall Filterrule ros-v3beta9

Re: Firewall Filterrule ros-v3beta9

Re: Firewall Filterrule ros-v3beta9