Hi all,

I'm doing some tests with my home router installation and it seems that I can't get dst-address-type=local match to work. I just add first rule in input chain like this:
Then I just do ping 192.168.1.254 and counter does not increase. Address 192.168.1.254 is assigned to eth5. When I watch traffic with torch, I can see that ICMP packets arrives with dst address of 192.168.1.254.

When I remove dst-address-type=local from the rule, then counter starts increasing. Intrestingly, if I invert dst-address-type=local rule, counter still does not increase. I do not really understand what is wrong. It should be all straightforward here, but for some strange reason it does not work as expected.

By the way, I'm running RouterOS version 7.14. WOuld appreciate if anyone has good ideas on how to troubleshoot this.

EDIT:
Small update. When I add above mentioned rule with dst-address-type=local from the beginning, then it works, counters are increasing. Then I change the rule, so that it starts blocking packets, something like adding src-address-type=local, which obviously will not match packets. Then I change everything back as it was originally dst-address-type=local and rule does not work anymore (or at least counters are not increasing). Then I need to remove and re-create rule and it works again. It also works, as mentioned above, if I remove dst-address-type=local.

EDIT2:
I have another RouterOS machine running version 6.49.10, and this behavior described above does not exist. This router works as expected. Could this be some kind of bug? Anyone can test it on 7.14?

Regards,

I tested it on Mangle chain prerouting: dst-address-type=local or src-address-type=local. Its seem that on prerouting only one known, either source or destination.

Edit:
Btw, it works on Mangle chain=input, dst-address-type=local or src-address-type=local

Thanks for checking! By saying it work, do you mean that you also have this issue as me, when after changing rule back to original, it does not work anymore? For me it is like this:

1. add only dst-address-type=local rules works, counters are counting
2. add also src-address-type=local rules stops counting packets
3. remove src-address-type-local rule still does not work, even though it looks exactly as rule number 1

Then I have found that adding src-address-type=unicast and then removing it helps to restore original rule behavior as it was in (1).

I have created bug report on this beginning of March, but never heard back from Mikrotik. Waiting.

Regards