action=log

how do i add action log and another function like passthru

in 2.8 you would /ip firewall rule input add action=drop log=yes
comment=“Log and drop everything else”

in 2.9 you /ip firewall filter add chain=input action=drop comment=“Log and drop everything else”

but i want to log this as well . i put a rule in like this to catch all just before the drop rule

/ip firewall filter add chain=input action=log comment=“Log everything else”

but would like to log . or is this the wrong way to log items?/

Randy

you should add separate rule with an action=log.

Edgars

thank

so do add log after drop . will this log the
ip firewall filter add chain=input action=drop comment=“Log everything else”
ip firewall filter add chain=input action=log comment=“Log everything else”


how is this specificing just action=drop to be loged?

Randy

I would think you would want the action=log first as if it drops first, the log rule may not get applied…at least it used to be that way and is so with iptables.