Address-List entry not being removed after timeout expires

RouterOS General
1

RouterOS 6.40.4

I have a firewall rule that adds an ip to an address-list with a timeout of 00:02:00 (2 minutes). Before the 6.38 upgrade, when the timeout was reached, the entry was removed from the address-list. That is not happening any more. I now have an address-list of over 100,000 entries.

I see this was to have been fixed in 6.39.x but it is still not working.

Any suggestions?

2

I am running such a config with 8 hour timeout and I don’t see that problem.
Maybe it is related to the shorter timeout you use or another config peculiarity?

3

I’ll try 30 minutes next. The thing is, this use to work with no issues until the 6.38 or update.

4

And, I found the issue.

I had set up some NAT rules a while back that added to the address list. The default on NAT for the time out is “none dynamic”. I simply changed this to a time and all is working.

5

Ok, so not a bug… :slight_smile:

6

Not at all. Well, not a MikroTik bug. Operator bug. I added those rules directly after the upgrade a couple months ago. Coincidental.

7

So maybe you should remove your bug report in the 6.39.3 topic?

8

Updated rather than removed.