drop packets on mikrotik

RouterOS General
1

Hi,
I’m interested how can i see Drop Package on MikroTik. Does anyone know any rules on firewall. It will be helpful. I’m using the rouls, but i’m not sure does it connect.

ip firewall filter
add chain=forward protocol=tcp connection-state=invalid
action=drop comment=“drop invalid connections”
add chain=forward connection-state=established action=accept
comment=“allow already established connections”
add chain=forward connection-state=related action=accept
comment=“allow related connections”

Thanks

2

you can enabling logging on your default drop rule to see what what is being dropped.

3

Would you like to be more clear, i have understand you, but i have idea how to do rules.My one is incorrect?

Thanks

4

just add “log=yes” to your drop rules.

5

Doesn’t matter enable log or not log the package is going on,see picture
lon no.png
log yes.png

6

Hello .

If you enable log you can see drop packet related log in mikrotik log manu .

And I don’t understand what you mean by "the package is going on "

Be more sapcific so staff or other user can help you .

Regards
Nikem

Sent from my Le X507 using Tapatalk

7

Elittebb : He was tarpitting the packets, and you wrote “be more SAPcific” … Gave me the best laugh of the week… :laughing:

Nitchky: As elitebb wrote. You do not see the logs in the firewall rule in winbox. You can view them in the “LOG” section of the main menu in winbox. if you are loggin a lot of items, you can put a Log Prefix in the firewall rule to make them easier to find in the log. For example, you could put the log prefix "DROP INVALID CONNECTION /// "

Kind regards,

8

Just i want to follow my package, i’ve got QoS, and i want to know how many packing i’m losing. For that purpose i found rules for firewall. That one on this post are wrong. I found good one.

http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter

Thanks

9

yes stoser good advice, have you got that kind of rules? i didn’t do similar think before.

Thanks

10

Thanks.
Keep laughing .


@op

I hope now you find log in LOG menu and adding some prefix is gonna help you too

Regards .

Sent from my Le X507 using Tapatalk