When not using fasttrack rule, active connections are dropped immediately when they are added to src-address-list.
When using fasttrack, active connections are not dropped, although drop rule is above fasttrack rule:
add action=drop chain=forward src-address-list=ftp_blacklist
add action=fasttrack-connection chain=forward connection-state=established,related
add chain=forward content=“530 Login” dst-address-list=!ournetwork dst-limit=12/1m,24,dst-address/1m protocol=tcp src-port=21
add action=add-dst-to-address-list address-list=ftp_blacklist address-list-timeout=1w chain=forward content=“530 Login” dst-address-list=!ournetwork log=yes log-prefix=block_ftp protocol=tcp src-port=21
Does fasttrack mean that a connection that is matched does never ever get into any chain again?