Hello,
I want to receive emails only for certain firewall logs, so I have setup the following rules on my CRS125-24G-1S-RM rOS 6.11.
/ip firewall mangle print from=2
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; log incoming SUCCESSFUL SSH connections
chain=postrouting action=log tcp-flags=“” protocol=tcp src-address=!192.168.1.0/24 dst-address=192.168.1.3 dst-port=22 connection-bytes=6500-10000 log-prefix=“SSH_Incoming”
This puts a log prefix for all incoming ssh connections to host 192.168.1.3.
I want to send those logs throuh email, so I setup this in Logging :
[admin@Routing_CORE_Bucuresti] > /system logging print detail from=7
Flags: X - disabled, I - invalid, * - default
0 topics=firewall prefix=“SSH_Incoming” action=sendmail
[admin@Routing_CORE_Bucuresti] > /system logging action print detail from=4
Flags: * - default
0 name=“sendmail” target=email email-to=“xxxxxx@gmail.com” email-start-tls=yes
I don’t receive any email if I leave the prefix value set.
If I remove prefix mathing, it works, but I’ll receive all firewall logs in my email which is not what I need.
This worked with no error on latest ROS 5.x.
Any assistance is welcomed.