Excluding certain hosts on the network from fasttrack

RouterOS General
1

Hi! For traffic accounting purposes i need some hosts to be excluded from fasttrack. I do need other hosts to have fastrack functionality though.

I got this rule:

/ip firewall filter print
chain=forward action=fasttrack-connection connection-state=established,related src-address-list=!Special log=no log-prefix=""

However i see that connections that are created from the addresses in the “Special” address list are still getting fasttrack mark:

/ip firewall address-list print
108 D Special                            192.168.11.111                                                  

/ip firewall connection print
49  SAC Fs  tcp  192.168.11.111:38769  192.64.118.106:80     established 4m2s             0bps      0bps            9            1             380

Any ideas what i’m doing wrong?

2

Check this post, it explains the reason. You can just add dst-address-list=!Special to the condition list of your fasttrack rule.

3

That did the trick. Many thanks.

4

How do you do the accounting?
Do you like to get traffic data from some clients, but hide other?
Or do the frasttrack make accounting not working?