Is it possible to add description field for address-list at firewall?
This feature simplifies the administering of rules in case of using different subnets. It’s difficult to remember affiliation of each subnet when the number of them is more than 10.
There is already comment field.
yeah, just like pointed already - select desired rule, do right click and you will see at bootom “Comment” context action (Ctrl-M hotkey by default)for.
if you had even moderately complex(more than say 10 rules or so) config in conntract then having firewall content throughly commented/described - a Must.
OK. That’s right. But I use the address-list as a collection of networks with their description. Comments not allows me to sort by that description. Another factor - the listing with comments becomes twice as long. All issues can be resolved by making comments like timeout field.
P.S. Sorry for my english please.
If you want shorter list, right-click on it and check “Inline Comments” in menu.
Use the inline comments option. It is in the settings menu at the top of the Winbox window.
It’s simple and great solution! Thank you!
But there is no inline for command line… ![]()
yes there is ![]()
[admin@MikroTik] /ip firewall filter> print terse
0 D comment=special dummy rule to show fasttrack counters chain=forward
1 comment=defconf: accept ICMP chain=input action=accept protocol=icmp log=no log-prefix=""
2 comment=defconf: accept established,related chain=input action=accept connection-state=established,related log=no log-prefix=""
3 comment=defconf: drop all from WAN chain=input action=drop in-interface=ether1 log=no log-prefix=""
4 comment=defconf: fasttrack chain=forward action=fasttrack-connection connection-state=established,related log=no log-prefix=""
5 comment=defconf: accept established,related chain=forward action=accept connection-state=established,related log=no log-prefix=""
6 comment=defconf: drop invalid chain=forward action=drop connection-state=invalid log=no log-prefix=""
7 comment=defconf: drop all from WAN not DSTNATed chain=forward action=drop connection-state=new connection-nat-state=!dstnat in-interface=ether1 log=no
Is there a comparable feature for the WebFig?
It would be nice to be able to set display options like included columns and this inline comment in the WebFig.
You are right, webfig does not have inline comments at the moment