Feature request: Multiple action= in raw and filter tables

RouterOS
1

Currently when you write rules for a filtering packets in /ip/firewall/raw or /ip/firewall/filter (or their IPv6 equivelent) if you want to perform multiple actions for a target you have to match multiple times for example:

/ip firewall raw
add action=notrack chain=prerouting comment="Drop bogon source inbound" in-interface=eth1 src-address-list=ipv4_bogons
add action=drop chain=prerouting comment="Drop bogon source inbound" in-interface=eth1 src-address-list=ipv4_bogons
add action=notrack chain=prerouting comment="Drop FireHOL hosts inbound" in-interface=eth1 src-address-list=firehol
add action=drop chain=prerouting comment="Drop FireHOL hosts inbound" in-interface=eth1 src-address-list=firehol

Could the action=... be expanded to accept multiple actions, for example:

 action=notrack,drop

or

 action=log,drop

or even:

 action=notrack,log,drop

This would allow for more simple management of rules and might have a small performance improvement depending on implementation.

Regards

Mike

2

If you drop in RAW then there is no additional need for notrack. The packet no longer reaches connection tracking.

Also you can always set log=yes on the same drop rule already.

3

You can use action=jump and jump to a custom chain where you do the multiple actions that you want.