Currently, when adding an address to an Address Lists under ip/firewall/address-list, there is a very useful timeout field. This allows entries to expire automatically after the defined lifetime, which is extremely helpful and keeping the list clean.
At the same time, the ip/dns/static feature has the excellent FWD option, which can both forward a DNS request and add the resolved address into an Address Lists. However, the entries created this way stay there permanently, with no option to set a timeout.
It would be very useful if you could extend this functionality by allowing a timeout parameter when Address-Lists entries are created via ip/dns/staticFWD. This would make the feature much more flexible and useful
Thank you for considering this improvement!
I'm not sure how these entries are added and can't check it today, but they definitely don't stay permanently. At least in my case. I could guess, they are removed, when DNS entry TTL in cache is timed out.
This is not correct. The added entries have the timeout set to the TTL of the record by default:
address-list (string) Name of the Firewall address list to which address must be dynamically added when some request matches the entry. Entry will be removed from the address list when TTL expires.
And from 7.16 IIRC you can also extend the timeout by an additional amount:
address-list-extra-time(time; Default: 0s) Extra time added to TTL when creating address list entry.
Because people complained that the address list entries disappear too quickly for domain record with short TTL. But before 7.20 you can only set that parameter with CLI. The GUI option is only added in 7.20:
*) winbox - added Address List Extra Time under "IP/DNS" menu;
