I have simple router with NAT. In firewall connections I noticed some strange outgoing UDP traffic (coming form PC in local lan and targeted to public internet. I want to isolate such connections to investigate them further.
I’ve set simple filter rule to log all UDP connections on top of forward chain. It logs none.
/ip firewall filter chain=forward action=log protocol=udp log-prefix=“udp”
I tried to narrow a bit using interfaces and UDP ports but still not a single connection is logged.
Double checked, and at the same time firewall connections show active connections established while my log rule shows none.
What I am missing?