Hello,
I have problem with logging. I am logging TOPIC Firewall into remote log.
One of my rule is block trojans IP:
[admin@R1] > /ip firewall address-list print
Flags: X - disabled, D - dynamic
# LIST ADDRESS CREATION-TIME TIMEOUT
...shortened
460 Trojans 66.240.205.34 oct/22/2018 13:56:52
461 Trojans 208.91.196.46 oct/23/2018 09:40:07
462 Trojans 199.191.50.73 oct/23/2018 09:47:22
[admin@R1] > /ip firewall filter print
Flags: X - disabled, I - invalid, D - dynamic
...shortened
30 ;;; BLOCK TROJANS
chain=input action=drop src-address-list=Trojans log=no log-prefix=""
31 chain=forward action=drop src-address-list=Trojans log=no log-prefix=""
In counter we can see 1 packet, so I expect it will be in the remote log(Linux machine):
*
[admin@R1] > /ip firewall filter print stats
Flags: X - disabled, I - invalid, D - dynamic
# CHAIN ACTION BYTES PACKETS
30 ;;; BLOCK TROJANS
input drop 44 1
31 forward drop 0 0
[admin@R1] > /system logging action print
Flags: * - default
...shortened
3 * name="remote" target=remote remote=192.168.1.1 remote-port=514 src-address=192.168.6.1 bsd-syslog=yes syslog-time-format=bsd-syslog syslog-facility=daemon syslog-severity=auto
[admin@R1] > /system logging print
Flags: X - disabled, I - invalid, * - default
# TOPICS ACTION PREFIX
0 * info memory
1 * error memory
...shortened
15 firewall remote Firewall
I went to look into remote log:
*
#cat /var/log/mikrotik-Router1.log | grep 66.240.205.34
...nothing was returned
#cat /var/log/mikrotik-Router1.log | grep 208.91.196.46
...nothing was returned
#cat /var/log/mikrotik-Router1.log | grep 199.191.50.73
...nothing was returned
Could anybody explain me why it was not sent into the log?
Thank You