How to find the computer with Virus

There are some Virus infected computers in my Hotspot network and i want to know if its possible to record the mac of the rejected virus from the firewall filters. That way i can disable there mac and not there username.

Thank you in advance.

copy your rule, place it before original and set action=log

Sweet, i guess the next step is how to read the log. im kinda a noob at this.

thank you

press the ‘Log’ button at the left of Winbox :wink: