How to log specific connecions to disk?

RouterOS General
1

Manual is either very uninformative about this subject, or my english is so bad that I cannot get it.

I want to log all outgoing SMTP connections to disk, so I can review them later due to suspition that someone in local net has troyan.

2

If I’m not mistaken, this question was asked here time ago.

  1. Add firewall rule, that will log SMT traffic.
  2. Set firewall logs to be saved on disk ‘system loggind add action=disk topic=firewall’.
3

And how can I send this log to my mail evry week?

4

Peace,
I think sending logs to the remote server is better solution (there is syslog for Windows in MikroTik web page, Linux has own syslog application). It’s more easier and flexible to handle all logs.

However, there is an option to send logs to your e-mail too. E.g. you want to send all critical logs to e-mail:

  1. ‘system logging action add name=email target=email email-to=test@xyz.com’ this line adds new actions to send logs to specific e-mail;
  2. ‘system logging> add topics=error, action=email’ to specify which logs need to send by e-mail.
  3. ‘tool e-mail set server=1.2.3.4’ to specify outgoing SMTP server for the router.