Running RouterOS 6.0 May 17, 2013 on a 2011UAS-2HnD
I am unable to add an IP filter in winbox with a time range.
Every time range is invalid.
In RouterOS 5.25 I can enter a time range of say: 00:00:00 - 15:00:00
This is invalid in 6.0 with winbox
The default is 00:00:00 - 1d 00:00:00
The Mikrotik Wiki does not actually show a sample of the correct format
http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter
It simply shows:
time (time-time,sat | fri | thu | wed | tue | mon | sun; Default: ) Allows to create filter based on the packets’ arrival time and date or, for locally generated packets, departure time and date
My firewall rules get the I flag indicating they are invalid if entered on the command line.
Can someone else test making a firewall rule that has a time range of say midnight to 3PM and see if it will work?
I just rolled back from 6.0 to 5.25 and I can enter the rules now in winbox but I still get an Invalid flag. So the rule seems that it will not work. Or will it?
/ip firewall filter chain=forward action=drop src-address-list=MyTargetIP time=0s-15h,mon,tue,wed,thu,fri
Status shows invalid…but it is working to drop packets. I adjusted the rule to be 30 seconds in the future…and my packets were dropped…one second after the time the packets were forwarded rather than dropped.
So it appears you can enter the invalid time in 5.25 winbox interface…and the interface still shows the filter rule in red and with the invalid flag…but the rule does work. It just would appear that an invalid rule would not work when it does.
So is this a bug in 6.0 or a feature?
Did the time format change?
Can the wiki get updated to include the time field to show what is valid?
Why would I want a time sensitive rule? I want my kids to go outside and play and not veg on their iPod all day…so their wifi only starts working at 3pm.
Thanks!