/ip firewall filter does not seem to support time ranges

Running RouterOS 6.0 May 17, 2013 on a 2011UAS-2HnD

I am unable to add an IP filter in winbox with a time range.
Every time range is invalid.

In RouterOS 5.25 I can enter a time range of say: 00:00:00 - 15:00:00
This is invalid in 6.0 with winbox

The default is 00:00:00 - 1d 00:00:00

The Mikrotik Wiki does not actually show a sample of the correct format
http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter

It simply shows:

time (time-time,sat | fri | thu | wed | tue | mon | sun; Default: ) Allows to create filter based on the packets’ arrival time and date or, for locally generated packets, departure time and date


My firewall rules get the I flag indicating they are invalid if entered on the command line.

Can someone else test making a firewall rule that has a time range of say midnight to 3PM and see if it will work?

I just rolled back from 6.0 to 5.25 and I can enter the rules now in winbox but I still get an Invalid flag. So the rule seems that it will not work. Or will it?

/ip firewall filter chain=forward action=drop src-address-list=MyTargetIP time=0s-15h,mon,tue,wed,thu,fri

Status shows invalid…but it is working to drop packets. I adjusted the rule to be 30 seconds in the future…and my packets were dropped…one second after the time the packets were forwarded rather than dropped.

So it appears you can enter the invalid time in 5.25 winbox interface…and the interface still shows the filter rule in red and with the invalid flag…but the rule does work. It just would appear that an invalid rule would not work when it does.

So is this a bug in 6.0 or a feature?
Did the time format change?
Can the wiki get updated to include the time field to show what is valid?

Why would I want a time sensitive rule? I want my kids to go outside and play and not veg on their iPod all day…so their wifi only starts working at 3pm.

Thanks!

Hello,

I might be WAYYY too late, but just in case…

I just finished banging my head against the wall on that same issue. :laughing:

It’s ok. It means that the rules don’t apply as you’re checking them out at a time that’s outside the range your rules specify. That’s why if you program them 30 seconds ahead of your time, they work (then stop).

Looking at your post timestamp, it’s obvious that 10:30 PM is outside your 0h-15h range, thus the red.

Found this! http://forum.mikrotik.com/t/firewall-filter-time-parameter-bad/71964/3

Take care!

Thanks so much…I did happen to figure that out a long time later.

Thanks for being so kind as to post your findings.