Mangle and connection mark

RouterOS Beginner Basics
1

I am trying to mark incoming and outgoing connections from/to a specific IP address with mangle, so I added a new rule (Winbox with Mikrotik version 2.9.39) with the following options:

Chain: forward
Src address: 192.168.0.252
Out interface: ADSL (this is the dialup interface)
Action: Mark connection
New Connection Mark: Upload
Passthrough: Disabled

After that, I tried to check if the marking works correctly, so I went to Firewall\Connections and sorted the list on the Connection Mark column.
Strangely I could see several incoming connections (where the source address is not the given one) marked with the “Upload” name.

Could somebody explain why? If this is not working, how could I differentiate only the outgoing traffic then?

Thanks in advance,

Csaba

2

At the moment for me it seems that connection marking can’t make a difference between connection directions. For example I mark connections with a condition where a source IP is given (see my previous post), then both incoming and outgoing connections from/to that IP will be also marked.

Could somebody confirm if that’s true?