Mark connection/packets using Address-List

RouterOS General
1

I probe mark traffic using Address-Lists, but all traffic marked as “–512–”

/ip firewall mangle> print

0 chain=forward action=mark-connection new-connection-mark=conn_512_in passthrough=yes dst-address-list=users512

1 chain=forward action=log connection-mark=conn_512_in log-prefix=“–512–”

(rule #1 action should be mark-packet, but i chage this for debug)

Address-Lists “users512” created from Radius (attrib Mikrotik-Address-List) and does not exist on start

What is wrong?

2

so, what’s problem?
what do you expect? and why did you change from packet to connection marks? it’s slightly different things…

3

All packets marked as “–512–” :frowning:
For all IP addresses: listed and not listed in my Address-List…

4

have you changed back to the packet-mark?

post all your mangle rules and the contents of the address-list at the moment of testing