Hello,
i’m suspecting (or maybe i’m missing something), by switching from ROS 6 to 7, when using packet marking in the bridge firewall, i don’t see that marking in IP Firewall.
I’m using easy setup to test:
- mikrotik HW, Router OS 7.2.2 (currently latest stable)
- one bridge (over all interfaces), IP address sitting on the bridge
- bridge NAT - one rule in chain dstnat (for everything) → mark packet by given ‘mark’
- IP Firewall, one passthrough rule (just for counting) in mangle chain prerouting trying to match packet mark set up in the bridge FW
and this was working in ROS 6 (… 6.48…6.49).
Can anybody test and confirm, or give advice ?
Thanks!