Hello, i just tried port detection
http://wiki.mikrotik.com/wiki/Drop_port_scanners
and it works fine, but its possible to detect if client is scanning server in the internet ?
thank you
on those wiki site the mangle work on chain input. If you want to use this mangle for the client on LAN interface, you should try to change the chain to “forward” instead “input” and use in-interface (interface conneceted to your client) or src-address.
Run the port scanner tool and look on the firewall address-lists.
Just try and let us know if that work
hi, thank you it works 
and please in action tab i tried log it to file on my disk but i dont know how to write a log prefix..
i guess somethink like
default: port scan to the internet destination src= dst= target: myfile.log
but i dont know exact syntax 
I never play with log yet 
, may be somebody else could help you in this issue