Timed Firewall Rul

RouterOS Beginner Basics
1

I use Firewall rules with address list to block/allow certain sites such as youtube from internal network

I need to Allow certain computer for youtube for 15 days ( according to managers email )

I have field in the address list called timeout I put the value

15d 00:00:00

in it but the access rule is removed automatically after 24 hours

I use rb2011 version 6.45.6 and I’ve just upgraded to 6.45.7 before this post

note that when I use timeout for 2 hours or 4 hours the behavior is fine

Please instruct me the correct way

2

Seems like your router is rebooted every 24h, can you confirm that? If yes this is why your address-list with timeout is gone.

Instead you can use scheduled script which will disable allowing rule.

3

I didn’t enter to reboot settings please explain how I can check that

Pleas teach me how I can do the script

4

Why you don’t even try to search on the forum?
http://forum.mikrotik.com/t/very-simple-script-to-enable-disable-rules/33841/1

When script is ready, you need setup scheduled start of this script.
In winbox : System>Scheduler

P.S
You should know that time-outed address-lists are dynamical entries, if router rebooted then it will dissapear.

5

first your note is good to consider

second I didn’t got it well why I have to do script that I can do easier with winbox graphical interface most of scripts that I saw can be done using winbox graphical interface

by reviewing router config the only reboot is made by router watch dog and there is no scheduled tasks at all in my router

6

How many times you tried to re-insert address-list already?

i’m also using dynamically created lists with 30 days timeout and they works like a charm until reboot or timeout expiration..

7

for now 1 computer about 3 times it has allowance for just 15 days

the problem If I’m in a leave and the rule deleted no one has the router password and I suspect that my time setting is wrong I didn’t imagine it has something to do with reboot

8

why watch dog reboots the router and how I can know if there is a problem need to be solved

9

Go the System>Watchdog is there any IP-address specified ?

Watchdog reboot device when your device run in some troubles. (hardware or software).
If you didn’t specify IP-address under watchdog and reboot was initiated by watchdog then you should see “suppout.rif” under Files menu.

https://wiki.mikrotik.com/wiki/Manual:System/Watchdog

10

no the ip address is grey and has no value

there is a check on watchdog timer
ping after boot 00:10:00
ping timeout 120s
automatic supout checked

auto send not checked and the three field below is blank and greyed

and no suppout.rif in files menu

Thank you I’ve studied that page