tls-host failure: tls host matcher valid only for tcp

RouterOS General
1

Can anyone help me understand, what am I doing wrong with this mangle rule:

> ip firewall mangle add chain=forward tls-host=*.speedtest.net action=add-dst-to-address-list address-list=speedtest address-list-timeout=none-dynamic

when I am getting the error:

failure: tls host matcher valid only for tcp

2

protocol=tcp

?

3

Yes, I didn’t see that there was a protocol field. Thank you!