Winbox Option Question

RouterOS Beginner Basics
1

Hello guys,

Just a question next to some options of winbox there is a small box that when you click on it it puts a ! character infront of the information you add.

The ! character is it a logic NOT operator ???

i.e. if I give an ip range 192.168.1.0/24 and click the box it will select the rest of the range and NOT the 192.168.1.0/24 address space…


Regards,

Sotiris

2

Yes you are right, ! is logic NO.

3

sergejs, I tried this test;

chain=forward action=drop src-address-list=!hilton layer7-protocol=MSN

list hilton= ip address of my pc.

If I enable this rule without the src-address-list, MSN is blocked (as expected)

If I then specify that the src-address-list should be everyone NOT me, I still cannot connect.

What could I be doing wrong?

4

Maybe try this rule:
chain=forward action=drop src-address-list=!hilton dst-address-list=!hilton layer7-protocol=MSN

5

mrz, you are the man!

thanks mate.

Do I need both the src and dst address lists because of the tcp handshake?

6

Yes you can say so. Packets are flowing in both directions and all of them are matched by l7 filter rule.

7

thanks mrz.

8

Thanks man. that is f…king amazing.


Sotiris