Community discussions

MikroTik App
 
jeroenp
Member Candidate
Member Candidate
Topic Author
Posts: 159
Joined: Mon Mar 17, 2014 11:30 am
Location: Amsterdam
Contact:

[Mikrotik documentation needed] Firewall connection tracking enabled auto vs yes - what's the difference?

Thu Oct 06, 2016 4:14 pm

Since mikrotik firewall connection tracking enabled auto vs yes doesn't return meaningful results and http://wiki.mikrotik.com/wiki/Manual:IP ... g_settings doesn't explain the difference between `auto` and `yes`:

What's the difference between `auto` and `yes` for the `/ip firewall connection tracking enabled` setting?

Background: YouTube video How to redirect DNS to own DNS server using mikrotik routerboard advices to turn it from `auto` to `yes`: why would that be?

--jeroen
Last edited by jeroenp on Mon Oct 10, 2016 10:06 pm, edited 2 times in total.
 
jarda
Forum Guru
Forum Guru
Posts: 7763
Joined: Mon Oct 22, 2012 4:46 pm

Re: Firewall connection tracking enabled auto vs yes - what's the difference?

Thu Oct 06, 2016 6:29 pm

Auto means off by default until some other feature needs it. Typically firewall....
 
jeroenp
Member Candidate
Member Candidate
Topic Author
Posts: 159
Joined: Mon Mar 17, 2014 11:30 am
Location: Amsterdam
Contact:

Re: Firewall connection tracking enabled auto vs yes - what's the difference?

Thu Oct 06, 2016 8:56 pm

Auto means off by default until some other feature needs it. Typically firewall....
So what features need it?
And what features that don't need it can benefit from it?

--jeroen
 
IntrusDave
Forum Guru
Forum Guru
Posts: 1290
Joined: Fri May 09, 2014 4:36 am
Location: Rancho Cucamonga, CA

Re: Firewall connection tracking enabled auto vs yes - what's the difference?

Thu Oct 06, 2016 9:26 pm

It will auto-enable when you add NAT rules.
You can force-enable if you want filter rules without NAT.
David Joyce
Network & Security Engineer
Intrus Technologies, LLC.
Rancho Cucamonga, CA, USA
 
jeroenp
Member Candidate
Member Candidate
Topic Author
Posts: 159
Joined: Mon Mar 17, 2014 11:30 am
Location: Amsterdam
Contact:

Re: Firewall connection tracking enabled auto vs yes - what's the difference?

Fri Oct 07, 2016 11:54 pm

It will auto-enable when you add NAT rules.
You can force-enable if you want filter rules without NAT.
Thanks. Someone should add that to the docs.

--jeroen

Who is online

Users browsing this forum: Bing [Bot] and 33 guests