Community discussions

MikroTik App
 
anuser
Long time Member
Long time Member
Topic Author
Posts: 601
Joined: Sat Nov 29, 2014 7:27 pm

[srcnat] strange entry = "!1000,32"

Thu May 02, 2019 3:04 pm

Hello,

I just found an entry within a srcnat rule:
chain=srcnat action=src-nat to-addresses=176.18.1.15" connection-limit=!1000,32 routing-mark=r_src160 src-address=10.17.160.0/19
What will !1000,32 do? "1000,32" would make sense for me, but "!1000,32"?
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 7042
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: [srcnat] strange entry = "!1000,32"

Thu May 02, 2019 3:12 pm

This will match first 1000 connections per destination.
 
anuser
Long time Member
Long time Member
Topic Author
Posts: 601
Joined: Sat Nov 29, 2014 7:27 pm

Re: [srcnat] strange entry = "!1000,32"

Wed May 08, 2019 6:53 pm

This will match first 1000 connections per destination.
Now I´m confused. It seems I´m mixing NAT rule with firewall rule, e.g.:
/ip firewall
add chain=forward protocol=tcp tcp-flags=syn connection-limit=100,32 action=drop comment="connection limit" disabled=no
This would be a connection limit for one single host, e.g. max 100 connection for every host ip (32 bit of netmask).

What would this NAT rule do?
chain=srcnat action=src-nat to-addresses=176.18.1.15" connection-limit=100,32 routing-mark=r_src160 src-address=10.17.160.0/19
What would be the rule, if that NAT rule shouldn´t have any limitation? => "This will match all connections per destination."

Who is online

Users browsing this forum: No registered users and 12 guests