Community discussions

MikroTik App
 
olgierd
just joined
Topic Author
Posts: 14
Joined: Sat Nov 29, 2014 9:14 pm

Src. Address List - does not working

Mon Jan 14, 2019 2:04 am

Hi All,
After upgrade CRS238-24p to 6.48.3 my firewall rules using Src. Address List does not work any more.
Is anybody on forum experiencing this kind of issue ?
 
User avatar
inteq
Member
Member
Posts: 409
Joined: Wed Feb 25, 2015 8:15 pm
Location: Romania

Re: Src. Address List - does not working

Mon Jan 14, 2019 2:17 am

I was afraid I skipped so many versions.
it is 6.43.8.
No problems with source lists
 
User avatar
vecernik87
Forum Veteran
Forum Veteran
Posts: 882
Joined: Fri Nov 10, 2017 8:19 am

Re: Src. Address List - does not working

Mon Jan 14, 2019 3:20 am

  1. what was previous ROS version where it worked?
  2. what is your current ROS version? (as pointed by @inteq, 6.48.3 does not exist and it will probably be 6.43.8. just making sure)
  3. what specific rule are you using? is it
    /interface bridge filter
    or
    /ip firewall filter
    ? (or any other?) Ideally just share whole
    /export hide-sensitive
    .. It should be pretty clear where is the trouble. If you are worried about personal data, feel free to find+replace all occurences with some meaningful string.
My first guess would be some BC-break feature, typically hw-offloading which was not originally active, but now it is active and it prevents CPU to see bridged packets, therefore firwall ruless are completely avoided.
 
olgierd
just joined
Topic Author
Posts: 14
Joined: Sat Nov 29, 2014 9:14 pm

Re: Src. Address List - does not working

Mon Jan 14, 2019 9:47 am

All sorted out - connection was from different VPN tunnel with IP not listed on address list.

Who is online

Users browsing this forum: 5h4k4, derolf, Jörg, natxo and 51 guests