Page 1 of 1

Firewall Filterrule ros-v3beta9

Posted: Thu Jun 21, 2007 12:07 pm
by chris84

I experienced a problem with firewall-filter rules and ros-v3beta9.

when this rule is added nothing happens:
/ip firewall filter add chain=forward protocol=tcp p2p=all-p2p tcp-flags=syn connection-limit=11,32 action=drop
this rule should drop all p2p-connections >10 but byte and packet counter is already zero. there are many connections classified as p2p (more than 10 per ip) but nothing happens.

connection tracking is enabled, I even tried changing the chain to output and input with the same result.

Is this a bug in beta9?

best regards

Re: Firewall Filterrule ros-v3beta9

Posted: Mon Jun 25, 2007 3:12 pm
by iiburukibun
I'm having the same problem in Beta8, i'll create a firewall rule to drop all traffic from a certain IP, and it does nothing.

Re: Firewall Filterrule ros-v3beta9

Posted: Fri Jun 29, 2007 10:21 am
by chris84
I've changed the rule to
 0   chain=forward protocol=tcp p2p=all-p2p connection-limit=11,32 action=drop
but it doesn't work too, then I did a system-reboot, after that the rule drops connections like it should.