Delete all firewall address-list with one command

planetcaravan · Fri Jun 21, 2019 12:50 pm

Hi there,

Is there any possibility to delete with only one command ALL address lists present into the firewall?

Jotne · Fri Jun 21, 2019 1:13 pm

Do mean connections?

Did you see this post, posted yesterday?

viewtopic.php?f=9&t=149473

planetcaravan · Fri Jun 21, 2019 1:41 pm

Do mean connections?

not connections, but all address list entry

Jotne · Fri Jun 21, 2019 1:58 pm

This should do and its close to the command in the other post I did posted.

/ip firewall address-list remove [find]

Take care, this deletes all entries from all lists.

To delete one list, do this:

/ip firewall address-list remove [find where list=your_list]

planetcaravan · Sat Jun 22, 2019 5:00 pm

Hello and thanks for your answer.

I tried both your command
Last test I did:

/ip firewall address-list remove [find where list="TEST-IP"]

Many times I got this error:
no such item (4)

I've noticed that using this command not ALL IPs of that address-list were deleted.
Each time I repeat the same command, new IPs were deleted.
Is it my fault?
I'm using 6.42.11 version

planetcaravan · Thu Nov 07, 2019 1:28 pm

Still having this probelm even with 6.44.6

no such item (4)

msatter · Thu Nov 07, 2019 1:34 pm

:do { /ip firewall address-list remove [find where list="TEST-IP"] } on-error={}

This will ignore the no such item.

I hope that you are using a more recent release of RouterOS and don't forget to make backups from your configuration.

planetcaravan · Thu Nov 07, 2019 1:42 pm

Thanks for your kind answer

This code is still not deleting all address lists

:do { /ip firewall address-list remove [find] } on-error={}

Most of the entries remains after entering the command

msatter · Thu Nov 07, 2019 2:09 pm

I can't try it but you can.

/ip firewall address-list remove

planetcaravan · Thu Nov 07, 2019 2:12 pm

Thanks again but it is asking number

[admin@ROUTER] > /ip firewall address-list remove
numbers:

tomaskir · Thu Nov 07, 2019 2:12 pm

The issue is command scope.
If you run the command under "/" (command root scope) find will run there.
You either need to specify scope, or enter the "/ip firewall address-list" scope.

/ip firewall address-list remove [/ip firewall address-list find list=list_name]

Or

/ip firewall address-list
remove [find list=list_name]

msatter · Thu Nov 07, 2019 2:26 pm

As lines in script?:

/ip firewall address-list
do: { remove [find]  } on-error={}

tomaskir · Thu Nov 07, 2019 2:40 pm

You don't need to do error handling on address list removal.
If you want to remove ALL entries rather than just entries from a single list, simply do:

/ip firewall address-list remove [/ip firewall address-list find]

or

/ip firewall address-list
remove [find]

planetcaravan · Thu Nov 07, 2019 3:04 pm

Last command seems work better but some entries are not deleted.
I did a video: https://gfycat.com/bravewealthygermanpinscher

tomaskir · Thu Nov 07, 2019 4:41 pm

Last command seems work better but some entries are not deleted.
I did a video: https://gfycat.com/bravewealthygermanpinscher

This is because you have some dns-based entried in your list.
These create dynamic address-list entries that normally can't be deleted.

Here is a command that takes that into account:

/ip firewall address-list
remove [find dynamic=no]

Dynamic entries are automatically deleted when their "parent" dns-based entry is deleted.
That should sort it out for you.

planetcaravan · Thu Nov 07, 2019 5:53 pm

IT WORKS!

I've used this command on a single line

/ip firewall address-list remove [find dynamic=no]

It delete ALL 1200 address list (even dynamic) without any error.

Thanks!!

tomaskir · Thu Nov 07, 2019 6:40 pm

For a single line you need to use

/ip firewall address-list remove [/ip firewall address-list find dynamic=no]

Otherwise this will not work if you execute it from root context "/".

planetcaravan · Thu Nov 07, 2019 6:43 pm

I've used

/ip firewall address-list remove [find dynamic=no]

from / context and it worked good.

Delete all firewall address-list with one command [SOLVED]

Delete all firewall address-list with one command

Re: Delete all firewall address-list with one command

Re: Delete all firewall address-list with one command

Re: Delete all firewall address-list with one command

Re: Delete all firewall address-list with one command

Re: Delete all firewall address-list with one command

Re: Delete all firewall address-list with one command

Re: Delete all firewall address-list with one command

Re: Delete all firewall address-list with one command

Re: Delete all firewall address-list with one command

Re: Delete all firewall address-list with one command

Re: Delete all firewall address-list with one command

Re: Delete all firewall address-list with one command

Re: Delete all firewall address-list with one command

Re: Delete all firewall address-list with one command [SOLVED]

Re: Delete all firewall address-list with one command

Re: Delete all firewall address-list with one command

Re: Delete all firewall address-list with one command

Who is online