dst-address-list negation do not work in firewall rule

cypa · Fri Apr 12, 2024 8:28 am

this do not work

15          chain=prerouting action=route route-dst=8.122.28.111 src-address=10.118.3.2 in-interface=br-lan 
[user@center] <SAFE> /ip firewall mangle set 15 dst-address-list=!local_subnets

how do I negate an address list?
I see only option to add accept rule like

action=accept dst-address-list=local_subnets

before my rule

vingjfg · Fri Apr 12, 2024 11:35 am

That should be the way. Just to be sure, the address-list exists, correct?

Can you provide the error message? And the version of ROS?

cypa · Fri Apr 12, 2024 4:15 pm

yes, it does exist indeed

ROS 6.49.10 long-term latest

rextended · Fri Apr 12, 2024 6:10 pm

1) on doubt, use winbox,
2) if traffic is on bridge fasted from something, the firewall do not see the traffic.

dst-address-list negation do not work in firewall rule

dst-address-list negation do not work in firewall rule

Re: dst-address-list negation do not work in firewall rule

Re: dst-address-list negation do not work in firewall rule

Re: dst-address-list negation do not work in firewall rule

Who is online