CCR2004-16G-2S+, ROS 7.14.2, given the following interface lists
and also a mangle rule
the mangle rule counter never increase and incoming connections are never marked as of jump target. Changing with in-interface-list="WAN", the rule starts working and connection marked as expected.
It is wrong to include an interface list in another interface list in another interface list? There is a limit (2) of nesting of interface lists?
Code:
/interface listadd name=TUNNELadd name="WAN ISP1"add name="WAN ISP2"add name="WAN ISP3"add include=WAN,TUNNEL name="WAN & TUNNELS"/interface list memberadd interface=... list="WAN ISP1"add interface=... list="WAN ISP1"add interface=... list="WAN ISP2"add interface=... list="WAN ISP3"add interface=... list="TUNNEL"add interface=... list="TUNNEL"Code:
/ip firewall mangleadd action=jump chain=prerouting connection-mark=no-mark connection-state=new in-interface-list="WAN & TUNNELS" jump-target=mark-connection-inIt is wrong to include an interface list in another interface list in another interface list? There is a limit (2) of nesting of interface lists?
Statistics: Posted by unlikely — Thu Apr 04, 2024 9:07 pm