Hi Folks, I've been doing some work using API for various remote/centralised configuration push applications, and I've come across a surprising problem. Surprising only because I never realised that I didn't know how to do it until I decided to try! :-D Think winbox - we can enter a value against some firewall filter attribute, say 'src-port' for example, and then if we decide we don't want it any more, we can click that little 'up arrow' to null the value for that variable. We can see the difference when using ip firewall filter print: With dst-port specified 1 ;;; test1 chain=input action=accept protocol=tcp src-address=1.2.3.0/24 dst-address=0.0.0.0/0 dst-port=25 After 'nulling' that dst-port value 1 ;;; test1 chain=input action=accept protocol=tcp src-address=1.2.3.0/24 dst-address=0.0.0.0/0 My question is how to do that in shell? I'm baffled! :-} Regards, Mike Everest www.duxtel.com.au ____________________________________________________________________________ ___ Wholesale Distributor for MikroTik and RouterBoard in Australia and Pacific Region ISP and WISP Solutions - Hardware, Software, Training, Engineering and Support All things MikroTik - <http://shop.duxtel.com.au/> http://shop.duxtel.com.au ____________________________________________________________________________ ___ Follow our tweets for news and updates: http://twitter.com/duxtel
-----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Mike Everest Sent: Thursday, 27 March 2014 7:28 PM To: public@talk.mikrotik.com.au; members@talk.mikrotik.com.au Subject: [MT-AU Public] 'null' value of firewall filter attribute
Hi Folks,
I've been doing some work using API for various remote/centralised configuration push applications, and I've come across a surprising
Duh, there it is! /ip firewall filter unset 1 dst-port I spoke too soon. (or is it 'asked to soon' ;-) Cheers! problem.
Surprising only because I never realised that I didn't know how to do it
until I
decided to try! :-D
Think winbox - we can enter a value against some firewall filter attribute, say 'src-port' for example, and then if we decide we don't want it any more, we can click that little 'up arrow' to null the value for that variable. We can see the difference when using ip firewall filter print:
With dst-port specified
1 ;;; test1
chain=input action=accept protocol=tcp src-address=1.2.3.0/24
dst-address=0.0.0.0/0 dst-port=25
After 'nulling' that dst-port value
1 ;;; test1
chain=input action=accept protocol=tcp src-address=1.2.3.0/24
dst-address=0.0.0.0/0
My question is how to do that in shell? I'm baffled! :-}
Regards, Mike Everest
www.duxtel.com.au
________________________________________________________________ ____________ ___
Wholesale Distributor for MikroTik and RouterBoard in Australia and Pacific Region
ISP and WISP Solutions - Hardware, Software, Training, Engineering and Support
All things MikroTik - <http://shop.duxtel.com.au/> http://shop.duxtel.com.au
________________________________________________________________ ____________ ___
Follow our tweets for news and updates: http://twitter.com/duxtel
_______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
participants (1)
-
Mike Everest