Sure. Make a firewall rule that matches TCP on port 554 with the syn flag, to add the IP to the address list. Then make another rule that matches TCP on port 554 with the fin flag to take it out. I have a rule like the first running on my live network, so I know it works. I have never tried the second rule, though, so it may need some flag tuning.
On Dec 4, 2013, at 4:55 PM, Ty Featherling <[email protected]> wrote: > Can one rule match both the port/protocol and connection state? If so you > need one rule to match port 554/established and add to address list and > then a rule above that to allow traffic to the ports you like if they are > in that address list. > > -Ty > > > On Wed, Dec 4, 2013 at 5:10 PM, Tayeb Meftah <[email protected]> wrote: > >> Hey guys, >> i want to do the following: >> 1. open port 554 for EVERYONE. >> 2. if someone is connected to 554 (ESTABLISHED/ASSURED), open for him the >> range 16000-32000 >> otherwise, 16000-32000 shouldnt be opened for anyone. >> is there anyway to evaluate if a ip is connected to 554 and add it to an >> address list, but if is not remove it? >> thank, >> >> Tayeb Meftah >> Voice of the blind T Broadcast Freedom >> http://www.vobradio.org >> Phone:447559762242 >> -------------- next part -------------- >> An HTML attachment was scrubbed... >> URL: < >> http://mail.butchevans.com/pipermail/mikrotik/attachments/20131205/a3a29225/attachment.html >>> >> _______________________________________________ >> Mikrotik mailing list >> [email protected] >> http://mail.butchevans.com/mailman/listinfo/mikrotik >> >> Visit http://blog.butchevans.com/ for tutorials related to Mikrotik >> RouterOS >> > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: > <http://mail.butchevans.com/pipermail/mikrotik/attachments/20131204/6e9f3726/attachment.html> > _______________________________________________ > Mikrotik mailing list > [email protected] > http://mail.butchevans.com/mailman/listinfo/mikrotik > > Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS _______________________________________________ Mikrotik mailing list [email protected] http://mail.butchevans.com/mailman/listinfo/mikrotik Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS
