Up to 6.40.1 it worked to filter DHCP requests on the WAN port.
On later releases I tried to enable the “use-ip-firewall” feature and added a rouge DHCP rule.
/interface bridge settings set use-ip-firewall yes/no
[admin@Client] > /interface bridge settings print
use-ip-firewall: yes
use-ip-firewall-for-vlan: no
use-ip-firewall-for-pppoe: no
allow-fast-path: yes
bridge-fast-path-active: no
bridge-fast-path-packets: 0
bridge-fast-path-bytes: 0
bridge-fast-forward-packets: 0
bridge-fast-forward-bytes: 0
rougeDHCP: input,udp,src67,dst68,wan,log
This works partially.
But why did Mikrotik change this behavior.
