Allowing services based on Mac address

RouterOS General
1

Hi

Is there a way to allow services like FTP based on the persons mac address and not IP in mikrotik router v4.2?

Thanks

2 
/ip firewall filter add disabled=no chain=input src-mac-address=00:11:22:33:44:55 protocol=tcp dst-port=21 action=accept
/ip firewall filter add disabled=no chain=input protocol=tcp dst-port=21 action=drop
3

Thanks Chupaka

“/ip firewall filter add disabled=no chain=input protocol=tcp dst-port=21 action=drop”

Unfortunately this does not seem to block ftp. however when i change it to forward only then it drops all ftp connections.

4

Read the firewall filter wiki. The ‘input’ chain is for packets destined for the router itself, the ‘forward’ chain is for packets flowing through the router.