[ask] bridging rule

any tutorial about bridging rule…???

weks…anyone :cry:

What kind of rules tutorial do you need ?
http://www.mikrotik.com/testdocs/ros/2.9/interface/bridge_content.php#4.14.7

wew finally…well i already read the bridge manual but that dont result anything…in bridge-filter does it same as firewall for bridging..??

Bridge firewall implements filtering for data from to or trough bridge.

is that mean the same as firewall in ip-firewall…??

Yes.

well i try a simple rule in bridge-filter but it didnt work…??
the rule is like this :

interface: in interface-lan1
out interface-lan2

IP : src.address-192.168.10.0/24
dst.address-10.10.15.0/24

Action : drop

lan1 & lan2 is in the same bridge

can anyone help…pliss

Could you provide complete rule or export from ‘interface bridge fiter’ ?

interface-bridge-filter>add chain=forward in-interface=lan1 out-interface=lan2 src.address=192.168.10.0/24 dst.address=10.10.15.0/24 action=drop

note :
i got 4 ether and i bridge all

when i apply the rule the 192.168.10.0/24 still can connect to 10.10.15.0/24…???
is something wrong with my rule…if so please help…thx

hello…need help pliss :frowning:

to filter traffic going through your bridge (going from one interface to another) you need to add rules to “forward” chain.
The input/output chains are reserved for traffic going TO or FROM your bridge, as in winbox and routed traffic.

@sten can i delete the bridge (that connected all the ether) and set all the 4 ether with specified ip…with the same subnet..and i want all the 4 ether are connected?? i’ve try this one but all the 4 ether cannt connected!!!

what’s your configuration?
and what do you want to achieve?

:smiley:

okay heres my configuration that i want to achive:

ether 1 - with ip = 10.10.1.1/255.255.0.0 (local) (reply only)
ether 2 - with ip = 10.10.2.1/255.255.0.0 (local)
ether 3 - with ip = 10.10.3.1/255.255.0.0 (local)
ether 4 - with ip = 202.165.x.x (global)

what i want to is all ether can connect each other without to creat a bridge…!!!

thx

Address overlap… they’re all 10.10/16

Well, if you do not create a bridge, then you’d have to route… but you can’t because your network address ranges overlap. Sounds like you’re stuck and need to rethink your network design.

–Tom

so that means i need to bridge, right??

no

you have a fundamental flaw in your design

you need to apply correct subnet masks.

hint: correct subnet masks for the subnetting you chose is 255.255.255.0 but you need to find out how this affects your routing tables.