Ban / disable user

version 2.9
I have some user, I have to ban, from the net
I have the user in mangle, whith ip adresse, if I try to disable, is still getting traffic

when user is ban / disable, can they bee redirect to a web-site, to get a message

what / how to do ??

ip firewall filter add chain=forward src-address=bad.user.ip action=drop

I am new in this, do I have to use the terminal to this, or where ??

yes if do you want,

Yes. Redirect all his traffic on port 80 to server that will display your “You`re disabled/banned” page. It can be an another apache process on your existing web server that will listen on different port than 80.
And, finally, drop all his other traffic.

upz sory little typing error:

ip firewall filter add chain=forward src-address=bad.user.ip action=drop

I make it in filter rules
add
general
chain: forward
src adress: ??

how to make src adress “bad.user.ip”
I only can do 0.0.0.0

Forget the last,
Do I need to do that evertime i have a user, ther have to be disable
“can I use the disable in mangle”, because I have 100 user
and i very easy to klick on disable :smiley:
I have try, but it don’t work

How to make it?
can you make an example

chain=dstnat src-address=disabled.user.ip.address dst-address=!your.web.server.ip
protocol=tcp dst-port=80 action=dst-nat to-addresses=your.web.server.ip
to-ports=81

can you make this like a standart, to all who is disable, or do you have to make a rule everytime, somthing more easy

is the same when I disable, I have to make a rule on the ip adress.

is there a more smart way to this, in mangle there is a butten disable
can it be use to switch users off

I suggest you to use authorization and accounting system (HotSpot), that will allow to handle router users more easily,
http://www.mikrotik.com/docs/ros/2.9/ip/hotspot