Banning ip ranges from address list ?

RouterOS Beginner Basics
1

I’m using 192.168.0.x addresses and would like to close internet access down to all but a few. Is there a way I can specify IP ranges ? Kinda like how pools work, except for address lists ?

So far the only way seems to be using the subnet modifier which isn’t very accurate as I have to close down in groups of multiples of 8 or single IP’s. I can’t for example say I want to close down IP’s from 192.168.0.70 - 192.168.0.96 or from 192.168.0.25-29 …etc. I have a mangle rule that redirects all non-desired traffic to a proxy webpage, but it needs an address list and I don’t want to enter every ip manually.

2

the only way is to enter a network, like 192.0.0.0/24 for example

3

You can still add individual addresses in address-lists however.

You can also (if they are properly grouped) use a subnet to include a small range of addresses in your /24, such as (for example) 192.168.1.32/27 (which will block .32 through to .63).

4

You can type an address range into the source address of forward / marquerade/ mangle rules etc: e.g.

192.168.10.100-192.168.10.199

5

the only way is to enter a network, like 192.0.0.0/24 for example

Unfortunately that isn’t precise enough, I don’t want to ban the entire network or multiples of 8 amount of ips. I wanted to ban specific ranges across the entire 192.168.0.255 network.

You can also (if they are properly grouped) use a subnet to include a small range of addresses in your /24, such as (for example) 192.168.1.32/27 (which will block .32 through to .63).

I don’t know why, but when I tried that, the IP would switch to 92.242.144.5. That always happens when I try to use a subnet modifier where the IP doesn’t end with 0, i.e 192.168.1.0.

oh excellent, thats exactly what I was looking for, didn’t think it could work. Thanks alot