BASIC FIREWALL CONFIG

I need to block 202.xxx.xxx.xxx/24 from accessing devices behind my mikrotik. Version 2.9.5 running BGP to the public internet.

I have never used the firewall config and everything I found online and tried did not work.

Help please - this ip is pushing 75 mbps accross my network and costing me a fortune.

thanks

Scott

/ ip firewall filter add chain=input src-address=202.xxx.xxx.xxx.0/24 action=drop

I have been using
ip firewall filter add chain=forward src-address=202.xxx.xxx.0/24 action=drop
and it was not working.

I just added the filter using chain=input so I will see if that handles the issue.

thank you.

Scott

chain “input” handles connections to the router itself, chain “forward” handles connections that go though the router.