Please, help me to block all activity for an specific IP on firewall roules.
Thank You in advance.
ip firewall filter add action=drop src/dst-address
address depends on the traffic you want to drop.
Additionaly you need to specify chain,
input to filter traffic going to your router,
your clients traffic in forward.
I want to block all trafic generated from local ip 192.168.12.250.
Is this the right config?
\ip firewall filter
chain=forward src-address=192.168.12.250 dst-address=0.0.0.0 action=drop
With this one I have no results.
\Please tell me if you have any nwe idea for block all the activity, even within subnet trafic.
Thnx a lot.
/ip firewall filter
chain=forward src-address=192.168.12.250 dst-address=0.0.0.0/0 action=drop
you can block his MAC also like I have done it for my few clients.
/ip firewall filter
chain=forward src-mac-address= your client mac action=drop
i want to block ip is 172.30.12.30 to 172.30.12.255 . how can this plz help me
Please Refer
http://forum.mikrotik.com/t/block-ip/26001/1
Thx Asishbhai… & best of luck for usa
go ip ,address list & select local lan interface & example address 172.30.12.1/27 brodcast 172.30.12.30 network 172.30.12.0 interface local it is 100% working without queue 172.30.12.31 to 172.30.12.255 user not access internet any way (downloading & p2p )
this one not work for me.
what’s your network config?
1 public ip in 1 interface as a WAN and share internet to the another 3 interfaces.
interface 2-4 got different network
the network of interface 3 is 10.100.100.0/24 one of ip of this rank using my internet very height. i want to block his ip or mac address or queue his traffic. i followed the config above
/ip firewall filter add chain=forward src-mac-address= your client mac action=drop
but not work.
And i want to block some websites like youtube or facebook also not work for me.
/ip firewall filter add chain = forward content=youtube comment="" action=drop
i also tired enable web proxy but still not working. must be something wrong somewhere.
Please correct me.
Thanks
check that you don’t accept these packets above your ‘drop’ rule
so what i am gonna do? could u help me?
also, you may want to look at http://www.mikrotik.com/consultants.html
it says no such comments found…
this is not working for me i want to block 1 customer’s mac what i have to me tell me…
im using microtik V2.9.34 as my ISP access point…
help me thanks…
maybe syntax was changed a bit between v2.9 and v3/4. upgrade =)
Hello , Please i need help . . .
I have an rb433 with an 2 XR5s Wlan1 is working as station wds and Wlan 2 as AP Bridge giving connection to a reseller
how can I filter those two Wlans so that when my reseller enters his winbox he can only see his mikrotiks . . . not his a mine ?
please i need it urgent
Hi friends
i am using CCR1036-12G-4S i want configure firewall as follow
i want to create to three IP group-
- for IT Manager Team-that set full access 2) for allow specific websites only and 3) block total websites.
How can i do…please help