Block Apple Multicast

RouterOS General
1

Hello everybody.
I need support in firewall’s rule.

We have a big enterprise network (over 300 Mac OS devices). Part of which is connected via ethernet, part - WiFi.
Many sources inform, that much apple devices generate multicast traffic (i.e. mDNS, Bonjour etc). I think that’s why WiFi devices periodically lost connection or Internet work slowly. Because Mac’s interfere with each other.

Never Mind :slight_smile:

We use Mikrotik AP’s and last firmware.
I know, that apple devices transmit traffic on 224.0.0.251 ( udp port 5353) and i want to block it.

/ip firewall filter add chain=forward protocol=udp dst-port=5353 action=drop
/ip firewall filter add chain=forward protocol=udp src-port=5353 action=drop
/ip firewall filter add chain=forward dst-address=224.0.0.251 action=drop

But counter’s show 0 packets
in the same time the Packet Sniffer show packets from/out port 5353 correctly.

Why Firewall Rules doesn’t work ?

2

How do you have the access point setup? I’m assuming that you have the wireless card bridged with a physical interface. If so do you have the bridge set to use the firewall?

3

Feklar, thx for answer. I have already done this (about Bridge-Settings- (checkbox) Use IP Firewall) and it worked! Counters is started to increment. And with this checkbox worked also settings on router RB1100.

But i’m not sure, how excellent it block apple multicast traffic… Maybe somebody have any experience in planing and setup apple Mac’s in enterprise networks?