block DHCP in firewall not on bridge

RouterOS General
1

Hi

router: RB2011
OS: 6.7

I am having a problem with blocking DHCP requests between subnets. It seems the only way with the Mikortik is to create a bridge and filter it there, but that is not an option for me. is anyone aware of a solution for this.

it logs the udp info fine, but doenst drop it, so DHCP requests coming from the voice network are being served by the Data network. As I understand it this all happens before the firewall can take effect or it is layer 2 or whatever but I need a way to block DHCP requests getting out of the voice network, or stop them at Ether2 interface. I dont mind which, just not using a bridge.

/ip firewall filter

0 ;;; Block DHCP requests from Voice network
chain=input action=log protocol=udp dst-address=255.255.255.255
in-interface=ether2 src-port=67-68
log-prefix=“ALERT - DHCP REQUEST FROM VOICE NETWORK”

1 chain=input action=drop protocol=udp dst-address=255.255.255.255
in-interface=ether2 src-port=67-68

2

This has been discussed here a few times. It is not possible the way you want it to. Another option is to put ANOTHER mikrotik between the ether2 and the ether2 cable… and use that mikrotik to block it.