Bridge filters not work

RouterOS General
1

Hi, ALL!!
I have RB951G-2HnD with RouterOS 5.26 and I want to deny some IPTV channels from /interface bridge filter, this think because STB linked to the ether5 port:

/interface bridge port
add bridge=WAN disabled=no edge=auto external-fdb=auto horizon=none interface=ether1-gateway path-cost=10 point-to-point=auto priority=0x80
add bridge=WAN disabled=no edge=auto external-fdb=auto horizon=none interface=ether5 path-cost=10 point-to-point=auto priority=0x80
add bridge=HOME disabled=no edge=auto external-fdb=auto horizon=none interface=ether2 path-cost=10 point-to-point=auto priority=0x80
add bridge=HOME disabled=no edge=auto external-fdb=auto horizon=none interface=ether3 path-cost=10 point-to-point=auto priority=0x80
add bridge=HOME disabled=no edge=auto external-fdb=auto horizon=none interface=ether4 path-cost=10 point-to-point=auto priority=0x80
add bridge=HOME disabled=no edge=auto external-fdb=auto horizon=none interface=wlan1 path-cost=10 point-to-point=auto priority=0x80

Here provider cable linked to ether1-gateway port.
And look what STB and provider cable in bridge WAN.

I try bridge filter settings ON

/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-pppoe=no use-ip-firewall-for-vlan=no

Add 2 rules to filter

/interface bridge filter
add action=drop chain=forward disabled=no mac-protocol=ip packet-type=multicast src-address=239.4.0.53/32 comment="Cartoon Network"
add action=drop chain=forward disabled=no mac-protocol=ip packet-type=multicast src-address=239.5.0.99/32 comment=NicKelodeon

But this channels continues to work on STB and my filters counters is no matches.
This is Mikrotik bug or my miss? Thnk you
sniffer_5port.png

2

I assume that bridge filter will not work when use-ip-firewall is enabled on bridge settings. Either disable this or move your rules to your firewall.

3

thank you for reply, but I think what ip filter will work only on IP interface? In my configuration STB on the same bridge with provider link.

/ip firewall filter
add action=drop chain=forward comment="Cartoon Network" disabled=no src-address=239.4.0.53 src-address-type=multicast
add action=drop chain=forward comment=NicKelodeon disabled=no src-address=239.5.0.99 src-address-type=multicast

Also not matches on ip firewall filter.

4

yeeeaah, i just change src-address to dst-address and now all ok ))))
Thank you Rudios for your reply