hi guys
I was always interested how i can stop or prevent some local ip address in same subnet to talk each other i know about BRIDGE level IP FIREWALL but i dont have knowledge how to setup
Example i want user with local IP 192.168.178.103 address not talk to server with address 192.168.178.99 some server on mine network ,but all of them have access on internet via NAT,
I can stop two different subnets using forward rules in firewall but not same subnet ,
thanks for help
Hi
The solution would depend on your hardware.
If these two are connected using unmanaged switch, then you can’t limit the communication as-is. You would need to isolate server in a separate subnet and filter based on ip.
If these two are connected using managed switch (or switched in MT itself), you could block all packets with src-mac = mac of server from being forwarded to dst-mac = client.
But, easiest would be to separate the subnet, and control on ip: ex home subnet (unlimited) & guest subnet (only internet)
Thanks Sebastian,
Since i have the Mikrotik bridge model CRS 112 as well i will managed directly or will try with subnet,
mine other router is hookup with this ip that i want to isolate or prevent talk to some server on mine mine network ,
Regards
Igor