Hello!
I have nat ip range:192.168.2.1
My mt base station have local address range:10.1.1.0
How to configure the central mt station that drop all invalid connection local address range?
i tried and tried but this the examples not work! 
add chain=sanity-check in-interface=Local dst-address-list=illegal-addr dst-address-type=!local action=jump jump-target=drop comment=“Drop illegal destination addresses”
add chain=sanity-check in-interface=Local src-address-list=!local-addr action=jump jump-target=drop comment=“Drop everything that goes from local interface but not from local address”
add chain=sanity-check in-interface=Public src-address-list=illegal-addr action=jump jump-target=drop comment=“Drop illegal source addresses”
add chain=sanity-check in-interface=Public dst-address-list=!local-addr action=jump jump-target=drop comment=“Drop everything that goes from public interface but not to local address”
add list=illegal-addr address=0.0.0.0/8
add list=illegal-addr address=127.0.0.0/8
add list=illegal-addr address=224.0.0.0/3
add list=illegal-addr address=10.0.0.0/8
add list=illegal-addr address=172.16.0.0/12
add list=illegal-addr address=192.168.0.0/16
add list=local-addr address=10.1.1.0/29 comment=“mt local network”
add list=nat-addr address=192.168.2.0/32 comment=“nat local network”
My mt version:2.9.23
Thank you for your advance! 