Firewal drop rule does not work in local network

RouterOS General
1

I need to block all LAN traffic to to device that have IP address 192.168.88.48. Now I have my firewall rule declared as this:

chain=forward action=drop dst-address=192.168.88.48

Now from my computer located in this network i’m doing curl 192.168.88.48:6969 I’m getting normal response. Nothing is blocked.

My whole firewall config is following:

 0  D ;;; special dummy rule to show fasttrack counters
      chain=forward

 1    chain=forward action=drop dst-address=192.168.88.48 log=no
      log-prefix=""

 2    chain=input action=accept protocol=gre log=no log-prefix=""

 3    chain=output action=accept protocol=gre log=no log-prefix=""

 4    chain=input action=accept protocol=tcp dst-port=1723 log=no
      log-prefix=""

 5    chain=input action=accept protocol=udp dst-port=500 log=no
      log-prefix=""

 6    ;;; default configuration
      chain=input action=accept connection-state=established,related
      log=no log-prefix=""

 7    ;;; default configuration
      chain=input action=accept protocol=icmp log=no log-prefix=""

 8    ;;; default configuration

I also set bridge setting to:

 use-ip-firewall: yes

How can I fix this?

2

There is special bridge firewall. Have you set the rules there?

3

You mean /interface bridge filter? I need to have those rules in both places? use-ip-firewall is not enough?

4

Need more information on your setup. Are you actually using Bridging, or are you Routing?

5

How can I check it?

6

Traffic within the local network never passes through routing (forward) filter chains.
It may pass through a bridge, that depends on how you configure the router.
To make this work you need to put that single system on a separate ethernet port of your router
(not behind a switch shared with other users), then you take that ethernet port out of the switch config (remove the
master-port setting), and put that port in a bridge.
Then you can filter in that bridge.