Firewall Configuration

Hi people,

a few words to my project… I have a RB600 with a Level 5 License…
I have some problems with the firewall…

A few words to the system:
To Ether1 is the normal network connected, with clients.
Here an overview:

192.168.1.5 Workstation 1
192.168.1.6 WS 2
192.168.1.7 …
192.168.1.240 - Network-Printer
192.168.1.250 - Ether1 of Mikrotik RB 600
192.168.1.253 Router


To Ether2 are the Accesspoints connected:
192.168.15.1 - Ether2
192.168.15.2 - APoint1
192.168.15.3 - APoint2

Every client gets the address per dhcp-server from the mikrotik router, e.g. 192.168.15.20…

Everything is working fine with the User-Manager, the client can connect… etc.

Now I have a big problem, because when the customer is logged in with username & password, the connected user can
see all my workstations, printers, servers etc.

I can restrict the access with the firewall, but I don’t know how, can anybody help me please.
I’m new to mikrotik, so it isn’t easy for me to handle it…


I’d be very thankful for every answer…

thanks

michael

If all your clients are 192.168.15.0/24 and workstations and servers are 192.168.1.0/24 then add following rule:
/ip firewall filter add
chain=forward src-address=192.168.15.0/24 dst-address=192.168.1.0/24 action=drop

You can find more on firewalling in manual:
http://www.mikrotik.com/testdocs/ros/2.9/ip/filter.php

Thank you very much :wink:

Everything is working fine now :slight_smile:
Your answer was the solution, I searched for!

Thanks

Michael