firewall input drop drops everything incl forward [solved]

RouterOS General
1

My firewall behaves very weirdly.
chain input behaves like forward, cutting traffic which is passing thru.

My setup
Draytek Vigor 120 PPPoA<->PPPoE (ether1) ↔ RB951G-2HnD ↔ masquerade PPPoE bridge eth2+wifi ↔ my computers

filter chain input action drop meant to drop only packets addressed to the router (e.g webbox, winbox connections). somehow it drops most (not all!) connections between PCs and internet.
any ideas how to fix this issue or to find any workaround? need to restrict (block) access to my RB from both internet and local network, while keeping all the forward traffic untouched.

2

You are going to have to give a complete export of your firewall, preferably filter and NAT, before anyone can even begin to comment on what is going on.

3

Are you sure the clients are using the web proxy?

4

Or maybe DNS? Are your computers using the router as DNS server?

5

Problem solved.
Completely forgot about web proxy. After some experiments I’ve left it enabled and didn’t create firewall rules for it.

Thanks to all :slight_smile: