Firewall Rule

Dmaan · March 30, 2009, 12:33pm

Dear Sir

I want to block an IP on BTS so that from client side it will not be ping-able.
what i am doing is
0 chain=forward action=reject reject-with=icmp-admin-prohibited protocol=tcp dst-address=“”

mrz · March 30, 2009, 12:41pm

If you want to block pings set protocol=icmp
in your case you are blocking all tcp connections

Dmaan · March 30, 2009, 1:30pm

Actually sir i want to block some websties on my bts so that they should not open at client side.
and also want to block certain ip’s which will hitting my client or bts .

Awating response.

normis · March 31, 2009, 6:47am

if you’re using a transpartent proxy in the MT Router, you can use proxy to block websites.

to use firewall to block a certain ip, I suggest doing the following:

make an address list with all IPs that you will block:

[router] /ip firewall address-list> add address=1.1.1.1/32 list=aaa

make a firewall rule to block this

[router] /ip firewall filter> add address-list=aaa action=drop chain=forward

Dmaan · March 31, 2009, 10:55am

normis:

if you’re using a transpartent proxy in the MT Router, you can use proxy to block websites.

to use firewall to block a certain ip, I suggest doing the following:

make an address list with all IPs that you will block:
[router] /ip firewall address-list> add address=1.1.1.1/32 list=aaa
make a firewall rule to block this
[router] /ip firewall filter> add address-list=aaa action=drop chain=forward

Dear Sir

Thanks for quick response

Actually i want to stop http traffic without using any proxy and i am using RB1000 as my Default router and also let me know what enable tracking in firewall connection and where it is used.