You can set the firewall chain for in and out traf. at ppp profil page. Then you just creat a new chain at ip firewall and add a rule that blocks traf you vant to stop. Its just a first idea as i read your post, but I think it works. Try, and report.
This is what i’ve done (Please tell me if there is a better way)
In the forward chain i created a rule.
Src Address xx.xx.xx.0/24 which is the entire pool that gets allocated to PPPoE clients.
All interfaces all protocols
Jump to new Filter Chain that i made called PPPoE_Rules
in there i state that anything comming from source xx.xx.xx.0/24 on port 80 to reject it and i think i will put all other ports such as ftp, smtp, pop etc. in there so that i can use this new chain to monitor the clients on PPPoE.
I think this is the right way? … YES? / NO? please reply