HOTSPOT PREVENT ICMP REQUEST has anyone out there who can help me

RouterOS Scripting
1

Impossivel Delet any post? :frowning:

2

What are you trying to achieve?

3

icmp Request is only for Network Admin and not for Clients!!! :sunglasses:

4

Resolved, now runs fine!


\

First you must setup firewall src and dst address list

oct/24/2015 19:26:18 by RouterOS 6.33rc30

software id = KPNX-1FGN

/ip firewall filter
add action=jump chain=forward comment=“JUMP TO PING” dst-address-list=5G
icmp-options=0 in-interface=bridge jump-target=ping log=yes log-prefix=
Ping protocol=icmp src-address-list=5G_Client_Addresses
add action=add-src-to-address-list address-list=“deny ping from ->”
address-list-timeout=15m chain=ping comment=" PING ACTION" in-interface=
bridge
add action=add-dst-to-address-list address-list=“deny ping to <-”
address-list-timeout=15m chain=ping comment=" PING ACTION" in-interface=
bridge
add action=drop chain=ping comment=" PING ACTION" in-interface=bridge


\

Add to Bridge Filter and then Remove User from dhcp lease when do Ping Request

then add the script to scheduler and run every two minutes

Mikrotik RouterOS v6.33rc30

:foreach i in=[/ip firewall address-list find list=“deny ping from ->”] do={
:local ip ([/ip firewall address-list get $i address])
:local mac [/ip dhcp-server lease get [ find address=$ip ] mac-address ];
:local host [/ip dhcp-server lease get [ find mac-address=$mac ] host-name ];
:if ([/interface bridge filter find src-mac-address=“$mac/FF:FF:FF:FF:FF:FF” ] = “”) do={
/interface bridge filter add chain=input src-mac-address=“$mac/FF:FF:FF:FF:FF:FF”
mac-protocol=ip action=drop comment=PingRequest
/interface bridge filter add chain=output src-mac-address=“$mac/FF:FF:FF:FF:FF:FF”
mac-protocol=ip action=drop comment=PingRequest
/interface bridge filter add chain=forward src-mac-address=“$mac/FF:FF:FF:FF:FF:FF”
mac-protocol=ip action=drop comment=PingRequest
:log warning ("Ping Request from host-name $host " . "Mac $mac " . “IP $ip add to bridge filter and remove from dhcp-lease”)
delay 5
/ip dhcp-server lease remove [ find mac-address=$mac ];
}
}