HotSpot Users - Denied Access to my local LAN

RouterOS Beginner Basics
1

Hi All,

From my principal router (192.168.10.4) I have only 1 ethernet cable attached to another Mikrotik router used for both HotSpot (via wlan1) and internal Lan (via ether3)

I have the following configuration:

Default bridge

  • Ether2-master connected to principal router using IP 192.168.10.1


  • Ether3 Connected to my local PC 192.168.1.5


  • wlan1 HotSpot Interface with IP 192.168.80.0

Peoples from HotSpot interface wlan1 (after HotSpot login success) can easily access also on my local lan 192.168.1.5… Now I want to avoid that connection between HostSpot and my Internal Lan so I created the following rule but it does not work

I added a rule on Input chain that drop all packet that comes from subnet 192.168.80.0/24 to 192.168.1.0/24

where am I wrong?

2

You used the wrong chain. Input is for traffic destined to the router itself. You should use chain=forward, as this is traffic being forwarded from one subnet to the other.

3

Oh, you are right. I used the wrong chain. Thank so much for your response.

4

I tried with you suggestion But i still see packets coming from HotSpot subnet (10.5.10.60/24) to Internal subnet (192.168.1.0/24)




Seems like that HotSpot mode, enables packet nat/forward before my rule.

5

Same here - did you solve this already??

6

Nope

Sent from my ONE A2003 using Tapatalk