how drop traffict in prerouting chain

[skynets]

how drop traffict in prerouting chain? (Mangle)

[pcunite]

Mangle is used for marking … what are you wanting/needing to do?

[skynets]

@pcunite

Mangle is used for marking … what are you wanting/needing to do?

i need filter traffic which go to port. Between wireless users. I can’d disable “forwarding”. I neet filter traffic or not drop all traffic.

[efaden]

@skynets

@pcunite

Mangle is used for marking … what are you wanting/needing to do?

i need filter traffic which go to port. Between wireless users. I can’d disable “forwarding”. I neet filter traffic or not drop all traffic.

Huh?.. What exactly are you doing? Network diagram? Export? etc… and what is your goal?

[skynets]

@efaden

@skynets

@pcunite

Mangle is used for marking … what are you wanting/needing to do?

i need filter traffic which go to port. Between wireless users. I can’d disable “forwarding”. I neet filter traffic or not drop all traffic.

Huh?.. What exactly are you doing? Network diagram? Export? etc… and what is your goal?

Network scheme:

Mikrotik GW have DHCP server. Address pool for wireless users192.168.0.1/24.
If any user start dhcp server on local machine (for example 192.168.8.0/24) then all wifi users
does not work.

I can’t disable default forwarding (DF) because wireless users have voip. If disable DF, then voip does not work.

[efaden]

Hmmmm… The problem is that with forwarding enabled the packets you are trying to block theoretically don’t reach the router. They go from client A to Client B… thus there is no way to block them.

Could you split this into two WIFI networks? … one for VOIP with forwarding and one for non-VOIP without it? I don’t really know enough about VOIP, but why is forwarding necessary? What happens when you disable it?