i have the rang 10.10.10.0/24 for my users PPPoE and 10.10.10.1 is for mk
but the problem is that anyone who put this ip and gateway/dns = ip_mk can reach the internet
how can block the ip and all ip in mk ???
but all ip in masquerade can reach the internet