how to stop Intrusion

Hello
Dir Mikrotik

I have a network it working through mikrotik board
V.4.11-RB433AH, Level:
In 3 Mini pci 2.4GHz.
There anther WISP On the outskirts of my network converge
He using my network converges to connect between tow away points
Through my mikrotik board converge.

Please see the attached picture to know my meaning …

This board working only AP Bridge and it connected to
Anther board it working PPPoE &hotspot Server only
How to configurations my board to allow my clients only to be connect my network with PPPoE and Hotspot only in same time stop all anther connections coming out my clients.
or and stop spam AP’s on the networks shown in the picture caption = that uses the my board converges for the benefit of and between the points to reach its own is not annotated your attention please
Note : the Ap client useing my network converge to connected between
I hope I have properly explained to you

Thank you Sky net


network-.JPG

Hello,

If you have the 3 wlans in a bridge, make rules in /bridge filter to avoid this connections.

You can make rules like source: ip of the “enemy” and destination the internet router as accepted and the enemy to the whole network as deny. This should work.

i was added all filter protocols = in accepted from my server mac = is that will be ok and stop anther connections !!! or i need to stop-drop- some protocols ??
12-05-2011 02-25-40 AM.png

just use horizon bridging.
(setup all wireless interfaces with the same horizon value and the uplink interface with any other horizon value)
This will completely supress cross-wireless connetions.

also disable default forwarding in your wireless properties.

Thank you for the answer Is it possible explanation more or attach a photo caption

an example:

you’ve got a five ports routerboard (eg rb750, rb450)
ether1 is your uplink
ether2 to ether5 are customers ports.

put all these ports in a bridge.
setup ports ether2 to ether5 with horizon=1.
at this point you’re done.

the customers cannot talk to each other anymore.
they only cann communicate with ether1.