I have this bridge with a WLAN and a ethernet port assigned to it.
I have some mangle rules to mark p2p and add it to a address list so I can keep closer watch on those particular users.
Though no traffic is hitting the mangle rules. (yes I have Bridge > use IP firewall enabled)
I have this config setup on my home router and it works great, but not working on this other unit that’s in the field.
All the users behind this Mikrotik get their IP and get NAT’ed from a Imagestream router on the edge of the network.
/ip firewall mangle
add action=add-dst-to-address-list address-list=p2p address-list-timeout=0s
chain=forward comment=“” disabled=no p2p=all-p2p
add action=mark-connection chain=forward comment=“” disabled=no
new-connection-mark=p2p_conn p2p=all-p2p passthrough=yes
add action=mark-connection chain=forward comment=“” disabled=no
dst-address-list=p2p new-connection-mark=p2p_conn p2p=all-p2p
passthrough=yes
add action=mark-packet chain=forward comment=“” disabled=no dst-address-list=
p2p new-packet-mark=p2p passthrough=yes
add action=mark-packet chain=forward comment=“” connection-mark=p2p_conn
disabled=no new-packet-mark=p2p passthrough=yes