hello everybody, i have some routers, but some customers detect their Ip, and the can ping them..can anybody tell me how can i block pinging to their customer just my ip address..but i must have access on it with WinBox
You are looking for a firewall, but I cannot understand what you are wanting to do. An example of what I THINK you are saying would be something like:
Customer IP range: 10.10.10.0/24
RouterIP: 10.10.10.1
To prevent pinging the router, you would put a rule as follows:
/ip firewall filter
add chain=input protocol=icmp action=drop
That would drop all ICMP destined for the router. This is not a good idea to do, but that is one way you can accomplish it. To prevent people from pinging your customers (again, I will just drop all ICMP):
/ip firewall filter
add chain=forward protocol=icmp dst-address=10.10.10.0/24 action=drop
If you need more explanation than that, do some reading on firewalling. If I am not understanding your question, then restate it and I will try to address that.
look,..
Customer ip:192.168.2.1/30
ROuter Ip:172.29.29.2/30
i want to block pinging Router from Customer..and the only person that i want to ping the router is me(and have access on it)..
Hope that you understand..thankyou
got it. All you have to do in that case is one rule. Something like:
/ ip firewall filter
add chain=input action=drop src-address=192.168.2.0/30 protocol=icmp icmp-options=8:0
That will stop all ping (echo request) from 192.168.2.0/30 going to the router. If you want to allow only you to ping the router (and nobody else), then you have to do a bit more, but you should get the idea from what I have provided.
i tried that but it dosn’t work, i wanna allow only me to ping the router(nobody else), if you can help me and tell how i can do this…
This rule will drop all echo request from the 192.168.2.0/30 range of addresses. If it is not dropping the traffic, then there is another rule that is permitting the traffic above it. Read the firewall manual to understand firewalling or look at the consultants page and purchase the knowledge you can glean from the manual. Either way, the rule I gave you works. There is no question about that part. If you “tried it but it doesn’t work”, then you did not copy the rule correctly or there is another rule that is matching first. Perhaps you can paste your firewall here…use this command and paste the output:
/ip firewall filter print input
this thread may be helpful, too:
http://forum.mikrotik.com/t/firewall-input-chain-question-wrt-wlan-lan/17506/1