RB411 and Firewall Rule

RouterOS Beginner Basics
1

hello everbody
i’m applying the below listed firewall filter rules on RB411

[admin@MikroTik] /ip firewall filter> print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=forward action=drop src-address-list=!valid_ip in-interface=ether1



Flags: X - disabled, D - dynamic

LIST ADDRESS

0 valid_ip 192.168.0.25
1 valid_ip 10.10.10.250
2 valid_ip 10.10.10.251

but it’s not dropping the invalid ip’s i can use any ip i like to connect to internet.
So i hope it’s not a bug in RB411
Thanks

2

Need more info.
How is the rb411 set up?
Is it access point, client cpe, point to point, etc.
Use torch on interface ether1 and see if the ip address you want to filter isn’t actually destination address. If that’s the case you need to change your rules and “in interface”.

3

Thanks Aug
sorry i forgot to mention the setup.
the rb411 is set up as client CPE and i would like to drop all invalid ip’s excluding the one’s on address list.
Thankyou

4

I’ll assume that this is a bridged client.
Check bridge settings, put a check in “use ip firewall”.

5

Hi Aug
Yes it’s a bridged client.
okay i’ll check the settings and let you know.
Thanks

6

Thanks Aug
After doing as suggested by you, it worked.
why didn’t i saw that setting ? :confused: some one truely said “you dont’ need eyes you need vision to see”
Thankyou very much
sanjeev