I’m using an hAP AX3 to funnel my wifi users onto the network using a bridge. I have traffic passing fine, but I’d like to add simple firewall rules to view bandwidth used by devices in an address list. What I have is something like this: add action=accept chain=input comment="TV Bandwidth In" ds…

Input and output are only for traffic to/from your router. You probably want to see traffic to internet, and that is passed through the “forward” chain. When you want counters you also need to have those actions ahead of the “accept esablished/related” rule or else that will pickup everything. Bu…

Possibly useful to better understand chains: [image] The ultimate Mikrotik iptables flowchart Useful user articles We are now at Beta 0.6. added in a separate .zip a “flat” .svg version. hopefully the “normal” .svg will render correctly also on machines that …

Ah, yes, connection states and using the forward chain! add action=accept chain=forward comment="TV Bandwidth In" connection-state=established,related,new dst-address-list=TVs in-interface=bridge1 add action=accept chain=forward comment="TV Bandwidth Out" connection-state=established,related,new o…

I would not put “new” in that filter, but it is your own choice. When having NAT anyway, it probably does not matter.

Simple ip firewall rules for bandwidth in/out accounting for address lists

RouterOS Wireless Networking

jaclaz November 8, 2025, 6:08pm 3

Possibly useful to better understand chains: