stopping nics from talking to each other

have two networks on separtate nics that i only want to go to the wan connection and not talk to each other . newbie quation. i think ??

have 192.x.x.0 net
10.x.x.0 net

wan is 67.x.x.126

dont want 10.x.x0 network talking to 192 net.

right now i can ping either way everything is working but really dont want
networks beable to chat. would not mind being able to have 192 net talking to 10 but not 10.x.x.0 to 192.x.x.0 help :slight_smile:

Randy

Assuming 192.x.x.0 is on ether1 and 10.x.x.0 is on ether2, you could just drop the “wrong” addresses in the interfaces’ output firewall chain, like

/ip firewall rule output add src-address=192.x.x.0/24 out-interface=ether2 action=drop
/ip firewall rule output add src-address=10.x.x.0/24 out-interface=ether1 action=drop