Mistic! I have using mikrotik for a long time, and i think i know how to block IP, but this is stange!
I capture packets from PACKET SNIFFER ir my router and find out some strange IP what i want to block!

I block ip by firewall -
did on INPUT, did on Forward!
Put the rule on top of all!
Nothing on match - 0!!

Any ideas?
see attachemnts!

Real problem! ~40% off my traffic is the packets from 129.0.0.88 and i cant block them! The packets is incorrect or out of order!
Please help me!
And how it is possible - then firewall cant detect and block IP?!??!?!

Maybe a wild shot, the "129." wonders me if you did not put anywhere the fixed address in directly and you wanted to type 192.0.0.88 but typed 129.0.0.88 by mistake.

help?! someone from NSA ? anyone ?
/kidding
but in spite of recent discoveries in xBSD network stack revealed by SW Juniper audit - i wouldn't be suprised much )