/interface bridge filter
add action=drop chain=forward in-bridge=bridge1 in-interface=ether4
add action=drop chain=forward in-bridge=bridge1 out-interface=ether4
/interface bridge filter print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=forward action=drop in-interface=ether4 in-bridge=bridge1 log=no log-prefix=""
1 chain=forward action=drop in-bridge=bridge1 out-interface=ether4 log=no log-prefix=""
Devices connected to physical port ether4 still have internet access.
if you want to make a bridge which has ALL interfaces isolated from each other but not the Internet
I use default RouterBOARD 750UP r2 (hEX PoE Lite) configuration. All I want and need is device that connected to physical port ether4 have full local network access but would be unable to access the internet through any protocol (http(s),ssh,telnet,unknown or proprietary protocols,etc). No more or less. Is this possible?