Hi, I'm in need of some help.:
I've successfully configured a Mikrotik router to serve internet and act as local DHCP server.
However I have one static IP, used for a wi-fi router, which I want clients connected to it to ONLY be able to access the internet and not be able to access any internal IPs.
I've tried doing this by Firewall Filter, however have not had any luck. Basically, I want the firewall to drop any connections coming from 10.1.1.2 to the local LAN.
Chain: forward
Source Address: 10.1.1.2 (Router's Static IP)
Destination Address: 10.1.0.0/16
Action: Drop
However, when I set up this config the FW has the opposite effect, blocking out internet access for those on wi-fi, yet can continue accessing internal IPs.
Any help would be greatly appreciated!