Community discussions

MikroTik App
 
hofi76
newbie
Topic Author
Posts: 31
Joined: Tue Oct 13, 2020 11:01 am

bridge filtering behaviour

Mon Oct 04, 2021 11:55 am

Hi All,

I need to create a "transparent firewall" to protect an old XP in production. I decided to use bridge filtering. Partly working fine but after I enable the "Hardware offload” seems the bridge filter is not applied. Am I right?

The other question of mine: Is it possible to create a bridge filter, which accept the SYN, ACP packages only? (I know firewall would be better but in my case, it is not an option)
My very last idea to allow the TCP between 10000-65534 dst port

Br
Peter
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19086
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: bridge filtering behaviour

Mon Oct 04, 2021 3:13 pm

Read the user guide.
 
tdw
Forum Guru
Forum Guru
Posts: 1843
Joined: Sat May 05, 2018 11:55 am

Re: bridge filtering behaviour  [SOLVED]

Mon Oct 04, 2021 3:31 pm

I need to create a "transparent firewall" to protect an old XP in production. I decided to use bridge filtering. Partly working fine but after I enable the "Hardware offload” seems the bridge filter is not applied. Am I right?
Yes, see https://help.mikrotik.com/docs/display/ ... adedPacket If a packet is handled by the hardware switch it never reaches the bridge. Depending on which Mikrotik you use it may be possible to use switch rules, see https://help.mikrotik.com/docs/display/ ... -RuleTable

The other question of mine: Is it possible to create a bridge filter, which accept the SYN, ACP packages only? (I know firewall would be better but in my case, it is not an option)
My very last idea to allow the TCP between 10000-65534 dst port
Bridge filters and switch rules are both stateless and do not have all of the features available to IP firewall rules. It is possible to force bridged traffic through the IP firewall if you require these features, see https://help.mikrotik.com/docs/display/ ... geSettings
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19086
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: bridge filtering behaviour

Mon Oct 04, 2021 3:46 pm

tdw, my usual response to a troll post. :-)
 
hofi76
newbie
Topic Author
Posts: 31
Joined: Tue Oct 13, 2020 11:01 am

Re: bridge filtering behaviour

Mon Oct 04, 2021 3:55 pm

tdw, my usual response to a troll post. :-)
Hi anav,
RTFM is an easy answer but not very helpful ;)
Last edited by hofi76 on Mon Oct 04, 2021 3:57 pm, edited 1 time in total.
 
hofi76
newbie
Topic Author
Posts: 31
Joined: Tue Oct 13, 2020 11:01 am

Re: bridge filtering behaviour

Mon Oct 04, 2021 3:57 pm

twd, many thanks. Your idea seems a solutions for my problem.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19086
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: bridge filtering behaviour

Mon Oct 04, 2021 4:21 pm

Hey Welcome to the forums! My apologies for the error. :-)
Glad your issue has been resolved!
We get many similar requests that are troll requests. (typical of just joined...........)
 
hofi76
newbie
Topic Author
Posts: 31
Joined: Tue Oct 13, 2020 11:01 am

Re: bridge filtering behaviour

Tue Oct 05, 2021 11:57 am

Today I have finished the modification in my Mikrotik bridges
 /interface bridge settings   set use-ip-firewall=yes  
All is fine. I can manage all the bridge traffic in the firewall section.

Many thanks again.

Who is online

Users browsing this forum: gigabyte091 and 16 guests