Hi i have setup a omni antenna that i want to use to connect a few people. The network on wlan1 is running on 192.168.8.0/24 and the network on eth1 is running on 192.168.0.0/24.

I am able to ping and access computers on the 192.168.0.0/24 from 192.168.8.0/24. That is not good. I want to make the 192.168.0.0/24 network invisible from the 192.168.8.0/24 network. I dont want users from the 192.168.8.0/24 network to be able to ping computers on the 192.168.0.0/24 network or make then access shared folders on the 192.168.0.0/24 network.

What rule can i add? I tried to block icmp but the i cant ping websites.

Can anyone tell me what rule i should add. please.

ip firewall add chain=forward src-address=192.168.8.0/24 dst-address=192.168.0.0/24 action=drop comment="drop packets between subnets"

Have a read through this http://wiki.mikrotik.com/wiki/Firewall it will help.

Hi thanx for speedy reply. i have solved the problem. thanx. I looked up http://forum.mikrotik.com/viewtopic.php ... ge#p144932