How would I proceed to block all traffic towards internet from a specific IP, bar several ports?
From what I understand, I should select forward chain, src address (local PC IP address) and set the rule to block?
I also have two TCP ports that I need to work, so I should set the allow rule to forward, port, protocol, (in interface) and destination address.
Am I good with this?
Re: Block internet traffic from IP [SOLVED]
sure, that will do it. Easiast to first allow what you want, and close with "reject all". Reject will be communicated to user, so he won't have to timeout.
something like
something like
Code: Select all
/ip firewall filter
add action=accept chain=forward protocol=tcp dst-ports=80,443, ... ? src-address=ip
add action=reject chain=forward src-address=ip
Re: Block internet traffic from IP
Thanks! Appreciated! 
Who is online
Users browsing this forum: No registered users and 108 guests