Hi I have MT and the configuration i below.

Ether 1 : WAN 59.X.X.X/27 - One POOL
Ether 2 : LAN 59.160.X.X/27 - Second Pool.
Ether 3 : 128.0.0.1/16 - Private Pool.

Now i am serving my custome thru Ether2 & 3. I have 30 Public IP in second pool.

For Ether 3 src nat is working for perticular IP. Suppose if i want to give access to 128.0.0.100 i will do src nat. it works fine.

But for real IP i cant do src nat. as all the IPs are routed. Now i am using just 5 IPs out of 30.

What i have to do to drop another IPs. so nobody can ge access if somebody use the same in my NETWORk.

I.e i want to give internet to only 5 Ips out of 30 and for rest i dont want give access.

btw, 128.0.x.x/16 is ip addresses in Amsterdam.

i would suggest to read here:
http://www.mikrotik.com/testdocs/ros/2.9

btw, 128.0.x.x/16 is ip addresses in Amsterdam.

i would suggest to read here:
http://www.mikrotik.com/testdocs/ros/2.9

I DON'T Understand...Its my LAN and PRIVATE IP SERIES,

JUST i want to drop the additional PUBLIC IP from my existing IP POOL

Ashisheitl,

If i'm understanding right all it sounds like to me is you are wanting a firewall rule that will drop internet access to all traffic to certain ip addresses?

If so then just setup a drop rule in your forward chain that will drop packets from that ip range.

http://www.mikrotik.com/testdocs/ros/2.9/ip/filter.php
This website will guide you in the right direction.

Ashisheitl,

If i'm understanding right all it sounds like to me is you are wanting a firewall rule that will drop internet access to all traffic to certain ip addresses?

If so then just setup a drop rule in your forward chain that will drop packets from that ip range.

http://www.mikrotik.com/testdocs/ros/2.9/ip/filter.php
This website will guide you in the right direction.

Thanks Buudy,

That is WHAT I WANT..Thanks Again