Community discussions

MikroTik App
 
yeddish
just joined
Topic Author
Posts: 1
Joined: Wed Sep 04, 2019 12:01 am

Inline transparent port filtering

Wed Sep 04, 2019 12:05 am

Hi, all.

I have a hEX PoE and I'm trying to use it inline to filter port 443 to some devices. My understanding is that when ports are in a bridge, you can still use firewall filtering, but I am still seeing traffic passing to port 443 on a device beyond the hEX. Below is my config. Can anyone point me in the proper direction? I've tried several chains and none are doing it.
/interface bridge
add name=bridge1
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether1
/interface bridge settings
set use-ip-firewall=yes
/ip firewall filter
add action=reject chain=input dst-port=443 protocol=tcp
add action=reject chain=prerouting dst-port=443 protocol=tcp
add action=reject chain=forward dst-port=443 protocol=tcp
Last edited by krisjanisj on Wed Sep 04, 2019 8:57 am, edited 1 time in total.
Reason: Please post configs/code in [code] blocks to save peoples scroll wheels
 
pe1chl
Forum Guru
Forum Guru
Posts: 10195
Joined: Mon Jun 08, 2015 12:09 pm

Re: Inline transparent port filtering

Wed Sep 04, 2019 12:16 pm

Maybe you have hw accel enabled on the bridge ports? Then it is processed by the switch chip.
Try setting hw=no on the 3 ports.

Who is online

Users browsing this forum: jhbarrantes, kub1x, Valerio5000 and 83 guests