Please, help me to block all activity for an specific IP on firewall roules.

Thank You in advance.

address depends on the traffic you want to drop.
Additionaly you need to specify chain,
input to filter traffic going to your router,
your clients traffic in forward.

I want to block all trafic generated from local ip 192.168.12.250.

Is this the right config?

\ip firewall filter
chain=forward src-address=192.168.12.250 dst-address=0.0.0.0 action=drop

With this one I have no results.
\Please tell me if you have any nwe idea for block all the activity, even within subnet trafic.

Thnx a lot.

/ip firewall filter
chain=forward src-address=192.168.12.250 dst-address=0.0.0.0/0 action=drop

you can block his MAC also like I have done it for my few clients.

/ip firewall filter
chain=forward src-mac-address= your client mac action=drop

i want to block ip is 172.30.12.30 to 172.30.12.255 . how can this plz help me

Please Refer
http://forum.mikrotik.com/viewtopic.php?f=2&t=29226

Thx Asishbhai... & best of luck for usa

go ip ,address list & select local lan interface & example address 172.30.12.1/27 brodcast 172.30.12.30 network 172.30.12.0 interface local it is 100% working without queue 172.30.12.31 to 172.30.12.255 user not access internet any way (downloading & p2p )

you can block his MAC also like I have done it for my few clients.

/ip firewall filter
chain=forward src-mac-address= your client mac action=drop

this one not work for me.

what's your network config?

what's your network config?

1 public ip in 1 interface as a WAN and share internet to the another 3 interfaces.

interface 2-4 got different network

the network of interface 3 is 10.100.100.0/24 one of ip of this rank using my internet very height. i want to block his ip or mac address or queue his traffic. i followed the config above but not work.

And i want to block some websites like youtube or facebook also not work for me.
i also tired enable web proxy but still not working. must be something wrong somewhere.

Please correct me.

Thanks

check that you don't accept these packets above your 'drop' rule

so what i am gonna do? could u help me?

so what i am gonna do?

check

also, you may want to look at http://www.mikrotik.com/consultants.html

you can block his MAC also like I have done it for my few clients.

/ip firewall filter
chain=forward src-mac-address= your client mac action=drop

it says no such comments found.............

this is not working for me i want to block 1 customer's mac what i have to me tell me................

im using microtik V2.9.34 as my ISP access point....................



help me thanks........

maybe syntax was changed a bit between v2.9 and v3/4. upgrade =)

Hello , Please i need help . . .
I have an rb433 with an 2 XR5s Wlan1 is working as station wds and Wlan 2 as AP Bridge giving connection to a reseller

how can I filter those two Wlans so that when my reseller enters his winbox he can only see his mikrotiks . . . not his a mine ?

please i need it urgent

Hi friends
i am using CCR1036-12G-4S i want configure firewall as follow
i want to create to three IP group-
1) for IT Manager Team-that set full access 2) for allow specific websites only and 3) block total websites.
How can i do.......please help

i want to create to three IP group-

http://wiki.mikrotik.com/wiki/Manual:IP ... dress_list

1) for IT Manager Team-that set full access 2) for allow specific websites only and 3) block total websites.

http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter