I got a bridge1 between lan1 and lan2 interface.
I ve selected the firewall option enabled
What rules do I need to use to let it pass only the udp packets?
/ip fi fi add action=drop(reject?) chain=forward disabled=no protocol=!udp
But this is for every interface? where is specified bridge port? or interface.Code: Select all/ip fi fi add action=drop(reject?) chain=forward disabled=no protocol=!udp
[normis@demo2.mt.lv] /interface bridge filter> add out-interface=ether1 ip-protocol=!udp action=drop
[admin@GwPm] /interface bridge filter> add out-interface=lan ip-protocol=!udp action=dropsomething like ...Code: Select all[normis@demo2.mt.lv] /interface bridge filter> add out-interface=ether1 ip-protocol=!udp action=drop
is this fine?or better - if you have checked "use ip firewall" then you can make a new rule in the IP FIREWALL FILTER (as chupaka suggested) and use the "out-bridge-port" parameter for example.
/interface bridge filter
add action=drop chain=forward comment="" disabled=no mac-protocol=0x8863 out-interface=wlan1
add action=drop chain=forward comment="" disabled=no mac-protocol=0x8864 out-interface=wlan1
add action=drop chain=forward comment="" disabled=no mac-protocol=0x8863 in-interface=wlan1
add action=drop chain=forward comment="" disabled=no mac-protocol=0x8864 in-interface=wlan1
I'm out of interfaces right now.Why is ether1 and wlan1 bridge if the ADSL modem is on ether1? You have your PPPoE session and LAN/WLAN traffic on all the same bridge? Why don't you put the ADSL modem on a separate interface?
You could disable forwarding pppoe-discovery and pppoe-session traffic to the WLAN interface.
How many ADSL modems do you have?I want to log, to debug later...
I got an adsl modem connected to ether1, router os uses it with a pppoe client session,
In wifi there are another adsl modem but that one doesn't dies.