i want to block MAC address for pppoe clients. i m using V3.13.

// chain=forward action=drop src-mac-address=00:21:27:C6:3B:8C Not working...


Any idea???

thnxs,
raktim

raktim -

First - upgrade to ROS 3.24, and be sure to upgrade the firmware as well after the ROS upgrade.

Second, try dropping them in the pre-routing chain instead of the forward chain.


R/

1. how can i sure that firmware is upgraded??? & what is the way to upgrade the firmware in x86 machine???

2. There is no prerouting option in filter rules. Do i need mark the connection first in Mangle???

thnxs,
raktim

there's no RouterBOARD firmware on x86 =)

if you want completely block PPPoE client of your router - do it in 'input' chain, not 'forward'

Not working, still logged in from this MAC.

Flags: X - disabled, I - invalid, D - dynamic
0 ;;; test
chain=input action=drop src-mac-address=00:21:27:C6:3B:8C

pppoe is layer2, ip firewall can block only layer3.

To block layer2 traffic you can use bridge filters.

oops... really =)