Hi All,

i'm trying to protect my domain network from my Mikrotik Hotspot network, because any hotspot user he can access my domain if he just put \\DomainName\ so is there any routing Rule or firewall filter rules????

any help ?

Guys Any Help ?

Yes, simply add firewall filter rules in the forward chain and match the in-interface of the hotspot, match destination IP range of your domain IP subnet and add an action of drop. Now no traffic can be sent from your hotspot network to your domain network. If you want to make the rule complete then reverse the rule, match for the out-interface of the hotspot and the source IP of the domain to stop any traffic leaving your domain and going to your hotspot.

Thx For ur reply, but i try it before and it doesn't work, i found a way through the IPSEC, you can discard the network address that you want