That has been my experience with the testing I have done.

-Ty


On Tue, Jan 28, 2014 at 2:03 PM, Justin Miller <[email protected]>wrote:

> If I recall, DHCP Client/Server is part of the kernel and is not processed
> by the filter rules as all for both ip filters and bridge filters.  You may
> be able to block dhcp going through the router in a bridge but anything
> destined or sourced to the router in input/output are just ignored.
>
> I believe I put Janis on the spot in front of everyone in a session he led
> by asking him that at one of the MUM's I went to.  ;)
>
> Things may have changed in ROS 6. YMMV in 6.
>
> Justin
> On Jan 23, 2014, at 12:13 PM, Ty Featherling <[email protected]>
> wrote:
>
> > Can someone confirm that you CANNOT manage traffic FROM the DHCP Server
> on
> > a Mikrotik with IP Firewall?
> >
> > To test this I added the rule:
> >
> > add action=log chain=output disabled=no protocol=udp src-port=67
> >
> > Nothing is caught.
> >
> > -Ty
> > -------------- next part --------------
> > An HTML attachment was scrubbed...
> > URL: <
> http://mail.butchevans.com/pipermail/mikrotik/attachments/20140123/d4013815/attachment.html
> >
> > _______________________________________________
> > Mikrotik mailing list
> > [email protected]
> > http://mail.butchevans.com/mailman/listinfo/mikrotik
> >
> > Visit http://blog.butchevans.com/ for tutorials related to Mikrotik
> RouterOS
>
> _______________________________________________
> Mikrotik mailing list
> [email protected]
> http://mail.butchevans.com/mailman/listinfo/mikrotik
>
> Visit http://blog.butchevans.com/ for tutorials related to Mikrotik
> RouterOS
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 
<http://mail.butchevans.com/pipermail/mikrotik/attachments/20140128/df41a85d/attachment.html>
_______________________________________________
Mikrotik mailing list
[email protected]
http://mail.butchevans.com/mailman/listinfo/mikrotik

Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS

Reply via email to