Ok, I have a strange one.  We are trying to block DHCP return requests
from a Mikrotik CPE.  It used to work but in recent upgrades, we are
showing that the bridge filter is not working.  We are using 4.16
currently.

 

Here are the rules:

/interface bridge filter

add action=log chain=forward comment="Block DHCP Servers from ETH1"
disabled=no in-interface=ether1 ip-protocol=udp log-prefix="DHCP: "
mac-protocol=ip packet-type=broadcast src-port=67

add action=drop chain=forward comment="" disabled=no in-interface=ether1
ip-protocol=udp mac-protocol=ip packet-type=broadcast src-port=67

 

The counters are incrementing for both the LOG and DROP rules, but it is
not dropping the packets in the last rule.  I have also tried turning on
the "Use IP Firewall" option, but still no results.

 

Eric Rogers

Precision Data Solutions, LLC

(317) 831-3000 x200

 

 

 


--------------------------------------------------------------------------------
WISPA Wants You! Join today!
http://signup.wispa.org/
--------------------------------------------------------------------------------
 
WISPA Wireless List: wireless@wispa.org

Subscribe/Unsubscribe:
http://lists.wispa.org/mailman/listinfo/wireless

Archives: http://lists.wispa.org/pipermail/wireless/

Reply via email to