It is a rule dynamically created that's why you can not remove it...

What model is that?

yes, it is dynamically created and I don't know why?

CRS326-24G-2S+RM

Can anyone tell me why this entry was added? port 2 is connected to another switch, which only acts as a switch.

I didn't quite understand on the wiki page. DHCP server is connected to ether1, access points are connected to ether 2-5. Now my question: do I only have to activate "trusted" for Ether 1 or also for Ether 2 to 5, where access points (wlan) are connected? On "bridge" I have DHCP ...

For some things I can't use the firewall of the main router. For example Torrent I can't just lock it, because the Linux kernel can't be patched and complicated for Layer7. Bittorrent block in conjunction with WebProxy (squid) is not as effective as MikroTik and layer7 filters. At least I haven't fo...

I have the following problem with CRS326-24G Switcher running in bridge mode: bridge1 Settings, Use IP Firewall: yes ether 1: Linux Router/Server (DHCP, Gateway, DNS) ether 2: LigoWave AP1 ether 3: LigoWave AP2 ether 3: Connect Client PC directly with LAN cable. DHCP is disabled on MikroTik because ...

Isn't that a limit for the two directions? The 0 is supposed to mean "unlimited" but apparently it is rejected by incorrect validation. You can put a very large number there.

Without..."-0" it doesn't work for me.

@Sob, my brain is tired, been fighting with L2 fiber provider all day for poor service, but just so I can follow, I can't see what is wrong in the webfig, it shows 1970k instead of 1970000, which seems to be correct according to my current tired brain? not 1970k, but "1970k-0" does not wo...

How can I set up VLAN-based separation in MikroTik without DHCP? A Linux server serves as Gateway/DHCP/DNS server. It has two network cards, one for LAN (eth0) and one for WAN (eth1). On the Linux server, DHCP is already configured for each VLAN (10,20,30). VLAN10: 192.168.10.0/24 VLAN20: 192.168.20...

That would also be a possibility. But it also works as mentioned above.

You can believe that. I couldn't download any files. Because it seems to be the same. It starts Download, but it is stopped when downloading. And please understand that it will have false positives. Someone not downloading a file but working in a google docs document will be affected just as well. E...

This is not a problem of MikroTik! What you want is simply not possible anymore. You can blame Google and others for migrating everything to https to prevent that people like you look in the traffic. You misunderstood me. As I have already mentioned above, I have set up on airport WLAN connection a...

Then you simply leave Hardware Offload enabled for Port 2.

Bridge->Ports
and then select the port/etherX where the filter should be applied and disable Hardware Offload.

Works?

Okay, thank you guys for the answer.
Too bad there's no possibility for MikroTik.

Thank you for your answer.

It is a CRS326-24G router switch.

Which I don't understand. HTTPS pages can be blocked with the above regexp, but HTTPS downloads cannot.

squid/proxy filtering with the L7 Protocol principle?

If I understood it correctly, I can separate ports under Bridge? There are two external DHCP/DNS/Gateway servers: Server 1 has the IP: 192.168.2.1/24 Server 2 has the IP: 192.168.3.1/24 On the MikroTik CRS326-24G now two port groups should be set up: Group1: ether1 to ether8 Group2: ether9 to ether1...

Yes, I am aware of that, but how do the others do it, at train stations, airports ... ? a few weeks ago I set up a WLAN connection at the airport and I couldn't download any files. So there has to be a solution. Strangely enough, URL Block also works for HTTPS pages. This works here, for example: ^....

unfortunately I have no possibilities to block files (exe, iso, dmg etc.) download. I was told here viewtopic.php?f=21&t=150767&start=50#p744362 that I shouldn't use L7 Protocol for this. Do you have a solution that works?

This L7 Regexp does not work anymore since update: I used this to block file download. I also don't know which MikroTik version I had before. I think it was the 6.43.