Community discussions

MikroTik App
 
bledar
Member Candidate
Member Candidate
Topic Author
Posts: 234
Joined: Mon Nov 26, 2007 11:44 am
Location: Tirana/Albania

blocking activity

Fri Mar 21, 2008 2:15 pm

Hello!

I want to block all activity, i mean download+upload for a specific IP.
May I use this configuration for blocking for example ip 192.168.12.17 ?
chain=forward src-address=192.168.12.17 dst-address=0.0.0.0 action=drop

I tried this, but it was blocking nothing.
I tried even queue roules but the same. Maybe because I am using equal bandwidth sharing on my MKT ?
Please help me with firewall roules becouse they I trust.

Thank You for all answers that you will give to me.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8712
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: blocking activity

Fri Mar 21, 2008 11:17 pm

delete 'dst-address=0.0.0.0' or change to 'dst-address=0.0.0.0/0'
 
bledar
Member Candidate
Member Candidate
Topic Author
Posts: 234
Joined: Mon Nov 26, 2007 11:44 am
Location: Tirana/Albania

Re: blocking activity

Fri Mar 28, 2008 1:32 pm

Hello.
Even in that mode do not work.
I tried this one, and it works as I want.
chain=input src-address=192.168.12.17 dst-address=0.0.0.0/0 action=drop

Is this the regular mode or something strange is going on???

Thnx.
 
gacopl
Frequent Visitor
Frequent Visitor
Posts: 63
Joined: Sun Jul 29, 2007 5:11 pm
Location: Poland

Re: blocking activity

Fri Mar 28, 2008 2:33 pm

0.0.0.0/0 is the only proper way of ip description of 'Internet', basicly it means all ip addresses, but as friend earlier said you could also just don't put dst-address option and it would work the same way as well

cheers
Michal

Who is online

Users browsing this forum: hpeters, stef70 and 82 guests