I am a WISP and have the following setup:


Mikrotik Border Router
|
|
|
Mikrotik 493ah @ Tower

-Eth 1 Connected to "Border router for Internet"
-Eth 2 Connected to Access Point 1
-Eth 3 Connected to Access Point 2


My question is if I have customer's say on Access Point 1 and Access Point 2 who have setup WebServers/Mail Servers at their locations how can I block requests at the 493ah so the outside world will NOT be able to access the Servers my customers have setup?


Thanks,

J

If you are handing out private Ips, no biggy, if they are public, you can stop inbound new connection types to IPs behind your MT.