Hi

I have an RB750G and I want to connect it between 2 network. See below

Port1: This is my internet gateway where by my public ip is configure (Connected to outside)

Port2: This in network1 (Connected to inside)

Port3: This is network2 (Connected to inside)

So, I want network1 to use port1 to have access to internet and connect securely to another network (public ip), connecting to an ftp server to exchange data with my ftp server which located on network1 inside. Note that I DON'T want network1 users/machine to be able to brows internet or simply no internet access but only have my ftp server to connect to the other ftp server (a specific ip) securely and exchange data. Also able to ping only that server (public ip) but not any ip over the net. Not able to ping network2 if possible.

On the other hand, I want network2 to have internet access, but not able to ping network1.

Hope somebody can help me out. Cheers

use firewall mangle rules to block specific network traffic (search wiki and forums)

Use firewall filter not mangle.

will try and let you know

Can you give me the link, seems I can't find it

yeah, sorry it's firewall filter

http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter

Hi thanks, but is there any example using winbox, since i am not that familiar with rules, better doing it in winbox

For the most part the commands match up to the winbox GUI. Just follow along and you will be fine.