How to drop an IP address
i'm a newbie here, i have some clients with their own static IP address range 192.168.0.0/24. If they change their IP to another number, how to make them disconnect to the router. Or in other word, how can we drop unwanted client IP address on our router local interface? thanks
thank you valens ... i have another question, can we register or put our client ip address in some kind of ip table in the router? FYI, i use mikrotik OS 2.8.28. Thank you
btw, i already did what u've suggested, but the ip i want to drop or reject is still in my firewall connections table, they still have access to the internet.
btw, i already did what u've suggested, but the ip i want to drop or reject is still in my firewall connections table, they still have access to the internet.
-----------------------thank you valens ... i have another question, can we register or put our client ip address in some kind of ip table in the router? FYI, i use mikrotik OS 2.8.28. Thank you
btw, i already did what u've suggested, but the ip i want to drop or reject is still in my firewall connections table, they still have access to the internet.
Hello Mahendra
i thing better DROP methode for that action....
Peace all
Balimore DOT com
-----------------------
Isnt your rule will drops every ip except one pair MAC+IP ? I mean it will work only for one client.Friend, you should read the manual first before asking here.
But, you can try using mac address protection:
/ip firewall filter add src-mac-address=[client mac address] src-address=![client correct ip address] action=drop
Im using construction with lotof pass rules. One pass rule for one MAC+IP pair. At the end i have one rule to drop everyting whats not equal to previous passing rules.
Mahendra:
update to the newest version.
2.9.x have ip address list feature.
update to the newest version.
2.9.x have ip address list feature.
Last edited by valens on Sat Apr 22, 2006 10:15 pm, edited 1 time in total.
Gotmoh, I didn't check my script yet, and never use it before.Isnt your rule will drops every ip except one pair MAC+IP ? I mean it will work only for one client.
Im using construction with lotof pass rules. One pass rule for one MAC+IP pair. At the end i have one rule to drop everyting whats not equal to previous passing rules.
But AFAIK, my script above will do:
Router will block client with mac-address xxxxx if they are not using IP YYYY
If mac-address is not xxxxxx so it will not droped.