Hi,
I wanted to know how to block discovery with WinBox on some machine on my network

add action=drop chain=input disabled=no dst-port=8291 protocol=tcp src-address=!ip
Its working fine for IP but you can still connect by mac address
Thanks

if i'm right you need to block (udp)5678.

i try this
"
add action=drop chain=input disabled=no dst-port=5678 protocol=tcp src-address=!ip "
its not working

i try to block this port but it not working

I think you are using the wrong protocol.

add action=drop chain=input disabled=no dst-port=5678 protocol=tcp src-address=!ip

Change to this:

add action=drop chain=input disabled=no dst-port=5678 protocol=udp src-address=!ip


You can use the address list but I usually block this traffic based on inbound port.

Also have a look at the Tools-> MAC Server section.

Is your problem solved?
So "yes" can you tel how?

There is no need to write a rule.

IP / Neighbor List / discovery interface
disable all interfaces.

Also maybe you wanted to write a rule, I tried to block SSH and it block discovery

This working indeed.
Many thanks

Is not working wich Mac address i put a good protocol (udp) and good port for discovery and Mac 20561, 5678
But its not working .
when I block the interface it work but I want to make rules