i have a problem.I want to set one network can ping to another network but the other cannot. example : 192.164.8.xxx can ping to 192.164.9.xxx
but 192.164.9.xxx cannot ping to 192.164.8.xxx in this case i mean i want to seperate them using mikrotik,but the network 9 still can through mikrotik and use the internet.And the problem is everytime succeed network 9 cannot ping to network 8,but suddenly network 9 can reply packet again..

nb:i seperate my network between network 9 and 8, i don't mix them into one network
i use 5 ethernet card..each one each them..plss help me

this is my old setting :
mangle
--------
chain= forward
src address= 192.164.9.0/24
dst address= 192.164.8.0/24
action= mark connection name= new connect passthrough= off

filter rule
----------
chain= input
connection mark= new connect
action = drop

Change the riost rule, and instead of marking packed, just drop it.

thnx,i'll try...