bridge1
Settings, Use IP Firewall: yes
ether 1: Linux Router/Server (DHCP, Gateway, DNS)
ether 2: LigoWave AP1
ether 3: LigoWave AP2
ether 3: Connect Client PC directly with LAN cable.
DHCP is disabled on MikroTik because the Linux router runs as a DCHP server.
When I disable hardware offload on ether2 and ether3, the firewall rules work. The problem is, if a client establishes a WLAN connection, it can't establish an Internet connection for the first minute (it's maybe two minutes), although the WLAN connection exists. If I activate hardware offload on ether2 and ether3, the internet connection works from the beginning.
Where is the problem?
Is it the firewall rule?
Code: Select all
[admin@MikroTik] /ip firewall filter> print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; Block Bittorrent
chain=forward action=add-src-to-address-list layer7-protocol=layer7-bittorrent src-address=192.168.0.0/24
src-address-list=!allow-ips address-list=Bittorrent_clients address-list-timeout=none-dynamic log=no log-prefix=""
1 chain=forward action=add-src-to-address-list layer7-protocol=layer7-bittorrent src-address=192.168.1.0/24
src-address-list=!allow-ips address-list=Bittorrent_clients address-list-timeout=none-dynamic log=no log-prefix=""
2 chain=forward action=drop protocol=tcp src-address-list=Bittorrent_clients
dst-port=!0-1024,8291,5900,5800,3389,14147,5222,59905 log=no log-prefix=""
3 chain=forward action=drop protocol=udp src-address-list=Bittorrent_clients
dst-port=!0-1024,8291,5900,5800,3389,14147,5222,59905 log=no log-prefix=""
4 ;;; Block Apple
chain=forward action=drop protocol=tcp dst-address=17.0.0.0/8 src-address-list=LIGOWAVE dst-port=80,443,5223 log=no
log-prefix=""
5 ;;; Block WindowsUpdate
chain=forward action=drop layer7-protocol=layer7-windowsupdate protocol=tcp src-address-list=LIGOWAVE
dst-port=80,443 log=no log-prefix=""
6 ;;; Block Google Play
chain=forward action=drop layer7-protocol=layer7-googleplay protocol=tcp src-address-list=LIGOWAVE dst-port=80,443
log=no log-prefix=""
