MikroTik

any tutorial about bridging rule.....???

weks.......anyone

What kind of rules tutorial do you need ?
http://www.mikrotik.com/testdocs/ros/2. ... php#4.14.7

wew finally....well i already read the bridge manual but that dont result anything........in bridge-filter does it same as firewall for bridging..??

Bridge firewall implements filtering for data from to or trough bridge.

is that mean the same as firewall in ip-firewall...??

Yes.

well i try a simple rule in bridge-filter but it didnt work...??
the rule is like this :

interface: in interface-lan1
out interface-lan2

IP : src.address-192.168.10.0/24
dst.address-10.10.15.0/24

Action : drop

lan1 & lan2 is in the same bridge

can anyone help...pliss

Could you provide complete rule or export from 'interface bridge fiter' ?

interface-bridge-filter>add chain=forward in-interface=lan1 out-interface=lan2 src.address=192.168.10.0/24 dst.address=10.10.15.0/24 action=drop

note :
i got 4 ether and i bridge all

when i apply the rule the 192.168.10.0/24 still can connect to 10.10.15.0/24.....????
is something wrong with my rule.....if so please help......thx

hello.....need help pliss

to filter traffic going *through* your bridge (going from one interface to another) you need to add rules to "forward" chain.
The input/output chains are reserved for traffic going *TO* or *FROM* your bridge, as in winbox and routed traffic.

@sten can i delete the bridge (that connected all the ether) and set all the 4 ether with specified ip....with the same subnet..and i want all the 4 ether are connected?? i've try this one but all the 4 ether cannt connected!!!

what's your configuration?
and what do you want to achieve?

okay heres my configuration that i want to achive:

ether 1 - with ip = 10.10.1.1/255.255.0.0 (local) (reply only)
ether 2 - with ip = 10.10.2.1/255.255.0.0 (local)
ether 3 - with ip = 10.10.3.1/255.255.0.0 (local)
ether 4 - with ip = 202.165.x.x (global)

what i want to is all ether can connect each other without to creat a bridge.....!!!!!

thx

ether 1 - with ip = 10.10.1.1/255.255.0.0 (local) (reply only)
ether 2 - with ip = 10.10.2.1/255.255.0.0 (local)
ether 3 - with ip = 10.10.3.1/255.255.0.0 (local)

Address overlap... they're all 10.10/16

what i want to is all ether can connect each other without to creat a bridge.....!!!!!

Well, if you do not create a bridge, then you'd have to route... but you can't because your network address ranges overlap. Sounds like you're stuck and need to rethink your network design.

--Tom

so that means i need to bridge, right??

no

you have a fundamental flaw in your design

you need to apply correct subnet masks.

hint: correct subnet masks for the subnetting you chose is 255.255.255.0 but you need to find out how this affects your routing tables.

i need to change my subnet for each ether......

larmaid...it's ur job to re-design the network