Hi there,

I have a network that the traffic is being managed by a MikroTik 1100 AHx2 (working as router/DHCP server/DNS server/firewall), and I've been searching for a way to block internet access for certain machines using their MAC address with no success, I've already tried to "drop" traffic to 0.0.0.0 associated to a MAC address and it didn't worked...the only way I've managed to block internet access for a certain machine was in IP>Routes>Rules, and it was only blocking the route 0.0.0.0 for a certain IP, if that machine IP is changed manually for another address that isn't in use and in the same range it will have internet access again.

Any ideas how can I accomplish the desired MAC address blocking?

Thanks in advance

Best ragards

ip firewall filter add chain=forward src-mac-address=!00:00:00:00:11 action=drop in-interface=etherx

etherx is ur lan interface

Sorry for the late reply, just came across my own post and noticed that I didn't answer it

Tried what you suggested with no luck, didn't block internet traffic for the machine/MAC address in question