Page 1 of 1

Block traffic to internet by MAC address

Posted: Fri Apr 04, 2014 1:38 pm
by Gr0ove
Hi there,

I have a network that the traffic is being managed by a MikroTik 1100 AHx2 (working as router/DHCP server/DNS server/firewall), and I've been searching for a way to block internet access for certain machines using their MAC address with no success, I've already tried to "drop" traffic to 0.0.0.0 associated to a MAC address and it didn't worked...the only way I've managed to block internet access for a certain machine was in IP>Routes>Rules, and it was only blocking the route 0.0.0.0 for a certain IP, if that machine IP is changed manually for another address that isn't in use and in the same range it will have internet access again.

Any ideas how can I accomplish the desired MAC address blocking?

Thanks in advance

Best ragards

Re: Block traffic to internet by MAC address

Posted: Fri Apr 04, 2014 3:04 pm
by airforce1
ip firewall filter add chain=forward src-mac-address=!00:00:00:00:11 action=drop in-interface=etherx

etherx is ur lan interface

Re: Block traffic to internet by MAC address

Posted: Tue Sep 16, 2014 7:18 pm
by Gr0ove
Sorry for the late reply, just came across my own post and noticed that I didn't answer it :mrgreen:

Tried what you suggested with no luck, didn't block internet traffic for the machine/MAC address in question :(