Page 1 of 1

how to block discovery on mikrotik

Posted: Thu Jan 22, 2015 1:32 pm
by wilsongamo
Hi,
I wanted to know how to block discovery with WinBox on some machine on my network

add action=drop chain=input disabled=no dst-port=8291 protocol=tcp src-address=!ip
Its working fine for IP but you can still connect by mac address
Thanks

Re: how to block discovery on mikrotik

Posted: Thu Jan 22, 2015 2:47 pm
by bingo220
if i'm right you need to block (udp)5678.

Re: how to block discovery on mikrotik

Posted: Thu Jan 22, 2015 3:08 pm
by wilsongamo
i try this
"
add action=drop chain=input disabled=no dst-port=5678 protocol=tcp src-address=!ip "
its not working

Re: how to block discovery on mikrotik

Posted: Thu Jan 22, 2015 3:23 pm
by wilsongamo
i try to block this port but it not working

Re: how to block discovery on mikrotik

Posted: Thu Jan 22, 2015 4:17 pm
by gabrielpike
I think you are using the wrong protocol.

add action=drop chain=input disabled=no dst-port=5678 protocol=tcp src-address=!ip

Change to this:

add action=drop chain=input disabled=no dst-port=5678 protocol=udp src-address=!ip


You can use the address list but I usually block this traffic based on inbound port.

Re: how to block discovery on mikrotik

Posted: Thu Jan 22, 2015 5:11 pm
by clubs
Also have a look at the Tools-> MAC Server section.

Re: how to block discovery on mikrotik

Posted: Thu Jan 22, 2015 6:17 pm
by plisken
Is your problem solved?
So "yes" can you tel how?

Re: how to block discovery on mikrotik

Posted: Thu Jan 22, 2015 8:31 pm
by hossain2004a
There is no need to write a rule.

IP / Neighbor List / discovery interface
disable all interfaces.

Also maybe you wanted to write a rule, I tried to block SSH :D :D and it block discovery :D

Re: how to block discovery on mikrotik

Posted: Thu Jan 22, 2015 8:54 pm
by plisken
This working indeed.
Many thanks

Re: how to block discovery on mikrotik

Posted: Fri Jan 23, 2015 10:59 am
by wilsongamo
Is not working wich Mac address i put a good protocol (udp) and good port for discovery and Mac 20561, 5678
But its not working .
when I block the interface it work but I want to make rules