Re: [Mikrotik] Firewall rules for blocking customer DHCP

2011-11-30 Thread Butch Evans
On Tue, 2011-11-29 at 13:47 -0500, Josh Luthman wrote: /interface bridge filter add action=log chain=forward comment=log dhcp servers on 192.168/16 \ disabled=no dst-address=255.255.255.255/32 ip-protocol=udp log-prefix=\ blocked dhcp server mac-protocol=ip src-address=192.168.0.0/16 \

Re: [Mikrotik] Firewall rules for blocking customer DHCP

2011-11-30 Thread Butch Evans
On Mon, 2011-11-28 at 23:27 -0500, Josh Luthman wrote: Does anyone have this handy and tested to confirm it is working? I'm looking for rules that would be used on the customer CPE when bridged/wds. In this example, ether1 is the physical port connecting to customer. Modify as needed.

[Mikrotik] Repeating the signal in a building

2011-11-30 Thread Martin Ruiz Ibersystems
... URL: http://www.butchevans.com/pipermail/mikrotik/attachments/2030/9dc8d8a0/attachment.html ___ Mikrotik mailing list Mikrotik@mail.butchevans.com http://www.butchevans.com/mailman/listinfo/mikrotik Visit http://blog.butchevans.com/ for tutorials

Re: [Mikrotik] Repeating the signal in a building

2011-11-30 Thread Chupaka
using wds. Anyone did a similar project? thanks, * Martín Ruiz* * * * * -- next part -- An HTML attachment was scrubbed... URL: http://www.butchevans.com/pipermail/mikrotik/attachments/2030/9dc8d8a0/attachment.html

Re: [Mikrotik] Repeating the signal in a building

2011-11-30 Thread Martin Ruiz Ibersystems
and 1 as station wds) with different channels using wds. Anyone did a similar project? thanks, * Martín Ruiz* * * * * -- next part -- An HTML attachment was scrubbed... URL: http://www.butchevans.com/pipermail/mikrotik/attachments/2030

Re: [Mikrotik] Repeating the signal in a building

2011-11-30 Thread Antonio G . Sánchez Funes
-- An HTML attachment was scrubbed... URL: http://www.butchevans.com/pipermail/mikrotik/attachments/2030/9dc8 d8a0/attachment.html ___ Mikrotik mailing list Mikrotik@mail.butchevans.com http://www.butchevans.com/mailman/listinfo

Re: [Mikrotik] Repeating the signal in a building

2011-11-30 Thread Antonio G . Sánchez Funes
a similar project? thanks, * Martín Ruiz* * * * * -- next part -- An HTML attachment was scrubbed... URL: http://www.butchevans.com/pipermail/mikrotik/attachments/2030/9dc8 d8a0/attachment.html

Re: [Mikrotik] Firewall rules for blocking customer DHCP

2011-11-30 Thread Josh Luthman
Would that permit the customer to still have a dhcp client behind it? In my case, the customer would have a wlan1/ether1 wds bridge. Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Nov 30, 2011 at 3:37 AM, Butch Evans but...@butchevans.com

[Mikrotik] Strange simple queue behavior

2011-11-30 Thread Craig Baird
I have some EoIP tunnels that pass through a router that has some simple queues for bandwidth control. I don't want the EoIP tunnels to get throttled, but I have a fall-through simple queue that basically is supposed to catch everything that doesn't have an explicit rule and throttle it

Re: [Mikrotik] Firewall rules for blocking customer DHCP

2011-11-30 Thread Butch Evans
On Wed, 2011-11-30 at 08:13 -0500, Josh Luthman wrote: Would that permit the customer to still have a dhcp client behind it? In my case, the customer would have a wlan1/ether1 wds bridge. If we use the in-interface=ether1 in the rule, we are limiting DHCPOFFER coming from a DHCP server that

Re: [Mikrotik] Firewall rules for blocking customer DHCP

2011-11-30 Thread Josh Luthman
Will this rule still work if ether1/wlan1 are in a bridge with WDS? I would think the traffic would hit the bridge1 interface, wouldn't it? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Nov 30, 2011 at 2:32 PM, Butch Evans

Re: [Mikrotik] Firewall rules for blocking customer DHCP

2011-11-30 Thread Blake Covarrubias
It will hit ether1 first. You want to apply the rule to ether1 as you're blocking DHCP server traffic from entering the bridge through that port. If you apply it to the bridge then it would drop to packets entering the bridge through either member port (ether1 wlan1). Blocking on wlan1 would

Re: [Mikrotik] Firewall rules for blocking customer DHCP

2011-11-30 Thread Josh Luthman
That sounds like a perfect solution, better than mine by far, if it'll hit ether1 and not bridge1/wlan1!!! Thank you! Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Nov 30, 2011 at 3:14 PM, Blake Covarrubias bl...@beamspeed.com wrote: