====== [Mikrotik] Bloquear una IP ======

**Objetivo**. Bloquear el acceso a una IP local desde internet: ''Chain: forward''

  * [[https://help.mikrotik.com/docs/pages/viewpage.action?pageId=6488065|How to block specific IP address?]]
  * [[https://elblogdelazaro.org/posts/2023-12-04-bloquear-acceso-a-internet-en-router-ikrotik/|Bloquear acceso a internet en router Mikrotik]]

In order to block a specific IP address, you need to add a Firewall filter rule.

Step-by-step guide. Follow these steps to add filter rule using Winbox:

  - Go to IP>Firewall;
  - Select tab "Filter rules";
  - Click on the + to add new rule;
  - Select tab "General";
  - Choose Chain: forward;
  - Select Src. Address - input your desired IP;
  - Select tab "Action";
  - Choose Action: Drop;
  - Click OK, and the desired IP address will be blocked by a firewall filter. 

<code>

/ip firewall filter add chain=forward src-address=1.1.1.1 action=drop

</code>

Chain "input" limit the connection to the device itself. To limit traffic going through the device use chain "forward". Please refer to the Building Your First Firewall