[Mikrotik] Bloquear una IP

Objetivo. Bloquear el acceso a una IP local desde internet: Chain: forward

• How to block specific IP address?
• Bloquear acceso a internet en router Mikrotik

In order to block a specific IP address, you need to add a Firewall filter rule.

Step-by-step guide. Follow these steps to add filter rule using Winbox:

1. Go to IP>Firewall;
2. Select tab “Filter rules”;
3. Click on the + to add new rule;
4. Select tab “General”;
5. Choose Chain: forward;
6. Select Src. Address - input your desired IP;
7. Select tab “Action”;
8. Choose Action: Drop;
9. Click OK, and the desired IP address will be blocked by a firewall filter.

/ip firewall filter add chain=forward src-address=1.1.1.1 action=drop

Chain “input” limit the connection to the device itself. To limit traffic going through the device use chain “forward”. Please refer to the Building Your First Firewall