ako pise frito
Zadaj si do firewallu 2 pravidla. Zakazes komunikaciu z jednej siete (A) do druhej (B). Alebo pokial sa ti nechce vypisovat siete tak mozes zadat priamo porty. Malo by to vyzerat asi takto:
/ip firewall filter
add action=drop chain=forward comment="" disabled=no \
dst-address=192.168.10.0/24 src-address=192.168.9.0/24
add action=drop chain=forward comment="" disabled=no \
dst-address=192.168.9.0/24 src-address=192.168.10.0/24
ALEBO S INTERFACES
/ip firewall filter
add action=drop chain=forward disabled=no out-interface=ether1 \
in-interface=ether2
add action=drop chain=forward disabled=no out-interface=ether2 \
in-interface=ether1
musis ale dodrzat nazvy interfacov ako ich mas pomenovane ty. A potom pravidla zopakuj tolkokrat kolko potrebujes komunikacii medzy sietami blokovat.
