On 24 Jul 2019, at 18:44, Ian via 44Net
<44net(a)mailman.ampr.org> wrote:
Thank you Ruben,
So I can use tcpdump to see what adjustments I want/need to make and when I add an entry
to iptables and I monitor iptables and see the action I was expecting, ( in this case
dropped packets ) then my iptable entry has been correctly configured.
Regards,
Ian..
Quoting Ruben ON3RVH via 44Net <44net(a)mailman.ampr.org>rg>:
You will always see that in your tcpdumo as
tcpdump works on the kernel level and before the packet hits the firewall.
But this means that some of the users do not properly filter their neighbour discovery on
mikrotik and do not have sufficient firewall rules to prevent mikrotik neighbour
discovery
Ruben - ON3RVH
_________________________________________
44Net mailing list
44Net(a)mailman.ampr.org
https://mailman.ampr.org/mailman/listinfo/44net