Block Internet for a Specific Device

This guide describes the process of configuring a network to restrict public internet access while allowing local network access for devices connected via LAN or WiFi.

Steps to Configure Access

  1. Open Winbox Application

    • Launch the Winbox application to access your network configurations.

  2. Create an Address List

    • Navigate to IP > Firewall > Address List.
    • Click the + symbol to create a new address list.
    • Configure the new address list as per the desired settings. Refer to the example setup in the image below:

    AddressListSetup

  3. Add a Firewall Rule

    • After creating the address list, a firewall rule needs to be set up to enforce the desired network access policies.
    • Go to the Firewall Rules section in Winbox and proceed with the following steps:

    Firewall Rule Configuration

    1. Click the + symbol to add a new rule.
    2. Configure the rule to restrict or allow access based on the specified address list.

general

advanced

By default, It got access to the local network and packet going to public network will be dropped and packet routed to local network will be route as usual.

action By following these steps, you will effectively block public internet access while allowing devices on the LAN or WiFi to access the local network.

Note: Ensure you review and verify all settings to avoid unintended network access issues.

Blocking Internet Access for Connected Devices

To restrict internet access for a specific device that is already connected to the network, follow these steps:

  1. Locate the Device’s Lease

    • Go to IP > DHCP > Leases in the Winbox application.
    • Identify the device by its MAC address or IP address.

  2. Edit the Device Lease

    • Click on the device lease to open its configuration settings.
    • Add the IP address of the selected device to your Address List.

By adding the device’s IP address to the Address List, you will block its internet access while keeping it connected to the local network.

block_adress

Note: Ensure that only the intended devices are included in the Address List to avoid accidental access restrictions.