It operates at L2 but can look inside the Ethernet frame and see L3 (IP) and L4 (TCP/UDP) headers, giving the ability to match on those also. Here is the documentation page on bridge firewall:what the heck are IP-based filters doing there?
?https://help.mikrotik.com/docs/spaces/R ... geFirewall
Remember, these OSI layers are like onion peel or Russian doll. L2 is the outermost before it gets to physical layer, so if you have the L2 frame, you can unwrap it and look inside.
Statistics: Posted by anserk — Sat Apr 05, 2025 7:44 pm