NKLUG Группа пользователей Linux, *NIX Новой Каховки

Сперва создаем и настраиваем мост:
Создаем мост:
/interface bridge
add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes comment="" disabled=no forward-delay=15s l2mtu=1524 \
max-message-age=20s mtu=1500 name=bridge1 priority=0x8000 protocol-mode=rstp transmit-hold-count=6
Параметры моста:
/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-pppoe=no use-ip-firewall-for-vlan=no

Добавляем порты:
/interface bridge port
add bridge=bridge1 comment="" disabled=no edge=auto external-fdb=auto horizon=none interface=ether1 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge1 comment="" disabled=no edge=auto external-fdb=auto horizon=none interface=ether2 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge1 comment="" disabled=no edge=auto external-fdb=auto horizon=none interface=ether3 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge1 comment="" disabled=no edge=auto external-fdb=auto horizon=none interface=ether4 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge1 comment="" disabled=no edge=auto external-fdb=auto horizon=none interface=ether5 path-cost=10 point-to-point=auto priority=0x80

В моей сети мультикаст не используется поэтому -
/interface bridge filter
add action=drop chain=forward comment="" disabled=no packet-type=multicast

Опредяляем разрешенные сети, которые будем пропускать:
/ip firewall address-list
add address=10.0.1.0/24 comment="" disabled=no list=MyNetwork
add address=10.0.2.0/24 comment="" disabled=no list=MyNetwork

И собственно сами правила:
/ip firewall filter
add action=accept chain=forward comment="" disabled=no in-bridge-port=ether2 out-bridge-port=ether1 src-address-list=MyNetwork
add action=accept chain=forward comment="" disabled=no in-bridge-port=ether3 out-bridge-port=ether1 src-address-list=MyNetwork
add action=accept chain=forward comment="" disabled=no in-bridge-port=ether4 out-bridge-port=ether1 src-address-list=MyNetwork
add action=accept chain=forward comment="" disabled=no in-bridge-port=ether5 out-bridge-port=ether1 src-address-list=MyNetwork
add action=accept chain=forward comment="" disabled=no dst-address-list=MyNetwork in-bridge-port=ether1
add action=drop chain=forward comment="" disabled=no

P.S. При использование RB-750G можно воспользоваться советом - Forum.mikrotik.com
Для 750 такой вариант не подойдет, т.к. он не поддерживает правила в режиме ethernet switch