How to block access to NAS for one computer on MikroTik?

Question

NAS

Hello. There is a local network 192.168.1.0/24, in which there is a NAS storage with an IP address of 192.168.1.100 set on it, it is necessary to close access to this storage to one computer with an IP address of 192.168.1.35 (the permanent address is issued by the dhcp server MikroTik). I go to IP->Firewall->Filter Rules and add the rule chain: forward, Src. Address: 192.168.1.35, Dst. Address: 192.168.1.100, well, Action: Drop, I raise the rule above all the others, but still the computer calmly goes to the NAS web-face (http:// 192.168.1.100) and opens in Windows Explorer (\\192.168.1.100 ) What am I doing wrong?

Answer 1

All wrong. The firewall describes the rules incoming from the WAN port. In your case, Mikrotik performs the function of a regular hub, the internal packets of which are not filtered in any way.
Set up IP blocking inside the NAS. Another topic is if you have a NAS on a specific port of Mikrotik hanging. Then already operate with specific ports, and such a focus will not work with addresses.