blokada wszystkiego oprócz PPPoE na Mikrotiku

/interface bridge settings
 set use-ip-firewall=yes

/interface bridge filter
 add chain=forward comment="accept pppoe-discovery" mac-protocol=pppoe-discovery
 add chain=forward comment="accept pppoe-session" mac-protocol=pppoe
 add chain=forward comment="accept arp" mac-protocol=arp
 add action=drop chain=forward mac-protocol=ip out-interface=interfejs
 add action=drop chain=forward mac-protocol=ipv6 out-interface=interfejs