Firewall rules for blocking customer DHCP on mikrotik

Question

/interface bridge filter

add action=log chain=forward comment="log dhcp servers on 192.168/16" \

disabled=no dst-address=255.255.255.255/32 ip-protocol=udp log-prefix=\

"blocked dhcp server" mac-protocol=ip src-address=192.168.0.0/16 \

add action=drop chain=forward comment="drop dhcp servers on 192.168/16" \

src-port=67-68

ip src-address=192.168.0.0/16 src-port=67-68

disabled=no dst-address=255.255.255.255/32 ip-protocol=udp mac-protocol=\

/interface bridge settings

set use-ip-firewall=yes