/ip dhcp-server alert
add disabled=no interface=ether4_LAN2 on-alert=":local CurrentTime [/system cloc\
    k get time]; \r\
    \n:local hostname [/system identity get name] \r\
    \n:global date [/system clock get date] \r\
    \n:local int \"\$interface\" \r\
    \n:local addr \"\$address\" \r\
    \n:local mac \$\"mac-address\" \r\
    \n:local dh\r\
    \n\r\
    \n/ip firewall filter\r\
    \nadd action=drop chain=forward comment=\"DHCP INTRUSO BLOQUEADO\" src-mac-a\
    ddress=\$\"mac-address\" "