First create an interface list for all user/customer interfaces: //

Last, apply the bridge filter to the forward train to catch traffic moving through the bridge.

#this filter rule will block DHCP servers
/interface bridge filter
add action=drop chain=forward in-interface-list=customers ip-protocol=udp mac-protocol=ip src-port=67