p.s. :

old router is PIII 500 Mhz, 2.8 RouterOS and it deals with the subscribers without problem

Hello! [admin@MikroTik] > ip firewall nat print all stats Flags: X - disabled, I - invalid, D - dynamic # CHAIN ACTION BYTES PACKETS 0 D dstnat jump 807784 7240 1 D hotspot jump 807784 7240 2 D hotspot redirect 5776 95 3 D hotspot redirect 0 0 4 D hotspot redirect 320 7 5 D hotspot redirect 0 0 6 D ...

Hello! I set no address pool on interface hotspot, but i see on the Host table, that 1:1 NAT is happening.... Flags: S - static, H - DHCP, D - dynamic, A - authorized, P - bypassed # MAC-ADDRESS ADDRESS TO-ADDRESS SERVER IDLE-TIMEOUT 0 DA 00:0A:E6:CA:D2:E1 10.0.0.2 10.0.0.2 hotspot1 1 HA 00:40:D0:87...

Hello!

So, when Hotspot is running, i should see dynamic rules in the Mangle table? I see nothing.

I am sure, that firewall rules should be quite different, but i think that i should see something passes over the masquarade rule. And nothing does....

Thanks for help:Gabor

Hello! Sorry for disturbing again, but this is the third day and i just cant solve a problem. We have a 2.8.26 Hotspot+NAT Masquarade Router with DHCP. Please help! We want to upgrade it to 2.9 with new hardware. On the old router. We have the following scenario: side:local 10.0.0.0/16 - all users 1...

Hello! If i have an MT router with for example 2 interfaces, and i want that users behind interface one: without public ip: pass with nat (hotspot auth) with public ip: pass with their own ip the ip of the NAT (interface two) should be at the same domain as the customers fixed ip i don want to use b...

i have the following case: i have a subnet /24 and i connect to a switched network, where my gateway is. It is from the same /24 adress space. Because i dont connect directly to the router, but the switched network my network easily causes porblems on the switched one. I'd like to put a ROUTER betwe...

Hello!

I am interested too. The fare should be less expensive :)

Krisz! Írjál nekem légyszives a gabor.losonci kukac gmail.com -ra!
Szeretném felvenni veled a kapcsolatot, én is Mikrotik felhasználó vagyok.

üdv : G [/i]

Hi! It's me again with Bridge Firewall... What didnt worked in 2.8, now works fine on 2.9! But now i have a nother problem. I have made the ACCEPT rules, and after the DROP all rule. But now i cant let the host to ping itself. When it gets his address from the DHCP server, after the handshake, the D...

i have changed the order but it still not works
so please tell me what is the depth of the inspection by bridge firewall? in ethernet level? or arp level?
arp is a boradcast message, but my goal is that nobody could send an arp request to 10.0.0.0 , except to two stations, .1 and .2 is it possible?

Hello!

I have looked for the things you wrote, but its still not working...
When it "worked" it was because of my PC's ARP table :(
So could you tell me how is the bridge firewall works?
What is the depth it is exploreing ethernet packets? Or ARP packets?
Thanks a lot: Gabor

Hello! I am interested how does the Bridge Firewall works. I have read the documentation, but theres still some questions remaining. If there is for example 6 interface, and i want that 1,2,3,4,5 interfaces should not send ARP request to interface 6 except to 10.0.0.1 and 10.0.0.2 adresses. How shou...