Thank you for the reply. Can you provide details on how to set that up?

Best regards,

James

Hello, I want to set up a tunnel between two networks and have my mikrotik router route the traffic. I want to setup a NAT rule with dstnat be the IP address of my router and set the action to send traffic to a specifc internal IP. However I only want to accept traffic from a specific public IP addr...

Thank you, Tom. This worked perfectly. Connected via serial, ran 'setup', gave the routerboard an IP, connected to RB with winbox, ftp'd backup file from another RB up to the new RB, and restored using winbox. I have one more question, or maybe two; where can I find a mirror so I can upgrade (runnin...

Hello,

I have a Router board that has not yet been set up. When connecting with Hyper Terminal via the com port, what settings are needed? Also, could someone direct me to the URL on how to upload a mikrotik backup file to the device.

Many thanks in advance.

~James

Now that I am looking at this again, I see my mistake, made the correction, and now it works. However, can anyone tell me why I needed both of the entries below to get the port open? chain=dstnat dst-address=XXX.XXX.XXX.XXX protocol=tcp dst-port=80 action=dst-nat to-addresses=10.0.0.2 to-ports=0-655...

src-nat ? You are changing outbound ports, not inbound. You want to open it up inbound to your server ? If so it should be dst-nat just like the first one. Sam This is how have all the other NAT ports opened. I always needed two. For example; ;;; chain=dstnat dst-address=XXX.XXX.XXX.XXX protocol=tc...

Hello, I have identical setting for two ports I need open, 993 & 465, however the 465 port stays filtered. Both ports are open internally 21 ;;; SSL - IMAP ports chain=dstnat dst-address=XXX.XXX.XXX.XXX protocol=tcp dst-port=993 action=dst-nat to-addresses=192.xxx.xx.xx to-ports=993 22 chain=src...

Hello, I currently have a subnet of 192.168.20.0/24 on the router and I'd like to span my networks dhcp pool, hosted on another server, from 20.0 to 21.0, (192.168.20.0/23) however I am not sure how to modify this in mikrotik and still have access to the mikrotik server. If a dhcp address of .21.x i...

Hello,

How can I bock 'Remote Desktop' connections from internal users accessing external RD?

Thank you,

~James

Hello, I am try to do port forwarding, however without much luck. Using MikroTik RouterOS 2.9.11 and with most rules setup in the NAT section I can't set up a rule that works for example, using port 1022 on a public address (on the router) to route to port 22 on an internal address (on an internal s...

Hello,

I am trying to redirect port 80 for a single public address to port 8080 on an internal address, but I am not having much luck. The internal server is listening on 8080.

How do I set this up correctly?

Many thanks,

~James

Hello, I want to drop packets from a specific public IP address and a specific range of addresses, however, I don't think I set it up correctly. I added, in Filter Rules, an Action to Drop on Chain/Input and Src with the address I want to drop packets from. When I view the Packets & Bytes it sho...

Version 2.9.11

Going to IP -> Services and enabling www got Winbox to connect again.

Thank you for your help.

Best regards,

James

Thanks for the repy. Using version 2.9 and rebooted it several times to no avail. Also cannot connect via http://xxx.xxx.xxx.xx to get download the Winbox. Either the server is not running or the firewall is blocking requests internally, which shouldn't be happening. Any ideas on how to start the we...

Hello,

The router was setup through Winbox and everything has been running well for three weeks, however today when I use Winbox to connect I get a connection refused error/ web server is not running. I can ssh to it. From within an ssh session, where can I start the web server?

Thank you,

James

Hello, Thank you for all of your replies. Very helpful. On a similar topic, how can I drop 'port-scanning' packets? I had saw a fierwall filter that creats a list of any address that attempts to port-scan the router and a second chain that drop all packets from any address contained within that list...

Hello, I had to rebuild my router and after many searches through the documention I can't find the useful howto on securing the router. I found it once, but not again. In the howto I saw, it had a section that you could cut & paste the info into the router terminal (very useful) and had two chai...

Thank you for your reply. I had used those NAT rules from earlier advice, although, as of my last posting, I added the dst-port numbers to the first chain and src-port numbers to the second chain. Port 443 is now passing through the router. All is well. I do have another question, however; how would...

Hello, Although the NAT rules for routing port 80 through the router are fine, the same rules using port 443 do not route through. chain=dstnat dst-address=xxx.xxx.xxx.xx protocol=tcp action=dst-nat to-addresses=192.168.0.2 to-ports=80 chain=srcnat src-address=192.168.0.2 protocol=tcp action=src-nat...

Hello,

Thank you for pointing me in the right direction. There error was my mistake.

I left the gateway of the inside target machine pointing to the old router. Changed that and everything works perfectly.

Thank you again for sending me the link. The problem was solved.

Regards,

~James

Thank you for your reply. Followed the instructions and there is no reply from the public side. For example, here are my rules; 2 chain=dstnat dst-address=10.0.0.5 action=dst-nat to-addresses=192.168.0.5 to-ports=20-21 3 chain=srcnat src-address=192.168.0.5 action=src-nat to-addresses=10.0.0.5 to-po...

Hello, The Mikrotik router is set up and works great. However, I am having a terrible time forwarding public addresses and ports to internal addresses and the corresponding ports. My public NIC has multiple addresses. For example, I want to forward html traffic from public address 10.0.0.20, port 80...

Hello, How can I forward specific ports from the outside, from an address on the Public nic, to an internal address on the Local network? For example, all ftp traffic to public address 10.0.0.2 (an IP address on the Public nic) on ports 20 & 21 are routed to the internal address of 192.168.0.2 (...