I also have a 951G-2HnD (Firmware 6.41.2 / packages 6.41.2) WLAN ist working from start but by wired connection my Samsung Serie 6 TV is not able to get an IP from the DHCP Server. Samsung TV has latest updates. I also made a full router reset with default configuration. Is the problem solved or is ...

Sorry, that's not working
I think the Mailserver can't answer my lan-client because of mangle rule -> pptp-out

Hi docmarius,
thank you for your answer. It's working!
But now I can't access my mailserver from my LAN (bridge 1) nor over the public IP.
That's clear because all the outgoing traffic of the mailserver is now dst-nat to the PPTP-out Interface.
How to harping that? Is that possible?

Hi, I hope somebody can help me with my problem. actual I have an cable modem on ethernet 1 and clients on bridge 1 (ethernet 2-4) are masqueraded against ethernet 1. Internet ist working so far. Now I want to install an mailserver on bridge 2 (ethernet 5) Therefore I have an VPN provider who provid...

Hi,
Now I added a default Route at the viscosity windows Client. Now I can ping the Mikrotik Router IP but not the Clients in the same net. Any idea what do do?

Hi, my openVPN Tunnel is working and stable. I'm accessing the tunnel via Viscosity on a Windows machine to the Server (Mikrotik RB951G-2HnD) via Internet. I can ping the OVPN Server 10.2.6.1 on the other side but I can't ping the LAN behind the Server 10.2.5.0/24. I think it's a routing problem. I ...

Forget vlan, is over-used.

For Hotspot use VirtualAP later.

Yes I would open a VirtualAP for Hotspot.
But without VLAN the Hotspot Network ist not separated from private lan.
Is overused negative when it's a good technique?
Could you tell me how to do it correctly?

Hello, I want to create a VLAN with LAN2, LAN3, LAN4, LAN5 and WLAN1 LAN1 is WAN and virtual WLAN should be VLAN2 in future. But first I have to create the private VLAN1 Until now I created a new Bridge with LAN2, LAN3, LAN4, LAN5 and WLAN1. then I add a VLAN and choose as Interface the new Bridge I...

I want to apologize. I scanned from a remote network. This network is behind a pfsense firewall (proxy).
So Nmap thought port 80 is open.
Sorry again!

subseven , port 80 takes "www" service. It has to be closed if you followed this post: You should consider disabling the www service for your wan port under IP -> Services: /ip service set www address=192.168.88.0/24 or even disable it completely: /ip service set www disabled=yes already ...

I put in all the rules but now not only port 80 is open (tcp). Now even port 53 (udp) is open

udp 53 is open because of:

Code: Select all

add chain=input protocol=udp action=accept comment=”Allow UDP”

Disable it if you need.

Yes I disabled it. But port 80 is still open. What service is still running?

thank you docmarius.
I already did this.

/ip firewall filter add chain=input protocol=icmp action=accept comment=”Allow Ping” add chain=forward protocol=icmp action=accept add chain=input connection-state=established action=accept comment=”Accept established connections” add chain=forward connection-state=established action=accept add cha...

I'm scanning from the wan-side from a different location.

I connected my new Mikrotik Router rb951g-2hnd (standard configuration) and made a portscan from wan to my router. Port 80 is alwas open (nmap portscanner) All the standard Firewall rules are activated and I even deactivated the web management service. Wich rule I have to make to block port 80? The ...