Allow public IP where you connecting from in your mikrotik firewall on top of all the rules

/ip firewall filter add chain=forward dst-address=X.X.X.X

This can help you weather your firewall is blocking connection or not.

up!!! up!!!

ask your ISP to change the route of your connection.

A short & sweet way is that create strong password for all sip account login & open whatever ports you required to. For port forwarding you can refer below link. https://forum.mikrotik.com/viewtopic.php?t=42331 Also for better security practise, you can add port scanner blocking & brute ...

As far I know your GS Wave by grand stream must have some username & password to login once you are connected to SIP port right?

Please correct me if I am wrong.

you can bock something by knowing the protocol or port it uses to connect or you can block everything and allow only some ports like port 80 http or 433 https etc. I know how to block particular protocol & port. what about if proxy traffic travel through HTTPS. And i do not like block 443 as mo...

Hello Guys,

How can I block proxy (Like bettenet, Ultrasurf and many other proxy clients extensions in google chrome) and VPN traffic in mikrotik?

Well No one can assure you that safe way of opening ports. It's all depends on security & your protection against it by considering your application. However once opening those port, if any kind of authentication required would be the safest way. You can always allow certain devices to connect t...

Port forwarding!!! search previous post how to do that.

Agree with sob.

Add interface & try to access from WAN.

You also need to add second rule if you want to get access from outside of your network.

You must need to configure a DNS server for it & point as you like.

And you will be able to resolve the issue something like this.

web1.example.com
web2.example.com
web3.example.com

Hi Kaltersia, try this below firewall nat rules. add action=dst-nat chain=dstnat dst-address=202.X.X.X dst-port=81 in-interface=ether1-gateway protocol=tcp to-addresses=192.168.5.2 to-ports=81 add action=dst-nat chain=dstnat dst-address=202.X.X.X dst-port=81 in-interface=ether1-gateway protocol=udp ...

Hi, Remove both of them and insert this mentioned rule & make specific changes if your IP & Subnet is differ. add action=masquerade chain=srcnat src-address=192.168.88.0/24 add action=dst-nat chain=dstnat dst-address=109.251.71.5 dst-port=8080 in-interface=ether1-gateway protocol=tcp to-addr...

Hi,

Port forwarding will resolve your issue simply.

I wonder why are you adding one extra route in your network.

I assume it's a simple router as you have mentioned modem/router in your question.

if you still want to keep it in the middle just turn of the DHCP off of your modem/router & configure your static ip in your mikrotik.

You can give a try by allowing "pop.gmail.com" & "smtp.gmail.com" & block rest everything else.

However google have a huge range of IP for it so i guess you can get a script which constantly update it to your address list.

You can try OpenDNS configured with Mikrotik. It's a great combination ever.

Hello, I'm new here and I hope you understand my English. :) My parents own a house with a few small and medium apartements. They rent these apartements for at least 6 months and the renter always asked for internet. So I did a research and found Mikrotik. I configured a RB750UP as a hotspot soluti...

As we see in the snapshot you are forwarding port of IIS with mis configuration. I assume that your website is running on port 80 & considering your wan interface is ether 1 you have not mentioned dst address which looping back & causing this issue. add action=dst-nat chain=dstnat dst-addres...

If you can share more details like

how do access your particular application in web browser & it's load the page.?

Hi all, first of all I beg your pardon for my english. I am quite new to RouterOS (6.37.1 on RB951Ui-2HnD) and the built-in firewall. I would like to implement some simple (?) rules to drop all internet traffic and ports and permit allow only some specific websites. Is it possible? I have searched ...