Hello!

Periodically, i have strange problem. With clear, initial setup of my Mikrotik box (RB750G or RB20112011uas-2hnd-in), firewall on, NAT on, AP Home mode, on my WAN interface randomly seen internal IP from my home net. In this situation, because IP of my WAN interface locked on uplink switch port by my ISP, all traffic on WAN interface stopped immediately.

ROS ver. 5.24

Please, tell me, how to resolve this situation?

this may seem assinine, but make sure you havnt got the dhcp client on. ive seen 192.168.x.x addresses get assigned to my wan port periodically and that was the reason.

DHCP client is ON. My ISP assign IP through DHCP, I can not disable the DHCP client. But the IP, which are visible on the external interface already assigned to other devices on the internal network.

Did you ever find a solution for this. I am having the same problem.

Derek

Did you ever find a solution to this? I have the same problem on a RB750 with 5.2.3

Can you share your config, that makes it easier to find a possible problem

I put in a RB950 in an attempt to have different results. No change. I don't know how to list a config the way you might want to see it, but I can tell you how I setup the router. Its not much

Out of the box:
change pool range
dhcp server setup to match pool
delete the master-slave on the switch ports and make 2-5 independent ports
add port 2,3,4,5 to bridge-local
setup sntp to pool.ntp.org
setup WPA pass-phrase
make pptp client to another office

Thats it. Only firewall rule is the default masquerade rule and no mangle rules

Derek

I put in a RB950 in an attempt to have different results. No change. I don't know how to list a config the way you might want to see it, but I can tell you how I setup the router. Its not much

Out of the box:
change pool range
dhcp server setup to match pool
delete the master-slave on the switch ports and make 2-5 independent ports
add port 2,3,4,5 to bridge-local
setup sntp to pool.ntp.org
setup WPA pass-phrase
make pptp client to another office

Thats it. Only firewall rule is the default masquerade rule and no mangle rules

Derek

Do a /export compact from a command line and post it here.
Please do use the code2=ros sytnax around your posted code.

do you have set firewall filter rule to drop packets that are connection-state=invalid action=drop

as sometimes some applications send out RST TCP packet to close the connection, but some packets from the program sneak out (usually extra RST packets) RouterOS reacts on first packet, the rest are passed along as packet is not part of any connection.