hi guys
i have problem in mikrotik firewall
are my rules correct ?
/ip firewall filter
aadd chain=forward comment=Web Accept disabled=no dst-port=443,80 protocol=tcp
add chain=forward comment="DNS Accept" disabled=no dst-port=53 protocol=udp
add chain=forward comment="ICMP Accept" disabled=no protocol=icmp
add action=drop chain=forward comment="Drop All" disabled=no
i did that but it doesn't work and i cant access to web
Re: problem in firewall rules
You have to masquerade your network.
Code: Select all
ip firewall nat add chain=srcnat action=masquerade
Re: problem in firewall rules
WRONG!! never, NEVER forget out-interface on NAT rule, it is such an annoying mistake.You have to masquerade your network.
Code: Select allip firewall nat add chain=srcnat action=masquerade
Code: Select all
ip firewall nat add chain=srcnat action=masquerade out-interface=<public_interface> Re: problem in firewall rules
Ah, sorry. I see now that i forgot it. Thanks for correcting.WRONG!! never, NEVER forget out-interface on NAT rule, it is such an annoying mistake.You have to masquerade your network.
Code: Select allip firewall nat add chain=srcnat action=masquerade
Code: Select allip firewall nat add chain=srcnat action=masquerade out-interface=<public_interface>
-
-
moradivahid
just joined
- Posts: 5
- Joined:
Re: problem in firewall rules
I did
but it doesn't work
but it doesn't work
Re: problem in firewall rules
new terminal
/export
replace last 2 numbers in IPs with xxx.xxx, blank out all passwords, and paste it all here.
/export
replace last 2 numbers in IPs with xxx.xxx, blank out all passwords, and paste it all here.
-
-
moradivahid
just joined
- Posts: 5
- Joined:
Re: problem in firewall rules
Thanks
I just have problem about these rules
Did you test that rules in mikrotik new version ?
whan i test in version 5.26 its ok but in 6.33 no
I just have problem about these rules
Did you test that rules in mikrotik new version ?
whan i test in version 5.26 its ok but in 6.33 no
Re: problem in firewall rules
/ip firewall filter
add action=drop chain=Connection-State comment="Drop Invalid Connection" connection-state=invalid
add chain=Connection-State comment="Allow Established Connection" connection-state=established
add chain=Connection-State comment="Allow Related Connection" connection-state=related
Ensure they are above all the rules you have created.
Regards
add action=drop chain=Connection-State comment="Drop Invalid Connection" connection-state=invalid
add chain=Connection-State comment="Allow Established Connection" connection-state=established
add chain=Connection-State comment="Allow Related Connection" connection-state=related
Ensure they are above all the rules you have created.
Regards
Re: problem in firewall rules
Thanks
I just have problem about these rules
Did you test that rules in mikrotik new version ?
whan i test in version 5.26 its ok but in 6.33 no
easiest way is to reset the router and get the newest version of default configuration.
you will even have Fasttrack enabled by default./system reset-configuration