Community discussions

MikroTik App
 
evilheart
newbie
Topic Author
Posts: 47
Joined: Thu Jul 02, 2015 9:41 pm

Socks

Thu Aug 25, 2016 8:19 pm

how to make only 1 IP can access my socks other all IP block

explain my ip = 10.10.10.10

and all ip cant Access my socks


how to i make it?
 
Sob
Forum Guru
Forum Guru
Posts: 9188
Joined: Mon Apr 20, 2009 9:11 pm

Re: Socks

Thu Aug 25, 2016 9:24 pm

There's IP->Socks->Access in WinBox or "/ip socks access" in CLI, where you can set your access rules. So try to add one accept rule with source address 10.10.10.10 and after that deny rule without parameters and it should do what you need. Or you can use firewall to allow access to socks port to only 10.10.10.10 and block the rest.
 
evilheart
newbie
Topic Author
Posts: 47
Joined: Thu Jul 02, 2015 9:41 pm

Re: Socks

Thu Aug 25, 2016 10:24 pm

Sob can you give me firewall script ... all sock port deny and only 10.10.10.1 allow use socks...
 
Sob
Forum Guru
Forum Guru
Posts: 9188
Joined: Mon Apr 20, 2009 9:11 pm

Re: Socks

Thu Aug 25, 2016 11:00 pm

It's simple:
/ip firewall filter
add action=accept chain=input dst-port=1080 protocol=tcp src-address=10.10.10.1
add action=drop chain=input dst-port=1080 protocol=tcp
 
evilheart
newbie
Topic Author
Posts: 47
Joined: Thu Jul 02, 2015 9:41 pm

Re: Socks

Thu Aug 25, 2016 11:12 pm

how to add more ip here?

like 10.10.10.1 and 20.20.20.1
 
Sob
Forum Guru
Forum Guru
Posts: 9188
Joined: Mon Apr 20, 2009 9:11 pm

Re: Socks

Thu Aug 25, 2016 11:56 pm

Use address list:
/ip firewall address-list
add address=10.10.10.1 list=allow-socks
add address=20.20.20.1 list=allow-socks
/ip firewall filter
add action=accept chain=input dst-port=1080 protocol=tcp src-address-list=allow-socks
add action=drop chain=input dst-port=1080 protocol=tcp
 
evilheart
newbie
Topic Author
Posts: 47
Joined: Thu Jul 02, 2015 9:41 pm

Re: Socks

Fri Aug 26, 2016 8:12 am

Its working Sob Thanks you So Much...:)
 
evilheart
newbie
Topic Author
Posts: 47
Joined: Thu Jul 02, 2015 9:41 pm

Re: Socks

Mon Oct 10, 2016 10:35 am

my ip randam chg ip dynamic
for exp
11.11.56.12
if add 11.11* work?
 
Sob
Forum Guru
Forum Guru
Posts: 9188
Joined: Mon Apr 20, 2009 9:11 pm

Re: Socks

Mon Oct 10, 2016 3:05 pm

You need something like this as address:

11.11.0.0/16 - allows any 11.11.x.x
11.11.56.0/24 - allows any 11.11.56.x

You should use as small subnet as possible, because you don't want other people using your socks server.
 
evilheart
newbie
Topic Author
Posts: 47
Joined: Thu Jul 02, 2015 9:41 pm

Re: Socks

Tue Oct 11, 2016 12:11 am

working Sob Thanks you so much