hi,

I am using routerOS upgraded to 2.8.18. Configured the hotspot gateway by following exactly the guide Hotspot Step by step User Guide using DHCP-pool. Everything is working fine.

Now, I want to allow non-login user with temp hotspot ip to access a https server with a fix ip.

As a test to, I tried to use yahoo as if it is my fix ip server
/ip firewall mangle add dst-address=66.94.230.37/32 mark-flow=hs-auth

Then i try to surf to yahoo without login in to hotspot. It gives me a page could not be display. Can any one tell me what did i do wrong? very new to firewall. Please guide me step by step.

First thought:
Yahoo (for example http://www.yahoo.com) has a lot more than only ONE ip address (load balancing etc.) - so you probably should try this for something easier where you definitely KNOW the ip address...

Let me further detailed by testing environment.

internet hw router 10.5.6.1

1. mikrotik - 10.5.6.44/16
2. webserver - 10.5.6.25/16
3. client -WinXP

mikrotik n webserver n internet hw router on the same switch while client is peer to peer with mikrotik.

now instead of client login into hotspot i want it to be able to be able to surf to webserver 10.5.6.25/16

I did /ip mangle add dst-address=10.5.6.25/32 mark-flow=hs-auth

Testing
1. I did https://10.5.6.25/index.php but still get page could not be displayed.
2. I did http://www.yahoo.com , it brings me back to the login page.
3. I login hotspot and did https://10.5.6.25/index.php and saw my index.php page.

hmm... where did i went wrong? I suspect something to do with firewall.. but what?

Topic closed!

Please refer to the solution in topic "how to access to https server without login to hotspot"