Community discussions

MikroTik App
 
sankofa411
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 82
Joined: Wed Feb 16, 2005 11:42 pm
Contact:

firewall question?

Wed Mar 30, 2005 7:41 pm

Hi,

b4 I applied and filter rules I was able to use winbox as well as telnet from my local network into my router. After I applied this filter rules I am not able to use winbox nor telnet from my local network pc into my router. I have also setup maq. This is what I applied

/ip firewall rule input
add connection-state=invalid action=drop \
comment="Drop invalid connection packets"
add connection-state=established \
comment="Allow established connections"
add connection-state=related \
comment="Allow related connections"
add protocol=udp comment="Allow UDP connections"
add protocol=icmp comment="Allow ICMP messages"
add src-addr=68.57.*.*/22 \
comment="Allow access from 'trusted' network 68.57.*.*/22"
add action=drop log=yes \
comment="Reject and log everything else"

The 68.57.*.*/22 is the providers network. My local interface Ip is
192.168.111.*/24

Do I have to use my local network Ip instaed of my isp network?

Any help will be appreciated

ThX
 
pedja
Long time Member
Long time Member
Posts: 684
Joined: Sat Feb 26, 2005 5:37 am

Thu Mar 31, 2005 3:21 am

Have you tried to insert ...
add src-addr=192.168.111.*/24 \
comment="Allow access from 'trusted' network 192.168.111.*/24" 
...before the last drop all rule?
 
sankofa411
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 82
Joined: Wed Feb 16, 2005 11:42 pm
Contact:

Thu Mar 31, 2005 6:26 am

Yes I tried inserting the local ip but I was unable to telnet or winbox. I even changed the last rule to the one you suggested and still did not work. I don't know what to do next. Thank you for the advice pedja
 
Peace
newbie
Posts: 34
Joined: Wed Dec 15, 2004 11:04 am
Location: Latvia

Thu Mar 31, 2005 5:40 pm

try to put a range of you IP's
 
sankofa411
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 82
Joined: Wed Feb 16, 2005 11:42 pm
Contact:

Thu Mar 31, 2005 8:16 pm

Thank you guys. I reset all my router config and started from scratch. yes you were right pedja I replaced the 68.57.*.* with the 192.168.*.* and that fixed the problem.

ThX