Hi everybody.
I have a network setup like this:
I have a network of 192.168.1.1/24 for all users in my office.
i have few public ip addresses that are assigned to particular server.
example my sip server has an ip address ie. 12.12.12.111 (which is a windows server)
how can I put a firewall in mikrotik that only certain public ip addresses are allowed to connect to my sip server (all local > 192.168.1.1/24) and a couple of out of country ip addresses) all other attempts to connect to my sip server should be blocked ( at least on ports 5060)
Re: firewall
Add firewall rules that filter traffic in the 'forward' chain (traffic through the router), based on destination and source IP addresses, and protocols and ports. Below an example.
Code: Select all
/ip firewall filter
add chain=forward dst-address=12.12.12.111 action=jump jump-target=SIP-server comment="all traffic to SIP server is processed in the SIP-server custom chain"
add chain=SIP-server src-address=1.1.1.1 action=accept comment="allow all traffic from 1.1.1.1"
add chain=SIP-server src-address=2.2.2.2 protocol=udp dst-port=5060 action="allow udp/5060 from 2.2.2.2"
add chain=SIP-server action=drop comment="drop all other access to SIP server"
Who is online
Users browsing this forum: No registered users and 30 guests