OPEN PROXY

red_hat1614 · Mon Nov 20, 2006 2:25 pm

Hi I am using Mikrotik 2.9 and doing masqrade to my lan ips and whats the problem is my static ip is always being blocked in spam and i am getting mails that my mikrotik is an open proxy. please help me in this regard

freebird · Mon Nov 20, 2006 3:40 pm

Add a firewall rule that allows access to proxy only from internal lan:

/ip firewall filter add chain=input src-address=!192.168.168.0/24 \ 
protocol=tcp src-port=1024-65535 dst-port=3128 action=drop \ 
comment="" disabled=no

example is for lan network = 192.168.168.0/24 and proxy standard
port = 3128

seandsl
--