Community discussions

MikroTik App
 
User avatar
birendersinghbudhwar
Member Candidate
Member Candidate
Topic Author
Posts: 117
Joined: Thu Oct 29, 2009 5:15 am
Location: Rohtak, HARYANA, INDIA
Contact:

how i can secure my tran proxy from internet users

Fri Feb 19, 2010 5:17 pm

Its very urgent

How can i secure my transparent proxy running on 8080 from internet users outside my mikrotik router some of are using my transparent proxy as open proxy were there is no wireless data flow but on ether1 it keep showing data transfer tx and rx.

Please give the solution as soon as possible.

Birender
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: how i can secure my tran proxy from internet users

Fri Feb 19, 2010 6:10 pm

/ip firewall add chain=input in-interface=Public protocol=tcp dst-port=8080 connection-state=new action=reject/drop
 
User avatar
birendersinghbudhwar
Member Candidate
Member Candidate
Topic Author
Posts: 117
Joined: Thu Oct 29, 2009 5:15 am
Location: Rohtak, HARYANA, INDIA
Contact:

Re: how i can secure my tran proxy from internet users

Sat Feb 20, 2010 5:09 am

/ip firewall add chain=input in-interface=Public protocol=tcp dst-port=8080 connection-state=new action=reject/drop
and how to stop access to socks server 5 on port 1080 when yesterday i seen the winbox i found in the firewall under connections that users are connected port 1080 so i stop the socks server.

for webproxy i used this

ip firewall add chain=input in-interface=Public protocol=tcp dst-port=8080 action=drop

is above given works or i have to set your perms .....

and also please mention how to block access to socks server from outsiders....

Birender
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: how i can secure my tran proxy from internet users

Sat Feb 20, 2010 5:21 pm

by that rule you are blocking access to selected tcp port. you can even block some ports by one rule:
/ip firewall add chain=input in-interface=Public protocol=tcp dst-port=1080,8080 connection-state=new action=drop

Who is online

Users browsing this forum: Bing [Bot], Exabot [Bot], GoogleOther [Bot], MikeKulls and 194 guests