Page 1 of 1

Close All Ports Just Http and Yahoo Gmail and Hotmail

Posted: Wed Feb 24, 2010 9:33 am
by Mohe12
Hi Friends..........

I closed all ports by redirect 80 to 8080 and just opened port 80 in webproxy, but I cannot open yahoo,gmail, and hotmail.
the webpage ask me the email and password but when i enter it and ok the router dont let me to open my email.

Re: Close All Ports Just Http and Yahoo Gmail and Hotmail

Posted: Wed Feb 24, 2010 10:58 pm
by Feklar
That would be because those pages use https when they sign you in and not http. you will also need to allow https in order for it to work properly, port 443.

Re: Close All Ports Just Http and Yahoo Gmail and Hotmail

Posted: Thu Feb 25, 2010 11:38 am
by Mohe12
Thans for the reply
But I opened smtp, pop, ftp,and https, but still I have the problem .........

Re: Close All Ports Just Http and Yahoo Gmail and Hotmail

Posted: Thu Feb 25, 2010 10:56 pm
by Feklar
What exactly are you trying to accomplish? Depending on what you are doing, it will probably be much easier for you to drop all of the ports you don't want to use, and allow the ones you want to instead of using the redirect action.

Something like:
/ip firewall filter 
add chain=forward disabled=no action=accept in-interface=LAN protocol=tcp dst-port=21
add chain=forward disabled=no action=accept in-interface=LAN protocol=tcp dst-port=25
add chain=forward disabled=no action=accept in-interface=LAN protocol=tcp dst-port=80
add chain=forward disabled=no action=accept in-interface=LAN protocol=tcp dst-port=110
add chain=forward disabled=no action=accept in-interface=LAN protocol=tcp dst-port=443
add chain=forward disabled=no action=accept in-interface=LAN protocol=tcp dst-port=8080 
add chain=forward disabled=no action=drop in-interface=LAN
The first set of rule are there to specifically allow services that you want through the router, the last rule will drop everything else. This also restricts it to just one interface.

Re: Close All Ports Just Http and Yahoo Gmail and Hotmail

Posted: Fri Feb 26, 2010 5:17 am
by mahnet
This would still drop many smtp and pop accounts using port 587, 995 etc :)

Re: Close All Ports Just Http and Yahoo Gmail and Hotmail

Posted: Mon Mar 01, 2010 12:10 pm
by Mohe12
Thanks for your help, but it does not success just goole page would be open