Community discussions

MikroTik App
 
meth
newbie
Topic Author
Posts: 26
Joined: Tue Jan 17, 2006 7:24 pm
Location: Greece

Router firewalling and https problem

Thu Sep 19, 2013 7:00 pm

I am trying to find a solution with this configuration which for some reason don't work properly with some https sites like mail.google.com and with some banks as well
here is the firewall configuration

/ip firewall filter
add action=accept chain=input comment="Accept established connections" \
connection-state=established disabled=no
add action=accept chain=input comment="Accept related connections" \
connection-state=related disabled=no
add action=drop chain=input comment="Drop invalid connections" \
connection-state=invalid disabled=no
add action=accept chain=input comment=UDP disabled=no protocol=udp
add action=accept chain=input comment="Allow specific ports only" disabled=no \
dst-port=8291,1723,3333,3334,8080,443 protocol=tcp
add action=accept chain=input comment="Allow limited pings" disabled=no \
limit=50/5s,2 protocol=icmp
add action=drop chain=input comment="Drop excess pings" disabled=no protocol=\
icmp
add action=add-src-to-address-list address-list=blocked-addr \
address-list-timeout=1d48s chain=forward comment="DoS attack Prevention" \
connection-limit=100,32 disabled=no protocol=tcp
add action=tarpit chain=input connection-limit=3,32 disabled=no protocol=tcp \
src-address-list=blocked-addr
add action=drop chain=input comment="Block all other incoming ports" \
disabled=no protocol=tcp

any suggestions ?
 
Rudios
Forum Veteran
Forum Veteran
Posts: 973
Joined: Mon Mar 11, 2013 12:58 pm
Location: The Netherlands

Re: Router firewalling and https problem

Thu Sep 19, 2013 8:15 pm

Are these all your rules?
You posted only your input chain, no forward so no clue why websites do not work.
Last edited by Rudios on Thu Sep 19, 2013 11:59 pm, edited 1 time in total.
 
meth
newbie
Topic Author
Posts: 26
Joined: Tue Jan 17, 2006 7:24 pm
Location: Greece

Re: Router firewalling and https problem

Thu Sep 19, 2013 8:37 pm

Tnx Rudios for reply,
you mean do add only this one?

/ ip firewall filter
add chain=forward in-interface=Local out-interface=Local action=accept comment="allow traffic"
 
Rudios
Forum Veteran
Forum Veteran
Posts: 973
Joined: Mon Mar 11, 2013 12:58 pm
Location: The Netherlands

Re: Router firewalling and https problem

Fri Sep 20, 2013 12:01 am

No not really. I was surprised to see no forward chain. If your forward chain. indeed is empty, it makes no sense that some websites don't work. Maybe you can post your complete config for us to judge.
 
meth
newbie
Topic Author
Posts: 26
Joined: Tue Jan 17, 2006 7:24 pm
Location: Greece

Re: Router firewalling and https problem

Fri Sep 20, 2013 10:36 am

this is the complete firewall filter rules except if you need to post and nat and mangle rules as well.

Who is online

Users browsing this forum: Bing [Bot], m3das and 101 guests