Community discussions

Search found 13 matches

by MT7
Sun Mar 09, 2014 7:40 pm
Forum: General
Topic: Known issues and bugs - a list
Replies: 283
Views: 111540

Re: Known issues and bugs - a list

Hardware: RB2011UAS-2HnD-IN Firmware: 3.12 RouterOS: 6.10 Problem description: Sometimes the igmp-proxy on my router seems stop working suddenly. When it happens LAN users can't watch IPTV. If I check the igmp-proxy window via winbox it became clean with no rules in it. To correct this problem I ha...
by MT7
Sat Jan 18, 2014 9:18 pm
Forum: RouterBOARD hardware
Topic: rb2011UiAS-RM grounding screw
Replies: 1
Views: 1402

Re: rb2011UiAS-RM grounding screw

IMHO yes but diameter of the grounding wire should be the same or bigger than live cable has (I assume that both cables are made of the same material eg. Cu, Al etc).
by MT7
Fri Jan 17, 2014 11:30 pm
Forum: Beginner Basics
Topic: Is my firewall setup ok?
Replies: 17
Views: 2623

Re: Is my firewall setup ok?

ether2 - static WAN ether7 - DHCP server LAN NTP client and IGMP proxy are enabled Now firewall setup looks like that. FILTER 0 ;;; drop invalid connections chain=input action=drop connection-state=invalid 1 ;;; drop invalid connections chain=forward action=drop connection-state=invalid 2 ;;; Drop t...
by MT7
Tue Dec 17, 2013 4:24 pm
Forum: Beginner Basics
Topic: Is my firewall setup ok?
Replies: 17
Views: 2623

Re: Is my firewall setup ok?

Look at the information on filters here:
I saw this page but examples are poorly explained there. If I need to block any initiated from outside connection to router and LAN how should I change config? And why say nothing about NAT?
by MT7
Tue Dec 17, 2013 4:02 pm
Forum: Beginner Basics
Topic: Is my firewall setup ok?
Replies: 17
Views: 2623

Re: Is my firewall setup ok?

The input chain only affects traffic to the router itself - not traffic forwarded through the router. Then why my IPTV don't work without adding two input rules as above? To make my IPTV working I added this two rules and IGMP-Proxy. Also i'm using NAT how traffic initiated from outside pass the NAT?
by MT7
Tue Dec 17, 2013 3:58 pm
Forum: Beginner Basics
Topic: Is my firewall setup ok?
Replies: 17
Views: 2623

Re: Is my firewall setup ok?

Example - If somebody on your ISP upstream network points traffic at your router for an RFC1918 address on your LAN then your router will pass that traffic.
How can it be if any inbound is set to drop on WAN port?
by MT7
Tue Dec 17, 2013 3:48 pm
Forum: Beginner Basics
Topic: Is my firewall setup ok?
Replies: 17
Views: 2623

Re: Is my firewall setup ok?

The original rules posted don't include any forward chain entries nor any connection state entries so it may "work" but certainly isn't secure and technically isn't really implementing a stateful packet inspection firewall. This simple config pass all network tests from pcflank.com. With this confi...
by MT7
Tue Dec 17, 2013 10:43 am
Forum: Beginner Basics
Topic: Is my firewall setup ok?
Replies: 17
Views: 2623

Re: Is my firewall setup ok?

Safe enough for what? That's hard to answer without knowing what your doing with it.
As I wrote earlier "Main purpose just to have internet and iptv on LAN computer."
by MT7
Mon Dec 16, 2013 11:10 pm
Forum: Beginner Basics
Topic: Is my firewall setup ok?
Replies: 17
Views: 2623

Re: Is my firewall setup ok?

Your original config is minimal, but should work.
Indeed it works but is it safe enough? Also with this config router localhost can't go to the WAN/LAN ping etc don't work.
by MT7
Mon Dec 16, 2013 9:18 pm
Forum: Beginner Basics
Topic: Is my firewall setup ok?
Replies: 17
Views: 2623

Re: Is my firewall setup ok?

I think the minimal protection has to look so: add chain=input protocol=icmp action=accept comment=”Allow Ping” add chain=forward protocol=icmp action=accept I don't need icmp initiated from wan add chain=input connection-state=established action=accept comment=”Accept established connections” add ...
by MT7
Mon Dec 16, 2013 4:38 pm
Forum: Beginner Basics
Topic: Is my firewall setup ok?
Replies: 17
Views: 2623

Re: Is my firewall setup ok?

Could someone comment the config above please? Main purpose just to have internet and iptv on LAN computer.
by MT7
Sun Dec 15, 2013 7:24 pm
Forum: Beginner Basics
Topic: Active/Blink LEDs on mikrotik
Replies: 10
Views: 9831

Re: Active/Blink LEDs on mikrotik

Agree leds are too bright especially the blue ones. Solved problem by attaching a piece of adhesive black tape to the router.
by MT7
Sun Dec 15, 2013 3:07 pm
Forum: Beginner Basics
Topic: Is my firewall setup ok?
Replies: 17
Views: 2623

Is my firewall setup ok?

FILTER 0 ;;; IPTV igmp chain=input action=accept protocol=igmp src-address=10.0.0.0/8 dst-address=224.0.0.0/4 in-interface=ether2 1 ;;; IPTV udp chain=input action=accept protocol=udp src-address=10.0.0.0/8 dst-address=224.0.0.0/4 in-interface=ether2 2 ;;; LAN and router protection from WAN chain=in...