How it could be a bug if you are running out of the ip addresses? Because I tried all the configuration possible but no luck, I cant get it to work. I have asked many times, I posted the command lines I used but no answer. and I see some other people have the same issue. How can I get it to work? i...

So we all agree this is a bug on MT but no action were taken from MT at all?
Im expecting MT to jump in, please!

Hi all,

Any update on this?
Still cant make it work.
Does anyone have this rule set?

Why you make 4 rules?
Need just one rule for NAT:
/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-out (or ethernet-out)

At first I created only the masquerade then one rule, the two and then all of them but no luck.

Also, it looks like when it was enabled one of the admin guys couldnt access the Winbox. ??
EDIT: Afirmative, I cant access the Winbox if the nat above is enabled.

Enable UPNP, it should solve the problem.

MRZ, its enabled:

ROUTER_CENTRAL] /ip upnp> print
enabled: yes
allow-disable-external-interface: no
show-dummy-rule: no


Should I enable the dummy-rule?

Please tell me - your clients talks about errors in Destiny last time?
I have same network - over 30-40 PS4 over NAT.

diablothebest, not sure about the exact msg as I didnt ask. I guess its the generical Could not access network message.

This is my NAT, still cant join the PSN: What's wrong? EDIT: Its disabled, I know... It didnt work anyway so I disabled it. 61 X ;;; Mannini - DST-TCP chain=dstnat action=dst-nat to-addresses=62.62.62.106 to-ports=0-65535 protocol=tcp dst-address=190.104.246.XXX (Routers WAN Port NOT GW IP) 62 X ;;;...

Any suggestions??

Hi all, I have been reading through the forum, still dont find the answer... I manage a network of about 500 clients. I have 1 public IP for the Router and some public IPs for those who requested access to the PSN. The thing is that I ran out of Public IPs, so im wondering if there is any work aroun...

Hi,

Any update about this?

Congratulations Mr. Poirot :-) It's time to catch next one .... Hahahaha!!!! thanks BartoszP!! Well, I now have about 100 IPs (external) using this ports.  I want to block them without blocking our internal users. Could I use this two rules to achieve such security? /ip firewall filter add chain=fo...

I think I found something,
I now have this IP in the address-list I created for catching the spammers:
557 D SPAMMERS                           123.129.65.102  

This IP is from outside and its known in many block lists. 

what about these three list? OpenBL.org, Spamhaus and dshield.
Should I use them?

I removed that rule as i had no results, i guess it wast the right "chain". I then added this two rules and I have some outcome now... 15   ;;; SPAMERS      chain=output action=add-src-to-address-list protocol=tcp address-list=""       address-list-timeout=3h dst-port=25,110,465  16   ;;; SPAMERS   ...

My mistake ... easy to fix if someone is following this thread add chain=output protocol=tcp dst-port=25,110,465...and_other+ports... action=add-src-to-address-list comment="add src smtp" add chain=forward protocol=tcp dst-port=25,110,465...and_other+ports... action=add-src-to-address-list comment=...

Great thank you all for helping on this matter!!!!
I'll be posting outcome soon.

Hi guys, Is this the rule I need? Of course I'll then need to evaluate the address and take action. Thank you alot!! add chain=tcp protocol=tcp dst-port=25 action=add-src-to-address-list \   comment="add src smtp"  add chain=tcp protocol=tcp dst-port=465 action=add-src-to-address-list \   comment="a...

Where do you have spammers address list from ? How this list looks like ? If you have such list you can use as it is described in this thread http://forum.mikrotik.com/viewtopic.php?t=98804 Hi  BartoszP, thanks for your prompt response. Thats the thing. I dont have such list. I manage a network of ...

Hi,

I need to block those ip making email spam for "MikroTik RouterOS 6.12".
Can anyone help me create this rule?
Thanks in advance!

Best regards,