I am using pppoe client with static ip, i can access my mikrotik router via WinBox remotly with static IP from some ISPs but from some ISPs i can't access
in firewall i allowed chain input for purt and action accept
What a dumb idea!
You are inviting hackers by allowing that.
Turn it off and use a VPN.
Use embedded Back to Home VPN for that (or any other VPN, but not direct access). Accessing WinBox remotely without VPN protection is insecure method.
for VPN i also need a public ip, but i can't ping that ip form somewhere
lets suppose i have to do that, bcz i want to access my mikrotik remotly from anywhere, now the time i can access it via winbox by some isps but not from every where
You even did not open a link. You don't need public IP for Back to Home.
If you can't access it from some ISPs ask that ISPs, or your ISP. If you are from country with a strict government Internet censorship, then everything may be.
Some ISPs rightly provide remedies for user errors...
When your knowledge is so limited as yours is, you really do not want to enable access to your router from anywhere!
First learn something about security and networking before trying that.
I have a public ip assigned to my mikrotik and can't ping that IP, where problem exist??
I know i have limited knowledge, that why i am here to learn and gain knowledge from experts like you
Is the same everytime:
Impossible to say without more information than you provide.
Is your "public address" in this range from 100.64.0.0 to 100.127.255.255 ? If so that's a CGNAT address and there are many other users sharing "your" address.
i think you got the point
but my public ip is like 103.163.x.x
and network/Gateway is 10.80.x.x
some time i can access it via win box some time it says connection refused
This seems like nonsense to me.
How could DIFFERENT ISPs always give out the same address???
no they don't
i have single static IP that is assigned to my mikrotik
and i am using that ip to access via winbox
What are you doing, are you kidding us?
What does remote access, like the topic title, have to do with the static LAN IP assigned to the device?
@rextended, I think you may need to read the original question again. The OP mentioned that he has a static IP, most likely a static public IP from his ISP. He has opened the Winbox port in the input chain. He can connect to Winbox from the WAN side using some ISPs, but with other ISPs the connection does not work.
For me this sounds like these ISPs do some kind of filtering. Maybe.
Aside from educational interest I would not allow remote Winbox access (not even IP restricted). As already mentioned, better use a VPN to connect from remote.
Maybe, you can run packet sniffer on the router, to check if it receives packets when you try to connect?
If not, that means that ISP blocks such connections.
But anyway, you should better use VPN for such connections.
it always says connection refused i tried to use port 8291,8295 and 1001
but some time
i can access it and some time not
@infabo
Different ISPs and same public IP?
Probably the poor translation and the lack of punctuation contributed to everything.
So the first thing I wrote remains correct...
Other ISPs, like I already do, prevent contacting remote Mikrotik devices on standard ports.