Basebox 5 - Wireless clients have no internet

RouterOS Wireless Networking
1

Hello!

I have a new Basebox 5 and am having a problem with the wireless clients not reaching the internet. The clients are smartphones.

I have experience with other mikrotik devices and so configured this basebox the same way. Only difference is that the clients have no internet.

Basebox can ping google.com.
Clients can ping Basebox
Clients cannot ping google.com

Since other devices I’ve used do not have Ether1 in the bridge, I tried the same setup without a bridge. No change in situation.

Any help would be appreciated.


/interface wireless
set [ find default-name=wlan1 ] band=5ghz-a/n channel-width=20/40mhz-ht-above \
    disabled=no ht-rxchains=0,1 ht-txchains=0,1 l2mtu=2290 mode=ap-bridge \
    ssid=wosync
/interface bridge
add admin-mac=E4:8D:8C:F1:C1:3E auto-mac=no name=bridge-local
/ip pool
add name=pool1 ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=pool1 disabled=no interface=bridge-local name=server1
/interface bridge port
add bridge=bridge-local interface=ether1
add bridge=bridge-local interface=wlan1
/ip address
add address=192.168.88.1/24 comment="default configuration" interface=\
    bridge-local network=192.168.88.0
add address=x.x.x.252/29 interface=ether1 network=x.x.x.248
/ip dhcp-server network
add address=192.168.88.0/24 dns-server=192.168.88.1 gateway=192.168.88.1
/ip dns
set servers=4.2.2.2,8.8.8.8
/ip firewall filter
add action=drop chain=input dst-port=53 in-interface=bridge-local protocol=\
    tcp
add action=drop chain=input dst-port=53 in-interface=bridge-local protocol=\
    udp
/ip firewall nat
add action=masquerade chain=srcnat out-interface=bridge-local
/ip route
add distance=1 gateway=x.x.x.249
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/romon port
add disabled=no
/system leds
set 0 interface=wlan1
/system routerboard settings
set cpu-frequency=600MHz protected-routerboot=disabled
2

remove these

add action=drop chain=input dst-port=53 in-interface=bridge-local protocol=
tcp
add action=drop chain=input dst-port=53 in-interface=bridge-local protocol=
udp

set allow-remote-requests=YES

/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4

3

Awesome! “set allow-remote-requests=YES” part fixed it. I tried that yesterday but had no improvement. Maybe tried to many things at once.

4

One last question. Those rules for dropping port 53 is supposed to protect from DNS attacks. The person that taught me said we needed them. Do you know why they break the wifi clients ability to get to the internet?

If I remove the use of the bridge and set all things from Bridge to wlan1, would that work with the rules? Because then I could get the rules to only affect ether1?

I’m a hydra of questions, thanks for the help!