cylent
August 19, 2006, 12:25pm
1
i have this in my /ip – firewall – nat
3 ;;; allow access from outside
chain=dstnat dst-address=84.254.1xx.xx action=dst-nat
to-addresses=192.168.0.1 to-ports=0-65535
(IP hidden for security reasons)
however when i try to log in to my public ip from work winbox will not connect.
i can ping my router from work and thats about it.
cylent:
i have this in my /ip – firewall – nat
3 ;;; allow access from outside
chain=dstnat dst-address=84.254.1xx.xx action=dst-nat
to-addresses=192.168.0.1 to-ports=0-65535
(IP hidden for security reasons)
however when i try to log in to my public ip from work winbox will not connect.
i can ping my router from work and thats about it.
This’s my simple answer…
Yes, offcourse your public IP:84.254.1xx.xx already translate to other machine at IP:192.168.0.1 and all port, ‘winbox port’ is 8291, when like that condition possible make disappear ‘Mikrotik Login Webpage Interface’, or redirect to other one or webserver, etc…you can put translate for dst-address and dst-port to local one and to-ports=0-65535 than you can dissappear ‘Mikrotik Login Webpage Interface’ and do connect with WINBOX.
OR
my simple solution disabled that firewall just temporary, and reenabled back when finish, regards,
BalimoreDOTcom
---------------
cylent
August 19, 2006, 2:52pm
3
balimore:
cylent:
i have this in my /ip – firewall – nat
3 ;;; allow access from outside
chain=dstnat dst-address=84.254.1xx.xx action=dst-nat
to-addresses=192.168.0.1 to-ports=0-65535
(IP hidden for security reasons)
however when i try to log in to my public ip from work winbox will not connect.
i can ping my router from work and thats about it.
This’s my simple answer…
Yes, offcourse your public IP:84.254.1xx.xx already translate to other machine at IP:192.168.0.1 and all port, ‘winbox port’ is 8291, when like that condition possible make disappear ‘Mikrotik Login Webpage Interface’, or redirect to other one or webserver, etc…you can put translate for dst-address and dst-port to local one and to-ports=0-65535 than you can dissappear ‘Mikrotik Login Webpage Interface’ and do connect with WINBOX.
my simple solution disabled that firewall just temporary, and reenabled back when finish, regards,
BalimoreDOTcom
---------------
i am having a bit of trouble understand you. what firewall shall i disable?
cylent
August 19, 2006, 10:44pm
5
balimore:
no 3 firewall i mean
i dont have a firewall to disable and at work i cant disable anything
cylent:
i have this in my /ip -- firewall -- nat
3 ;;; allow access from outside
chain=dstnat dst-address=84.254.1xx.xx action=dst-nat
to-addresses=192.168.0.1 to-ports=0-65535
(IP hidden for security reasons)
however when i try to log in to my public ip from work winbox will not connect.
i can ping my router from work and thats about it.
Hai, Cylent
Why you tell not have firewall, but you wrote and posted on above at '/ip fi nat' and NAT code is number 3, that's correct yours?
on that code possible i mean
peace all
BalimoreDOTcom
cylent
August 20, 2006, 5:24am
7
i am afraid your english is not getting through to me and i am not understanding what you’re saying.
anybody want to translate or help?
balimore:
cylent:
i have this in my /ip -- firewall -- nat
3 ;;; allow access from outside
chain=dstnat dst-address=84.254.1xx.xx action=dst-nat
to-addresses=192.168.0.1 to-ports=0-65535
(IP hidden for security reasons)
however when i try to log in to my public ip from work winbox will not connect.
i can ping my router from work and thats about it.
Hai, Cylent
Why you tell not have firewall, but you wrote and posted on above at '/ip fi nat' and NAT code is number 3, that's correct yours?
on that code possible i mean
peace all
BalimoreDOTcom
Ok, cylent
so, i am so sorry in bad my an english.
i mean that NAT is correct, when you will connect to your router from outsite with that Public IP[84.254.1x.xxx] and disallow with WINBOX, cause that Public IP[destination] is already translate to 192.168.0.1 all ports included.
again so sorry
peace all
balimore:
cylent:
i have this in my /ip -- firewall -- nat
3 ;;; allow access from outside
chain=dstnat dst-address=84.254.1xx.xx action=dst-nat
to-addresses=192.168.0.1 to-ports=0-65535
(IP hidden for security reasons)
however when i try to log in to my public ip from work winbox will not connect.
i can ping my router from work and thats about it.
Hai, Cylent
Why you tell not have firewall, but you wrote and posted on above at '/ip fi nat' and NAT code is number 3, that's correct yours?
on that code possible i mean
peace all
BalimoreDOTcom
Ok, cylent
so, i am so sorry in bad my an english.
i mean that NAT is correct, when you will connect to your router from outsite with that Public IP[84.254.1x.xxx] and disallow with WINBOX, cause that Public IP[destination] is already translate to 192.168.0.1 all ports included.
again so sorry
peace all
i don’t why twice sending
999999
August 20, 2006, 11:08am
11
balimore…
can I contact u? I need some help with my MT configuration
I just open ur site (maybe ) and ur mobile …xxxx64 7174.
Is that right?
Thanks
NenadS
September 22, 2006, 9:29am
12
You can try this NAT rules
/ip firewall nat add chain=dstnat protocol=tcp dst-address=84.254.1xx.xx/32 dst-port=8291 \
action=dst-nat to-addresses=192.168.0.1 to-ports=8291
/ip firewall nat add chain=srcnat protocol=tcp src-address=192.168.0.1/32 action=src-nat \
to-addresses=84.254.1xx.xx