CCR1036-12G-4S firewall and NAT rules

Hello,

I have been working with different models like RB1100Hx2, RB2011UAS and RB951G-2HnD and never had problems with firewall and NAT rules.

But with the CloudCore router I among other Things have problems with remote access through Winbox and also with portforwardings.

Starting with the Winbox problem (can’t connect to the router):
I have this firewall rule: add chain=input dst-port=8291 protocol=TCP this is tested with only this rule in the firewall.

When I try to connect with Winbox i see this in the logging
echo: firewall,info input: in:ether11 out:(none), src-mac 00:00:cd:20:f0:da, proto TCP (SYN), 62.242.xx.xx:29671->195.215.xx.xx:8291, len 52
echo: firewall,info input: in:ether11 out:(none), src-mac 00:00:cd:20:f0:da, proto TCP (SYN), 62.242.xx.xx:29671->195.215.xx.xx:8291, len 52
echo: firewall,info input: in:ether11 out:(none), src-mac 00:00:cd:20:f0:da, proto TCP (SYN), 62.242.xx.xx:29671->195.215.xx.xx:8291, len 48

Can somebody help me with what I’m missing or doing wrong?

Kind regards
Thomas

After many hours frustrations I found the error.

The router was using a wrong ip route, that was dynamically assigned. I deleted the route and added the right one and now it Works :slight_smile:

/Thomas