Hi, I am using a RB760iGS running 7.16.2 packages and firmware. I have a LAN bridge configured on ether2&3 and the SFP socket subnet 172.16.23.0/24 I have a DMZ configured on ether4 subnet 172.16.24.0/28 I have a Raspberry pi running Network UPS Tools on 172.16.23.4:3493 and I am trying (without…

Detailed network diagram would help understand.

Hi, Network diagram attached. [network.jpg]

So you have servers on one subnet. a. are users coming to the servers from external? b. are users coming from same subnet as servers? c. are users coming from the other subnet (where pi is located) So no traffic ORIGINATED at severs, only responses to incoming requests?? ( except for NUT c…

Hi, The servers are web and mail. They have traffic from WAN and LAN going to DMZ. User PCs, NAS, and general LAN is where the pi is located. The only thing originated from the server would be outboud mail but all of that is working fine with dst-nat. NUT client is running on the server to monitor…

When you are willing to change your config to the optimal one bridge approach - all vlans associated with bridge, will be happy to assist. http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1

Thanks but I am looking for help on firewall rules not rebuilding the config. There seems to be many ways to configure the RouterOS and your answer seems a bit “my way is best” and misses the question completely.

Understood, no worries. Most are not picky like me. :slight_smile:

There seems to be many ways to configure the RouterOS and your answer seems a bit “my way is best” and misses the question completely. You misunderstand, @anav was polite whereas I will say “your way is worse and you’ve killed your performance”, see Layer2 misconfiguration - Bridges on a singl…

No offence was intended to anyone. @anav - thanks for the information regarding VLANs. It was my misunderstanding of the hardware I am using, i presumed each port was a separtate NIC instead of part of a switch. @ConradPino - thanks for pointing out in a more blunt and to the point way that my cur…

The party line: https://www.youtube.com/watch?v=a_8AV6vIDYQ https://www.youtube.com/shorts/LEjg54S_C0M https://www.youtube.com/watch?v=-kNHtlOb5n0&t=52s

DMZ Pinhole

RouterOS General

andy2605 January 15, 2025, 3:27pm 3

Hi,
Network diagram attached.