Hi
I had a script written for 3.x OS that somehow automatically allowed for SSH/Winbox & Telnet from 10.0.0.0\24. However, when I load the script in 5.x OS, it doesn’t allow for any of that access except from on the same subnet. This makes it so I have to remote to a mahcine on that subnet, and then run terminal from there.
I set it up like this on one of the firewalls, but its still not allowing me from 10.0.0.13 IP address:
/ip service> set ssh address=10.0.0.0/8
/ip service> set telnet address=10.0.0.0/8
/ip service> set winbox address=10.0.0.0/8
All 3 are enabled.
Please help!
Thanks.
Are there any INPUT Firewall rules in place on the router ?
no. There aren’t. You need firewall rules for this? Is this new for 5.x? I don’t think I have them on my old ones.
It is common to have firewall rules on the Input Chain to drop access to the router. If you do not have any Input rules then your packets should be fine.
It might be useful to create a firewall entry on the Input chain with a source ip of 10.0.0.0/8 and action of log to log your access attempts. If they are reaching the router they should show in the log.
/ip firewall filter
add action=log chain=input disabled=no log-prefix=“” src-address=10.0.0.0/8