Myron
September 15, 2010, 12:26am
1
hey guys i have a question let say i have 3 ether ports in my rb and i have my rules settings in firewalls ex. ether1=isp ether2=local ether3=hotspot, now it is possible the ether3=hotspot is excemted in firewall only the ether2=local has rules in firewall?
thanks
fewi
September 15, 2010, 1:35am
2
Yes. The easiest way is probably to put a rule at the top that accepts all traffic in and out ether3.
Myron
September 15, 2010, 1:53am
3
ahhhh fewi can you please give some little bit example
thanks fewi
fewi
September 15, 2010, 3:33am
4
Above the rules you already have, put
/ip firewall filter
add chain=prerouting in-interface=ether3 action=accept
add chain=forward out-interface=ether3 action=accept
Myron
September 15, 2010, 4:54am
5
fewi:
Above the rules you already have, put
/ip firewall filter
add chain=prerouting in-interface=ether3 action=accept
add chain=forward out-interface=ether3 action=accept
hello fewi in ip/filter theres is no prerouting in chain correct me if i mistaken
/ip firewall filter
add chain=prerouting in-interface=ether3 action=accept
add chain=forward out-interface=ether3 action=accept
thanks fewi
fewi:
Above the rules you already have, put
/ip firewall filter
add chain=prerouting in-interface=ether3 action=accept
add chain=forward out-interface=ether3 action=accept
It should be:
/ip firewall filter
add chain=forward in-interface=ether3 action=accept
add chain=forward out-interface=ether3 action=accept
I’m sure this was fewi’s thought, but the keyboard didn’t agree
Myron
September 15, 2010, 7:31am
7
dssmiktik:
fewi:
Above the rules you already have, put
/ip firewall filter
add chain=prerouting in-interface=ether3 action=accept
add chain=forward out-interface=ether3 action=accept
It should be:
/ip firewall filter
add chain=forward in-interface=ether3 action=accept
add chain=forward out-interface=ether3 action=accept
I’m sure this was fewi’s thought, but the keyboard didn’t agree
thanks both you guys it work