ocgltd
September 6, 2012, 2:32pm
1
Under linux I could setup iptables rules which affected all pptp users, by referencing the interface like pptp-*
Under RBOS I can no longer do so - I think. Does that mean I can only create filters for PPTP control based on their source address? That seems very risky!
Thanks
mrz
September 6, 2012, 3:22pm
2
you can add static pptp entries in “/interface pptp-server” menu and use those interfaces.
ocgltd
September 6, 2012, 5:45pm
3
but that means I would have to create one new interface for EACH user. Then, I would have to replicate the firewall rules for EACH interface.
Is there a way to reference all interfaces by prefix like pptp-*
otherwise I would have to now create one (or more) firewall rules to EACH interface (for EACH user).
ocgltd
September 6, 2012, 8:13pm
5
There’s no easy to add each user to the address list (road warrior scenario)…or perhaps you could be more specific (maybe Im missing something).
cbrown
September 7, 2012, 12:46am
6
There is an option in /ppp profile to add to address list.
http://wiki.mikrotik.com/wiki/Manual:PPP_AAA
ocgltd
September 7, 2012, 1:50am
7
OK - so the address list is associated with the profile, and the profile is associated with one or more users/secrets.
OK - thanks.