FPT in local network

RouterOS General
1

Hello

Used in search but don’t find nothing what could help me, so i decide to try there, maybe some will be in good mod :slight_smile: and give me some tips.

I made FTP server in local its working fine, but in same time in firewall i have rule that drop all connections from outside, to turn of that rule now would be not very smart. And its will not help anyway cos i need make some NAT FTP server is on 192.168.0.10.

Question is what kind of rule i need make to allow all connections from outside to access my FTP server on ip address 192.168.0.10, and are its is safe? And if its not safe what else i must do to make it as much safe possible.

Thanks :slight_smile:

2

For active you need

[outbound] any local port - to - remote port 21
[inbound] remote port 20 - to - any local port

For passive

[outbound] any local port - to - remote port range 1024-65535
[inbound] remote port range 1024-65535 - to - any local port

But this will leave you with a wide range of open ports :slight_smile: Maybe Active FTP is enough?

also make sure to allow connections only to this one certain IP address. What about SFTP, is that not possible? It will be more secure in itself

3

If i will turn of the rule what block all connections from outside, and in same time make rule that redirect all connections to my one local ip 192.168.0.10

In what kind of problems i can get if i don’t do anything more.

Sry for this stupids questions, but i simple want be sure that i don’t screw up all before i make here some tests, cos i am not so good in all this MK things.

Thanks

4

there would be no use from this kind of setup :slight_smile: imagine - what would that rule block, if you would still want to redirect stuff? so it’s either allow or block. you can’t have both at the same time

you need to leave your good traffic alone, but block everything else. also block access to other devices, and from untrusted networks.

5

oki tnx Normis i understand now :slight_smile:

Now is other problem.

What filter rules and Nat i need make ?

So all connections from outside is redirected to this one local IP 192.168.0.10

If some could write or give example what he is using.

Thanks