hotspot blocks msn, skype and others??

i´ve installed a hotspot with mikrotik 2.9.6, and everithing was working fine until i realised that any other protocol than 80 is not working, i mean, all web pages are working fine but ssl ones, the msn and skype don´t work, some ftp server dont either, the emule never gets connected, so i don´t know what should i do

I´ve taken a look with winbox at the ip service list and i see ftp, www, telnet and www-ssl are enebled, but i can´t add other ports than those, and in the socks option i´ve add scr ports from 0 to 65535 but it doesn´t work.

Any solution to this?
My clients want to use msn skype, emule and others
thanks

The “ip services” menu does only affect which services run ON your RouterOS device (i.e. if you can telnet TO your router, or if you can access the web interface (HTTP)). It has nothing to do with traffic going through the router.

As you haven’t given any config information, it’s hard to help you. I guess it could have to do with (missing?) masquerading somehow, while HTTP could go unaffected if you use the transparent web proxy for you hotspot clients.

But you’ll have to provide us with more information on what you did…

Best regards,
Christian Meis

hi cmit

my hotspot has been created using the setup on hotspot window with winbox, the default profile what im using for all users is using the transparent proxy, i´ve tried to disble this option but i dn´t work anything without this option enabled, does the transparent proxy has something to do with my problem?

thanks a lot

Yep. That definately confirms it. You’re missing masquerading on your network then.

See the MT docs on how to configure masquerading on your rOS


C

what can i do to avoid the transparent proxy?? it´s gonna be enough with this?

should be fine with or without the proxy if you masquarade

can you send me any exaple, how can i do this using winbox

Do you want a beer and dinner with that as well?

A whole section in the manuals, dedicated just to this…

http://www.mikrotik.com/docs/ros/2.9/ip/nat

the beer is a good idea, perfect time for some of them
ill take a look al the link you send me

thanks a lot

(sorry about my keyboard, it eats some letters)

If I would pretend not to know about masquerading - would I qualify for another beer (and the dinner), too? :smiley:
Oh my, I fear the travel costs to Cape Town could ruin that good deal… :stuck_out_tongue:

Best regards,
Christian Meis

Cmit,

Being from Germany, should I not get you a keg instead? If we get enough it might actually be worth while investing in the travel costs… LOL

RTFM is important :smiley:

:smiley: … Perhaps someday… :wink:

Best regards,
Christian Meis

sorry but i can´t make skype or msn messenger work, i don´t understand why i have to open these ports if in my firewall there isn´t any restriction.

I can´t even check my gmail cos the https doesn´t work either.

I have a question, what is for the Service Ports in the firewall section??

Are you by any chance natting more than once? Double nat has a way to cause some problems with ssl and msn…

well i got no filter rules, no nat rules, no mangle rules, my service ports actived are tftp, irc and ftp (i don´t know what is this for) and that all

as i said before the only rare thing is that de default profile for all users is the default one and has enable the transparent proxy?

any idea about this?

still waiting for any solution, please, could someone else help me??

i need to make skype, msn, and p2p soft work

2.9.6 is also pretty old. Perhaps a upgrade will fix it.