Dear
I used mikrotik for 2 type RB750 and RB493 and i do hotspot setup
After i apply to use and to test i found that i can use normally for almost web such as www.google.co.th and www.google.com
But when i try to go to some url that does not begin with www, page can not be displayed such as http://forum.mikrotik.com
And also some web that has pop-up page can not display normally such as http://www.niceoppai.net/
I try to do only apply DHCP in other port and not apply rule hotspot, page can display normally
But also when i try to post this topic via mikrotik, it can not be done.
i try to find out what happen and what rule that make the problem, but i can not find it
This is the rule in firewall the i apply, another rule is default when you use hotspot setup
\
jun/07/2015 11:04:56 by RouterOS 6.28
software id = 0TPA-Z413
/ip firewall layer7-protocol
add name=bittorrent-block regexp=""^(\x13bittorrent protocol|azver\x01$|get /scra\r
\npe\?info_hash=get /announce\?info_hash=|get /client/bitcomet/|GET /dat\r
\na\?fid=)|d1:ad2:id20:|\x08'7P\)[RP]""
/ip firewall connection tracking
set tcp-established-timeout=12h
/ip firewall filter
add action=log chain=forward comment="Log Hotspot" in-interface=Hotspot-Bridge
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes
add action=drop chain=forward comment="limit Connection" connection-limit=1500,32 protocol=tcp src-address=192.168.168.0/24 tcp-flags=syn
add action=drop chain=forward comment="limit Connection" connection-limit=10,32 dst-port=!53 limit=1,5 protocol=udp src-address=192.168.168.0/24
add action=add-src-to-address-list address-list=Bit-Address-List address-list-timeout=1m chain=forward comment="Block Bit" p2p=bit-torrent src-address=192.168.168.0/24
add action=add-src-to-address-list address-list=Bit-Address-List address-list-timeout=1m chain=forward layer7-protocol=bittorrent-block src-address=192.168.168.0/24
src-address-type=local
add action=drop chain=forward comment="Drop Bit TCP" dst-port=!80,443 protocol=tcp src-address-list=Bit-Address-List
add action=drop chain=forward comment="Drop Bit UDP" protocol=udp src-address-list=Bit-Address-List
add action=drop chain=forward comment="Drop P2P" packet-mark=P2P
add action=drop chain=forward comment="Drop Torrent" content=torrent
add action=drop chain=forward content=info_hash
add action=drop chain=forward comment=Virus packet-mark=virus
add action=drop chain=forward dst-address=255.0.0.0/8
/ip firewall mangle
add action=mark-connection chain=prerouting comment="Mark http, https" dst-port=80,443 hotspot=auth new-connection-mark=http_conn protocol=tcp src-address=
192.168.168.0/24
add action=mark-packet chain=prerouting connection-mark=http_conn new-packet-mark=http passthrough=no
add action=mark-connection chain=prerouting comment="mark DNS" dst-port=53 hotspot=auth new-connection-mark=dns_conn protocol=udp src-address=192.168.168.0/24
add action=mark-connection chain=prerouting dst-port=53 hotspot=auth new-connection-mark=dns_conn protocol=tcp src-address=192.168.168.0/24
add action=mark-packet chain=prerouting connection-mark=dns_conn new-packet-mark=dns passthrough=no
add action=mark-connection chain=prerouting comment="Mark Virus" dst-port=135-139 new-connection-mark=virus_conn protocol=udp
add action=mark-connection chain=prerouting dst-port=135-139 new-connection-mark=virus_conn protocol=tcp
add action=mark-connection chain=prerouting dst-port=445 new-connection-mark=virus_conn protocol=udp
add action=mark-connection chain=prerouting dst-port=8900 new-connection-mark=virus_conn protocol=tcp
add action=mark-packet chain=prerouting connection-mark=virus_conn new-packet-mark=virus passthrough=no
add action=mark-connection chain=prerouting comment="Mark P2P" hotspot=auth new-connection-mark=p2p_conn p2p=all-p2p src-address=192.168.168.0/24
add action=mark-connection chain=prerouting content=torrent hotspot=auth new-connection-mark=p2p_conn src-address=192.168.168.0/24
add action=mark-packet chain=prerouting connection-mark=p2p_conn new-packet-mark=P2P passthrough=no
add action=mark-connection chain=prerouting comment="Mark Mail" dst-port=993 hotspot=auth new-connection-mark=SSL_Mail_conn protocol=tcp src-address=192.168.168.0/24
add action=mark-connection chain=prerouting dst-port=995 hotspot=auth new-connection-mark=SSL_Mail_conn protocol=tcp src-address=192.168.168.0/24
add action=mark-packet chain=prerouting connection-mark=SSL_Mail_conn new-packet-mark=SSL_mail passthrough=no
add action=mark-connection chain=prerouting comment="Mark Playstore" dst-port=5228 hotspot=auth new-connection-mark=playstore_conn protocol=tcp src-address=
192.168.168.0/24
add action=mark-connection chain=prerouting dst-port=5228 hotspot=auth new-connection-mark=playstore_conn protocol=udp src-address=192.168.168.0/24
add action=mark-packet chain=prerouting connection-mark=playstore_conn new-packet-mark=Playstore passthrough=no
add action=mark-connection chain=prerouting comment="Mark Apple Push" dst-port=5223 hotspot=auth new-connection-mark=apple_conn protocol=tcp src-address=192.168.168.0/24
add action=mark-packet chain=prerouting connection-mark=apple_conn new-packet-mark=apple_push passthrough=no
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat out-interface=ether3
add action=masquerade chain=srcnat comment="masquerade hotspot network" src-address=192.168.168.0/24
add action=masquerade chain=srcnat comment="NAT Port Eth5-6" src-address=192.168.3.0/24
add action=masquerade chain=srcnat comment="NAT Port Eth7" disabled=yes src-address=192.168.2.0/24