Hi,
I would like to replace fortigate router to mikrotik. I have problem to setup firewall filter between networks.
Networks:
eth1_wan1
eth2_mgnt
eth3_servers
eth4_local1
eth5_local2
on fortigate router configuration looks like:
allow eth4_local1 → eth1_wan1 | nat
allow eth4_local1 → eth3_servers | destination-address:server_1 IP
allow eth4_local2 → eth1_wan1 | nat
allow eth1_wan1 → eth3_servers | service:3389 destination-address:server_1 IP source-address: client IP
block all
I would like setup it on mikrotik, block all all traffic then allow connection between subnets based on ports, addresses and services.
for example I would like to block all traffic and allow traffic from Server Network To Wan1 but it’s not working, traffic is blocked:
[admin@MikroTik] > /ip firewall filter print
Flags: X - disabled, I - invalid, D - dynamic
0 X chain=forward action=accept in-interface=ether3_SRV
out-interface=ether1_WAN log=no log-prefix=""
1 X chain=forward action=drop log=no log-prefix=""
could you give mi some basic configuration that will help me understand how it works on mikrotik. Thank You.