So for some reason the Mikrotik Router seems to randomly be blocking remote access to some port forwarded devices. It’ll work just fine for days on end sometimes then abruptly drop any incoming connections.
This happens both with;
Camera system with remote web / remote app ability
Unifi Access Points stop communicating with the off-site controller and show as offline (But there is no firewall configuration that needs to be done on the remote site where the Mikrotik is, so not sure how this relates but this also happens while the camera system goes offline)
The network works completely normally on the LAN side, when I go on site I can get on the internet with everything just fine, use wireless access etc…
I’m running 6.47.4
How I have it setup;
Firewall > NAT I have a DST_NAT action with donate for the chain, the destination address is the WAN IP, protocol TCP Destination Port is the port to be forwarded
Port mapping/forwarding
If you would like to direct requests for a certain port to an internal machine (sometimes called opening a port, port mapping), you can do it like this:
So once again out of nowhere at around the same time after no matter how many modifications I made with no success… it randomly started allowing traffic again at night, then this morning at roughly the same time it started blocking it again
(1) I find it confusing you have the bridge handing out DHCP and you have ethernet 2 part of the bridge, but look at your ip address!!!,
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
/ip address
add address=10.192.0.1/24 comment=defconf interface=ether2 network=10.192.0.0
I would guess that that should be bridge not ether2
/ip address
add address=10.192.0.1/24 comment=defconf interface=bridge network=10.192.0.0
(2) As far as firewall rules go you have some weird ones in the input chain…
However I am not an expert on VPN so I will assume they are fine.
For clarity sake I would put all the input chain rules first and then display the forward chain rules.
Just an update with no changes on my part the camera system and access points are back online in unifi controller
I suspect once again tomorrow around the same time they’ll be off again, but not at the exact time just roughy and with no interruption to LAN traffic (cameras still record and WiFi clients can still connect to the internet)
But remote connectivity blocked, other than winbox / direct access to the router via web those work
I’ve also made the modification you suggeted about bridge vs ether2, in either case it shouldn’t have mattered as the other 3 ports on the mikrotik are un-used,
Ether1 is the WAN and ether2 goes to the switch.
I would assume the problem lay somewhere in the firewall configuration so perhaps someone who has an idea firewall wise what could be kluding it up. But the weird thing like I said is it’ll work all by its self hours later, then crap out at roughly the same time every day pretty much. But device access and LAN traffic isnt affected the local network continues to run fine
Hi,
I’m experiencing the same issue in about 10 sites.
I have RB 2011 and 4011 in these sites.
When I change the port number then remote services for CcTV works for a while. It blocks and unblocks randomly. In the last weeks my devices that are blocked did not unblock.
I checked with the ISP. Vox is the ISP in these sites.
They don’t see a problem On their side as they are forwarding all traffic to my MikroTik.
Please advise as soon as you find a fix.
Hi,
I’m experiencing the same issue in about 10 sites.
I have RB 2011 and 4011 in these sites.
When I change the port number then remote services for CcTV works for a while. It blocks and unblocks randomly. In the last weeks my devices that are blocked did not unblock.
I checked with the ISP. Vox is the ISP in these sites.
They don’t see a problem On their side as they are forwarding all traffic to my MikroTik.
Please advise as soon as you find a fix.
