In my work, I have a RB941-2nD-TC (hap lite) to keep a very simple system with few computers. hap lite seemed to me a great solution to balance 2 PPPoE WAN’s into my network and some other particulary configurations. I had configured just a simple firewall following the documentation itself to avoid port scan and brute force attacks. (https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter)
Very well, this littre router kept me away from troubles for about a year, but couple of days ago, it block access to http pages, only https pages worked fine. without any kind of change of settings or even system/firmware update. Simply I receive an ‘ERR_CONNECTION_TIMED_OUT’ error while I try to acess them. I had already tried to create filter rules to specifically allow a certain page, change the DNS address and even drastic measures like remove all firewall rules (/ip firewall filter remove [/ip firewall filter find] or factory reset the device, but none of it had worked. So as a begginer I’d like to ask your help to understand more about this issue and possibly solve what is causing this problem.
which browser do you use? I had same problem by using Opera web browser, which does not allow access to HTTP sites, but the same web site opens perfectly in Firefox or Chrome. So it has nothing to do with the MT.
In this case, the problem occurs with Firefox, Chrome and Internet explorer. I’ll try some other browsers but i noticed that this problem is really on my router, because i temporally fixed the access on HTTP sites replacing my mikrotik to a basic router
Can confirm this issue with an 1100 X2AH, this start around 5th of July.
http sites inaccessible, but https navigation still works. have tried Chrome, IE, Safari and firefox. all have the same issue.
From my experience “basic routers” only allow one WAN connection and thus only one PPPoE connection. So when you reverted back to this basic router and things started to work over HTTP was it with both WAN connections on the router or just one of the WAN connections?
hey there, i have now fix the issue. i started by adding a filter rule allowing port 80 traffic out via the WAN eth port. and moving it to the top of the list.
after adding the rule http sites still timed out. so i dont believe this fixed the issue. (why mention it, then? ill explain later.)
i then checked for the latest os and updated it to the latest. it wasnt too old but wasnt the latest. the unit did its thing and rebooted. after rebooting i could the browse http pages. (port 80)
the reason i mentioned the fact that i added the filter rule was because i never rebooted after adding the rule so it might not have been in effect. im pretty sure they are instant though.
i would start with checking your running thr latest version. and if not update.
dont forget to /export and backup your settings first. just incase.