not able to access winbox via public ip

Hello Everyone,
Seasons greetings!!!

We are unable to access mikrotik via public IP. Only Mac address login works.
Where can I find the settings to change this.

Thank you.

In IP->Services or in your firewall rules.

winbox PORT: 8291 enabled
port 80 & 443 is disabled.

If it’s enabled and not limited by “Available From”, then it’s probably some rule in your firewall.

Yes it may be a firewall rule. I had added couple of them due to DDoS attack.

Any easy way to spot a rule which has blocked IP access to mikrotik?

Thanks.

Look for filter rule in input chain. There could be different conditions, it may block specific port, destination address, or use source address list where your client ip address ended up in, …

Or add new rule to specifically allow access to WinBox port from your client address, move it to be the first rule in chain and you should be able to connect. Then move it down in chain and see where it stops working, and the rule before it should be the one you’re looking for.

Found the rule..Thanks that helped.

Now I need to allow my PPOE auth server to sync with Mikrotik. I added the SSH port 22 on DST port for my rule. But it still wont sync.

Sorry, I don’t know anything about auth server.