Hi,
After installed Mikrotik RB750, the website torrent411.com said : Your IP address is not found!
Please stop the mask if you wish to have access to your site
Have you any idea what it depends?
thanks
Have you either turned on UPnP or explicitly forwarded and permitted the required ports for yor torrent client?
Wild guess, that.
Hi,
I try to enable UPnP : all is correct except the notion of
[admin@MikroTik] ip upnp interfaces> /ip firewall src-nat print
Flags: X - disabled, I - invalid, D - dynamic
0 src-address=0.0.0.0/0:0-65535 dst-address=0.0.0.0/0:0-65535
out-interface=ether1 protocol=all icmp-options=any:any flow=“”
connection=“” content=“” limit-count=0 limit-burst=0 limit-time=0s
action=masquerade to-src-address=0.0.0.0 to-src-port=0-65535
I try to figure out what’s that mean but I’m too beginner.
I use RouterOS 4.11 so I think this command is for older.
this command don’t work on my router.
what I have into filter and NAT of firewall is :
[admin@MasterRouter] /ip firewall filter> print
Flags: X - disabled, I - invalid, D - dynamic
0 X ;;; place hotspot rules here
chain=unused-hs-chain action=passthrough
1 ;;; default configuration
chain=input action=accept protocol=icmp
2 ;;; default configuration
chain=input action=accept connection-state=established in-interface=wan
3 ;;; default configuration
chain=input action=accept connection-state=related in-interface=wan
4 ;;; default configuration
chain=input action=drop in-interface=wan
5 X ;;; place hotspot rules here
chain=unused-hs-chain action=passthrough
6 ;;; default configuration
chain=input action=accept protocol=icmp
7 ;;; default configuration
chain=input action=accept connection-state=established in-interface=wan
8 ;;; default configuration
chain=input action=drop in-interface=wan
9 ;;; accept localhost
chain=services action=accept dst-address=127.0.0.1 src-address-list=127.0.0.1
10 ;;; allow MACwinbox
chain=services action=accept protocol=udp dst-port=20561
11 ;;; Bandwidth server
chain=services action=accept protocol=tcp dst-port=2000
12 ;;; MT Discovery Protocol
chain=services action=accept protocol=udp dst-port=5678
13 ;;; allow SNMP
chain=services action=accept protocol=tcp dst-port=161
14 X ;;; Allow BGP
chain=services action=accept protocol=tcp dst-port=179
15 X ;;; allow BGP
chain=services action=accept protocol=udp dst-port=5000-5100
16 ;;; Allow NTP
chain=services action=accept protocol=udp dst-port=123
17 X ;;; Allow PPTP
chain=services action=accept protocol=tcp dst-port=1723
18 X ;;; allow PPTP and EoIP
chain=services action=accept protocol=gre
19 ;;; allow DNS request
chain=services action=accept protocol=tcp dst-port=53
20 ;;; Allow DNS request
chain=services action=accept protocol=udp dst-port=53
21 ;;; UPnP
chain=services action=accept protocol=udp dst-port=1900
22 ;;; UPnP
chain=services action=accept protocol=tcp dst-port=2828
23 X ;;; allow DHCP
chain=services action=accept protocol=udp dst-port=67-68
24 X ;;; allow Web Proxy
chain=services action=accept protocol=tcp dst-port=8080
25 X ;;; allow IPIP
chain=services action=accept protocol=ipencap
26 X ;;; allow https for Hotspot
chain=services action=accept protocol=tcp dst-port=443
27 X ;;; allow Socks for Hotspot
chain=services action=accept protocol=tcp dst-port=1080
28 X ;;; allow IPSec connections
chain=services action=accept protocol=udp dst-port=500
29 X ;;; allow IPSec
chain=services action=accept protocol=ipsec-esp
30 X ;;; allow IPSec
chain=services action=accept protocol=ipsec-ah
31 X ;;; allow RIP
chain=services action=accept protocol=udp dst-port=520-521
32 X ;;; allow OSPF
chain=services action=accept protocol=ospf
33 chain=services action=return
and NAT :
[admin@MasterRouter] /ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=192.168.1.0/24
1 chain=dstnat action=dst-nat to-addresses=192.168.1.101 to-ports=2000 protocol=tcp dst-address=24.226.130.46 dst-port=2000
2 chain=dstnat action=dst-nat to-addresses=192.168.1.101 to-ports=2000 protocol=udp dst-address=24.226.130.46 dst-port=2000
3 chain=dstnat action=dst-nat to-addresses=192.168.1.80 to-ports=80 protocol=tcp dst-address=24.226.130.46 dst-port=80
4 chain=dstnat action=dst-nat to-addresses=192.168.1.80 to-ports=80 protocol=udp dst-address=24.226.130.46 dst-port=80
5 chain=dstnat action=dst-nat to-addresses=192.168.1.80 to-ports=52718 protocol=tcp dst-address=24.226.130.46 dst-port=52718
6 chain=dstnat action=dst-nat to-addresses=192.168.1.80 to-ports=52718 protocol=udp dst-address=24.226.130.46 dst-port=52718
7 chain=dstnat action=dst-nat to-addresses=192.168.1.80 to-ports=3390-3391 protocol=tcp dst-address=24.226.130.46 dst-port=3390-3391
8 X ;;; place hotspot rules here
chain=unused-hs-chain action=passthrough
9 ;;; default configuration
chain=srcnat action=masquerade out-interface=wan
10 chain=dstnat action=redirect to-ports=8080 protocol=tcp in-interface=wan dst-port=80
thanks for your help
Do you think this problem is associate to Webproxy?
like because is not transparent proxy or bad config?
thanks
Finally, I found the solution.
inside hotspot Client Profile, at the end, we have small check box named : transparent proxy.
you must uncheck it.
because when this is checked ‘transparent proxy’
with some page like
http://www.monip.org/
you can see the internal IP address.
BUT if you uncheck transparent proxy…
the internal IP can be see.
thanks