Protect Graphs by viewing from others(proxy enabled)!

RouterOS General
1

I have ip web-proxy enabled on port 8080 and im preventing it being used as an open-proxy in ip firewall.

My goal is to make the graphs available only from my ip(with the proxy enabled). I have tried to set an allow rule on the tool graphing with my ip, but it doesn’t work(with proxy enabled only), so i had to set the gateway of my router as an allow rule to let me see the graphs, but they can be seen from anyone on my network. My ip is 192.168.0.80, and my gateway is 192.168.0.254.

/ ip firewall filter add chain=input in-interface=ether1 protocol=tcp dst-port=8080 action=drop
this is the ip firewall filter rule to prevent using the proxy as open-proxy i used.

Thanks in advance.

2

I suggest changing your DST Nat rule so it doesn’t cache your router’s IP:

/ip firewall nat add chain=dstnat dst-port=80 dst-address=!192.168.1.254 action=dst-nat to-ports=8080

(Where 192.168.1.254 is your router’s IP). You could also make use of an address list.

3

Thank you. Much appreciated :smiley:. Working