I have setup mikrotik and everything is working fine but i have encountered a problem.
i have a public ip address from my ISP ie . 80.80.80.80/30 and default gateway i.e 80.80.80.79 assigned to “public” interface.
I have local internet with private ip address 192.168.1.1/24 assigned to “local” interface. I have natted them
chain=srcnat action=masquerade src-address=192.168.1.0/24 - works fine.
my ISP GAVE ME A /28 public ip addresses so i can use for my servers and stuff"
i have assigned the ip addresses to “local” interface. ie 70.70.70.70/28
now i go back to one of my servers and and put ip address 70.70.70.71/28 works fine - gets the connection goes to the internet and when i go to www.whatismyipadress.com or any site it shows ie 70.70.70.71 .. but the problem comes in here right now.
when i try to ping my server 70.70.70.71 from the internet it doesn’t work.. i try traceroute it goes up to 80.80.80.80 and no more.
You have firewall filter rules discarding ICMP on the server. Alternatively you have firewall filter rules on the router that discard ICMP in the forward chain. The router - according to what you posted - responds to traceroute as 80.80.80.80 so the input chain is permitting the traffic.
fewi: thnx for the reply but i have two windows pc-s using public ip addresses and i have apache installed on one of them. so i don’t think two pc-s deny the icmps or whatever. and i dont’ have any firewall rule in the router itself.
80.80.80.80 should never come up in a traceroute. It is the broadcast address, not a real IP. So somewhere your setup must be wrong. How is your notation of the IP addresses in the router?
Also make sure the sub netting in your Windows PC are proper in relation to the IP subnet of your router and the public IP’s.
Depends on the version of Windows and how the firewall is configured. It may respond to ICMP echo requests from the local subnet and deny ones from other networks.
It comes down to this: normal traffic is flowing just fine, according to you. Also, the router itself responds to ICMP (you say its WAN address shows up in a traceroute). You also say the router has no firewall filters (probably a bad idea, but beside the point here).
That leaves the host firewall. There is no giant bug in the Linux kernel that drops ICMP packets, and you’ve ruled out the router firewall yourself, and confirmed other traffic is flowing just fine both ways, ruling out generic routing issues.
If you need someone to review you config post the sections referred to in my signature, but the significantly most likely issue - assuming that the other information you have given so far is correct - is a host firewall.