Hey guys,
I have been running an RB450G for the last couple years as my primary home router.
It provides the network with internet access through my ISP cable modem.
A few days ago i lost all internet access on the local network. The router itself however has internet access.
I have a router to router VPN and that is also still working.
The router can not ping the local IP range!
Can someone help me diagnose the problem? Is my rb450G broken?
Lately i have seen the logs spammed with ssh hack attempts. I have since disabled all access to ssh and WAN webclient. But could it be someone hacked the router?
[Mario@MikroTik] > /ip address print detail
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; default configuration
address=192.168.1.1/24 network=192.168.1.0 interface=ether3-slave-local actual-interface=ether3-slave-local
1 D address=94.224.220.109/21 network=94.224.216.0 interface=Bridge-Digicorder actual-interface=Bridge-Digicorder
2 D address=192.168.1.1/32 network=192.168.5.1 interface=l2tp-out1 actual-interface=l2tp-out1
[Mario@MikroTik] > /ip route print detail
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
0 ADS dst-address=0.0.0.0/0 gateway=94.224.216.1 gateway-status=94.224.216.1 reachable via Bridge-Digicorder distance=1 scope=30 target-scope=10 vrf-interface=Bridge-Digicorder
1 ADC dst-address=94.224.216.0/21 pref-src=94.224.220.109 gateway=Bridge-Digicorder gateway-status=Bridge-Digicorder reachable distance=0 scope=10
2 ADC dst-address=192.168.1.0/24 pref-src=192.168.1.1 gateway=ether3-slave-local gateway-status=ether3-slave-local reachable distance=0 scope=10
3 A S dst-address=192.168.5.0/24 gateway=192.168.5.1 gateway-status=192.168.5.1 reachable via l2tp-out1 distance=1 scope=30 target-scope=10
4 A S dst-address=192.168.5.0/32 gateway=192.168.5.1 gateway-status=192.168.5.1 reachable via l2tp-out1 distance=1 scope=30 target-scope=10
5 ADC dst-address=192.168.5.1/32 pref-src=192.168.1.1 gateway=l2tp-out1 gateway-status=l2tp-out1 reachable distance=0 scope=10
[Mario@MikroTik] > /interface print
Flags: D - dynamic, X - disabled, R - running, S - slave
# NAME TYPE ACTUAL-MTU L2MTU MAX-L2MTU MAC-ADDRESS
0 RS ether1-gateway ether 1500 1520 1520 D4:CA:6D:35:12:D3
1 RS ether2-master-local ether 1500 1520 1520 D4:CA:6D:35:12:D4
2 R ether3-slave-local ether 1500 1520 1520 D4:CA:6D:35:12:D5
3 RS ether4-slave-local ether 1500 1520 1520 D4:CA:6D:35:12:D6
4 S ether5-slave-local ether 1500 1520 1520 D4:CA:6D:35:12:D7
5 R Bridge-Digicorder bridge 1500 1520 D4:CA:6D:35:12:D4
6 R l2tp-out1 l2tp-out 1460
# mar/02/2015 08:45:18 by RouterOS 6.27
# software id = JKZ7-KEYY
#
/ip firewall filter
add chain=input comment="default configuration" protocol=icmp
add chain=input comment="default configuration" connection-state=established
add chain=input comment="default configuration" connection-state=related
add action=drop chain=input comment="default configuration" disabled=yes in-interface=ether1-gateway
add chain=input disabled=yes protocol=gre
add chain=input disabled=yes protocol=udp
add chain=input disabled=yes dst-port=10647 protocol=udp
add chain=input disabled=yes protocol=ipsec-esp
/ip firewall nat
add chain=srcnat dst-address=192.168.5.0/24 src-address=192.168.1.0/24
add action=masquerade chain=srcnat comment="default configuration" out-interface=Bridge-Digicorder to-addresses=0.0.0.0
add action=dst-nat chain=dstnat dst-port=10647 protocol=udp to-addresses=192.168.1.1 to-ports=500
add action=dst-nat chain=dstnat protocol=udp src-port=10647 to-addresses=192.168.1.1 to-ports=500
add action=dst-nat chain=dstnat dst-port=50001 protocol=tcp to-addresses=192.168.1.140 to-ports=32400
add action=dst-nat chain=dstnat dst-port=50001 protocol=udp to-addresses=192.168.1.140 to-ports=32400
add action=dst-nat chain=dstnat dst-port=5060 in-interface=Bridge-Digicorder protocol=udp to-addresses=192.168.1.141 to-ports=5060
add action=dst-nat chain=dstnat comment="FreePBX SIP Traffic" dst-port=10001-20000 protocol=udp to-addresses=192.168.1.141 to-ports=10001-20000
Thanks already guys!