Remote access to 750gl

RouterOS Beginner Basics
1

I am new to the 750gl and need to access the router from the web. I have looked around and found a post that suggested
using winbox and load this filter rule.
/ip firewall filter add action=accept chain=input disabled=no dst-port=8291 protocol=tcp place-before=0
I am using Winbox and have tried mypublicIP and mypublicIP:8291.

Any suggestions??

Thanks

2

Hi, Try and disable all firewall rules.

Then goto ip services and check if winbox access is allowed from 0.0.0.0/0.

Also is the 750 directly connected to the internet with a public ip setup on the interface or is it behind a different router?

3

Thanks for the post!!

Yes, it is hooked directly to a public IP.

Adding " access is allowed from 0.0.0.0/0" to winbox IP services did the trick!!

I have seen multiple posts in different places and this was never mentioned. I did not have to “disable all firewall rules”

4

Glad you got it working, but from a security standpoint, that scares me. If you are going to allow all addresses on the internet to access the router, at the very least, change the services port to a non-standard port. WinBox will happily connect to non-standard ports - and ALWAYS use secure mode. A couple more steps would be either a VPN of one sort or another, or port knocking. Add a set of rules to detect and drop port scanners too.
I am using a non-standard port, and port knocking, and I log attempts to access the router on the standard WinBox port. It’s entertaining to see how many attempts there are on the standard WinBox port. Of course they are dropped since they are the wrong port. I also log attempts on the relocated ports that are not allowed because they did not correctly set up the port knocking. I’ve never seen a hit there EXCEPT when I messed up the port knock procedure.