Socks

RouterOS General
1

how to make only 1 IP can access my socks other all IP block

explain my ip = 10.10.10.10

and all ip cant Access my socks


how to i make it?

2

There’s IP->Socks->Access in WinBox or “/ip socks access” in CLI, where you can set your access rules. So try to add one accept rule with source address 10.10.10.10 and after that deny rule without parameters and it should do what you need. Or you can use firewall to allow access to socks port to only 10.10.10.10 and block the rest.

3

Sob can you give me firewall script … all sock port deny and only 10.10.10.1 allow use socks…

4

It’s simple:

/ip firewall filter
add action=accept chain=input dst-port=1080 protocol=tcp src-address=10.10.10.1
add action=drop chain=input dst-port=1080 protocol=tcp
5

how to add more ip here?

like 10.10.10.1 and 20.20.20.1

6

Use address list:

/ip firewall address-list
add address=10.10.10.1 list=allow-socks
add address=20.20.20.1 list=allow-socks
/ip firewall filter
add action=accept chain=input dst-port=1080 protocol=tcp src-address-list=allow-socks
add action=drop chain=input dst-port=1080 protocol=tcp
7

Its working Sob Thanks you So Much…:slight_smile:

8

my ip randam chg ip dynamic
for exp
11.11.56.12
if add 11.11* work?

9

You need something like this as address:

11.11.0.0/16 - allows any 11.11.x.x
11.11.56.0/24 - allows any 11.11.56.x

You should use as small subnet as possible, because you don’t want other people using your socks server.

10

working Sob Thanks you so much