[SOLVED] Access from the internet

RouterOS Beginner Basics
1

Hi all.

I’ve got RB750 and dynamic IP from my ISP.
I’ve configured my RB with one of the ddns-services on the internet.
But I can’t get access to my RB from the outside still using my browser :frowning:
nslookup succesfully resolve name to IP-adress. I can ping my RB by name and by IP. I can connect with telnet on port 80 to my RB.
But if I try to go on RB with FF, for ex., I can’t.

What is wrong?

2

Firewall

Post your firewall rules.

3

[admin@MikroTik] /ip firewall filter> print all
Flags: X - disabled, I - invalid, D - dynamic
0 X chain=forward action=accept src-address=192.168.3.0/24 dst-address=10.11.27.0/24 out-interface=pptp-out1
1 ;;; Added by webbox
chain=input action=accept protocol=icmp
2 ;;; Added by webbox
chain=input action=accept connection-state=established in-interface=ether1
3 ;;; Added by webbox
chain=input action=accept connection-state=related in-interface=ether1
4 ;;; Added by webbox
chain=input action=drop in-interface=ether1
5 ;;; Added by webbox
chain=forward action=jump jump-target=customer in-interface=ether1
6 ;;; Added by webbox
chain=customer action=accept connection-state=established
7 ;;; Added by webbox
chain=customer action=accept connection-state=related
8 ;;; Added by webbox
chain=customer action=drop

4

I bet this is the rule that is blocking you.

4 ;;; Added by webbox 
chain=input action=drop in-interface=ether1

You need a rule like this before that one.

/ip firewall filter
add chain=input action=accept protocol=tcp dst-port=80 in-interface=ether1
move X 4

Change the X to the line number of that new rule. That should move this new rule just ahead of the drop rule.

5

It has solved my problem. Thanks alot. :slight_smile: