Walled Garden Problem

I want to define external web server in walled garden like this:

http://100.100.100.100:8000/folder or http://mydomain.dyndns.org:8000/

It works with rules like dst-host=‘*.google.es’ but it doesn’t work with that url and port.

I’ve tried using dydns like mydomain.dyndns.org and then dst-host=‘mydomain.dyndns.org’ and it doesnt work neither does if dst-port=8000 is specified.

Any suggestion ???

TIA

Hello amrios,

Others may chime in with other ways to do this, but here is one that should work.

The hs-unauth chain on the firewall NAT tab I believe would be where you would want to catch that 8000 traffic and handle it with other traffic going to the walled garden proxy on TCP 64874. You could copy the existing port 80, 3128 or 8080 IP->Firewall->NAT entries related to the hs-unauth chain that redirect to 64874 and set the port to 8000.

Create your walled garden entry for the host:

/ip hotspot walled-garden
add action=allow comment="" disabled=no dst-host=mydomain.dyndns.org dst-port=8000

Add this to the other hs-unauth NAT entries that send 80, 3128, and 8080 to 64874 to catch the port 8000 web traffic:

/ip firewall nat
add action=redirect chain=hs-unauth comment="" disabled=no dst-port=8000 protocol=tcp to-port=64874

Russell Kaiser

It works.

Thank you Russell