Wan IP block

tcppho3nix · January 27, 2017, 12:39pm

guys im really new and i have a simple question i think ) i need to configure mikrotik that has wan ip hided (not accasable to other ips) and then i need to do a rule that will give my home wan ip accses to routers wan ip.. i just need to know how to the the firewall rule..

input (wan ip) action drop to all
then how to do the rule to accept 1 or more specific wan addreses to acces the router?

thanks

lbachero · January 28, 2017, 7:04pm

You can do it like this:

/ip firewall filter add chain=input protocol=tcp dst-port=21-23,80,8291,8728,8729 src-address-list=!trust action=drop

So, put your IP in trust list:

 /ip firewall address-list add list=trust address=X.X.X.X comment="Home Public IP"

rextended · January 29, 2017, 4:39am

lbachero:

You can do it like this:

/ip firewall filter add chain=input protocol=tcp dst-port=21-23,80,8291,8728,8729 src-address-list=!trust action=drop

So, put your IP in trust list:

 /ip firewall address-list add list=trust address=X.X.X.X comment="Home Public IP"

TCP: 20,21,22,23,53,80,443,1723,8291,8728,8729
UDP: 53,67,68,69,123,161,5678,20561
and add connection-state=new on rule…