Community discussions

just joined
Topic Author
Posts: 1
Joined: Tue Apr 30, 2019 11:18 am

Server internet traffic

Tue Apr 30, 2019 11:25 am

Hi, so we have a web server behind a mikrotik router which forwards ports 80,443 etc.. to the server. The problem is that all traffic logs from my server show that all the traffic is comming from (a.k.a. the router) and not the actual hosts. This is very important because it means i can't blacklist anyone who is brute-forcing my server because the only IP the logs show is the router IP. Does this happen because of port-forwarding? Is there anyway for the router to pass the remote-host info to the server?
Thanks in advance.
Forum Guru
Forum Guru
Posts: 2925
Joined: Thu Mar 03, 2016 10:23 pm

Re: Server internet traffic

Tue Apr 30, 2019 11:56 am

Your NAT rules are flawed. Post output of /ip firewall export hide-sensitive (redact public addresses but if tgere are more than one, do it in the way it is obvious which is which).

Who is online

Users browsing this forum: No registered users and 32 guests