Community discussions

 
Zloy2452
just joined
Topic Author
Posts: 12
Joined: Fri Dec 08, 2017 4:12 pm

Webfig remote access from WAN

Sat Nov 10, 2018 6:43 pm

Hello! I need a remote acces to my router over Webfig. I have enabled DDNS in IP - Cloud. When I open http://XXXXXXXXXXXX.sn.mynetname.net/ in browser, it works fine, but only from my home network. From WAN it doesn't work! I have no firewall rules which may block remote access. I have also port 80 enabled in IP - Services. What am I doing wrong? Please help!
 
User avatar
Steveocee
Forum Guru
Forum Guru
Posts: 1110
Joined: Tue Jul 21, 2015 10:09 pm
Location: UK
Contact:

Re: Webfig remote access from WAN

Sat Nov 10, 2018 7:18 pm

You will need to post your config to let everyone see and help.
Steve "Steveocee" Carter
PC Gamer, Airsofter, MikroTik Nerd
My Website - My MikroTik Tutorials
 
Zloy2452
just joined
Topic Author
Posts: 12
Joined: Fri Dec 08, 2017 4:12 pm

Re: Webfig remote access from WAN

Sat Nov 10, 2018 7:39 pm

Config? Do you mean Supout.rif?
 
anav
Forum Guru
Forum Guru
Posts: 3130
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada

Re: Webfig remote access from WAN

Sun Nov 11, 2018 2:09 am

/export hide-sensitive file=mylatesconfig
I'd rather manage rats than software. Follow my advice at your own risk! (Sob & mkx forced me to write that!)
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 1310
Joined: Sat Dec 24, 2016 11:17 am
Location: jo.overland at gmail.com

Re: Webfig remote access from WAN

Sun Nov 11, 2018 9:11 am

Do not open web from outside, its a big security risk.

If you need remote access, use VPN.

If you can not use VLAN do the following.
1. Limit outside access to specific IP
2. Change to some random high port, do not use default port 80 (eks 34365)
3. Also turn on port knocking (google it) so you need to access to or three ports before your port open.
 
How to use Splunk to monitor your MikroTik Router

MikroTik->Splunk
 
 
Zloy2452
just joined
Topic Author
Posts: 12
Joined: Fri Dec 08, 2017 4:12 pm

Re: Webfig remote access from WAN

Sun Nov 11, 2018 11:53 am

OK, here is my config in attachment. Please, help!
You do not have the required permissions to view the files attached to this post.
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 1310
Joined: Sat Dec 24, 2016 11:17 am
Location: jo.overland at gmail.com

Re: Webfig remote access from WAN

Sun Nov 11, 2018 8:32 pm

I do not see any firewall rules. You will be hacked...

Do a Reset and start of with the default configuration on your router.

To access web gui from outside you could do:
/ip firewall filter
add action=accept chain=input dst-port=80 protocol=tcp
But this will make you router going down by a hacker faster than blink of your eye.

Also 6.44beta28 is a beta version, for test only, do not use in production.
 
How to use Splunk to monitor your MikroTik Router

MikroTik->Splunk
 
 
Zloy2452
just joined
Topic Author
Posts: 12
Joined: Fri Dec 08, 2017 4:12 pm

Re: Webfig remote access from WAN

Sun Nov 11, 2018 10:44 pm

Jotne, thanks, but I have already tried this and it's not working! Firewall shows no input packets when I'm trying to connect from WAN. Only LAN connection works fine. Any ideas why?
 
Zloy2452
just joined
Topic Author
Posts: 12
Joined: Fri Dec 08, 2017 4:12 pm

Re: Webfig remote access from WAN

Tue Nov 13, 2018 12:02 pm

It seems my ISP is blocking port 80. I have changed port number and now all works fine! The problem is solved! Thanks to all!
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 1310
Joined: Sat Dec 24, 2016 11:17 am
Location: jo.overland at gmail.com

Re: Webfig remote access from WAN

Tue Nov 13, 2018 4:02 pm

Same as in this post:
viewtopic.php?p=697563

But remember.
Secure your setup.
Do not use beta in production.
 
How to use Splunk to monitor your MikroTik Router

MikroTik->Splunk
 
 
erlinden
Member Candidate
Member Candidate
Posts: 174
Joined: Wed Jun 12, 2013 1:59 pm

Re: Webfig remote access from WAN

Tue Nov 13, 2018 4:24 pm

It seems my ISP is blocking port 80. I have changed port number and now all works fine! The problem is solved! Thanks to all!
Actually I think you created yourself a bigger problem. Access to the router over a non-encrypted connection. You may want to reconsider your configuration, setting up VPN is both really easy to do and more secure.
 
Zloy2452
just joined
Topic Author
Posts: 12
Joined: Fri Dec 08, 2017 4:12 pm

Re: Webfig remote access from WAN

Tue Nov 13, 2018 8:31 pm

OK, I'll think about it. Thank you guys!
 
rostikk
just joined
Posts: 3
Joined: Wed Mar 06, 2019 12:17 am

Re: Webfig remote access from WAN

Wed Mar 06, 2019 12:21 am

Hi!
I have setup pptp VPN to call my router from WAN - it works and I am able to access LAN resources... except the router itself. Winbox and Webfig are not accessible via the router's LAN ip.
Is this a firewall problem? Could anyone, please, advise how to fix it?

Thanks!
Ros
 
francescob
just joined
Posts: 4
Joined: Tue May 29, 2018 9:58 am

Re: Webfig remote access from WAN

Wed Apr 17, 2019 1:14 am

Hello,
If you just need to obtain a remote access from WAN to your Mikrotik Routerbard with Webfig, you can try to configure your Routerboard with Cloutik, it can enable such feature
And you will forget about VPN configuration problem...
 
User avatar
AnnibalAbreu
just joined
Posts: 6
Joined: Sat Jun 01, 2019 9:39 pm
Location: Earth

Re: Webfig remote access from WAN

Mon Jun 03, 2019 11:33 pm

francescob

how does cloutik work?
I saw there are a couple os scripts on routerOS, but what about the server side?
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 1310
Joined: Sat Dec 24, 2016 11:17 am
Location: jo.overland at gmail.com

Re: Webfig remote access from WAN

Mon Jun 03, 2019 11:50 pm

It seems that you use a system like Teamviewer.

You setup a type of connection for your router to a site called Cloutik, (did not see any cost for it, but there I do guess its not free), then you connect til Cloutik for then connect to your router.

How are this more secure than you setup a link directly to your router (preferably VPN)?
It will know everything going on at your site, copy of configuration ++
What happens if Cloutik get hacked? Could some get inn to all routers Cloutik handles?

Link to company
https://www.cloutik.com/
 
How to use Splunk to monitor your MikroTik Router

MikroTik->Splunk
 
 
User avatar
AnnibalAbreu
just joined
Posts: 6
Joined: Sat Jun 01, 2019 9:39 pm
Location: Earth

Re: Webfig remote access from WAN

Tue Jun 04, 2019 12:42 am

Hi Jotne,

Thanks for your answer.

Yes, I think it is an issue. I mean, send all my traffic through an unknown server.

By the way, what I really want to accomplish is to be able to config routers behind an ISP Cable Modem or ADSL Modem IF I CAN NOT CHANGE ths ISP device configuration (no access).

Saying in a different way: how software for management remote hotspots can manage remote Routers behind ISP devices?

https://drive.google.com/file/d/1jX92SA ... _DNT9/view
Last edited by AnnibalAbreu on Tue Jun 04, 2019 1:15 am, edited 1 time in total.
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 1310
Joined: Sat Dec 24, 2016 11:17 am
Location: jo.overland at gmail.com

Re: Webfig remote access from WAN

Tue Jun 04, 2019 10:23 pm

Saying in a different way: how software for management remote hotspots can manage remote Routers behind ISP devices?
Make the router using VPN to connects to a sentral site. It does accept DNS name in the config, so its easy to setup.
 
How to use Splunk to monitor your MikroTik Router

MikroTik->Splunk
 
 
Shoe
just joined
Posts: 15
Joined: Fri Dec 09, 2011 10:37 am

Re: Webfig remote access from WAN

Sat Aug 31, 2019 9:24 pm

I have setup pptp VPN to call my router from WAN - it works and I am able to access LAN resources... except the router itself. Winbox and Webfig are not accessible via the router's LAN ip.
Hey Ros, I have exactly the same issue with my RB4011. Where you able to solve it? It's no problem on the older devices (RB450G) but they probably have a different default config and I cannot spot the difference.

Cheers,
Shoe

Who is online

Users browsing this forum: MSN [Bot] and 62 guests