Community discussions

MikroTik App
 
User avatar
Kentzo
Long time Member
Long time Member
Topic Author
Posts: 516
Joined: Mon Jan 27, 2014 3:35 pm
Location: California

What interface represents Router in firewall's input chain?

Tue Jan 18, 2022 9:49 pm

For a certain firewall rule in the input chain I'd like to allow only some VLANs and router itself, but cannot figure out what interface represents router here.

I have tried to add a generic action=passthrough rule with a log and then use the ping tool on the router to its own local address, but RouterOS logs "in:(unknown 1) out:(unknown 0)".
 
Sob
Forum Guru
Forum Guru
Posts: 9119
Joined: Mon Apr 20, 2009 9:11 pm

Re: What interface represents Router in firewall's input chain?

Tue Jan 18, 2022 9:53 pm

None you can see. We all know there's loopback interface, but MikroTik keeps it hidden from users. I think it's wrong, but that's the way it currently is.
 
User avatar
Kentzo
Long time Member
Long time Member
Topic Author
Posts: 516
Joined: Mon Jan 27, 2014 3:35 pm
Location: California

Re: What interface represents Router in firewall's input chain?

Tue Jan 18, 2022 10:21 pm

Am I understanding right that it's impossible to have a firewall rule in the input chain that accepts only from the loopback interface?
 
pe1chl
Forum Guru
Forum Guru
Posts: 10194
Joined: Mon Jun 08, 2015 12:09 pm

Re: What interface represents Router in firewall's input chain?  [SOLVED]

Tue Jan 18, 2022 10:26 pm

Alternatively you can check for a source address of Src.Address.Type "local".
Of course it is not really the same.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19099
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: What interface represents Router in firewall's input chain?

Tue Jan 18, 2022 10:41 pm

What is the user requirement,,,,,,,,,,,,,, practical need to enable functionality that provides some service ?
 
User avatar
Kentzo
Long time Member
Long time Member
Topic Author
Posts: 516
Joined: Mon Jan 27, 2014 3:35 pm
Location: California

Re: What interface represents Router in firewall's input chain?

Wed Jan 19, 2022 3:44 am

Better diagnostics (firewall's log/passthrough, sniffer, etc).
 
User avatar
k6ccc
Forum Guru
Forum Guru
Posts: 1490
Joined: Fri May 13, 2016 12:01 am
Location: Glendora, CA, USA (near Los Angeles)
Contact:

Re: What interface represents Router in firewall's input chain?

Wed Jan 19, 2022 9:37 pm

What are you trying to accomplish? You want to firewall packets from the router to itself?

Who is online

Users browsing this forum: Allison10, Bing [Bot], GoogleOther [Bot] and 39 guests