Community discussions

MikroTik App
 
Oxi76
just joined
Topic Author
Posts: 3
Joined: Wed Sep 21, 2022 11:21 am

Single IP blocked until restart

Wed Sep 21, 2022 11:42 am

Hi,
I have issue with our RB2011UiAS-2HnD r2
Occasionally our router blocks connection to single IP host. This host is heavily used by our employees and I think this fact can have impact on this problem. There are no any information in log. Traffic to IP is enabled again only when we restart router. When IP is blocked there is no connection to any port and ping is not responding. I don't have any idea what could I check to resolve this issue.
We use firmware 6.46.4
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11982
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: Single IP blocked until restart

Wed Sep 21, 2022 11:47 am

First of all, is time you upgrade to 6.48.6 (long-term), if the problem persist, come back here.
 
Oxi76
just joined
Topic Author
Posts: 3
Joined: Wed Sep 21, 2022 11:21 am

Re: Single IP blocked until restart

Wed Sep 28, 2022 10:45 am

I made upgrade to 6.48.6 week ago. Today problem happened again. As usual - single IP connection was blocked. I had mysql connection at this time and it was broken. No new connection couldn't be made, but what is strange ping was responding to this server properly. Nothing in log file.
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11439
Joined: Thu Mar 03, 2016 10:23 pm

Re: Single IP blocked until restart

Wed Sep 28, 2022 2:11 pm

Check ARP table (/ip arp print for IPv4 or /ipv6 neighbor print for IPv6) when connections break to see, if the ARP entry is correct.
 
Oxi76
just joined
Topic Author
Posts: 3
Joined: Wed Sep 21, 2022 11:21 am

Re: Single IP blocked until restart

Wed Oct 05, 2022 2:42 pm

Single IP - I mean single server host in the internet. When problem occurs, none of our local clients (computers and mobile phones connected via WIFI or LAN) can make connection to this host in internet.

I really need help. Router is restarting every night and problem occurs ones a week.
 
sindy
Forum Guru
Forum Guru
Posts: 10205
Joined: Mon Dec 04, 2017 9:19 pm

Re: Single IP blocked until restart

Wed Oct 05, 2022 3:34 pm

When that happens, run /tool sniffer quick ip-address=ip.of.that.server and see whether packets towards that address come in from the LAN hosts and through which interface they leave (if they do). You haven't shown the export of your router's configuration so hard to say whether it is caused by dynamical addition of the address to some firewall address list or by something else.

Who is online

Users browsing this forum: Semrush [Bot], TheCat12 and 79 guests