Community discussions

MikroTik App
 
onlineuser
Member Candidate
Member Candidate
Topic Author
Posts: 240
Joined: Thu Aug 06, 2015 12:10 pm

how to configure firewall rule for 2 target-IPs

Tue Oct 20, 2015 10:33 pm

Hello,

how can I set via Winbox for one firewall rule two destination IP addresses?

It's possible to set an IP range like xxx.yyy.zzz.10/31 for xxx.yyy.zzz.10 and xxx.yyy.zzz.11 but how does it work for xxx.yyy.zzz.2 and xxx.yyy.zzz.5 for example?

Best Regards
 
skuykend
Member Candidate
Member Candidate
Posts: 274
Joined: Tue Oct 06, 2015 7:28 am

Re: how to configure firewall rule for 2 target-IPs

Tue Oct 20, 2015 10:41 pm

Create an address list, then put address list in the Advanced tab Src. Address list or Dst. Address list.
 
onlineuser
Member Candidate
Member Candidate
Topic Author
Posts: 240
Joined: Thu Aug 06, 2015 12:10 pm

Re: how to configure firewall rule for 2 target-IPs

Tue Oct 20, 2015 10:43 pm

Do you mean to create the address list under Firewall rule / Advanced / Destination Address List?

And on Firewall Rule / General the destination IP I leave it blank?
 
skuykend
Member Candidate
Member Candidate
Posts: 274
Joined: Tue Oct 06, 2015 7:28 am

Re: how to configure firewall rule for 2 target-IPs

Tue Oct 20, 2015 10:47 pm

Add your IP's under Firewall/Address Lists tab, using a new list name you define for both addresses, then select the list from the firewall filter you created under advanced dst address list.
Yes, leave the General tab dst address field blank.
 
onlineuser
Member Candidate
Member Candidate
Topic Author
Posts: 240
Joined: Thu Aug 06, 2015 12:10 pm

Re: how to configure firewall rule for 2 target-IPs

Tue Oct 20, 2015 10:53 pm

Why do I need the a address list on Firewall/Address Lists?

Is it not enough to to it only in the firewall rule on "Advanced" and then I the General destionation IP stays blank?
address_list.png
UPDATE: In address list it's not possible to set two or more IP addresses. :-(
addresslist.png
You do not have the required permissions to view the files attached to this post.
 
skuykend
Member Candidate
Member Candidate
Posts: 274
Joined: Tue Oct 06, 2015 7:28 am

Re: how to configure firewall rule for 2 target-IPs

Tue Oct 20, 2015 10:59 pm

Make two separate entries for the IP's in the address list tab, with the same list name for both.
 
onlineuser
Member Candidate
Member Candidate
Topic Author
Posts: 240
Joined: Thu Aug 06, 2015 12:10 pm

Re: how to configure firewall rule for 2 target-IPs

Tue Oct 20, 2015 11:07 pm

Ok, I will try.

But when the destionation IP stays blank a first look on all firewall rules doesn't show the destionation IPs because the table only shows the entry of General/destionation IP and not the entries from Advanced/destination address list. :-(

There the winbox table also should show more parameters from the rules. ;-)

Can I enter on Advanced/desionation address lists only the names of any address list or can I also enter IP addresses there?
 
skuykend
Member Candidate
Member Candidate
Posts: 274
Joined: Tue Oct 06, 2015 7:28 am

Re: how to configure firewall rule for 2 target-IPs

Tue Oct 20, 2015 11:50 pm

You can add other columns to winbox tables with the down arrow at the end of the columns.

No I believe you can just enter a list name (1) in the dst address list field.

There are a few fields that can take multiple entries, like the filter dst. port and srt. port fields, but not too many can take multiple.
 
onlineuser
Member Candidate
Member Candidate
Topic Author
Posts: 240
Joined: Thu Aug 06, 2015 12:10 pm

Re: how to configure firewall rule for 2 target-IPs

Wed Oct 21, 2015 1:08 pm

Thx.

When I close Winbox the settings of additional colums also will be resetted. :-(

It's a little bit awkward that I must add a destination address list instead of entering two or three IP addresses in destionation IP field. ;-) There the user ability could be improved. ;-)

Who is online

Users browsing this forum: Bing [Bot], Josephny and 11 guests