Community discussions

 
Zloy2452
just joined
Topic Author
Posts: 11
Joined: Fri Dec 08, 2017 4:12 pm

Webfig remote access from WAN

Sat Nov 10, 2018 6:43 pm

Hello! I need a remote acces to my router over Webfig. I have enabled DDNS in IP - Cloud. When I open http://XXXXXXXXXXXX.sn.mynetname.net/ in browser, it works fine, but only from my home network. From WAN it doesn't work! I have no firewall rules which may block remote access. I have also port 80 enabled in IP - Services. What am I doing wrong? Please help!
 
User avatar
Steveocee
Forum Veteran
Forum Veteran
Posts: 823
Joined: Tue Jul 21, 2015 10:09 pm
Location: UK
Contact:

Re: Webfig remote access from WAN

Sat Nov 10, 2018 7:18 pm

You will need to post your config to let everyone see and help.
Steve "Steveocee" Carter
PC Gamer, Airsofter, MikroTik Nerd
My Website - My MikroTik Tutorials
 
Zloy2452
just joined
Topic Author
Posts: 11
Joined: Fri Dec 08, 2017 4:12 pm

Re: Webfig remote access from WAN

Sat Nov 10, 2018 7:39 pm

Config? Do you mean Supout.rif?
 
anav
Forum Veteran
Forum Veteran
Posts: 952
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada

Re: Webfig remote access from WAN

Sun Nov 11, 2018 2:09 am

/export hide-sensitive file=mylatesconfig
 
User avatar
Jotne
Long time Member
Long time Member
Posts: 590
Joined: Sat Dec 24, 2016 11:17 am

Re: Webfig remote access from WAN

Sun Nov 11, 2018 9:11 am

Do not open web from outside, its a big security risk.

If you need remote access, use VPN.

If you can not use VLAN do the following.
1. Limit outside access to specific IP
2. Change to some random high port, do not use default port 80 (eks 34365)
3. Also turn on port knocking (google it) so you need to access to or three ports before your port open.
 
Zloy2452
just joined
Topic Author
Posts: 11
Joined: Fri Dec 08, 2017 4:12 pm

Re: Webfig remote access from WAN

Sun Nov 11, 2018 11:53 am

OK, here is my config in attachment. Please, help!
You do not have the required permissions to view the files attached to this post.
 
User avatar
Jotne
Long time Member
Long time Member
Posts: 590
Joined: Sat Dec 24, 2016 11:17 am

Re: Webfig remote access from WAN

Sun Nov 11, 2018 8:32 pm

I do not see any firewall rules. You will be hacked...

Do a Reset and start of with the default configuration on your router.

To access web gui from outside you could do:
/ip firewall filter
add action=accept chain=input dst-port=80 protocol=tcp
But this will make you router going down by a hacker faster than blink of your eye.

Also 6.44beta28 is a beta version, for test only, do not use in production.
 
Zloy2452
just joined
Topic Author
Posts: 11
Joined: Fri Dec 08, 2017 4:12 pm

Re: Webfig remote access from WAN

Sun Nov 11, 2018 10:44 pm

Jotne, thanks, but I have already tried this and it's not working! Firewall shows no input packets when I'm trying to connect from WAN. Only LAN connection works fine. Any ideas why?
 
Zloy2452
just joined
Topic Author
Posts: 11
Joined: Fri Dec 08, 2017 4:12 pm

Re: Webfig remote access from WAN

Tue Nov 13, 2018 12:02 pm

It seems my ISP is blocking port 80. I have changed port number and now all works fine! The problem is solved! Thanks to all!
 
User avatar
Jotne
Long time Member
Long time Member
Posts: 590
Joined: Sat Dec 24, 2016 11:17 am

Re: Webfig remote access from WAN

Tue Nov 13, 2018 4:02 pm

Same as in this post:
viewtopic.php?p=697563

But remember.
Secure your setup.
Do not use beta in production.
 
erlinden
Member Candidate
Member Candidate
Posts: 109
Joined: Wed Jun 12, 2013 1:59 pm

Re: Webfig remote access from WAN

Tue Nov 13, 2018 4:24 pm

It seems my ISP is blocking port 80. I have changed port number and now all works fine! The problem is solved! Thanks to all!
Actually I think you created yourself a bigger problem. Access to the router over a non-encrypted connection. You may want to reconsider your configuration, setting up VPN is both really easy to do and more secure.
 
Zloy2452
just joined
Topic Author
Posts: 11
Joined: Fri Dec 08, 2017 4:12 pm

Re: Webfig remote access from WAN

Tue Nov 13, 2018 8:31 pm

OK, I'll think about it. Thank you guys!

Who is online

Users browsing this forum: Kindis, TurboCow and 38 guests