Community discussions

MUM Europe 2020
 
Celia392
just joined
Topic Author
Posts: 1
Joined: Sat Mar 02, 2019 11:33 am

Block PC to access local LAN on Mikrotik

Sat Mar 02, 2019 11:36 am

I have an ubuntu, insalled under vmware... I would like to set up our Mikrotik router to block this ubuntu to access local LAN.

I would like to allow access only the external internet.

I tried a lot of firewall rule, but non of work. May i ask some help about it?

Regards
 
Sarel0092
newbie
Posts: 44
Joined: Tue Aug 07, 2018 8:25 am

Re: Block PC to access local LAN on Mikrotik

Tue Mar 05, 2019 3:44 pm

Have you tried using a different IP range for the Ubuntu PC then blocking that range from accessing your local network?
 
anav
Forum Guru
Forum Guru
Posts: 3183
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada

Re: Block PC to access local LAN on Mikrotik

Tue Mar 05, 2019 8:27 pm

The point being made is you have provided very little information to help us answer your question.
Diagram??
Config/?
/export hide-sensitive file=yourconfig

If you have ubuntu on same subnet as the main LAN its difficult to separate out.
Much better to put that wifi on its own VLAN, or off the bridge on its own LAN etc.......
Then you are separated from the main LAN by L2 and you an apply L3 firewall filter rules (forward chain) that state
allow local traffic to ISP (lan to wan)
drop everything else (and thus vlan to LAN or LAN to VLAN traffic is not permitted).
I'd rather manage rats than software. Follow my advice at your own risk! (Sob & mkx forced me to write that!)
 
Van9018
Long time Member
Long time Member
Posts: 515
Joined: Mon Jun 16, 2014 6:26 pm
Location: Canada - Abbotsford

Re: Block PC to access local LAN on Mikrotik

Wed Mar 06, 2019 8:03 am

If PC is trusted and you want the firewall for good measure, then maybe iptables in ubuntu?
If PC is untrusted, then anav's suggestion is the only way. Also consider firewall input rules to protect router service ports from the untrusted computer.

Who is online

Users browsing this forum: Bing [Bot], bpwl, lucasimo88 and 25 guests