Community discussions

MikroTik App
 
Landver
just joined
Topic Author
Posts: 7
Joined: Mon Sep 19, 2016 9:25 am

"Address List" management for Backbone RouterOS as a firewall

Tue Jun 30, 2020 10:58 am

Hello, we had decided to install CHR as main Firewall for backbone server.
The huge problem for us is that multiple external IPs (from internet) should access multiple virtual servers behind Mikrotik

And it's not possible to manage Address Lists properly, because same IP should appear in both lists. For example lists "access to FTP server", "access to VoIP server", "MGMT access" and etc.
Plus it's not possible to add multiple address lists in the same rule. That force me to multiply number of rules for each address List.

How can I get around those limitations? At least make it possible to add same IP/FQDN into different Address Lists would make firewall config much cleaner and easier.
 
Sob
Forum Guru
Forum Guru
Posts: 5586
Joined: Mon Apr 20, 2009 9:11 pm

Re: "Address List" management for Backbone RouterOS as a firewall

Wed Jul 01, 2020 12:54 am

One rule can't currently use multiple address lists. But same IP/FQDN can be in as many different lists as you want:
/ip firewall address-list
add address=1.2.3.4 list=test1
add address=1.2.3.4 list=test2
add address=1.2.3.4 list=test3
add address=forum.mikrotik.com list=test1
add address=forum.mikrotik.com list=test2
add address=forum.mikrotik.com list=test3
Or am I misunderstanding what you want?
People who quote full posts should be spanked with ethernet cable. Some exceptions for multi-topic threads may apply. Not intended as incentive for masochists.
 
Landver
just joined
Topic Author
Posts: 7
Joined: Mon Sep 19, 2016 9:25 am

Re: "Address List" management for Backbone RouterOS as a firewall

Wed Jul 01, 2020 2:11 pm

Or am I misunderstanding what you want?
You understood me correctly. I coudn't add same IP/FQDN into different Address Lists. Not it works, don't know why :(
Thank you a lot for the reply.

Who is online

Users browsing this forum: JordiBcn, Loskrochn, ronal01, sindy, Zacharias and 73 guests