+ Responder ao Tópico



  1. Ola pessoal, sei que esse assunto é algo comum aqui e tem muitas pessoas com duvidas e varias soluções, bom tentei muitas delas, procurei entender cada uma, e não tive sucesso, estou tendo problemas para redirecionar portas pra acesso ao mk-auth e outro mikrotik por fora.

    Tenho 4 links adsl em bridge [pppoe] nas portas 1 a 4 (nos testes só há link na porta 1), na porta 5 [11.0.0.1/8] os clientes e o mk-auth [11.0.0.2], tentei redirecionar a porta 80 para o mk-auth [11.0.0.2] mas não consigo, já tentei outras portas, já tentei acesso a outro mikrotik atras do PCC e nada.

    ADDRESS
    Código :
    11.0.0.1/8              11.0.0.0        5-servers

    NAT
    Código :
    /ip firewall nat
     
    chain=srcnat action=masquerade out-interface=1-pppoe log=no log-prefix="" 
     
     
    chain=dstnat action=dst-nat to-addresses=11.0.0.2 to-ports=80 protocol=tcp in-interface=1-pppoe dst-port=80 log=no log-prefix=""

    MANGLE
    Código :
    /ip firewall mangle
     
    chain=forward action=change-mss new-mss=1440 passthrough=yes tcp-flags=syn protocol=tcp out-interface=all-ppp tcp-mss=1441-65535 log=no log-prefix="" 
     
    chain=forward action=change-mss new-mss=1440 passthrough=yes tcp-flags=syn protocol=tcp in-interface=all-ppp tcp-mss=1441-65535 log=no log-prefix="" 
     
    chain=output action=accept src-address-list=nobalance log=no log-prefix="" 
     
    chain=prerouting action=mark-connection new-connection-mark=1-wan passthrough=yes connection-state=new dst-address-list=1-link in-interface=5-servers log=no log-prefix="" 
     
    chain=prerouting action=mark-connection new-connection-mark=2-wan passthrough=yes connection-state=new dst-address-list=2-link in-interface=5-servers log=no  log-prefix="" 
     
    chain=prerouting action=mark-connection new-connection-mark=3-wan passthrough=yes connection-state=new dst-address-list=3-link in-interface=5-servers log=no  log-prefix="" 
     
    chain=prerouting action=mark-connection new-connection-mark=4-wan passthrough=yes connection-state=new dst-address-list=4-link in-interface=5-servers log=no  log-prefix="" 
     
    chain=prerouting action=mark-routing new-routing-mark=1-wan_route passthrough=no in-interface=5-servers connection-mark=1-wan log=no log-prefix="" 
     
    chain=prerouting action=mark-routing new-routing-mark=2-wan_route passthrough=no in-interface=5-servers connection-mark=2-wan log=no log-prefix="" 
     
    chain=prerouting action=mark-routing new-routing-mark=3-wan_route passthrough=no in-interface=5-servers connection-mark=3-wan log=no log-prefix="" 
     
    chain=prerouting action=mark-routing new-routing-mark=4-wan_route passthrough=no in-interface=5-servers connection-mark=4-wan log=no log-prefix="" 
     
    chain=prerouting action=accept protocol=tcp in-interface=5-servers dst-port=433 log=no log-prefix="" 
     
    chain=forward action=change-ttl new-ttl=set:30 passthrough=yes protocol=icmp log=no log-prefix="" 
     
    chain=prerouting action=mark-connection new-connection-mark=1-wan_conn passthrough=yes connection-state=new in-interface=1-pppoe log=no log-prefix=""
     
    chain=prerouting action=mark-connection new-connection-mark=1-wan_conn passthrough=yes connection-state=new in-interface=1-pppoe log=no log-prefix="" 
     
    chain=prerouting action=mark-connection new-connection-mark=2-wan_conn passthrough=yes connection-state=new in-interface=2-pppoe log=no log-prefix="" 
     
    chain=prerouting action=mark-connection new-connection-mark=3-wan_conn passthrough=yes connection-state=new in-interface=3-pppoe log=no log-prefix="" 
     
    chain=prerouting action=mark-connection new-connection-mark=4-wan_conn passthrough=yes connection-state=new in-interface=4-pppoe log=no log-prefix="" 
     
    chain=output action=mark-routing new-routing-mark=1-to_wan passthrough=yes connection-mark=1-wan_conn log=no log-prefix="" 
     
    chain=output action=mark-routing new-routing-mark=2-to_wan passthrough=yes connection-mark=2-wan_conn log=no log-prefix="" 
     
    chain=output action=mark-routing new-routing-mark=3-to_wan passthrough=yes connection-mark=3-wan_conn log=no log-prefix="" 
     
    chain=output action=mark-routing new-routing-mark=4-to_wan passthrough=yes connection-mark=4-wan_conn log=no log-prefix="" 
     
    chain=prerouting action=accept dst-address=255.255.255.0/24 in-interface=5-servers log=no log-prefix="" 
     
    chain=prerouting action=accept dst-address=255.255.255.0/24 in-interface=5-servers log=no log-prefix="" 
     
    chain=prerouting action=mark-connection new-connection-mark=1-wan_conn passthrough=yes connection-state=new dst-address-type=!local in-interface=5-servers  per-connection-classifier=both-addresses-and-ports:4/0 log=no log-prefix="" 
     
    chain=prerouting action=mark-connection new-connection-mark=2-wan_conn passt per-connection-classifier=both-addresses-and-ports:4/1 log=no log-prefix="" 
     
    chain=prerouting action=mark-connection new-connection-mark=3-wan_conn passt per-connection-classifier=both-addresses-and-ports:4/2 log=no log-prefix="" 
     
    chain=prerouting action=mark-connection new-connection-mark=4-wan_conn passt per-connection-classifier=both-addresses-and-ports:4/3 log=no log-prefix="" 
     
    chain=prerouting action=mark-routing new-routing-mark=1-to_wan passthrough=y
     
    chain=prerouting action=mark-routing new-routing-mark=2-to_wan passthrough=y
     
    chain=prerouting action=mark-routing new-routing-mark=3-to_wan passthrough=y
     
    chain=prerouting action=mark-routing new-routing-mark=4-to_wan passthrough=y

  2. Em primeiro lugar altero o IP para uma classe privada, 10.0.0.0/8, 172.16.0.0/12 ou 192.168.0.0/16 pois o que voce esta usando e um IP Publico de internet.
    Segundo, marca todas as conexoes de entrada de cada link (de forma separada) com o destino a porta que voce quer e faz o redirecionamento a parti das marcações.
    Dependendo da versao do Mikrotik que voce esta usando isso vai varias mas a essência e a mesma.
    Por padrao a maioria dos adsl bloqueia a porta baixas de 0 a 1024 logo tenta usar uma porta alta. a 8080 ja peguei em alguns lugares broqueadas tambem.



  3. Boa noite,

    O IP realmente, estava em uma faixa errada, alterei para 10.0.0.0/8, mas ñ consigo acesso ainda, como faço redirecionamento pelas marcações?






Tópicos Similares

  1. Respostas: 3
    Último Post: 29-01-2015, 15:40
  2. Redirecionamento de Porta com modem em Bridge !
    Por freitascba no fórum Redes
    Respostas: 1
    Último Post: 31-10-2013, 15:12
  3. Redirecionamento de Portas em Modo Bridge
    Por carneirinhobad no fórum Redes
    Respostas: 7
    Último Post: 23-01-2012, 12:21
  4. Redirecionamento de portas (redir) + Squid
    Por no fórum Servidores de Rede
    Respostas: 3
    Último Post: 09-01-2003, 15:43
  5. redirecionamento de portas
    Por rlucatto no fórum Servidores de Rede
    Respostas: 8
    Último Post: 09-01-2003, 09:52

Visite: BR-Linux ·  VivaOLinux ·  Dicas-L