You are really cool man! I watch your videos and study Mikrotik a little and set it up at work, since there is no time to study formally, and there is no money! Thank you! Hello from Kazakhstan!
Why does the router say on action DROP (on it self) rejected? And does NAT masquerade traffic with a bridge and (I know there is a difference) how about without a bridge but with NAT masquerade active?
Hi there, how to make a roll in the Mikrotik firewall that blocks from outside or internet to our Mikrotik router and network but our computer in the network can access the internet for more security ??? thnx
MikroTik firewalls are stateful, meaning if you add rules from your LAN to the internet that the traffic will be allowed. If you want to block traffic to your router you will use the input chain and then specify what traffic you want to block, same for networks behind the MikroTik except you will use FORWARD chain to drop/block those packets.
sorry, but i didn't get your point !!!i have a Lan , i want everyone from my lan can access to the internet, but from internet, nobody can access to mt lan for more security.
i think like your network as you have mentioned in your video. if you have a computer behind your Mikrotik and if you want to set a roll firewall Mikrotik that your computer can access to the internet, but no one from the internet can access to your pc for more security. you must set a roll as input chain and source ip :Any , Destination ip : your router ip and on in. interface you must select ether1 WAN? AMI I right? if you are going to do that .we can add a roll on firewall for more security
@@Martin-ot7xj I highly suggest speaking to a consultant to help you with what you are trying to configure, you can find a list of consultants on the MikroTik website here: mikrotik.com/consultants
how to setup firewall-nat to accept remote acces RDP only with VPN, i create a pool for vpn but how to accept remote acces just for vpn pool or address list
What process would be used to completely isolate WLAN clients from each other? I'm going to bridge my 2Ghz and 5GHz bands and I don't want the devices on my guest router to be able to talk to each other at all.
Man, God Bless, watching your video series has taken me from "RouterOS is too complicated for me to work with" to " I can work with this and learn it".
No, though that might be a good video to create. Will note it down and see if I can get around to it when I have a moment after finishing the other videos I have planned :)
