hEX 6.4917
От провайдера подключение PPPoE и есть внешний IP.
Роутер новый, зашёл через WinBox, настроил соединение PPPoE, привязал IP ПК к MAC и открыл порты (всего 5: 3UDP+2TCP). Всё это через Quick Set. Но при проверке через 2ip пишет что порты закрыты. Почитал статьи с такой же проблемой, но везде всё очень по разному. Поскажите куда посмотреть? Какая нужна информация?
История такова, что подогнали новый hEX, а как пользоваться сказали копай сам, работает игровой сервер и нужно подключаться к нему, но вот порты открыть не могу, сервер своим софтом проверяет и говорит открыты, а клиент видит сервер, но пинг видит 9999 и не подключается. При проверке 2ip говорит закрыты порты. Ранее стоял старенький TP-Link и на нём работало.
[admin@MikroTik] > /export hide-sensitive
# nov/14/2024 20:49:39 by RouterOS 6.49.17
# software id = M6A4-B3HR
#
# model = RB750Gr3
# serial number = HGC09PGENG9
/interface bridge
add admin-mac=D4:01:C3:81:DC:1B auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether1 ] comment=WAN
set [ find default-name=ether2 ] comment="LAN FOXY"
set [ find default-name=ether3 ] comment="LAN MARGO"
set [ find default-name=ether4 ] comment="LAN TV"
set [ find default-name=ether5 ] comment="LAN WIFI"
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether1 name=pppoe-out1 \
use-peer-dns=yes user=stbm23kv62
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=pppoe-out1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
192.168.88.0
/ip dhcp-client
add comment=defconf interface=ether1
/ip dhcp-server lease
add address=192.168.88.253 client-id=1:58:11:22:b4:cf:ab comment=Foxy \
mac-address=58:11:22:B4:CF:AB server=defconf
add address=192.168.88.249 client-id=1:e4:fa:c4:64:95:9c comment="DECO M4R LR" \
mac-address=E4:FA:C4:64:95:9C server=defconf
add address=192.168.88.250 client-id=1:24:2f:d0:33:8e:8c comment="DECO M4R M" \
mac-address=24:2F:D0:33:8E:8C server=defconf
add address=192.168.88.252 client-id=1:f0:79:59:67:8c:6e comment=Margo \
mac-address=F0:79:59:67:8C:6E server=defconf
add address=192.168.88.242 client-id=1:4a:b6:25:8:d2:8 comment=\
"Redmi Note 13 Pro+ 5G" mac-address=4A:B6:25:08:D2:08 server=defconf
add address=192.168.88.251 client-id=1:f4:7b:5e:17:78:1 comment="TV Samsung" \
mac-address=F4:7B:5E:17:78:01 server=defconf
add address=192.168.88.243 client-id=1:42:69:b9:c9:41:8b comment=\
"Redmi Note 11 Pro+ 5G" mac-address=42:69:B9:C9:41:8B server=defconf
add address=192.168.88.248 client-id=1:e4:fa:c4:64:d6:d8 comment="DECO M4R K" \
mac-address=E4:FA:C4:64:D6:D8 server=defconf
add address=192.168.88.246 client-id=1:4:e:3c:61:5:2b comment="HP MFP 135w" \
mac-address=04:0E:3C:61:05:2B server=defconf
add address=192.168.88.247 client-id=1:28:e3:47:3:fe:c8 comment="MT Work" \
mac-address=28:E3:47:03:FE:C8 server=defconf
add address=192.168.88.240 client-id=1:62:c8:b7:8b:d:5 comment=\
"Lenovo Tap P11 Pro" mac-address=62:C8:B7:8B:0D:05 server=defconf
add address=192.168.88.245 client-id=1:94:a1:a2:3b:1a:2f comment="TV BOX" \
mac-address=94:A1:A2:3B:1A:2F server=defconf
add address=192.168.88.241 client-id=1:c6:19
a4:1:95 comment="Redmi 9T" \
mac-address=C6:19:CD:A4:01:95 server=defconf
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=\
192.168.88.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,77.88.8.8
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
"defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" \
connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=\
out,none out-interface-list=WAN
add action=dst-nat chain=dstnat comment="Conan Exiles" dst-port=7777 protocol=\
udp to-addresses=192.168.88.253 to-ports=7777
add action=dst-nat chain=dstnat comment="Conan Exiles" dst-port=7778 protocol=\
udp to-addresses=192.168.88.253 to-ports=7778
add action=dst-nat chain=dstnat comment="Conan Exiles" dst-port=27015 protocol=\
udp to-addresses=192.168.88.253 to-ports=27015
add action=dst-nat chain=dstnat comment="Conan Exiles" dst-port=7777 protocol=\
tcp to-addresses=192.168.88.253 to-ports=7777
add action=dst-nat chain=dstnat comment="Conan Exiles" dst-port=25575 protocol=\
tcp to-addresses=192.168.88.253 to-ports=25575
/system clock
set time-zone-name=Europe/Moscow
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
[admin@MikroTik] >
# nov/14/2024 20:49:39 by RouterOS 6.49.17
# software id = M6A4-B3HR
#
# model = RB750Gr3
# serial number = HGC09PGENG9
/interface bridge
add admin-mac=D4:01:C3:81:DC:1B auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether1 ] comment=WAN
set [ find default-name=ether2 ] comment="LAN FOXY"
set [ find default-name=ether3 ] comment="LAN MARGO"
set [ find default-name=ether4 ] comment="LAN TV"
set [ find default-name=ether5 ] comment="LAN WIFI"
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether1 name=pppoe-out1 \
use-peer-dns=yes user=stbm23kv62
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=pppoe-out1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
192.168.88.0
/ip dhcp-client
add comment=defconf interface=ether1
/ip dhcp-server lease
add address=192.168.88.253 client-id=1:58:11:22:b4:cf:ab comment=Foxy \
mac-address=58:11:22:B4:CF:AB server=defconf
add address=192.168.88.249 client-id=1:e4:fa:c4:64:95:9c comment="DECO M4R LR" \
mac-address=E4:FA:C4:64:95:9C server=defconf
add address=192.168.88.250 client-id=1:24:2f:d0:33:8e:8c comment="DECO M4R M" \
mac-address=24:2F:D0:33:8E:8C server=defconf
add address=192.168.88.252 client-id=1:f0:79:59:67:8c:6e comment=Margo \
mac-address=F0:79:59:67:8C:6E server=defconf
add address=192.168.88.242 client-id=1:4a:b6:25:8:d2:8 comment=\
"Redmi Note 13 Pro+ 5G" mac-address=4A:B6:25:08:D2:08 server=defconf
add address=192.168.88.251 client-id=1:f4:7b:5e:17:78:1 comment="TV Samsung" \
mac-address=F4:7B:5E:17:78:01 server=defconf
add address=192.168.88.243 client-id=1:42:69:b9:c9:41:8b comment=\
"Redmi Note 11 Pro+ 5G" mac-address=42:69:B9:C9:41:8B server=defconf
add address=192.168.88.248 client-id=1:e4:fa:c4:64:d6:d8 comment="DECO M4R K" \
mac-address=E4:FA:C4:64:D6:D8 server=defconf
add address=192.168.88.246 client-id=1:4:e:3c:61:5:2b comment="HP MFP 135w" \
mac-address=04:0E:3C:61:05:2B server=defconf
add address=192.168.88.247 client-id=1:28:e3:47:3:fe:c8 comment="MT Work" \
mac-address=28:E3:47:03:FE:C8 server=defconf
add address=192.168.88.240 client-id=1:62:c8:b7:8b:d:5 comment=\
"Lenovo Tap P11 Pro" mac-address=62:C8:B7:8B:0D:05 server=defconf
add address=192.168.88.245 client-id=1:94:a1:a2:3b:1a:2f comment="TV BOX" \
mac-address=94:A1:A2:3B:1A:2F server=defconf
add address=192.168.88.241 client-id=1:c6:19
a4:1:95 comment="Redmi 9T" \mac-address=C6:19:CD:A4:01:95 server=defconf
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=\
192.168.88.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,77.88.8.8
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
"defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" \
connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=\
out,none out-interface-list=WAN
add action=dst-nat chain=dstnat comment="Conan Exiles" dst-port=7777 protocol=\
udp to-addresses=192.168.88.253 to-ports=7777
add action=dst-nat chain=dstnat comment="Conan Exiles" dst-port=7778 protocol=\
udp to-addresses=192.168.88.253 to-ports=7778
add action=dst-nat chain=dstnat comment="Conan Exiles" dst-port=27015 protocol=\
udp to-addresses=192.168.88.253 to-ports=27015
add action=dst-nat chain=dstnat comment="Conan Exiles" dst-port=7777 protocol=\
tcp to-addresses=192.168.88.253 to-ports=7777
add action=dst-nat chain=dstnat comment="Conan Exiles" dst-port=25575 protocol=\
tcp to-addresses=192.168.88.253 to-ports=25575
/system clock
set time-zone-name=Europe/Moscow
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
[admin@MikroTik] >