Код: Выделить всё
[shino@MikroTik] > /ip route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 83.211.195.1 1
1 A S 0.0.0.0/0 10.128.0.0 2
2 A S 0.0.0.0/0 83.211.195.1 1
3 S 0.0.0.0/0 10.128.0.0 2
4 ADC 10.128.0.0/32 10.128.0.23 sts 0
5 ADC 83.211.195.1/32 83.211.151.23 ms 0
6 ADC 192.168.88.0/24 192.168.88.1 bridge-local 0
Код: Выделить всё
[shino@MikroTik] > /ip firewall filter print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; Allow established connections
chain=input action=accept connection-state=established
1 ;;; Allow related connections
chain=input action=accept connection-state=related
2 ;;; Allow UDP
chain=input action=accept protocol=udp
3 ;;; Allow ICMP Ping
chain=input action=accept protocol=icmp
4 ;;; Access to router only from local network
chain=input action=accept src-address=192.168.88.0/24
5 ;;; All other inputs drop
chain=input action=drop
6 ;;; Drop invalid connection packets
chain=forward action=drop connection-state=invalid
7 ;;; Allow established connections
chain=forward action=accept connection-state=established
8 ;;; Allow related connections
chain=forward action=accept connection-state=related
9 ;;; Allow UDP
chain=forward action=accept protocol=udp
10 ;;; Allow ICMP Ping
chain=forward action=accept protocol=icmp
11 ;;; Access to internet from local network
chain=forward action=accept src-address=192.168.88.0/24 in-interface=bridge-local
12 ;;; vlc
chain=input action=accept protocol=tcp dst-address=192.168.88.245 routing-table=to_ms in-interface=ms dst-port=777
13 ;;; All other forwards drop
chain=forward action=drop
Код: Выделить всё
[shino@MikroTik] > /ip firewall nat print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=dstnat action=dst-nat to-addresses=192.168.88.245 to-ports=777 protocol=tcp in-interface=ms dst-port=777
1 chain=srcnat action=masquerade to-addresses=0.0.0.0 out-interface=ms
2 chain=srcnat action=masquerade out-interface=sts
Код: Выделить всё
[shino@MikroTik] > ip firewall mangle print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=prerouting action=accept src-address-list=local-networks dst-address-list=local-networks
1 chain=prerouting action=mark-connection new-connection-mark=ms_conn passthrough=yes in-interface=ms connection-mark=no-mark
2 chain=prerouting action=mark-connection new-connection-mark=sts_conn passthrough=yes in-interface=sts connection-mark=no-mark
3 chain=prerouting action=mark-connection new-connection-mark=ms_conn passthrough=yes dst-address-type=!local in-interface=bridge-local connection-mark=no-mark
per-connection-classifier=both-addresses:2/0
4 chain=prerouting action=mark-connection new-connection-mark=sts_conn passthrough=yes dst-address-type=!local in-interface=bridge-local connection-mark=no-mark
per-connection-classifier=both-addresses:2/1
5 chain=prerouting action=mark-routing new-routing-mark=to_ms passthrough=yes in-interface=bridge-local connection-mark=ms_conn
6 chain=prerouting action=mark-routing new-routing-mark=to_sts passthrough=yes in-interface=bridge-local connection-mark=sts_conn
7 chain=output action=mark-routing new-routing-mark=to_ms passthrough=yes connection-mark=ms_conn
8 chain=output action=mark-routing new-routing-mark=to_sts passthrough=yes connection-mark=sts_conn
12 ;;; vlc
chain=input action=accept protocol=tcp dst-address=192.168.88.245 routing-table=to_ms in-interface=ms dst-port=777
