[研究所] MikroTik RouterOS 學習 (持續更新)

rainseason wrote:
各位前輩：因為小弟不...(恕刪)

/ip firewall nat
add action=dst-nat chain=dstnat dst-address-type=local \
dst-port=3389 protocol=tcp to-addresses=192.168.1.11

pctine wrote:
如果不安裝 como...(恕刪)

rainseason wrote:
多謝您的提問，我在w...(恕刪)

gfx wrote:
假如web serv...(恕刪)

rainseason wrote:
您好：非常感謝您的教...(恕刪)

rainseason wrote:
(例如，這台web server上面有七八個port都是對外界開放的，我希望這個web server上面的comodo可以辨識各式各樣不管什麼連線需求的真正來源IP)...(恕刪)

gfx wrote:
/ip firewall nat
add action=dst-nat chain=dstnat dst-address-type=local \
dst-port=3389 protocol=tcp to-addresses=192.168.1.11...(恕刪)

pctine wrote:
照理說 to-address=192.168.1.11 就夠了. (不需要再指定 dst-address-type=local)

gfx wrote:
加了dst-address-type=local 只會轉從pppoe-out或固定ip進來的連線;
不加的話含內網與內網的連接一律強制轉到to-address地址...(恕刪)

在"沒定義dst-port"或"in-interface"的狀態下全部轉到to-address
那真的大勢已去,大概Winbox也無從登入,得"重置ROS主機"了.

pctine wrote:
那倒不至於, winbox 連進去修正就好了.