Thanks for all your videos, I've watched many of them. I think the people who would benefit the most from these sort of videos are the pro-sumer group who buy higher end equipment but don't have a full blown server rack or the necessary CCNA to configure all of it. There must be hundreds of people buying MikroTiks who have a home network, a network of things as well a camera network. I am in that boat and would benefit greatly from some VLAN and firewall rules specific to the kind of sandboxing needed for those types of networks. Thanks again for the great content even if it is over my pay grade for the most part.
Started watching your MTCNA Playlist. You videos are very helpful. i already do have experience with mikrotik and still have learnt a lot from your videos. gonna checkout all of your videos. Keep making them.
I watched the video. I didn't learn anthing new, but still would like to thank you for work you are doing and giving us tutorials. Keep up the great work. And great video by the way!
I my opinion first should go data flow diagram and only then firewall explanation. It is hard to get truly understanding of how exactly rules works without it. But keep doing, anyway it is a great content! And You really should mention how useful too use "Save mode" button when You management firewall rules. Just to not get a silly ;)
Working on them :D Just being kept a bit busy by my actual job right now so not having much flexibility with new videos at the moment :( As soon as they are ready I will upload!
Thanks for making this video. I could not understand it all... But as I need to research for upgrading my office small network, I would like to know how you would compare a Mikrotik router firewall with Fortigate 40E for example. For kind of uses would you recommend each of those firewalls?
Hi m8, your videos helped me a ton, even if I'm not new to mikrotik, and I wanted to ask you, do you maybe have a how to configure 2 gateways on the same interface. Long story short i have 2 public ip ranges that are on different sub nets and they are both on cisco port 2, and that's connected to mikrotik wan port who is in bridge mode. So i managed to get the route list to get the info of the second IP range and added it as second default ip with a different routing mark, but then I'm not sure should I use route rules, or firewall mangle or something third, I even got bridge-local to say it works for the new ip adress, but my FW rules don't get any packages when I try to go from a different ip ( inernet ) than my local. sry if I only confused you but the main idea is to have 2 public ip ranges that work on the same local network for web service hosting purpose, and my initial pack of static public ip.s were not enough.
Great video, thank you very much. Getting started with firewall rules is hard when you dont have a good teacher. 😎 I've a question about the blocked pings. In the first case we got a timeout, in the other a net unreachable. Why the difference? Then I've a remark: On my device even in fullscreen mode the text remains unreadable. If you'd reduce your screen resolution while recording the content would be better accessible on smartphones etc.
Great suggestion! If you are watching from a smart phone I can see how the text on Winbox may be a bit small. The difference between the responses are the actions that was set. The following two actions have the two reactions: Drop: silently discards packet, person pinging will just see timeout. Reject: send a reject message, person pinging will see net unreachable error.
Hi Mr, Please assist.. Apparently I have double NAT on my main router and clients router, How do I get rid of double NAT. I know I have to Masquerade , but is there a way to NOT Masquerade and bypass it to have a Open Firewall for VOiP to Register easier
Hello, if the packet is the router's address then it will be input, so if it was coming from LAN and the router's ip is example 192.168.0.1 and the destination in the IP packet is 192.168.0.1 the router will treat the chain as "INPUT"
Hi The Network Berg! Really appreciate your video. Is forward chain primarily used for if you have a server behind your router? I know you mentioned its for forwarding packets between the router, but is this forwarding also for traffic internally? E.g. from PC1 to PC2 on the same router/bridge
@@jacobjasser7626 If the two hosts are on the same range then their traffic will be passed on a broadcast level and will not hit the router. So if two PCs in 192.168.10.0/24 want to communicate they will do it directly through the switch.
@@TheNetworkBerg if internal host on 192.168.10.0/24 wants to speak to a server out in the internet, would this be considered forward chain? Would most forward chain rules apply to traffic originating from behind the router since it's NAT'd? Thank you for your help!
Thanks for all your videos, I've watched many of them.
I think the people who would benefit the most from these sort of videos are the pro-sumer group who buy higher end equipment but don't have a full blown server rack or the necessary CCNA to configure all of it.
There must be hundreds of people buying MikroTiks who have a home network, a network of things as well a camera network. I am in that boat and would benefit greatly from some VLAN and firewall rules specific to the kind of sandboxing needed for those types of networks. Thanks again for the great content even if it is over my pay grade for the most part.
Started watching your MTCNA Playlist.
You videos are very helpful. i already do have experience with mikrotik and still have learnt a lot from your videos.
gonna checkout all of your videos. Keep making them.
Great to hear!
Man i learn so much from your videos. Thanks for taking the time to upload these.
Thanks for the comment, happy you are learning from the videos :D!
Used them a long time and very secure for years.
Thank you! Please make more videos about Mikrotik 😀
Sure thing!
I watched the video. I didn't learn anthing new, but still would like to thank you for work you are doing and giving us tutorials. Keep up the great work. And great video by the way!
I appreciate that!
You are a great teacher...love the way you explained
He is a Network HERO. Like the movie Matrix. NEO.
Helpful slot of IT career
This is truly a fantastic video! Great work. The mikrotik firewall is really what sold me and got me interested in networking.
Thanks Landon, when I started using mangle rules to make traffic do what I wanted it to do I was very impressed!
very helpful video thanks
Dobra robota ;)
I my opinion first should go data flow diagram and only then firewall explanation. It is hard to get truly understanding of how exactly rules works without it. But keep doing, anyway it is a great content! And You really should mention how useful too use "Save mode" button when You management firewall rules. Just to not get a silly ;)
Hahaha that is true the Safe Mode has helped out many people when they make a little or even big mistake :D!
good job
Hi Berg,
still we are waiting for you new video as your mentioned on this vide 21:23. Please we are so exciting
Working on them :D Just being kept a bit busy by my actual job right now so not having much flexibility with new videos at the moment :( As soon as they are ready I will upload!
Yo, dude! Did you perhaps make an advanced mangle rule video as mentioned in this one ? Would like to know a bit more about mangle. Thank you
Thanks for making this video. I could not understand it all... But as I need to research for upgrading my office small network, I would like to know how you would compare a Mikrotik router firewall with Fortigate 40E for example. For kind of uses would you recommend each of those firewalls?
Hi, I would like you soon to be able to use a loop for your videos so that we can see clearly in any case! thank you
Hi m8, your videos helped me a ton, even if I'm not new to mikrotik, and I wanted to ask you, do you maybe have a how to configure 2 gateways on the same interface. Long story short i have 2 public ip ranges that are on different sub nets and they are both on cisco port 2, and that's connected to mikrotik wan port who is in bridge mode. So i managed to get the route list to get the info of the second IP range and added it as second default ip with a different routing mark, but then I'm not sure should I use route rules, or firewall mangle or something third, I even got bridge-local to say it works for the new ip adress, but my FW rules don't get any packages when I try to go from a different ip ( inernet ) than my local. sry if I only confused you but the main idea is to have 2 public ip ranges that work on the same local network for web service hosting purpose, and my initial pack of static public ip.s were not enough.
what is the emulatopr u using here in your video? for virtual routers?
Awesome
Thanks for the comment, appreciate it :D!
Great video, thank you very much. Getting started with firewall rules is hard when you dont have a good teacher. 😎
I've a question about the blocked pings. In the first case we got a timeout, in the other a net unreachable. Why the difference?
Then I've a remark: On my device even in fullscreen mode the text remains unreadable. If you'd reduce your screen resolution while recording the content would be better accessible on smartphones etc.
Great suggestion! If you are watching from a smart phone I can see how the text on Winbox may be a bit small. The difference between the responses are the actions that was set. The following two actions have the two reactions:
Drop: silently discards packet, person pinging will just see timeout.
Reject: send a reject message, person pinging will see net unreachable error.
Hi Mr, Please assist.. Apparently I have double NAT on my main router and clients router, How do I get rid of double NAT. I know I have to Masquerade , but is there a way to NOT Masquerade and bypass it to have a Open Firewall for VOiP to Register easier
if packet come in the router lan what will rule aply input ? if packet come in router cloudside what will rule output
Hello, if the packet is the router's address then it will be input, so if it was coming from LAN and the router's ip is example 192.168.0.1 and the destination in the IP packet is 192.168.0.1 the router will treat the chain as "INPUT"
Hi The Network Berg! Really appreciate your video. Is forward chain primarily used for if you have a server behind your router?
I know you mentioned its for forwarding packets between the router, but is this forwarding also for traffic internally? E.g. from PC1 to PC2 on the same router/bridge
If traffic is leaving from the server to something outside the router then it will use the Forward chain.
@@TheNetworkBerg does this also apply to traffic handled internally? E.g. internal host to internal host
@@jacobjasser7626 If the two hosts are on the same range then their traffic will be passed on a broadcast level and will not hit the router. So if two PCs in 192.168.10.0/24 want to communicate they will do it directly through the switch.
@@TheNetworkBerg if internal host on 192.168.10.0/24 wants to speak to a server out in the internet, would this be considered forward chain?
Would most forward chain rules apply to traffic originating from behind the router since it's NAT'd?
Thank you for your help!
how to create a group of ip addresses without dhcp ?
Would you like to create a dynamic address list? What do you want to do with the group of IP addresses?
But it not visual and understandable
So, That is very ugly "IN" :))
Dobra robota ;)