Quantcast
Channel: MikroTik
Viewing all articles
Browse latest Browse all 15394

General • Re: Outgoing SSH traffic is blocked

$
0
0
I can not SSH from within my network out to outside SSH servers

Your firewall is garbage and doesn't offer any protection worth mentioning. And this includes both router itself and (to a lesser degree) LAN behind the router.

The config which breaks ssh is an example for the above claim:
/ip firewall nat
add action=dst-nat chain=dstnat dst-port=22 protocol=tcp to-addresses=192.168.1.132 to-ports=22
This DST-NAT rule grabs every connection with destination port 22 and redirects it to some LAN machine. And that includes internet-bound connections.

Your router is running awfully old ROS version, if you want to stay on legacy ROS v6, you should upgrade to latest v6 version (6.49.11 at the moment of posting this). While v7 is newer and brings some new functionality, it requires more flash storage and gAP ac2 with its tiny 16MB can get into trouble due to flash storage exhaustion.

I strongly recommend you to netinstall the device, reset config to defaults and then make only minor changes (e.g. configure PPPoE and wireless).

Statistics: Posted by mkx — Fri Jan 12, 2024 7:51 pm



Viewing all articles
Browse latest Browse all 15394

Trending Articles