Scribd
Upload
138 views1 page

Regras Mkauth

This document contains firewall and network address translation (NAT) rules to filter and redirect traffic from a private subnet (10.3.0.0/22) through a NAT router at 172.31.255.2. The rules drop unwanted traffic and forward HTTP and HTTPS traffic to alternative ports on the NAT router. An IP pool and interface are also defined for the private subnet.

Uploaded by

Flavio Rodrigo Leonel
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
138 views1 page

Regras Mkauth

This document contains firewall and network address translation (NAT) rules to filter and redirect traffic from a private subnet (10.3.0.0/22) through a NAT router at 172.31.255.2. The rules drop unwanted traffic and forward HTTP and HTTPS traffic to alternative ports on the NAT router. An IP pool and interface are also defined for the private subnet.

Uploaded by

Flavio Rodrigo Leonel
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 1

/ip firewall filter

add action=drop chain=forward comment=CORTE dst-port=!53 protocol=udp src-addres


s-list=pgcorte
add action=drop chain=forward comment=CORTE dst-port=!80,85,443,445 protocol=tcp
src-address-list=pgcorte
/ip firewall nat
add action=dst-nat chain=dstnat comment=CORTE_HTTPS dst-address=!172.31.255.2 ds
t-port=443 protocol=tcp src-address-list=pgcorte to-addresses=172.31.255.2 to-po
rts=445
add action=dst-nat chain=dstnat comment=CORTE_HTTP dst-address=!172.31.255.2 dst
-port=80 protocol=tcp src-address-list=pgcorte to-addresses=172.31.255.2 to-port
s=85
/ip pool
add name=pgcorte ranges=10.3.0.2-10.3.3.254
/ip address
add address=10.3.0.1/22 broadcast=10.3.3.255 network=10.3.0.0 comment=CORTE inte
rface=porte
/ip firewall filter
add action=drop chain=forward comment=CORTE dst-port=!53 protocol=udp src-addres
s=10.3.0.2-10.3.3.254
add action=drop chain=forward comment=CORTE dst-port=!80,85,443,445 protocol=tcp
src-address=10.3.0.2-10.3.3.254
/ip firewall nat
add action=dst-nat chain=dstnat comment=CORTE_HTTPS dst-address=!172.31.255.2 ds
t-port=443 protocol=tcp src-address=10.3.0.2-10.3.3.254 to-addresses=172.31.255.
2 to-ports=445
add action=dst-nat chain=dstnat comment=CORTE_HTTP dst-address=!172.31.255.2 dst
-port=80 protocol=tcp src-address=10.3.0.2-10.3.3.254 to-addresses=172.31.255.2
to-ports=85

You might also like