Другое «Найти ошибки в конфигурации»,
MikroTIk Firewall, компьютерные сети в Екатеринбурге.

Устройство MikroTik является маршрутизатором, через который компьютеры выходят в Интернет. По приведенным ниже конфигурациям определите: Почему из локальной сети не открываются интернет-сайты? Что надо сделать для того, чтобы интернет-сайты открывались? Конфигурация № 1 /ip/firewall/filter add action=accept chain=input comment="accept established, related" connection-state=established,related add action=drop chain=input comment="drop invalid" connection-state=invalid add action=accept chain=input comment="accept ICMP" protocol=icmp add action=accept chain=input comment="accept SNMP" dst-port=161 protocol=udp src-address=87.228.39.24 add action=accept chain=input comment="accept WinBox" dst-port=8291 protocol=tcp add action=drop chain=input comment="drop all from not LAN" in-interface=!bridge1 add action=accept chain=forward comment="accept established, related" connection-state=established,related add action=drop chain=forward comment="drop invalid" connection-state=invalid add action=drop chain=forward comment="drop all from WAN not DSTNATed" connection-nat-state=!dstnat in-interface=ether1-wan /ip/firewall/nat add action=dst-nat chain=dstnat comment=www dst-port=80 in-interface=ether1-wan protocol=tcp to-addresses=192.168.0.52 to-ports=80 add action=dst-nat chain=dstnat comment="DVR for mobile devices" in-interface=ether1-wan dst-port=5800 protocol=tcp to-addresses=192.168.0.52 to-ports=5800 Конфигурация № 2 /ip/firewall/filter add action=accept chain=input comment="accept established, related" connection-state=established,related add action=drop chain=input comment="drop invalid" connection-state=invalid add action=accept chain=input comment="accept ICMP" protocol=icmp add action=accept chain=input comment="accept SNMP" dst-port=161 protocol=udp src-address=87.228.39.24 add action=accept chain=input comment="accept WinBox" dst-port=8291 protocol=tcp add action=drop chain=input comment="drop all from not LAN" in-interface=!bridge1 add action=accept chain=forward comment="accept established, related" connection-state=established,related add action=drop chain=forward comment="drop invalid" connection-state=invalid add action=drop chain=forward comment="drop all from WAN not DSTNATed" connection-nat-state=!dstnat in-interface=ether1-wan /ip/firewall/nat add action=masquerade chain=srcnat out-interface=ether1-wan add action=dst-nat chain=dstnat comment=www dst-port=443 protocol=tcp to-addresses=192.168.0.52 to-ports=443 add action=dst-nat chain=dstnat comment="DVR for mobile devices" in-interface=ether1-wan dst-port=5800 protocol=tcp to-addresses=192.168.0.52 to-ports=5800 Конфигурация № 3 /ip/firewall/filter add action=accept chain=input comment="accept established, related" connection-state=established,related add action=drop chain=input comment="drop invalid" connection-state=invalid add action=accept chain=input comment="accept ICMP" protocol=icmp add action=accept chain=input comment="accept SNMP" dst-port=161 protocol=udp src-address=87.228.39.24 add action=accept chain=input comment="accept WinBox" dst-port=8291 protocol=tcp add action=drop chain=input comment="drop all from not LAN" in-interface=!bridge1 add action=drop chain=forward comment="accept established, related" connection-state=established,related add action=drop chain=forward comment="drop invalid" connection-state=invalid add action=drop chain=forward comment="drop all from WAN not DSTNATed" connection-nat-state=!dstnat in-interface=ether1-wan /ip/firewall/nat add action=masquerade chain=srcnat out-interface=ether1-wan add action=dst-nat chain=dstnat comment=www dst-port=443 in-interface=ether1-wan protocol=tcp to-addresses=192.168.0.52 to-ports=443 add action=dst-nat chain=dstnat comment="DVR for mobile devices" in-interface=ether1-wan dst-port=5800 protocol=tcp to-addresses=192.168.0.52 to-ports=5800 В документе будет продублировано задание и указана дополнительная информация по нему.