Sedrakyan Serob
добрый день можете помочь когда поставил микротик не могли подключаться ФТП серверу(после нат )
[tv@MikroTik] /ip firewall filter> print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=input action=accept protocol=tcp in-interface=ISP-1 dst-port=8291
log=no log-prefix=""
1 ;;; FFTT
chain=forward action=accept protocol=tcp in-interface=ISP-1
src-port=21,22 log=no log-prefix=""
2 chain=input action=accept protocol=tcp in-interface=ISP-1 src-port=21,22
log=no log-prefix=""
3 chain=input action=accept protocol=tcp in-interface=ISP-2 src-port=21,22
log=no log-prefix=""
4 chain=forward action=accept protocol=tcp in-interface=ISP-2 src-port=21,22
log=no log-prefix=""
5 chain=forward action=accept protocol=tcp in-interface=ISP-3 src-port=21,22
log=no log-prefix=""
6 chain=input action=accept protocol=tcp in-interface=ISP-3 src-port=21,22
log=no log-prefix=""
7 ;;; accept ICMP
chain=input action=accept protocol=icmp
8 ;;; accept established,related
chain=forward action=accept connection-state=established,related
9 ;;; accept http & https from LAN
chain=forward action=accept protocol=tcp in-interface=LAN
out-interface=ISP-1 dst-port=80,443
10 ;;; accept http & https from LAN
chain=forward action=accept protocol=tcp in-interface=LAN
out-interface=ISP-2 dst-port=80,443 log=no log-prefix=""
11 ;;; accept http & https from LAN
chain=forward action=accept protocol=tcp in-interface=LAN
out-interface=ISP-3 dst-port=80,443 log=no log-prefix=""
12 ;;; Drop Invalid connections
chain=forward action=drop connection-state=invalid log=no log-prefix=""
13 ;;; Drop new forward WAN
chain=forward action=drop connection-state=new in-interface=ISP-1 log=no
log-prefix=""
14 ;;; Drop new forward WAN
chain=forward action=drop connection-state=new in-interface=ISP-3 log=no
log-prefix=""
15 ;;; Drop new forward WAN
chain=forward action=drop connection-state=new in-interface=ISP-2 log=no
log-prefix=""
Включить все в
ip firewall service-port
И не выключать там ничего, если не знаешь что это.