{"id":516,"date":"2020-11-15T22:00:24","date_gmt":"2020-11-15T21:00:24","guid":{"rendered":"https:\/\/www.main.tk\/?page_id=516"},"modified":"2021-05-22T09:56:40","modified_gmt":"2021-05-22T07:56:40","slug":"niezbedne-reguly-firewalla","status":"publish","type":"page","link":"http:\/\/www.main.tk\/?page_id=516","title":{"rendered":"Niezb\u0119dne regu\u0142y firewalla"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\"><span class=\"has-inline-color has-vivid-red-color\">Wst\u0119p<\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Firewall urz\u0105dze\u0144 Mikrotik to ich podstawowy atut. Jego prawid\u0142owe skonfigurowanie zasadza si\u0119 na odpowiedniej kolejno\u015bci regu\u0142. Regu\u0142a zakazuj\u0105ca przed regu\u0142\u0105 dopuszczaj\u0105c\u0105 odniesie ca\u0142kiem inny skutek jak odwrotne ustawienie regu\u0142. Generalnie je\u017celi co\u015b, jaki\u015b ruch sieciowy, zostanie wcze\u015bniej odrzucony to p\u00f3\u017aniejsze regu\u0142y go nie przywr\u00f3c\u0105, a jednocze\u015bnie pocz\u0105tkowe przepuszczenie jakiego\u015b ruchu gwarantuje, \u017ce p\u00f3\u017aniejsze regu\u0142y go nie odrzuc\u0105.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Najprostsz\u0105 polityk\u0105 jest dopuszczenie tylko tego co nas interesuje i odrzucanie ruchu pozosta\u0142ego. W ten spos\u00f3b najpro\u015bciej zapanowa\u0107 nad ka\u017cd\u0105 sieci\u0105.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"has-inline-color has-vivid-red-color\">Filter Rules<\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Pierwsz\u0105 regu\u0142\u0105 jak\u0105 powinni\u015bmy doda\u0107 jest regu\u0142a dopuszczaj\u0105ca ruch przekazywany dla po\u0142\u0105cze\u0144 ju\u017c nawi\u0105zanych. Dotyczy to powracaj\u0105cych odpowiedzi z sieci WAN.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"620\" height=\"629\" src=\"https:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_filter_rule_no1.jpg\" alt=\"\" class=\"wp-image-678\" srcset=\"http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_filter_rule_no1.jpg 620w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_filter_rule_no1-296x300.jpg 296w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_filter_rule_no1-100x100.jpg 100w\" sizes=\"auto, (max-width: 620px) 100vw, 620px\" \/><figcaption><em><span class=\"has-inline-color has-luminous-vivid-orange-color\">Zak\u0142adka General<\/span><\/em><\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"619\" height=\"628\" src=\"https:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_accept_new_firewall_rule.jpg\" alt=\"\" class=\"wp-image-677\" srcset=\"http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_accept_new_firewall_rule.jpg 619w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_accept_new_firewall_rule-296x300.jpg 296w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_accept_new_firewall_rule-100x100.jpg 100w\" sizes=\"auto, (max-width: 619px) 100vw, 619px\" \/><figcaption><em><span class=\"has-inline-color has-luminous-vivid-orange-color\">Zak\u0142adka Action<\/span><\/em><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Ostatnie regu\u0142a forward blokuje pozosta\u0142y ruch.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"617\" height=\"630\" src=\"https:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_filter_rule_no3.jpg\" alt=\"\" class=\"wp-image-684\" srcset=\"http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_filter_rule_no3.jpg 617w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_filter_rule_no3-294x300.jpg 294w\" sizes=\"auto, (max-width: 617px) 100vw, 617px\" \/><figcaption><em><span class=\"has-inline-color has-luminous-vivid-orange-color\">Pozosta\u0142y ruch forward &#8230;<\/span><\/em><\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"619\" height=\"567\" src=\"https:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_firewall_rule_non_public_addresses_action.jpg\" alt=\"\" class=\"wp-image-577\" srcset=\"http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_firewall_rule_non_public_addresses_action.jpg 619w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_firewall_rule_non_public_addresses_action-300x275.jpg 300w\" sizes=\"auto, (max-width: 619px) 100vw, 619px\" \/><figcaption><em><span class=\"has-inline-color has-luminous-vivid-orange-color\">&#8230; odrzucamy.<\/span><\/em><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Kolejna regu\u0142a dotyczy ruchu <em><span class=\"has-inline-color has-vivid-cyan-blue-color\">input <\/span><\/em>dla po\u0142\u0105cze\u0144 ju\u017c nawi\u0105zanych.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"617\" height=\"625\" src=\"https:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_filter_rule_no4.jpg\" alt=\"\" class=\"wp-image-690\" srcset=\"http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_filter_rule_no4.jpg 617w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_filter_rule_no4-296x300.jpg 296w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_filter_rule_no4-100x100.jpg 100w\" sizes=\"auto, (max-width: 617px) 100vw, 617px\" \/><figcaption><em><span class=\"has-inline-color has-luminous-vivid-orange-color\">Po\u0142\u0105czenia przychodz\u0105ce nawi\u0105zane i powi\u0105zane &#8230;<\/span><\/em><\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"619\" height=\"628\" src=\"https:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_accept_new_firewall_rule.jpg\" alt=\"\" class=\"wp-image-677\" srcset=\"http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_accept_new_firewall_rule.jpg 619w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_accept_new_firewall_rule-296x300.jpg 296w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_accept_new_firewall_rule-100x100.jpg 100w\" sizes=\"auto, (max-width: 619px) 100vw, 619px\" \/><figcaption><em><span class=\"has-inline-color has-luminous-vivid-orange-color\">&#8230; r\u00f3wnie\u017c je akceptujemy.<\/span><\/em><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Nast\u0119pnie blokujemy pakiety ICMP przychodz\u0105ce z sieci WAN czyli domy\u015blnie z Internetu.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"617\" height=\"628\" src=\"https:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_filter_rule_not_allow_icmp_from_wan.jpg\" alt=\"\" class=\"wp-image-694\" srcset=\"http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_filter_rule_not_allow_icmp_from_wan.jpg 617w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_filter_rule_not_allow_icmp_from_wan-295x300.jpg 295w\" sizes=\"auto, (max-width: 617px) 100vw, 617px\" \/><figcaption><em><span class=\"has-inline-color has-luminous-vivid-orange-color\">Erher1 jest interfejsem WAN-owskim i dlatego &#8230;<\/span><\/em><\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"619\" height=\"567\" src=\"https:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_firewall_rule_non_public_addresses_action.jpg\" alt=\"\" class=\"wp-image-577\" srcset=\"http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_firewall_rule_non_public_addresses_action.jpg 619w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_firewall_rule_non_public_addresses_action-300x275.jpg 300w\" sizes=\"auto, (max-width: 619px) 100vw, 619px\" \/><figcaption><em><span class=\"has-inline-color has-luminous-vivid-orange-color\">&#8230; odrzucamy takie pakiety przychodz\u0105ce na \u00f3w interfejs.<\/span><\/em><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Przedostatnim krokiem jest zezwolenie na po\u0142\u0105czenia WinBoxem z Mikrotik z sieci wewn\u0119trznej poprzez port 8291.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"644\" height=\"532\" src=\"https:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_filter_rule_allow_connection_8291port.jpg\" alt=\"\" class=\"wp-image-696\" srcset=\"http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_filter_rule_allow_connection_8291port.jpg 644w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_filter_rule_allow_connection_8291port-300x248.jpg 300w\" sizes=\"auto, (max-width: 644px) 100vw, 644px\" \/><figcaption><em><span class=\"has-inline-color has-luminous-vivid-orange-color\">Po\u0142\u0105czenia z naszej podsieci, poprzez interfejs bridge_for_LAN ustawiamy &#8230;<\/span><\/em><\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"619\" height=\"531\" src=\"https:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_firewaqll_rule_forward_established_related_action.jpg\" alt=\"\" class=\"wp-image-535\" srcset=\"http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_firewaqll_rule_forward_established_related_action.jpg 619w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_firewaqll_rule_forward_established_related_action-300x257.jpg 300w\" sizes=\"auto, (max-width: 619px) 100vw, 619px\" \/><figcaption><em><span class=\"has-inline-color has-luminous-vivid-orange-color\">&#8230; jako akceptowane.<\/span><\/em><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Ostatnim krokiem jest odrzucanie wszelkiego innego ruchu <em><span class=\"has-inline-color has-vivid-cyan-blue-color\">input<\/span><\/em>.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"619\" height=\"570\" src=\"https:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_firewall_rule_non_public_addresses_general.jpg\" alt=\"\" class=\"wp-image-576\" srcset=\"http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_firewall_rule_non_public_addresses_general.jpg 619w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_firewall_rule_non_public_addresses_general-300x276.jpg 300w\" sizes=\"auto, (max-width: 619px) 100vw, 619px\" \/><figcaption><em><span class=\"has-inline-color has-luminous-vivid-orange-color\">Pozosta\u0142y ruch przychodz\u0105cy<\/span><\/em><\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"500\" height=\"532\" src=\"https:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/country_blocked_action_rules.jpg\" alt=\"\" class=\"wp-image-421\" srcset=\"http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/country_blocked_action_rules.jpg 500w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/country_blocked_action_rules-282x300.jpg 282w\" sizes=\"auto, (max-width: 500px) 100vw, 500px\" \/><figcaption><em><span class=\"has-inline-color has-luminous-vivid-orange-color\">Odrzucamy pozosta\u0142y ruch przychodz\u0105cy<\/span><\/em><\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"has-inline-color has-vivid-red-color\">Regu\u0142a NAT<\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Aby po\u0142\u0105czy\u0107 sie\u0107 lokaln\u0105 z Internetem musimy doda\u0107 regu\u0142\u0119 NAT &#8211; translacji adres\u00f3w lokalnych na nasz adres zewn\u0119trzny.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"392\" height=\"485\" src=\"https:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_nat_masquerade-1.jpg\" alt=\"\" class=\"wp-image-613\" srcset=\"http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_nat_masquerade-1.jpg 392w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_nat_masquerade-1-242x300.jpg 242w\" sizes=\"auto, (max-width: 392px) 100vw, 392px\" \/><figcaption><em><span class=\"has-inline-color has-luminous-vivid-orange-color\">Wybieramy<\/span><\/em><span class=\"has-inline-color has-luminous-vivid-amber-color\"> <\/span><span class=\"has-inline-color has-vivid-cyan-blue-color\">srcnat<\/span><em><span class=\"has-inline-color has-luminous-vivid-orange-color\"> i nasz\u0105 sie\u0107 <\/span><\/em><span class=\"has-inline-color has-vivid-cyan-blue-color\">10.10.12.0<\/span><em><span class=\"has-inline-color has-luminous-vivid-orange-color\"> z mask\u0105<\/span><\/em><span class=\"has-inline-color has-luminous-vivid-amber-color\"> <\/span><span class=\"has-inline-color has-vivid-cyan-blue-color\">24<\/span><span class=\"has-inline-color has-luminous-vivid-orange-color\"><em> bitow\u0105 oraz interfejs <\/em><\/span><span class=\"has-inline-color has-vivid-cyan-blue-color\">WAN<\/span><span class=\"has-inline-color has-luminous-vivid-amber-color\">, <\/span><em><span class=\"has-inline-color has-luminous-vivid-orange-color\">w naszym przypadku <\/span><\/em><span class=\"has-inline-color has-vivid-cyan-blue-color\">ether1<\/span><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">W zak\u0142adce <em><span class=\"has-inline-color has-vivid-cyan-blue-color\">Action<\/span><\/em> wybieramy <em><span class=\"has-inline-color has-vivid-cyan-blue-color\">Maquarade<\/span><\/em>.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"401\" height=\"486\" src=\"https:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_nat_masquerade.jpg\" alt=\"\" class=\"wp-image-449\" srcset=\"http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_nat_masquerade.jpg 401w, http:\/\/www.main.tk\/wp-content\/uploads\/2020\/11\/mikrotik_nat_masquerade-248x300.jpg 248w\" sizes=\"auto, (max-width: 401px) 100vw, 401px\" \/><figcaption><span class=\"has-inline-color has-luminous-vivid-orange-color\"><em>Klikamy<\/em><\/span><span class=\"has-inline-color has-luminous-vivid-amber-color\"> <\/span><span class=\"has-inline-color has-vivid-cyan-blue-color\">OK<\/span><em><span class=\"has-inline-color has-luminous-vivid-orange-color\"> i mamy dost\u0119p do Internetu.<\/span><\/em><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Dzi\u0119kuj\u0119 i zapraszam do innych opis\u00f3w.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Wst\u0119p Firewall urz\u0105dze\u0144 Mikrotik to ich podstawowy atut. Jego prawid\u0142owe skonfigurowanie zasadza si\u0119 na odpowiedniej kolejno\u015bci regu\u0142. Regu\u0142a zakazuj\u0105ca przed regu\u0142\u0105 dopuszczaj\u0105c\u0105 odniesie ca\u0142kiem inny skutek jak odwrotne ustawienie regu\u0142. Generalnie je\u017celi co\u015b, jaki\u015b ruch sieciowy, zostanie wcze\u015bniej odrzucony to p\u00f3\u017aniejsze regu\u0142y go nie przywr\u00f3c\u0105, a jednocze\u015bnie pocz\u0105tkowe przepuszczenie jakiego\u015b ruchu gwarantuje, \u017ce p\u00f3\u017aniejsze regu\u0142y go nie odrzuc\u0105. Najprostsz\u0105 polityk\u0105 jest dopuszczenie tylko tego co [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":216,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-516","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"http:\/\/www.main.tk\/index.php?rest_route=\/wp\/v2\/pages\/516","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.main.tk\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"http:\/\/www.main.tk\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"http:\/\/www.main.tk\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/www.main.tk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=516"}],"version-history":[{"count":18,"href":"http:\/\/www.main.tk\/index.php?rest_route=\/wp\/v2\/pages\/516\/revisions"}],"predecessor-version":[{"id":1440,"href":"http:\/\/www.main.tk\/index.php?rest_route=\/wp\/v2\/pages\/516\/revisions\/1440"}],"up":[{"embeddable":true,"href":"http:\/\/www.main.tk\/index.php?rest_route=\/wp\/v2\/pages\/216"}],"wp:attachment":[{"href":"http:\/\/www.main.tk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=516"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}