Firewall-2

University of Babylon, IT College
Information Network Dep., Third Class, Second Semester
MTCNA Course
MikroTik Certified Network Associate
2015-2016
By M.Sc. I.T Alaa A. Mahdi
DNS and DST-NAT
Force users to use specified DNS server
This is just simple firewall rule which will
force all Your users behind RB to use DNS
server which You will define.
This rule will force all users with custom defined DNS server to
use 192.168.88.1 as their DNS server, this rule will simply
redirect all request sent to ANY-IP:53 to 192.168.88.1:53
/ip firewall filter nat
add chain=dstnat protocol=tcp dst-port=53
action=dst-nat to-addresses=192.168.88.1
to-ports=53
add chain=dstnat protocol=udp dst-port=53
action=dst-nat to-addresses=192.168.88.1 toports=
53
Address-List
Firewall address lists allow to create a list of
IP addresses to be used for packet matching.
Firewall address lists allow user to create lists
of IP addresses grouped together. Firewall
filter, mangle and NAT facilities can use
address lists to match packets against them.
Name - specify the name of the address list to
add IP address to.
address (IP address/netmask | IP address-IP
address) - specify the IP address or range to
be added to the address list.