TOP

如果想要log file可以點set..超新新手...謝謝!..我插左張8GB SD入去了。。。呵呵~~ ...
炎冬 發表於 2011-9-7 02:50



    system > logging 入面可以加 log entries, 你加 firewall type 既就得, 之後你 d rules enable log 就 OK, 記得 config log file 個  "lines per file" 唔好太大, 否則大到 save 出問題的話有機會係 log rotate 時個 log service 會瓜柴

認真地想要 keep log 的話我會建議 remote syslog....最穩陣 + secure

TOP

本帖最後由 炎冬 於 2011-9-7 03:57 編輯
system > logging 入面可以加 log entries, 你加 firewall type 既就得, 之後你 d rules enable log ...
fakeman 發表於 2011-9-7 03:20



    thank you.. 隻450G真係好多野可以set...
其實如果想看Firewall的不正常log是不是好像我之前咁set便可以?

/ip firewall filter add action=log chain=input connection-state=invalid disabled=no in-interface=ether1-gateway log-prefix=INVALID

TOP

回復 1# hkfriends [/b

hkfriends 兄,
你的問題是否已解決?
因我都有同樣問題,可以分享一下你的經驗嗎?
先多謝

TOP

岩岩整好左個PPTP SERVER係公司connect返去.
雖然拎到DHCP派IP.都可以CONNECT返隻ROUTER.不過就過唔到LAN 去REMOTE DESKTOP返自己部機..係咪rule度要set返野?

TOP

回復  hkfriends [/b

hkfriends 兄,
你的問題是否已解決?
因我都有同樣問題,可以分享一下你的經驗嗎?
先 ...
sochung 發表於 2011-9-7 10:32


solved la

check with my last post, with screen shot

TOP

岩岩整好左個PPTP SERVER係公司connect返去.
雖然拎到DHCP派IP.都可以CONNECT返隻ROUTER.不過就過唔到LAN  ...
sinsinking 發表於 2011-9-7 10:48



    如果 lan port 係 master ..slave 咁..
interface .. ether2-master-local  (eg..)  .. set   arp = proxy-arp

TOP

回復 77# sk2k
搞掂.thx ching.

TOP

just collected last night, many thing to learn...

tried to hard reset one time last night, coz amending the DHCP Server IP range, then winbox cannot connect to router. Poor!
After reset, Bridge setting missed, don't know any affect...

TOP

just collected last night, many thing to learn...

tried to hard reset one time last night, coz amen ...
adamlee 發表於 2011-9-7 14:20



    /interface bridge
add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=enabled auto-mac=yes \
    disabled=no forward-delay=15s l2mtu=65535 max-message-age=20s mtu=1500 \
    name=bridge priority=0x8000 protocol-mode=none transmit-hold-count=6
/interface bridge port
add bridge=bridge disabled=no edge=auto external-fdb=auto horizon=none \
    interface=ether2-local path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge disabled=no edge=auto external-fdb=auto horizon=none \
    interface=ether3-local path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge disabled=no edge=auto external-fdb=auto horizon=none \
    interface=ether4-local path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge disabled=no edge=auto external-fdb=auto horizon=none \
    interface=ether5-local path-cost=10 point-to-point=auto priority=0x80
/interface bridge settings
set use-ip-firewall=no use-ip-firewall-for-pppoe=no use-ip-firewall-for-vlan=no

TOP