Manual:IP/Services: Difference between revisions
No edit summary |
No edit summary |
||
| Line 109: | Line 109: | ||
<tr> | <tr> | ||
<td><b>67/udp</b></td> | <td><b>67/udp</b></td> | ||
<td>Bootstrap protocol or [[DHCP | <td>Bootstrap protocol or [[DHCP Server]]</td> | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
<td><b>68/udp</b></td> | <td><b>68/udp</b></td> | ||
<td>Bootstrap protocol or [[DHCP | <td>Bootstrap protocol or [[DHCP Client]]</td> | ||
</tr> | </tr> | ||
<tr> | <tr> | ||
| Line 224: | Line 224: | ||
[[Category:Manual]] | [[Category:Manual]] | ||
Revision as of 15:40, 27 October 2009
Applies to RouterOS: v3, v4
Summary
Sub-menu: /ip service
This document lists protocols and ports used by various MikroTik RouterOS services. It helps you to determine why your MikroTik router listens to certain ports, and what you need to block/allow in case you want to prevent or grant access to the certain services. Please see the relevant sections of the Manual for more explanations.
Properties
Note that it is not possible to add new services, only existing service modifications are allowed.
| Property | Description |
|---|---|
| address (IP address/netmask; Default: 0.0.0.0/0) | IP address from which the service is accessible. Default value is '0.0.0.0/0' - any address. |
| certificate (name; Default: none) | The name of the certificate used by particular service. Applicable only for services that depends on certificates (www-ssl) |
| name (name; Default: none) | Service name |
| port (integer: 1..65535; Default: ) | The port particular service listens on |
Service Ports
Sub-menu: /ip firewall service-port
Hosts behind a NAT-enabled router do not have true end-to-end connectivity. Therefore some Internet protocols might not work in scenarios with NAT.
To overcome these limitations RouterOS includes a number of NAT helpers, that enable NAT traversal for various protocols.
| Helper | Description |
|---|---|
| FTP | FTP service helper |
| h323 | H323 service helper |
| irc | |
| PPTP | PPTP tunneling helper. |
| SIP | |
| tftp |
Protocols and ports
Table below shows the list of protocols and ports used by RouterOS.
| Proto/Port | Description |
|---|---|
| 20/tcp | FTP data connection |
| 21/tcp | FTP control connection |
| 23/tcp | Secure Shell (SSH) remote Login protocol |
| 23/tcp | Telnet protocol |
| 53/tcp 53/udp |
DNS |
| 67/udp | Bootstrap protocol or DHCP Server |
| 68/udp | Bootstrap protocol or DHCP Client |
| 80/tcp | World Wide Web HTTP |
| 123/udp | Network Time Protocol ( NTP) |
| 161/udp | Simple Network Management Protocol (SNMP) |
| 179/tcp | Border Gateway Protocol (BGP) |
| 443/tcp | Secure Socket Layer (SSL) encrypted HTTP |
| 500/udp | Internet Key Exchange (IKE) protocol |
| 520/udp 521/udp |
RIP routing protocol |
| 646/udp 521/udp |
LDP transport session |
| 646/tcp 521/udp |
LDP hello protocol |
| 1080/tcp | SOCKS proxy protocol |
| 1701/udp | Layer 2 Tunnel Protocol (L2TP) |
| 1723/tcp | Point-To-Point Tunneling Protocol (PPTP) |
| 1900/udp 2828/tcp |
Universal Plug and Play (uPnP) |
| 2000/tcp | Bandwidth test server |
| 5678/udp | Mikrotik Neighbor Discovery Protocol |
| 8080/tcp | HTTP Web Proxy |
| 8291/tcp | Winbox |
| 8728/tcp | API |
| 20561/udp | MAC winbox |
| /1 | ICMP |
| /4 | IPIP encapsulation |
| /47 | General Routing Encapsulation (GRE) - used for PPTP and EoIP tunnels |
| /50 | Encapsulating Security Payload for IPv4 (ESP) |
| /51 | Authentication Header for IPv4 (AH) |
| /89 | OSPF routing protocol |
| /112 | VRRP |