Есть микротик, из внутренней сети пытаюсь подключится по ssh (22) к удаленному серверу, но соединение не устанавливается. Если на удаленном сервере поменять порт с 22 на другой, то микротик пропускает такой трафик и все работает. Куда копать и в роутере ли дело?
Firewallip firewall filter print
Flags: X - disabled, I - invalid, D - dynamic
0 X ;;; defconf: fasttrack
chain=forward action=fasttrack-connection connection-state=established,related log=no log-prefix=""
1 chain=forward action=drop src-address=192.168.0.0/24 out-interface-list=!WAN log=no log-prefix=""
2 X ;;; defconf: drop all not coming from LAN
chain=input action=drop in-interface-list=!LAN log=no log-prefix=""
3 ;;; defconf: drop all from WAN not DSTNATed
chain=forward action=drop connection-state=new connection-nat-state=!dstnat in-interface-list=WAN
4 ;;; defconf: accept established,related,untracked
chain=input action=accept connection-state=established,related,untracked
5 ;;; defconf: accept ICMP
chain=input action=accept protocol=icmp
6 ;;; defconf: accept in ipsec policy
chain=forward action=accept ipsec-policy=in,ipsec
7 ;;; defconf: accept out ipsec policy
chain=forward action=accept ipsec-policy=out,ipsec
8 ;;; defconf: accept established,related, untracked
chain=forward action=accept connection-state=established,related,untracked
9 ;;; defconf: drop invalid
chain=input action=drop connection-state=invalid log=no log-prefix=""
10 ;;; defconf: drop invalid
chain=forward action=drop connection-state=invalid log=no log-prefix=""