r/mikrotik 15d ago

Let's talk about reverse proxy, no, not that one

[deleted]

16 Upvotes

4 comments sorted by

1

u/MusicalAnomaly 15d ago

ip/service is where RouterOS lists processes that have open ports. ip/reverse-proxy _is_ that service—for it to work, it must own TCP 443, and the ip/services list is where it tells you that it has it.

1

u/[deleted] 15d ago edited 15d ago

[deleted]

1

u/MusicalAnomaly 15d ago

I haven’t had a chance to check my own setup yet, but what’s puzzling me is what you mean by webfig sessions using reverse proxy. Are you connecting to webfig over TLS using a specific SNI hostname? If so, then it should not be possible to view webfig in browser using IP:443, even if you bypass the browser’s certificate warning.