when we manually connect to the device for downloading data via FTP (port 22) or connecting for diagnostic purposes (port 80). I want to use the mikrotik router between the satellite terminal and the measurement device to block any traffic except for that between the measurement device and our work network (i.e. As the firewall is located at the ground station, it can't stop the measurement device from sending requests over the satellite network - even if they are dropped at the firewall, they have already travelled through the satellite network and have been counted as data against our quota and are hence very expensive! Unfortunately this only stops unwanted incoming traffic. The satellite provider has a firewall that prevents incoming connections from anywhere except our business network (about 5 subnets of public IPs - all of our egress IP addresses basically). The connected measurement device is not something that we can easily configure and it is always trying to ping servers and is consuming large volumes of data unchecked.Ĭurrently I have port forwarding set up on the satellite terminal to direct incoming connections to the measuremnt device (external port X is forwarded to :80 and external port Y is forwarded to :22) data is very expensive and we want to be able to connect to the device via FTP to download data periodically. I have a measurement device connected to a BGAN satellite terminal (which frustratingly has no firewall).

Add hotspot to lucidchart org chart