Effectiveness of a script policy? Scheduler policy?
RouterOS general discussion

5 posts   •   Page 1 of 1
User avatar
elgo
Member Candidate
Member Candidate
 
Posts: 151
Joined: Sat Apr 02, 2011 2:34 am
Location: France

Effectiveness of a script policy? Scheduler policy?

by elgo » Tue Mar 20, 2012 3:08 pm

Hi,

I just wrote a short script to refresh the SMTP server IP address from its FQDN (since routerOS won't access anything except an @IP...), and see something strange: script policy is "read,test", but it still can change email server setup when run directly from CLI...
Code: Select all
name="script-SMTPrefresh" owner="elgo" policy=read,test last-started=mar/20/2012 12:56:12 run-count=4
     source=
       # refresh SMTP server address used for email notifications
       # because email parameter can't be a FQDN but only an IP address
       :local smtp [:resolve ("smtp.gmail.com")]
       /tool e-mail set address=$smtp
       :log info ("SMTP server updated: ".$smtp)


Why is this script behaving like it has "write" policy applied? Are script policies even effective?

Now, another question: what does a scheduler policy mean? Why would it be different from the script it runs?
RB450G - OpenWrt (so much more stable than with routerOS)
-> now: UBNT EdgeRouter Lite

(very unlikely to be MT customer again in the future)

leonset
Member Candidate
Member Candidate
 
Posts: 219
Joined: Wed Apr 01, 2009 9:09 pm

Re: Effectiveness of a script policy? Scheduler policy?

by leonset » Thu Mar 22, 2012 2:10 pm

Maybe it's because it needs to "write" a value into the smtp variable.

The only policies that I really use are "reboot" and "sensitive", the later to hide it from exports if the contain any kind of sensitive data like passwords, local IP's or whatever.

User avatar
elgo
Member Candidate
Member Candidate
 
Posts: 151
Joined: Sat Apr 02, 2011 2:34 am
Location: France

Re: Effectiveness of a script policy? Scheduler policy?

by elgo » Thu Mar 22, 2012 4:59 pm

leonset wrote:Maybe it's because it needs to "write" a value into the smtp variable.

I may have not been really clear: my script should need the "write" policy (it changes a parameter value), but it hasn't, and still behave like it has it (since the value is finally changed).
RB450G - OpenWrt (so much more stable than with routerOS)
-> now: UBNT EdgeRouter Lite

(very unlikely to be MT customer again in the future)

User avatar
elgo
Member Candidate
Member Candidate
 
Posts: 151
Joined: Sat Apr 02, 2011 2:34 am
Location: France

Re: Effectiveness of a script policy? Scheduler policy?

by elgo » Thu Mar 29, 2012 11:51 am

OK, so as far as I can see, nobody uses "scheduler policy" or "script policy" features, because, let's try to guess, it's not working the way it's supposed to be? Because as it's not a widely used feature, so as it usually happens in MT world, regressions aren't detected before long and nobody cares fixing them before even longer?
I know it's "only" supposed to be a security feature, but still, I don't get it.

Somehow it reminds me of the "VLAN-MODE" switch chip feature that you "should" set to "fallback" and not "secure" or... you'll get serious issues.
RB450G - OpenWrt (so much more stable than with routerOS)
-> now: UBNT EdgeRouter Lite

(very unlikely to be MT customer again in the future)

ManyX
Member Candidate
Member Candidate
 
Posts: 103
Joined: Sat Jan 07, 2006 1:48 pm
Location: PolanD

Re: Effectiveness of a script policy? Scheduler policy?

by ManyX » Sun Jul 01, 2012 11:47 am

I wants to add the policy to my client devices schedulers by automat

When I import by hand file with policy is work

Code: Select all
import file-name=file.rsc


but
when I write script to upload script from ftp server to change policy
it DON'T WORK!!!

Code: Select all
/tool fetch upload=no mode=ftp ascii=no address=1.1.1.1 user=ftp password=ftp src-path=file.rsc dst-path=file.rsc;
import file-name=file.rsc;


file.rsc
Code: Select all
/system scheduler set scheduler1 policy=sniff,telnet;


I am increasingly convinced that the ROS is like Swiss cheese full of holes

5 posts   •   Page 1 of 1

Who is online

Users browsing this forum: Bing [Bot], Exabot [Bot], Google [Bot], Sob and 34 guests

It is currently Sun Nov 23, 2014 8:00 pm