Community discussions

MikroTik App

Search found 132 matches

by shafiqrahman
Sun Nov 19, 2023 1:45 pm
Forum: Scripting
Topic: Need help completing a script. [SOLVED]
Replies: 8
Views: 2220

Re: Need help completing a script. [SOLVED]

From 6:15 am to 05:41 pm not a single firewall change. So, far holding very good. Thank you very much @Amm0. Yes, containers r troublesome, so far in my home environment I haven't found any trouble. Also, using Mcvlan in containers also reduced a lot of headaches.
by shafiqrahman
Sun Nov 19, 2023 1:52 am
Forum: Scripting
Topic: Need help completing a script. [SOLVED]
Replies: 8
Views: 2220

Re: Need help completing a script. [SOLVED]

Found out Netwatch implementation is easy to setup. Here is a config export: /tool netwatch add disabled=no down-script=\ "/ip firewall nat enable [find comment=pihole_bypass];" host=\ 192.168.188.25 http-codes="" interval=45s src-address=192.168.88.1 \ test-script=":local t...
by shafiqrahman
Sat Nov 18, 2023 10:34 pm
Forum: Scripting
Topic: Need help completing a script. [SOLVED]
Replies: 8
Views: 2220

Re: Need help completing a script. [SOLVED]

Thank you, for explaining. This new script doesn't generated by chatgpt. Its done by me. About to ask this after the script completation :resolve server= <host> . Thank you again for pointing out that,I have seen that error while script print, but kept it for later. I did have an iteration with if/e...
by shafiqrahman
Sat Nov 18, 2023 2:00 pm
Forum: Scripting
Topic: Need help completing a script. [SOLVED]
Replies: 8
Views: 2220

Re: Need help completing a script. [SOLVED]

So far I was able to partially complete the script. After a little bit of digging to me, it seems like :do..while should do the job. Then again after a suggestion in forums I found out that I need some nested loop, so I again implemented :foreach. Though its works, but partially. The issue is that :...
by shafiqrahman
Fri Nov 10, 2023 1:30 pm
Forum: Scripting
Topic: Need help completing a script. [SOLVED]
Replies: 8
Views: 2220

Re: Need help completing a script. [SOLVED]

:lol: Not really. But I did put in some effort :D. At least give me some hints, about what language MT script closely resembles. I can try to work up from there. :if ($success=true) do={ :if ($piholeUP=0) do={ /ip firewall nat disable[find comment~"pihole_bypass"]; }else={ :break } } :if (...
by shafiqrahman
Thu Nov 09, 2023 2:16 pm
Forum: Scripting
Topic: Need help completing a script. [SOLVED]
Replies: 8
Views: 2220

Need help completing a script. [SOLVED]

Had a script that disabled/enabled nat rules upon resolving domains. But, the script starts randomly failing. So I need to modify the script, as a non-programmer I am having difficulties completing the script. Here is the script: :local testDomains {"www.google.com" "www.facebook.com&...
by shafiqrahman
Mon Nov 06, 2023 3:15 pm
Forum: Scripting
Topic: [Script] Automatically change DNS if Pi-hole is no longer working
Replies: 51
Views: 23083

Re: [Script] Automatically change DNS if Pi-hole is no longer working

:lol: yeah you are right. Back then don't have a computer. It's kinda entertaining but like the concept. Btw, how are you? Been a long time :D
by shafiqrahman
Mon Nov 06, 2023 12:51 pm
Forum: Scripting
Topic: [Script] Automatically change DNS if Pi-hole is no longer working
Replies: 51
Views: 23083

Re: [Script] Automatically change DNS if Pi-hole is no longer working

I have been using this script science for two years without any issues: :local piholeDown [/ip firewall nat print count-only where comment~"pihole_bypass" && disabled] :local piholeDNS "192.168.188.25" :local testDomain "www.google.com" :if ($piholeDown > 0 ) do...
by shafiqrahman
Sun Nov 05, 2023 3:17 pm
Forum: Wireless Networking
Topic: Device connected to tplink repeater not getting ip's from Mikrotik DHCP [SOLVED]
Replies: 3
Views: 1941

Re: Device connected to tplink repeater not getting ip's from Mikrotik DHCP [SOLVED]

Thank you for replying. Yes. It is not a MT specific issue. But, it would've been great if worked. Then again it is what is it :D
by shafiqrahman
Sun Nov 05, 2023 2:38 pm
Forum: Wireless Networking
Topic: Device connected to tplink repeater not getting ip's from Mikrotik DHCP [SOLVED]
Replies: 3
Views: 1941

Device connected to tplink repeater not getting ip's from Mikrotik DHCP [SOLVED]

1 I followed the tp-link(https://www.tp-link.com/us/support/faq/227/) guide these are the logs generated by MT. I set 192.168.88.2 as the fixed ip for tplink. Here EA:xx:xx:xx:xx:xx is the tp-link router that needs to work as a wireless repeater and 88:xx:xx:xx:xx:xx is some device that trying to c...
by shafiqrahman
Mon Jan 24, 2022 3:51 pm
Forum: General
Topic: Winbox not connecting to router.
Replies: 18
Views: 13161

Re: Winbox not connecting to router.

wlan3 is the only interface because I wanted to make a virtual hidden interface to the router as a fail safe. So, that I can access the router, regardless of firewall rules. The alternative is to add wlan3 to LAN interface and forget about interface Manage altogether. I liked the line :D . But, the ...
by shafiqrahman
Fri Jan 21, 2022 7:13 pm
Forum: General
Topic: Winbox not connecting to router.
Replies: 18
Views: 13161

Re: Winbox not connecting to router.

Here is the config export: # jan/21/2022 23:02:24 by RouterOS 7.1.1 # software id = BM4W-X3GK # # model = RouterBOARD 962UiGS-5HacT2HnT # serial number = /interface bridge add admin-mac=xxxxxxx auto-mac=no comment=defconf name=bridge /interface ethernet set [ find default-name=ether3 ] advertise=\ 1...
by shafiqrahman
Tue Jan 18, 2022 1:58 pm
Forum: General
Topic: Winbox not connecting to router.
Replies: 18
Views: 13161

Re: Winbox not connecting to router.

Didn't get the chance to create the off bridge wlan, it was the regular wlan that I use to access the router. I was trying to saw you the scenario where device is connected to router , but router denying access to internet. I will try to create the off-brdige wlan and see if the problem persist. Wil...
by shafiqrahman
Mon Jan 17, 2022 4:18 pm
Forum: General
Topic: Winbox not connecting to router.
Replies: 18
Views: 13161

Re: Winbox not connecting to router.

Here is the issue so far what I could manage. The router is connected to the device, no logs about the device being disconnected from the router. But, no internet on the device. I had to disable/enable the wifi on the device to get it back online. I tried to connect using mac address but didn't work.
by shafiqrahman
Mon Jan 17, 2022 3:23 am
Forum: General
Topic: Winbox not connecting to router.
Replies: 18
Views: 13161

Re: Winbox not connecting to router.

Yes, I will definitely. I like the idea of having a separate WLAN outside of the bridge after the recent events blocking myself out of the router in the cold. And finally a use case scenario for an SSID name that I thought of, but couldn't figure out a use case. :D
by shafiqrahman
Sun Jan 16, 2022 10:26 pm
Forum: General
Topic: Winbox not connecting to router.
Replies: 18
Views: 13161

Re: Winbox not connecting to router.

1. Didn't configure ether5 as an off-bridge connection. Its dedicated for rpi. Which has some containers which need UPnP. 2. Devices on the ether5 don't need to access the router administration. 192.168.188.0/24 I left that intentionally. 3. No wlan for ios app, The issue only occurred after upgradi...
by shafiqrahman
Sun Jan 16, 2022 10:03 pm
Forum: Scripting
Topic: delete address list old than 7 days
Replies: 20
Views: 9598

Re: delete address list old than 7 days

Can i set a script to delete all items older than 7 days in a specific address list? thank you Why don't you specify, at the moment you place a IP on a address-list, that it has a lifetime of 7 days ? It will be removed automatically. Or do you want the script for existing entries ? How do I specif...
by shafiqrahman
Sun Jan 16, 2022 9:34 pm
Forum: General
Topic: Winbox not connecting to router.
Replies: 18
Views: 13161

Re: Winbox not connecting to router.

Here is my settings: # jan/17/2022 01:22:55 by RouterOS 7.1.1 # software id = BM4W-X3GK # # model = RouterBOARD 962UiGS-5HacT2HnT # serial number = /interface bridge add admin-mac=xxxxxxxxx auto-mac=no comment=defconf name=bridge /interface ethernet set [ find default-name=ether3 ] advertise=\ 100M-...
by shafiqrahman
Sun Jan 16, 2022 9:16 pm
Forum: General
Topic: Winbox not connecting to router.
Replies: 18
Views: 13161

Re: Winbox not connecting to router.

For it happens with IP address in ios. Not, sure about the mac address, never tried. Will report back. The weirdest part is that device's loss of internet. To my understanding it can happen for various reasons ( low signal strength, fail to establish secure connection). But, no internet on the devic...
by shafiqrahman
Sun Jan 16, 2022 9:06 pm
Forum: General
Topic: Winbox not connecting to router.
Replies: 18
Views: 13161

Re: Winbox not connecting to router.

I always use iP to log into. But, router kinda kicks the device out. I will let you know when the next occurrence occurs. access OFF the bridge Are you referring dedicating port for router access that you mentioned on your guides? Though, found this error in mikrotik ios app " failed to establi...
by shafiqrahman
Sun Jan 16, 2022 7:54 pm
Forum: General
Topic: Winbox not connecting to router.
Replies: 18
Views: 13161

Winbox not connecting to router.

My hAP AC is on router os 7.1.1. Since upgrading to router os I am having an issue with winbox failing to connect to the router. Never tested whether it occurs over ether or not. Only occurred to devices connected through the wifi. At first, the device lost the internet. After that, the device faile...
by shafiqrahman
Sun Jan 16, 2022 7:49 pm
Forum: General
Topic: Locked Out - RB951G-2HnD
Replies: 5
Views: 1352

Re: Locked Out - RB951G-2HnD

This article was created due to the above........
viewtopic.php?t=181718
Nice, worth a bookmark :D
by shafiqrahman
Sun Jan 16, 2022 10:48 am
Forum: General
Topic: Locked Out - RB951G-2HnD
Replies: 5
Views: 1352

Re: Locked Out - RB951G-2HnD

I had the same issue with my hAP AC. I am not sure what is your device is and what led you need to follow. Here, is what I did Step 1: Hold the reset button while powering up the device First beep. ( SFP light is on and not blinking) Step 2: Second beep. (SFP light will blink twice about half a seco...
by shafiqrahman
Sat Jan 15, 2022 5:53 am
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

Thank you @anav & @Sob for solving the issue. Also, @own3r1138 your post with screenshot gave me an easy understanding/setup guide for the client app. For documentation purpose I will answer the only unanswered question that I had. The answer is really simple. The question was Previous, firewall...
by shafiqrahman
Thu Jan 13, 2022 10:36 pm
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

/ip firewall filter add action=accept chain=input comment="defconf: accept established,related" \ connection-state=established,related add action=drop chain=input comment="defconf: drop invalid" connection-state=\ invalid add action=accept chain=input comment="defconf: acce...
by shafiqrahman
Thu Jan 13, 2022 9:45 pm
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

@anav firewall is working good. Here is the export: /interface ethernet set [ find default-name=ether3 ] advertise=\ 100M-half,100M-full,1000M-half,1000M-full set [ find default-name=sfp1 ] disabled=yes /interface wireguard add listen-port=13231 mtu=1420 name=Home /interface pppoe-client add add-def...
by shafiqrahman
Tue Jan 11, 2022 10:03 pm
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

Sorry, for the delayed response. 0.0.0.0/0 in the allowed address in the client peer section resolved the facebook/reddit issue. I tried to left the field automatic, but that failed. Had to add 0.0.0.0/0 to make it work. @Sob this helped Try to disable internet detect and check if it stops: now the ...
by shafiqrahman
Mon Jan 10, 2022 5:39 pm
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

Here is current configuration: # jan/09/2022 17:05:50 by RouterOS 7.1.1 # software id = BM4W-X3GK # # model = RouterBOARD 962UiGS-5HacT2HnT # serial number = /interface bridge add admin-mac=xxxxxxxx auto-mac=no comment=defconf name=bridge /interface ethernet set [ find default-name=ether3 ] advertis...
by shafiqrahman
Sun Jan 09, 2022 5:29 pm
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

My wg client is 192.168.40.2, router 192.168.88.1. 192.168.88.108 is another device on the 192.168.88.0/32 subnet. 192.168.188.21 is another device in another subnet. Ping from 192.168.40.2>192.168.88.1 ok 192.168.40.2>192.168.88.108 ok 192.168.40.2>192.168.188.21 failed 192.168.88.245<192.168.40.2 ...
by shafiqrahman
Sun Jan 09, 2022 1:37 pm
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

I did assign an ip address later on @mozerd. https://forum.mikrotik.com/viewtopic.php?t=181446#p903794 /ip address add address=192.168.88.1/24 comment=defconf interface=bridge network=\ 192.168.88.0 add address=192.168.188.1/24 comment=pinet interface=ether5 network=\ 192.168.188.0 add address=192.1...
by shafiqrahman
Sun Jan 09, 2022 8:45 am
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

And with WinBox you're also connecting to 192.168.88.1? Yes, 192.168.88.1 is the router,dns and wg server. After adding 192.168.88.1 in the DNS field of the wg client packets counts increased in wg server,peer & firewall rules. Reading all the post and out of curiosity I added 192.168.40.0/24 i...
by shafiqrahman
Sat Jan 08, 2022 8:24 pm
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

The online port checker did increase the packet count. Screen Shot 2022-01-09 at 00.07.03.png Screen Shot 2022-01-09 at 00.08.32.png Found out that whenever I tried to connect my router using wireguard, packet count increases. But the router still refuses. Adding 192.168.88.1 as DNS server in wg cli...
by shafiqrahman
Sat Jan 08, 2022 4:14 pm
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

IP->Cloud showing the same public address that of IP->Addresses pppoe-out1. My understanding about the NAT is limited and never tried NAT 1:1 before. Only thing ever tried is to configure a voip client that requires some incoming connections.
by shafiqrahman
Sat Jan 08, 2022 3:35 pm
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

My IP is dynamic, not static. I put a ddns address on wireguard client :(
by shafiqrahman
Sat Jan 08, 2022 4:02 am
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

Does this rule have any hits?
/ip firewall filter
add action=accept chain=input comment="Allow Wireguard" dst-port=13231 protocol=udp
No tx/rx for this rules.
add action=accept chain=forward dst-address=192.168.88.0/24 src-address=\
192.68.40.0/24
-didn't get this part :(
by shafiqrahman
Fri Jan 07, 2022 10:52 pm
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

Thank you @Sob replying so fast :D Flags: X - disabled 0 interface=Home public-key="xxxxxxxxxxxx" endpoint-address="" endpoint-port=0 current-endpoint-address="" current-endpoint-port=0 allowed-address=192.168.40.2/32 rx=0 tx=0 Still nothing. Update: Found this on the l...
by shafiqrahman
Fri Jan 07, 2022 10:22 pm
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

Here is the new configuration: # jan/08/2022 01:56:39 by RouterOS 7.1.1 # software id = BM4W-X3GK # # model = RouterBOARD 962UiGS-5HacT2HnT # serial number = /interface bridge add admin-mac=xxxxxx auto-mac=no comment=defconf name=bridge /interface ethernet set [ find default-name=ether3 ] advertise=...
by shafiqrahman
Fri Jan 07, 2022 3:37 pm
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

I always forgot about the safe mode :lol: . Hopefully i wont next time
by shafiqrahman
Fri Jan 07, 2022 7:16 am
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

Thank you, @anav for pointing out the unfiltered mac's IP. I forgot to remove them. 104.16.248.249 is cloudflare address. Okay I see your IP route................ dst-address=10.0.20.20.2 gwy=WG interface table=main. Want I want to know is if this is necessary as you have already assigned an IP addr...
by shafiqrahman
Wed Jan 05, 2022 10:19 pm
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

# jan/05/2022 18:35:54 by RouterOS 7.1.1 # software id = BM4W-X3GK # # model = RouterBOARD 962UiGS-5HacT2HnT # serial number = /interface bridge add admin-mac=xx:xx:xx:xx:xx:xx auto-mac=no comment=defconf name=bridge /interface ethernet set [ find default-name=ether3 ] advertise=\ 100M-half,100M-fu...
by shafiqrahman
Wed Jan 05, 2022 4:33 pm
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

Nope, nothing. wg ios successfully found my router external IP. But, no traffic in wg interface.
by shafiqrahman
Wed Jan 05, 2022 3:43 am
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

Ok, the orange one is gone :lol:
by shafiqrahman
Tue Jan 04, 2022 7:42 pm
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

Couldn't recall what was it, but here is the post that I made https://forum.mikrotik.com/viewtopic.php?t=174873#p858336 . But, removed the orange one any way, Probably, this is the one https://forum.mikrotik.com/viewtopic.php?t=141616#p698276 So, is it ok if I combine this two rules add address=192....
by shafiqrahman
Tue Jan 04, 2022 11:02 am
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

@own3r1138 thank you for the reply. That wasn't necessary. I tried to test your suggestion add action=accept chain=dstnat dst-address=10.0.20.20 in-interface=Home but, if I change the action from accept to dstnat router requires a port. Needs more tinkering. Thank you @Sob for the route info. I will...
by shafiqrahman
Mon Jan 03, 2022 10:24 pm
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

Re: How do I configure wireguard in new router os 7.1? [SOLVED]

Thank you @anav & @own3r1138 for replying. Sorry, replying late,I gave the iphone a random IP: /interface wireguard add listen-port=13231 mtu=1420 name=Home /interface wireguard peers add allowed-address=10.0.20.20/32 interface=Home public-key=\ For accessing the router I had added : /ip firewal...
by shafiqrahman
Tue Dec 21, 2021 3:39 am
Forum: General
Topic: How do I configure wireguard in new router os 7.1? [SOLVED]
Replies: 80
Views: 20852

How do I configure wireguard in new router os 7.1? [SOLVED]

My intention is to create a tunnel to my home network, something like Amplify teleport. So, that I can access my home mikrotik. My target is to configure my mikrotik as a wireguard server and all the devices get an IP from the DHCP server. My, router config is : # dec/21/2021 07:13:27 by RouterOS 7....
by shafiqrahman
Fri Dec 17, 2021 3:22 pm
Forum: General
Topic: Feature requests
Replies: 1740
Views: 631879

Re: Feature requests

Since, MikroTik added wireguard in the new ros 7.1. it will be nice if Mikrotik adds a VPN option(zero configuration) in the mikrotik app which works over dynamic ip's. So, that we can connect to our home network.
by shafiqrahman
Mon Aug 16, 2021 12:49 pm
Forum: Scripting
Topic: [Script] Automatically change DNS if Pi-hole is no longer working
Replies: 51
Views: 23083

Re: [Script] Automatically change DNS if Pi-hole is no longer working

what do you mean most probably not ? To me, the only thing I needed is to determine whether pihole is up or down. That , what the script does. It only checks whether pihole can resolve or not, then change accordingly. For instances , when the internet is down it also change the route through the ro...
by shafiqrahman
Sat Aug 14, 2021 10:02 pm
Forum: Scripting
Topic: [Script] Automatically change DNS if Pi-hole is no longer working
Replies: 51
Views: 23083

Re: [Script] Automatically change DNS if Pi-hole is no longer working

Most probably not. Not sure about that, but it worked perfectly for me. Try disabling your wan port and see what happens.
by shafiqrahman
Sun Aug 01, 2021 6:34 pm
Forum: General
Topic: SIP ALG issue not resolving. [SOLVED]
Replies: 18
Views: 3671

Re: SIP ALG issue not resolving. [SOLVED]

Thank you very much @biomesh and @sindy. All issues solved. Though, the voice is too noisy and broken but works. I will mark the thread solved soon. Here is the nat rule if someone encounters the same issues. /ip firewall service-port disable sip /ip firewall nat add chain=dstnat action=dst-nat to-a...
by shafiqrahman
Sun Aug 01, 2021 5:16 pm
Forum: General
Topic: SIP ALG issue not resolving. [SOLVED]
Replies: 18
Views: 3671

Re: SIP ALG issue not resolving. [SOLVED]

Thank you for the reply. I will try to implement what you said. New tinkering with the NAT rules yield this: 3cx firewall checker returns when I remove the to address detecting SIP ALG... not detected testing port 5060... full cone test failed But, if I add the to-address in nat rules 3cx yields det...
by shafiqrahman
Sun Aug 01, 2021 4:47 pm
Forum: General
Topic: SIP ALG issue not resolving. [SOLVED]
Replies: 18
Views: 3671

Re: SIP ALG issue not resolving. [SOLVED]

Probably this diagram will clarify things. Issue No.1 is similar to this https://forum.mikrotik.com/viewtopic.php?f=2&t=130314&p=870450#p640205 . But, for me adding WAN in incoming interface didn't yield any results. Update: Issue No.1 probably resolved by using /ip firewall nat add chain=ds...
by shafiqrahman
Sun Aug 01, 2021 9:48 am
Forum: General
Topic: hex router and 3cx
Replies: 7
Views: 1890

Re: hex router and 3cx

incoming interface=WAN interface in NAT rules? Which one 3cx UDP & TCP ?
by shafiqrahman
Sun Aug 01, 2021 9:45 am
Forum: General
Topic: SIP ALG issue not resolving. [SOLVED]
Replies: 18
Views: 3671

Re: SIP ALG issue not resolving. [SOLVED]

Its only has server IP and dynamic or static external address. If dynamic it's then uses FQDN.
by shafiqrahman
Sat Jul 31, 2021 8:21 pm
Forum: General
Topic: SIP ALG issue not resolving. [SOLVED]
Replies: 18
Views: 3671

Re: SIP ALG issue not resolving. [SOLVED]

Didn't worked. Changed the IPs as the picture above. Zoiper5 works if I login with a local IP of the asterisk server. Probably 3cx and firewall-related issue.
by shafiqrahman
Sat Jul 31, 2021 7:58 pm
Forum: General
Topic: SIP ALG issue not resolving. [SOLVED]
Replies: 18
Views: 3671

Re: SIP ALG issue not resolving. [SOLVED]

Like this ?
by shafiqrahman
Sat Jul 31, 2021 7:48 pm
Forum: General
Topic: SIP ALG issue not resolving. [SOLVED]
Replies: 18
Views: 3671

Re: SIP ALG issue not resolving. [SOLVED]

How, can I do that? Please, elaborate a little, two servers on two different subnets.
by shafiqrahman
Sat Jul 31, 2021 7:34 pm
Forum: General
Topic: SIP ALG issue not resolving. [SOLVED]
Replies: 18
Views: 3671

Re: SIP ALG issue not resolving. [SOLVED]

Still same.
by shafiqrahman
Sat Jul 31, 2021 6:40 pm
Forum: General
Topic: SIP ALG issue not resolving. [SOLVED]
Replies: 18
Views: 3671

Re: SIP ALG issue not resolving. [SOLVED]

Thank you for replying. Did you mean:
 ;;; 3CX Media UDP
      chain=dstnat action=dst-nat to-addresses=192.168.188.29 protocol=udp dst-port=9000-10999 log=no log-prefix="" 
by shafiqrahman
Sat Jul 31, 2021 5:15 pm
Forum: General
Topic: SIP ALG issue not resolving. [SOLVED]
Replies: 18
Views: 3671

SIP ALG issue not resolving. [SOLVED]

I am trying to make a gsm gateway using usb modem with chan_dongle, asterisk, and 3cx on docker. The main reason behind choosing 3cx was its softphone functionality in dynamic IP’s. Currently, 3cx running on a raspberry pi and asterisk on a virtual machine. So, far I was able to configure chan_dongl...
by shafiqrahman
Sun Jul 04, 2021 9:09 pm
Forum: Scripting
Topic: [Script] Automatically change DNS if Pi-hole is no longer working
Replies: 51
Views: 23083

Re: [Script] Automatically change DNS if Pi-hole is no longer working

I use pihole inside a container. But, glad it worked for you.
by shafiqrahman
Fri Jul 02, 2021 3:55 am
Forum: Scripting
Topic: [Script] Automatically change DNS if Pi-hole is no longer working
Replies: 51
Views: 23083

Re: [Script] Automatically change DNS if Pi-hole is no longer working

https://forum.mikrotik.com/viewtopic.php?f=13&t=175322&p=858329#p858329 This link might help you. Basically, all ethernet ports are attached to a bridge. You detach your desired ethernet port from that bridge. Make a DHCP server for that port,add ip addresses and define ip pool. Also there ...
by shafiqrahman
Wed Jun 30, 2021 10:56 pm
Forum: Scripting
Topic: [Script] Automatically change DNS if Pi-hole is no longer working
Replies: 51
Views: 23083

Re: [Script] Automatically change DNS if Pi-hole is no longer working

@Ddram,
Will you please share the unbound functionality or usage here? To my understanding unbound kinda unnecessary because mikrotik already act as a dns cache. If not I am interested too. Also, please let us know your test result with the new setup. Any update/issue will be highly appreciated. :D
by shafiqrahman
Sun May 23, 2021 12:28 am
Forum: General
Topic: Connect Two different Subnets
Replies: 9
Views: 1664

Re: Connect Two different Subnets

Please give me the name of the hotel, I wish to be paid directly. Nice one :)) I was serious LOL, Go through all the posts from this chap. He is being paid to do work clearly and yet doesnt want to pay someone for their expertise, or do the proper thing of taking courses, getting books and being pr...
by shafiqrahman
Sat May 22, 2021 8:16 pm
Forum: General
Topic: Connect Two different Subnets
Replies: 9
Views: 1664

Re: Connect Two different Subnets

Please give me the name of the hotel, I wish to be paid directly.
Nice one :))
by shafiqrahman
Sat May 22, 2021 8:00 pm
Forum: General
Topic: Winbox for linux
Replies: 17
Views: 64953

Re: Winbox for linux

That mac version was popular though. But, I replaced the exe inside with the 64bit version winbox exe mac. For mac crossover can also be used, I have few games in a single bottle. Also, unofficial winewrapper (only mac) developer is also a great guy, still directly troubleshoot issues via discord,
by shafiqrahman
Fri May 21, 2021 8:45 am
Forum: General
Topic: Mikrotik,pihole & unbound. [SOLVED]
Replies: 19
Views: 12156

Re: Mikrotik,pihole & unbound. [SOLVED]

Issue solved thank you @2frogs. If someone needed: Mikrotik new subnet /interface bridge port remove [find interface="ether5"] /interface list member add interface=ether5 list=LAN /ip address add address=192.168.188.1/24 comment=pinet interface=ether5 network=192.168.188.0 /ip pool add nam...
by shafiqrahman
Fri May 21, 2021 5:52 am
Forum: Beginner Basics
Topic: Find specific NAT rule
Replies: 13
Views: 4874

Re: Find specific NAT rule

Kinda, but still not working. The script should enable some NAT rule when pihole is down, and disable it when it is up again. ref: https://forum.mikrotik.com/viewtopic.php?f=2&t=174873&p=858144#p858144 . For some weird reason scheduler doing nothing. But, the script was nice though, thank yo...
by shafiqrahman
Fri May 21, 2021 5:37 am
Forum: Beginner Basics
Topic: How do I connect two subnet in a single router? [SOLVED]
Replies: 20
Views: 15090

Re: How do I connect two subnet in a single router? [SOLVED]

Thank you, @rextended I already removed that. The new config is still in testing,posted it just to inform you guys :D
by shafiqrahman
Thu May 20, 2021 9:48 pm
Forum: Beginner Basics
Topic: How do I connect two subnet in a single router? [SOLVED]
Replies: 20
Views: 15090

Re: How do I connect two subnet in a single router? [SOLVED]

Update report: @rextended Seems like removing /ip route add check-gateway=ping distance=1 gateway=104.16.248.249 routing-mark=to_ISP1 add check-gateway=ping distance=1 gateway=pppoe-out1 routing-mark=to_ISP1 add check-gateway=ping distance=2 gateway=104.16.249.249 routing-mark=to_ISP1 add distance=1...
by shafiqrahman
Thu May 20, 2021 7:58 pm
Forum: Beginner Basics
Topic: Find specific NAT rule
Replies: 13
Views: 4874

Re: Find specific NAT rule

Thank you , @rextended for clearing out the mess again :)) :D, Actually, that line was a part of fallback script. I am still ironing out again :D /ip fire nat :if ( [get [find where comment="pihole_bypass"] disabled] = yes) do={ :resolve google.com server=192.168.188.25; } on-error={ :put ...
by shafiqrahman
Thu May 20, 2021 5:50 pm
Forum: Beginner Basics
Topic: Find specific NAT rule
Replies: 13
Views: 4874

Re: Find specific NAT rule

Is this argument corect?
:if ([/ip firewall nat get [find where comment=pihole_bypass] disabled]=yes) do={
Seems, like the only thread discussing nat get find :D
by shafiqrahman
Thu May 20, 2021 5:25 am
Forum: Beginner Basics
Topic: Redirect outgoing DNS requets to internal DNS server
Replies: 15
Views: 21194

Re: Redirect outgoing DNS requets to internal DNS server

Almost, done. Only issue with fallback script and performance.
viewtopic.php?f=2&t=174873&p=858144#p858144 Post #5 by @2frogs.
viewtopic.php?f=13&t=175322&p=858137#p858137 Post #4 by @anav No.1 point.
by shafiqrahman
Thu May 20, 2021 4:12 am
Forum: General
Topic: Mikrotik,pihole & unbound. [SOLVED]
Replies: 19
Views: 12156

Re: Mikrotik,pihole & unbound. [SOLVED]

@2frogs Post #5 solves the issue, but the fallback script doesn't work.
by shafiqrahman
Thu May 20, 2021 1:54 am
Forum: Beginner Basics
Topic: How do I connect two subnet in a single router? [SOLVED]
Replies: 20
Views: 15090

Re: How do I connect two subnet in a single router? [SOLVED]

Thank you :D
Its done

/interface detect-internet> print
detect-interface-list: none
lan-interface-list: none
wan-interface-list: none
internet-interface-list: none
by shafiqrahman
Wed May 19, 2021 10:35 pm
Forum: Beginner Basics
Topic: How do I connect two subnet in a single router? [SOLVED]
Replies: 20
Views: 15090

Re: How do I connect two subnet in a single router? [SOLVED]

Thank you, @rextended. here is the result as per your suggestion: /ip upnp interfaces add interface=bridge type=internal add interface=pppoe-out1 type=external add interface=ether5 type=internal :D @anav, thank you :D. Here is the output: /ip neighbor discovery-settings set discover-interface-list=L...
by shafiqrahman
Wed May 19, 2021 7:54 am
Forum: Beginner Basics
Topic: How do I connect two subnet in a single router? [SOLVED]
Replies: 20
Views: 15090

Re: How do I connect two subnet in a single router? [SOLVED]

Thank you, @anav. { src-address-list="" } was a typo and removed. /interface list member is also as you mentioned. ENABLE LAN to WAN also changed to LAN from bridge the very first time you mentioned. The last two drop rules also removed. And the newly added rules were also reallocated as p...
by shafiqrahman
Wed May 19, 2021 4:40 am
Forum: Beginner Basics
Topic: How do I connect two subnet in a single router? [SOLVED]
Replies: 20
Views: 15090

Re: How do I connect two subnet in a single router? [SOLVED]

Here is the full config: # may/19/2021 06:28:44 by RouterOS 6.48.2 # # model = RouterBOARD 962UiGS-5HacT2HnT /interface bridge add admin-mac=xxxxxxxx auto-mac=no comment=defconf name=bridge /interface ethernet set [ find default-name=ether3 ] advertise=\ 100M-half,100M-full,1000M-half,1000M-full set...
by shafiqrahman
Wed May 19, 2021 2:07 am
Forum: Beginner Basics
Topic: How do I connect two subnet in a single router? [SOLVED]
Replies: 20
Views: 15090

Re: How do I connect two subnet in a single router? [SOLVED]

Thank you, @rextended , Will remove these rules and post an update.

for upnp
/ip upnp interfaces
add interface=bridge type=internal
add interface=ether1 type=external
Thoough, the isp connection is pppoe-out1.
by shafiqrahman
Wed May 19, 2021 1:09 am
Forum: Beginner Basics
Topic: How do I connect two subnet in a single router? [SOLVED]
Replies: 20
Views: 15090

Re: How do I connect two subnet in a single router? [SOLVED]

If you want to feel more secure you can always add these ones in the forward chain.
add chain=forward action=drop destport=53 protocol=tcp/udp \
in-interface-list=wan
This was the comment when you configure the firewall last time, so they must go? And is it ok if I add the ether 5 in /ip upnp?
by shafiqrahman
Tue May 18, 2021 10:57 pm
Forum: Beginner Basics
Topic: How do I connect two subnet in a single router? [SOLVED]
Replies: 20
Views: 15090

Re: How do I connect two subnet in a single router? [SOLVED]

Hello, @anav. Nice to see you dropping by and thank you for pointing out the mistakes. Seems, like add action=accept chain=forward comment="ENABLE LAN to WAN" in-interface=\ bridge out-interface-list=WAN the bridge portion was a mistake/typo during the securing process of the firewall. I d...
by shafiqrahman
Mon May 17, 2021 5:09 pm
Forum: Beginner Basics
Topic: How do I connect two subnet in a single router? [SOLVED]
Replies: 20
Views: 15090

Re: How do I connect two subnet in a single router? [SOLVED]

Thank you for the response. After applying /ip dhcp-server network add address=192.168.188.0/24 comment=pinet gateway=192.168.188.1 netmask=24 issue still remains. device IP on new subnet is 192.168.188.40. Pinging from 192.168.88.246 returns: ping 192.168.188.40 PING 192.168.188.40 (192.168.188.40)...
by shafiqrahman
Mon May 17, 2021 3:54 pm
Forum: Beginner Basics
Topic: How do I connect two subnet in a single router? [SOLVED]
Replies: 20
Views: 15090

How do I connect two subnet in a single router? [SOLVED]

My default subnet is 192.168.88.0/24 which has DHCP of its own. I have created another subnet 192.168.188.0/24 with its own DHCP. The target was that both subnet can communicate to each other and both have internet access. The original intention was to send all dns traffic to pihole for filtering ad...
by shafiqrahman
Sat May 15, 2021 5:44 pm
Forum: Scripting
Topic: [Script] Fallback script for DNS traffic redirection using DHCP Server without NAT rules..
Replies: 1
Views: 1696

Re: [Script] Fallback script for DNS traffic redirection using DHCP Server without NAT rules..

These scripts were elegantly enhanced by @2frogs https://forum.mikrotik.com/viewtopic.php?f=2&t=174873&p=857287#p856719 . So, all credits for this script go to @2frogs. Here is the final code for reference if someone needs it: :local IPsubnet "192.168.88.0/24" :local currentDNS :lo...
by shafiqrahman
Thu May 13, 2021 5:35 pm
Forum: General
Topic: Mikrotik,pihole & unbound. [SOLVED]
Replies: 19
Views: 12156

Re: Mikrotik,pihole & unbound. [SOLVED]

Changed the firewall as per your suggestion: /ip firewall filter add action=accept chain=input comment="defconf: accept established,related" \ connection-state=established,related add action=drop chain=input comment="defconf: drop invalid" connection-state=\ invalid add action=ac...
by shafiqrahman
Thu May 13, 2021 5:40 am
Forum: General
Topic: Mikrotik,pihole & unbound. [SOLVED]
Replies: 19
Views: 12156

Re: Mikrotik,pihole & unbound. [SOLVED]

After creating the new subnet, DHCP server leases shows the device. But, the device doesn't have any internet, neither I can ping that device from another subnet. I am posting my config file, any help will be highly appreciated. # may/13/2021 08:15:52 by RouterOS 6.48.2 # model = RouterBOARD 962UiGS...
by shafiqrahman
Tue May 11, 2021 3:36 pm
Forum: General
Topic: Mikrotik,pihole & unbound. [SOLVED]
Replies: 19
Views: 12156

Re: Mikrotik,pihole & unbound. [SOLVED]

Update: /interface bridge port remove [find interface="ether5"] /interface list member add interface=ether5 list=LAN /ip address add address=192.168.188.1/24 comment=pinet interface=ether5 network=192.168.188.0 /ip pool add name=pinet ranges=192.168.188.20-192.168.188.40 /ip dhcp-server ad...
by shafiqrahman
Tue May 11, 2021 5:48 am
Forum: General
Topic: Mikrotik,pihole & unbound. [SOLVED]
Replies: 19
Views: 12156

Re: Mikrotik,pihole & unbound. [SOLVED]

/Ip firewall filter add action=accept chain=forward comment="ENABLE LAN to WAN" in-interface=\ bridge out-interface-list=WAN add action=drop chain=forward comment="Drop All Else" add action=drop chain=forward dst-port=53 in-interface-list=WAN protocol=tcp add action=drop chain=f...
by shafiqrahman
Mon May 10, 2021 9:37 am
Forum: General
Topic: Mikrotik,pihole & unbound. [SOLVED]
Replies: 19
Views: 12156

Re: Mikrotik,pihole & unbound. [SOLVED]

Nat rule didn't work, probably the best route is to use a different subnet. Pihole kinda buggy by it self and I am using it in a docker, which makes it even buggier. Also, most official developer doesn't release an arm version of containers. Most containers for arm mostly developed by developers wit...
by shafiqrahman
Mon May 10, 2021 4:49 am
Forum: General
Topic: Mikrotik,pihole & unbound. [SOLVED]
Replies: 19
Views: 12156

Re: Mikrotik,pihole & unbound. [SOLVED]

Thank you for clarifying, this router is the only one I have and it seems like creating a new subnet for raspberry is the better choice. Which will take me a day or two to report back. Though, the script I made worked as intended but at the end its breaks the DoH. But, will you please do the honor o...
by shafiqrahman
Sun May 09, 2021 9:09 pm
Forum: Scripting
Topic: [Script] Fallback script for DNS traffic redirection using DHCP Server without NAT rules..
Replies: 1
Views: 1696

[Script] Fallback script for DNS traffic redirection using DHCP Server without NAT rules..

This script will act as a fallback mechanism in the scenario where redirected DNS fails. The original idea was Client --> Mikrotik-->pihole-->Mikrotik as a DNS--> wan You can find the full development in the original post https://forum.mikrotik.com/viewtopic.php?f=2&t=174873&p=856271#p856271...
by shafiqrahman
Sun May 09, 2021 8:50 pm
Forum: General
Topic: Mikrotik,pihole & unbound. [SOLVED]
Replies: 19
Views: 12156

Re: Mikrotik,pihole & unbound. [SOLVED]

I have somehow managed to complete the script. There is only a single issue that is "dhcp changed by" entries in logs. There are two variants, though they are both the same and do the same things. Script 1 :local gateway "192.168.88.1" :local currentDNS [/ip dhcp-server network g...
by shafiqrahman
Sun May 09, 2021 5:11 am
Forum: General
Topic: Mikrotik,pihole & unbound. [SOLVED]
Replies: 19
Views: 12156

Re: Mikrotik,pihole & unbound. [SOLVED]

Thank you for the reply. I have too many containers in my raspberry with their own static IP using macvlan, So, excluded the different subnet. So, I had this dhcp-server network setup with the nat rule you provided: /ip dhcp-server network add address=192.168.88.0/24 dns-server=192.168.88.5 gateway=...
by shafiqrahman
Thu May 06, 2021 1:37 pm
Forum: Scripting
Topic: [Script] Automatically change DNS if Pi-hole is no longer working
Replies: 51
Views: 23083

Re: [Script] Automatically change DNS if Pi-hole is no longer working

These are the command that are added: /ip dhcp-server network add address=192.168.88.0/24 dns-server=192.168.88.5 gateway=192.168.88.1 netmask=24 add address=192.168.88.5/32 dns-server=192.168.88.1 gateway=192.168.88.1 netmask=24 For fallback I modified the script and need some help, whether its wri...
by shafiqrahman
Thu May 06, 2021 1:05 am
Forum: General
Topic: DNS Failover
Replies: 24
Views: 18122

Re: DNS Failover

I am also searching for a DNS failover script. My intention was to route all traffic from the router (192.168.88.1) to pihole (192.168.88.5) then back to router and then out to WAN(using 1.1.1.1). Client --> Mikrotik-->pihole-->Mikrotik as a DNS--> wan After trying dst-nat rules nothing worked and f...
by shafiqrahman
Thu May 06, 2021 12:35 am
Forum: General
Topic: Mikrotik,pihole & unbound. [SOLVED]
Replies: 19
Views: 12156

Re: Mikrotik,pihole & unbound. [SOLVED]

Figured it out using /ip dhcp-server network add address=192.168.88.0/24 dns-server=192.168.88.5 gateway=192.168.88.1 netmask=24 add address=192.168.88.5/32 dns-server=192.168.88.1 gateway=192.168.88.1 netmask=24 Solution by @vecernik87 https://forum.mikrotik.com/viewtopic.php?t=141616#p698276 . Now...
by shafiqrahman
Fri Apr 30, 2021 6:59 pm
Forum: Beginner Basics
Topic: Redirect outgoing DNS requets to internal DNS server
Replies: 15
Views: 21194

Re: Redirect outgoing DNS requets to internal DNS server

I have been using my mikrotik with DoH since last year without any issues. So, I recently bought a raspberry pi for the purpose of blocking ads. My previous attempt of blocking ads with scripts in mikrotik doesn't go well. After some search I found this post and implemented this: /ip firewall nat ad...
by shafiqrahman
Thu Apr 29, 2021 7:17 pm
Forum: General
Topic: Mikrotik,pihole & unbound. [SOLVED]
Replies: 19
Views: 12156

Re: Mikrotik,pihole & unbound. [SOLVED]

Yes, as a Doh client, following this post https://forum.mikrotik.com/viewtopic.php?f=2&t=164078&p=818234#p818234 . Netwatch will solve the dns reliability problem. Currently getting a second pihole is not an option. I will be okay without the 2nd pihole. But , how do I route the dns traffic ...
by shafiqrahman
Thu Apr 29, 2021 5:27 pm
Forum: General
Topic: Mikrotik,pihole & unbound. [SOLVED]
Replies: 19
Views: 12156

Mikrotik,pihole & unbound. [SOLVED]

I have been using my mikrotik with DoH since last year without any issues. So, I recently bought a raspberry pi for the purpose of blocking ads. My previous attempt of blocking ads with scripts in mikrotik doesn't go well. Though, pi hole itself has its own issue, but the main thing is that its reli...
by shafiqrahman
Mon Sep 21, 2020 10:23 pm
Forum: General
Topic: doh server connect error network is unreachable
Replies: 9
Views: 7697

Re: doh server connect error network is unreachable

@DarkNate , sorry for replying late, how do I find those expanded ip's which are near me (lowest ping). For single isp with google server is the below example work? /ip dns set allow-remote-requests=yes query-server-timeout=100ms query-total-timeout=5s servers=8.8.8.8,8.8.4.4,2001:4860:4860::8888,??...
by shafiqrahman
Sun Aug 16, 2020 2:46 pm
Forum: General
Topic: doh server connect error network is unreachable
Replies: 9
Views: 7697

Re: doh server connect error network is unreachable

I have the same problem, specially after a power failure or a reboot. Sometimes its even preventing pppoe connection. My isp provides internet through pppoe. But, if I disbale to regular dns it starts working. /ip dns set allow-remote-requests=yes cache-max-ttl=2d use-doh-server=\ https://dns.google...
by shafiqrahman
Fri Jan 31, 2020 11:10 am
Forum: General
Topic: Reddit packet marking on address list.
Replies: 1
Views: 1269

Reddit packet marking on address list.

I want to mark packets for reddit, but apparently nothing is appearing on the address list. How do I mark the packets? Here is mangle rule for address list: ;;; reddit chain=prerouting action=add-dst-to-address-list src-address-list=reddit.com address-list=reddit address-list-timeout=none-dynamic lo...
by shafiqrahman
Wed Jan 01, 2020 10:03 am
Forum: General
Topic: Policy based routing and vpn
Replies: 10
Views: 5493

Re: Policy based routing and vpn

so, there is no working solution for that ?
by shafiqrahman
Thu Dec 26, 2019 9:38 am
Forum: General
Topic: Policy based routing and vpn
Replies: 10
Views: 5493

Re: Policy based routing and vpn

Like this? Mangle rule: chain=preoruting action=add-dst-to-address-list protocol=tcp address-list=reddit address-list-timeout=none-dynamic log=no log-prefix="" tls-host=reddit.com NAT rule: chain=srcnat action=masquerade src-address=192.168.88.0/24 dst-address-list=reddit out-interface=l2t...
by shafiqrahman
Wed Dec 25, 2019 9:00 am
Forum: General
Topic: Policy based routing and vpn
Replies: 10
Views: 5493

Re: Policy based routing and vpn

Can you please elaborate it a bit more?
by shafiqrahman
Thu Dec 19, 2019 7:13 am
Forum: General
Topic: Policy based routing and vpn
Replies: 10
Views: 5493

Re: Policy based routing and vpn

Anyone wiling to help please?
by shafiqrahman
Wed Dec 11, 2019 1:51 pm
Forum: General
Topic: Policy based routing and vpn
Replies: 10
Views: 5493

Re: Policy based routing and vpn

# dec/11/2019 15:53:51 by RouterOS 6.45.7 # software id = BM4W-X3GK # # model = RouterBOARD 962UiGS-5HacT2HnT # serial number = xxxxxxxxx /interface bridge add admin-mac=xx:xx:xx:xx:xx:xx auto-mac=no comment=defconf name=bridge /interface ethernet set [ find default-name=ether3 ] advertise=\ 100M-h...
by shafiqrahman
Wed Dec 11, 2019 7:15 am
Forum: General
Topic: Policy based routing and vpn
Replies: 10
Views: 5493

Policy based routing and vpn

I want to route a specific traffic through a vpn, prefrebably sstp (MS-sstp configuration from vpn gate). I was successfully able to connect to the vpn server, but my traffic not routing through the vpn. I followed this https://wiki.mikrotik.com/wiki/Policy_Base_Routing . Any help will be highly app...
by shafiqrahman
Tue Sep 24, 2019 5:02 pm
Forum: General
Topic: Block internet access based on schedule [SOLVED]
Replies: 1
Views: 1641

Block internet access based on schedule [SOLVED]

I am trying to block internet access of certain device based on their mac address on a scheduled time. Search result yields that adding the following firewall filter rule will do the job. add action=drop chain=forward comment=IPHONE src-mac-address=\ ab:cd:ef:gh:ij:kl time=12h15m-19h,sun,mon,tue,wed...
by shafiqrahman
Thu May 23, 2019 2:37 am
Forum: General
Topic: hAP ac and gigabit ethernet speed.
Replies: 1
Views: 890

hAP ac and gigabit ethernet speed.

I have a hAP ac directly connected to my pc through a cat6 cable. My pc's NIC is also gigbit capable. But, on windows side it shows 100mbps link speed. I tried to switch 1000mbps on the router os , but it loses connection. So, do I need to change anything on the router or get a good patch cable, by ...
by shafiqrahman
Mon Mar 18, 2019 7:09 pm
Forum: General
Topic: Static IP not showing at DHCP server.
Replies: 8
Views: 8005

Re: Static IP not showing at DHCP server.

I've connected an old tplink router with my hAP AC to eliminate wifi weak spot. Both router connected via lan port to lan port. On tplink side dhcp turned off, and static ip was assigned on the tplink. Everything, working as expected. I can login to tplink's webconfig, internet working. But, coudn't...
by shafiqrahman
Sat Mar 09, 2019 4:08 am
Forum: General
Topic: Raspberry PI Zero and RouterOS, usb interface, lte
Replies: 11
Views: 10353

Re: Raspberry PI Zero and RouterOS, usb interface, lte

Hi, I am planning on adding a Pi Zero to run a Pi-hole server. And the plan is to connect the raspberry data port into the hAP Ac USB port. So, does rb assign an ip address to the usb device? This post is the only post contains both hAP AC and a Pi-Zero. And what will be the Putty command for the co...
by shafiqrahman
Sun Mar 03, 2019 11:14 pm
Forum: General
Topic: Securing Mikrotik router using firewall rules causing issues. [SOLVED]
Replies: 21
Views: 5840

Re: Securing Mikrotik router using firewall rules causing issues. [SOLVED]

Thank You, Allow remote request enabled, All Dns servers added and add chain=forward action=drop destport=53 protocol=tcp/udp \
in-interface-list=wan also added to the firewall filter. So far gameranger still holding its connection, will let you know. Thank you again :D
by shafiqrahman
Sun Mar 03, 2019 8:22 pm
Forum: General
Topic: Securing Mikrotik router using firewall rules causing issues. [SOLVED]
Replies: 21
Views: 5840

Re: Securing Mikrotik router using firewall rules causing issues. [SOLVED]

Done,

Code: Select all

add action=dst-nat chain=dstnat comment=GameRanger dst-port=xxxx \
in-interface-list=WAN protocol=udp to-addresses=192.168.88.xxx to-ports=\
xxxx
Lets wait and see whats happens. Btw, what about the new DNS rule? Allow remote request is turned off.
by shafiqrahman
Sun Mar 03, 2019 8:06 pm
Forum: General
Topic: Securing Mikrotik router using firewall rules causing issues. [SOLVED]
Replies: 21
Views: 5840

Re: Securing Mikrotik router using firewall rules causing issues. [SOLVED]

Gameranger is a client, it needed an UDP port to open, that I did. Then, if some one host the game, the server will be on the internet and if I host then I will be the server. /ip firewall filter add action=accept chain=input comment="defconf: accept established,related" \ connection-state...
by shafiqrahman
Sun Mar 03, 2019 7:36 pm
Forum: General
Topic: Securing Mikrotik router using firewall rules causing issues. [SOLVED]
Replies: 21
Views: 5840

Re: Securing Mikrotik router using firewall rules causing issues. [SOLVED]

@anav Sorry for the delay needed some time to test the new settings. I changed the firewall rules as per your suggestion. Though, didn't changed the "allowed_to_router" list, cause every device on my network were dynamic. And it seems that assigning a static ip address to a Mac computer ca...
by shafiqrahman
Sat Mar 02, 2019 6:24 pm
Forum: General
Topic: Securing Mikrotik router using firewall rules causing issues. [SOLVED]
Replies: 21
Views: 5840

Re: Securing Mikrotik router using firewall rules causing issues. [SOLVED]

So, the green colored rules should be removed?
by shafiqrahman
Sat Mar 02, 2019 11:57 am
Forum: General
Topic: Securing Mikrotik router using firewall rules causing issues. [SOLVED]
Replies: 21
Views: 5840

Re: Securing Mikrotik router using firewall rules causing issues. [SOLVED]

Should I delete the green rules too? Going to try the the WAN settings in NAT . Actually I did was copy the upnp NAT rules, then disabled the upnp. It seems upnp took the ether1 by default. Update: Updated the In. Interface list to WAN. But, weird thing is that not after the implementation of rules,...
by shafiqrahman
Sat Mar 02, 2019 4:48 am
Forum: General
Topic: Securing Mikrotik router using firewall rules causing issues. [SOLVED]
Replies: 21
Views: 5840

Re: Securing Mikrotik router using firewall rules causing issues. [SOLVED]

Based on your suggestion here is the new configuration with upnp disabled and port forwarded: # mar/02/2019 08:13:35 by RouterOS 6.43.12 # software id = BM4W-X3GK # # model = RouterBOARD 962UiGS-5HacT2HnT # serial number = xxxxxx /interface bridge add admin-mac=xx:xx:xx:xx:xx:xx auto-mac=no comment=...
by shafiqrahman
Fri Mar 01, 2019 7:46 pm
Forum: General
Topic: Securing Mikrotik router using firewall rules causing issues. [SOLVED]
Replies: 21
Views: 5840

Re: Securing Mikrotik router using firewall rules causing issues. [SOLVED]

Thank you for the reply. /ip settings set rp-filter=strict changed from strict to loose /ip address add address=192.168.88.1/24 comment=defconf interface=ether2 network=\ 192.168.88.0 The interface is changed from ether2 to bridge . "Remove and disable upnp , not required and a security risk. /...
by shafiqrahman
Fri Mar 01, 2019 3:14 pm
Forum: General
Topic: Securing Mikrotik router using firewall rules causing issues. [SOLVED]
Replies: 21
Views: 5840

Re: Securing Mikrotik router using firewall rules causing issues. [SOLVED]

Here is the configuration: # mar/01/2019 18:37:27 by RouterOS 6.43.12 # software id = BM4W-X3GK # # model = RouterBOARD 962UiGS-5HacT2HnT # serial number = xxxxxxxxx /interface bridge add admin-mac=xx:xx:xx:xx:xx:xx auto-mac=no comment=defconf name=bridge /interface pppoe-client add add-default-rout...
by shafiqrahman
Fri Mar 01, 2019 5:02 am
Forum: General
Topic: Securing Mikrotik router using firewall rules causing issues. [SOLVED]
Replies: 21
Views: 5840

Securing Mikrotik router using firewall rules causing issues. [SOLVED]

I was trying to secure my router by following this firewall rules https://wiki.mikrotik.com/wiki/Manual:Securing_Your_Router . But, after implementing this rules I have issues with an application name Game Ranger. Sometimes I can sign in, but after few times Game Ranger lost connection and then it w...
by shafiqrahman
Fri Jan 18, 2019 9:30 am
Forum: General
Topic: How to fast track local bandwidth? [SOLVED]
Replies: 6
Views: 1427

Re: How to fast track local bandwidth? [SOLVED]

Thank You.
by shafiqrahman
Thu Jan 17, 2019 3:42 pm
Forum: General
Topic: How to fast track local bandwidth? [SOLVED]
Replies: 6
Views: 1427

Re: How to fast track local bandwidth? [SOLVED]

Yes, it is enabled in all ether ports except the ether1 which is the internet connection.
by shafiqrahman
Thu Jan 17, 2019 3:12 pm
Forum: General
Topic: How to fast track local bandwidth? [SOLVED]
Replies: 6
Views: 1427

Re: How to fast track local bandwidth? [SOLVED]

Yes they are all in the same subnet and a bridge.
by shafiqrahman
Thu Jan 17, 2019 2:44 pm
Forum: General
Topic: How to fast track local bandwidth? [SOLVED]
Replies: 6
Views: 1427

How to fast track local bandwidth? [SOLVED]

I have a hAP AC. I have three computers and few wireless devices. Can anyone tell me how do I fast track local bandwidth, so that all my local devices communicate with each other at full bandwidth?
by shafiqrahman
Sun Apr 23, 2017 1:05 pm
Forum: RouterBOARD hardware
Topic: HAP AC
Replies: 538
Views: 196627

Re: HAP AC

There is a device (Amazon Fire) which disconnects and connects continuously, is there a way to make it stable? Another, thing is that , I use a broadband connection which prone to disconnection , with my previous router whenever something happens with the internet connection there is "Yellow tr...
by shafiqrahman
Sat Apr 22, 2017 9:42 pm
Forum: RouterBOARD hardware
Topic: hAP AC 5 GHZ issue
Replies: 5
Views: 2136

Re: hAP AC 5 GHZ issue

Thanks guys, solved the problem. By using "wifi analyzer' from google play. Search for a 5 GHz ssid. At first I thought the problem is on my phone, but later found out some 5ghz band. Configured that way and it worked. @Angelos , saved the screenshot for later use, currently don't have an iphon...
by shafiqrahman
Wed Apr 12, 2017 12:02 pm
Forum: RouterBOARD hardware
Topic: hAP ac (RB962UiGS-5HacT2HnT) - very weak TX power
Replies: 18
Views: 8025

Re: hAP ac (RB962UiGS-5HacT2HnT) - very weak TX power

Will anyone share the hAP AC temperature and the respecting room temperature. Mine is at 51-60c with 3% cpu use at 36c room temperature. It is OK, it will work fine even with CPU at more than 70C Thank you. Since its constantly hovering at 60c. I turned off the SFP and poe out at ether 5. Since the...
by shafiqrahman
Wed Apr 12, 2017 11:57 am
Forum: RouterBOARD hardware
Topic: hAP ac (RB962UiGS-5HacT2HnT) - very weak TX power
Replies: 18
Views: 8025

Re: hAP ac (RB962UiGS-5HacT2HnT) - very weak TX power

Will anyone share the hAP AC temperature and the respecting room temperature. Mine is at 51-60c with 3% cpu use at 36c room temperature.
by shafiqrahman
Wed Apr 12, 2017 1:51 am
Forum: RouterBOARD hardware
Topic: hAP AC 5 GHZ issue
Replies: 5
Views: 2136

hAP AC 5 GHZ issue

Recently, bought a hAP AC. I have three 5GHz enabled device at home (Htc One M7, Sony Xpeeria Z Ultra and Samsung S7 Edge). But, only the xperia phone is seeing the 5GHz ssid. Am I configured it wrong? I am attaching the configuration file. Any help will be highly appreciated.