Community discussions

Search found 41 matches

by SilverNodashi
Tue Aug 14, 2018 11:50 pm
Forum: Announcements
Topic: Photos of towers and masts
Replies: 35
Views: 6521

Re: Photos of towers and masts

Small towers fixed on the rocks with steel rods or galvanized iron piles, We use them for small POPs in the rural areas of Sardinia (IT). Very often in the hills it is not possible to have electricity, so we use 24V photovoltaic panels and batteries. The low power consumption of MT devices allows f...
by SilverNodashi
Tue Aug 14, 2018 11:48 pm
Forum: Announcements
Topic: Photos of towers and masts
Replies: 35
Views: 6521

Re: Photos of towers and masts

Is it possible to use a solar tower in country like India?
Is it possible to have a forum without spammers?
by SilverNodashi
Fri Aug 03, 2018 9:21 am
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 108
Views: 11055

Re: Winbox vulnerability: please upgrade

According to changelog it is fixed
What's new in 6.40.8 (2018-Apr-23 11:34):

!) winbox - fixed vulnerability that allowed to gain access to an unsecured router;
So why would they post this again if it was fixed in April?
by SilverNodashi
Thu May 31, 2018 7:53 pm
Forum: Beginner Basics
Topic: Cannot connect to other LAN via VPN
Replies: 8
Views: 317

Re: Cannot connect to other LAN via VPN

The IP subnets I got from the description in your original post The 3 main subnets are: home: 192.168.10.0/24 HQ: 192.41.100.0/24 Remote Office: 192.168.6.0/24 The home and remote sides looks ok. There are 2 different route prints for HQ, not sure why. Also, if I follow the route numbers, there see...
by SilverNodashi
Thu May 31, 2018 12:12 am
Forum: Beginner Basics
Topic: Cannot connect to other LAN via VPN
Replies: 8
Views: 317

Re: Cannot connect to other LAN via VPN

You will need the following routes at: HQ: 192.168.6.0/24 via PPTP-1 (To Remote) 192.168.10.0/24 Via PPTP-2 (To Home) Home: 192.168.1.0/24 via PPTP-1 (To HQ) 192.168.6.0/24 via PPTP-1 (To Remote via HQ) Remote: 192.168.1.0/24 via PPTP-1 (To HQ) 192.168.10.0/24 via PPTP-1 (To Home via HQ) I have the...
by SilverNodashi
Wed May 30, 2018 11:58 pm
Forum: Beginner Basics
Topic: Cannot connect to other LAN via VPN
Replies: 8
Views: 317

Re: Cannot connect to other LAN via VPN

traffic towards 192.168.6.20 should be routed to 172.16.16.106, not 172.16.16.1
change your static routing at home router
That doesn't make sense. 172.16.16.106 sits on the other network and cannot be reached from 1921.168.10.1 directly. Even adding it as a route shows it as unreachable
by SilverNodashi
Wed May 30, 2018 10:26 am
Forum: Beginner Basics
Topic: Cannot connect to other LAN via VPN
Replies: 8
Views: 317

Cannot connect to other LAN via VPN

Hi, Can someone please help? The setup is as follows: We use PPTP VPN on internal IP range 172.16.16.0/24. My house IP range is 192.168.10.0/24. The HQ is on 192.41.100.0/24 and the other on 192.168.6.0/24. I setup NAT and routing on both ends, but cannot connect to PC's and printers on the 192.168....
by SilverNodashi
Mon Apr 02, 2018 2:08 pm
Forum: Announcements
Topic: Future of LTE products, user feedback requested
Replies: 48
Views: 6906

Re: Future of LTE products, user feedback requested

I'm from South Africa. We have Vodacom, MTN, Telkom and CellC in the country. I love your SXT LTE, the devices are fantastic. Small issues with finding the network here and there, seems somewhat delayed from time to time, but in general excellent. PLEASE make a dual sim SXT-LTE. Its easy to see at ...
by SilverNodashi
Thu Dec 07, 2017 1:29 pm
Forum: General
Topic: network slow down over time
Replies: 0
Views: 224

network slow down over time

Hi, I wonder if someone can help me. My wireless network consists of a MT 951Ui-2nD as the main router and a 951-2n to extend the wireless coverage to another part of the house, and give LAN access to some PC's on that side. An LTE Router is connected to the 951Ui-2nD for internet usage. Over time, ...
by SilverNodashi
Tue Nov 14, 2017 7:39 am
Forum: Wireless Networking
Topic: Mikrotik vs Ubiquiti Unifi
Replies: 23
Views: 15755

Re: Mikrotik vs Ubiquiti Unifi

Another nice feature on the Ubiquity, which I which was on MT, is the bandwidth management. You can quickly see who uses how much bandwidth and easily limit them very quickly. The torch feature om MT also work very well. What I usually do is I create a script that would automatically create a simpl...
by SilverNodashi
Tue Nov 14, 2017 7:34 am
Forum: Wireless Networking
Topic: Mikrotik vs Ubiquiti Unifi
Replies: 23
Views: 15755

Re: Mikrotik vs Ubiquiti Unifi

You say "network cable" is not present, but I would assume their are phone lines ran through out the building? You could very well buy a used VDSL DSLAM off of ebay or something and push 200mbs+ links to a remote AP plugged into a DSL modem. Or even have one DSL modem per floor handling an aggregat...
by SilverNodashi
Fri Nov 10, 2017 10:14 am
Forum: Wireless Networking
Topic: Mikrotik vs Ubiquiti Unifi
Replies: 23
Views: 15755

Re: Mikrotik vs Ubiquiti Unifi

I would love to see an enterprise wireless option from MikroTik as well. The ubiquity devices are nice, but it's not MT ;) My biggest problem with MT, is that in a large office it simply doesn't have enough range to cover a big area, whereas the Ubiquity Unify AP Long Range can cover a 200m radius. ...
by SilverNodashi
Fri Oct 06, 2017 3:15 pm
Forum: General
Topic: Can I block HTTPS site with proxy?
Replies: 11
Views: 1653

Re: Can I block HTTPS site with proxy?

You should filter by DNS.

L7 will not help against HTTPS, because the traffic is encrypted. Just redirect all DNS requests to your router and set some filters in the DNS static list.
How would you get all porn site's IP's? There are literally hundreds and thousands of them.
by SilverNodashi
Fri Oct 06, 2017 3:04 pm
Forum: General
Topic: Can I block HTTPS site with proxy?
Replies: 11
Views: 1653

Re: Can I block HTTPS site with proxy?

Layer 7 or DNS regexp mb.


Отправлено с моего iPhone используя Tapatalk
Layer 7 will use quite a lot of memory. How would you block porn with DNS regexp?
by SilverNodashi
Fri Oct 06, 2017 8:20 am
Forum: Beginner Basics
Topic: Understanding DHCP on Mikrotik [SOLVED]
Replies: 7
Views: 781

Re: Understanding DHCP on Mikrotik [SOLVED]

If you put the DHCP server on the east link, and the east link goes down, the DHCP server also goes down with it.

In this scenario you need to enable the DHCP server on the west link as well. Use different IP pool to avoid IP conflicts
by SilverNodashi
Fri Sep 22, 2017 10:09 am
Forum: Beginner Basics
Topic: Understanding DHCP on Mikrotik [SOLVED]
Replies: 7
Views: 781

Re: Understanding DHCP on Mikrotik [SOLVED]

I found that when I bound the DHCP server to a bridge it didn't work. Therefore I assumed it was a requirement to bind all DHCP servers to interfaces. I see that this may no longer be a limitation with newer firmware. My testing was a few versions ago. I'll have to try again with the latest version...
by SilverNodashi
Tue Sep 19, 2017 11:47 pm
Forum: General
Topic: ExpressVPN Client setup failing using OpenVPN
Replies: 6
Views: 3962

Re: ExpressVPN Client setup failing using OpenVPN

Ok Thanks... I'm using ExpressVPN also and Using PPTP for this. but I think OVPN is better than PPTP. we will wait for mikrotik :)
I want to sign up with a VPN provider too. Can you please confirm, could you connect to the ExpressVPN through your MikroTik? Either with PPTP or OpenVPN?
by SilverNodashi
Tue Sep 19, 2017 4:16 pm
Forum: Scripting
Topic: How to get dynamic WAN IP?
Replies: 7
Views: 605

Re: How to get dynamic WAN IP?

Just found here...

viewtopic.php?t=73287
Thanx.

I am still looking for a way to know which WAN / route was used to establish the connection.
by SilverNodashi
Tue Sep 19, 2017 4:04 pm
Forum: Scripting
Topic: How to get dynamic WAN IP?
Replies: 7
Views: 605

Re: How to get dynamic WAN IP?

Ok, that makes things a bit clearer, but I don't know yet, why you want to work with your WAN-IP. If you have VPN-Clients which want to connect to the Mikrotik you can use it's DNS-name I think. Like I said, there's 2 WAN's and I need to change some stuff when the WANS's change, based on which WAN ...
by SilverNodashi
Tue Sep 19, 2017 3:17 pm
Forum: Scripting
Topic: How to get dynamic WAN IP?
Replies: 7
Views: 605

Re: How to get dynamic WAN IP?

Hi, for what you want to use the WAN-IP information? In IP -> Cloud you can find the Mikrotik-DNS Name and your WAN-IP - maybe this will help you out. Oh, yes, I should have said. I have a dual WAN setup, with a remove VPN. So the MikroTik can establish a VPN connection regardless of which WAN conn...
by SilverNodashi
Tue Sep 19, 2017 2:29 pm
Forum: Scripting
Topic: How to get dynamic WAN IP?
Replies: 7
Views: 605

How to get dynamic WAN IP?

Hi,

I wonder if anyone can help me.

I have a MikroTik RB2011UiASM, with a Hauwei LTE router on IP 192.168.8.1. The MikroTik is on 192.168.8.2.

How can I get the WAN IP address, using a script? I have searched the forum but cannot find anything that works?
by SilverNodashi
Tue Sep 19, 2017 2:09 pm
Forum: General
Topic: Is it possible to fetch from SMB?
Replies: 3
Views: 497

Re: Is it possible to fetch from SMB?

That's a shame.

The FTP client is sorely lacking in features, and it would be really handy if I could use the samba client to limit the client to a particular folder and then use fetch to download from that folder.
I have been looking for an SMB client on the MikroTik as well...
by SilverNodashi
Tue Sep 19, 2017 1:41 pm
Forum: Scripting
Topic: Script to monitor interface bytes
Replies: 4
Views: 661

Re: Script to monitor interface bytes

Can you post the syntax error and script error here?
by SilverNodashi
Sat Sep 16, 2017 7:41 am
Forum: Beginner Basics
Topic: Is the CRS106 suitable as a router?
Replies: 6
Views: 563

Re: Is the CRS106 suitable as a router?

Note also that when I get everything up and running I will want the capability for dual WANs; my current ISP offers decent speed but their reliability has been less than stellar. The phone company can't match their speed, but when I was using their service I almost never, ever suffered an outage. P...
by SilverNodashi
Fri Sep 15, 2017 9:04 pm
Forum: Beginner Basics
Topic: Understanding DHCP on Mikrotik [SOLVED]
Replies: 7
Views: 781

Re: Understanding DHCP on Mikrotik [SOLVED]

I think what I'm asking for is the ability to bind a dhcp server to a bridge.
Have you tried it? I see it can be done on Version 6.40.2, and possibly some of the earlier ones as well.
by SilverNodashi
Fri Sep 15, 2017 8:50 pm
Forum: Beginner Basics
Topic: RB1100AHx2 upload and download limit issue
Replies: 4
Views: 359

Re: RB1100AHx2 upload and download limit issue

Check the Queues, both the Simple Queues and Queue Tree, it's probably set there.
by SilverNodashi
Wed Sep 13, 2017 7:31 am
Forum: Beginner Basics
Topic: how to NAT outside IP range?
Replies: 8
Views: 836

Re: how to NAT outside IP range?

The router is probably choosing wrong source address. Set the right one 192.41.100.x (I assume .1) using src-address parameter for ping.
How can it probably choose the wrong source address? I only specified one subnet
by SilverNodashi
Tue Sep 12, 2017 2:26 pm
Forum: Beginner Basics
Topic: how to force VPN (PPTP) over certain interface?
Replies: 5
Views: 634

Re: how to force VPN (PPTP) over certain interface?

A vpn has certain limits over portocols and features. Like not all the vpn are offering PPTP or Openvpn protocols. But PPTP is a protocoll that is built in in every vpn service. I would advice to use a new vpn for remote locations . That isn't possible at this stage. I don't have control over the u...
by SilverNodashi
Tue Sep 12, 2017 9:53 am
Forum: Beginner Basics
Topic: how to force VPN (PPTP) over certain interface?
Replies: 5
Views: 634

how to force VPN (PPTP) over certain interface?

Hi, Is it possible, at all, to force a PPPTP VPN over a given interface? Let me explain the scenarion: A remote branch (to far to get to quickly) has a VPN over ADSL connection which is very slow. So I told them to buy a LTE router and use that to re-route some of the traffic over the LTE, and thus ...
by SilverNodashi
Tue Sep 12, 2017 12:34 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Use colors to identify interfaces, firewall rules, etc.
Replies: 2
Views: 387

Re: Use colors to identify interfaces, firewall rules, etc.

The rules connected to the active WAN are black and the WAN that is not active the color is red. If you want to colour then colour the background and not the text, Yes, I know those colors exist. But that's it. More colors could make life a bit easier. Here's another example, how about being able t...
by SilverNodashi
Tue Sep 12, 2017 12:08 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Use colors to identify interfaces, firewall rules, etc.
Replies: 2
Views: 387

Use colors to identify interfaces, firewall rules, etc.

I think it would be a great idea if you could color an interface, firewall rule, route, etc. For example, if I want to quickly see everything related to the WAN interface,I could color it blue. And the backup WAN interface could be yellow, or whatever color. But this would quickly stand out in Winbox
by SilverNodashi
Mon Sep 11, 2017 1:44 pm
Forum: Beginner Basics
Topic: how to NAT outside IP range?
Replies: 8
Views: 836

Re: how to NAT outside IP range?

Can you please help me once more? The remote office installed a Hauwei HUAWEI B315s-936 LTE router onto the MikroTik, with IP address 192.168.4.4. I can ping it from the remove MikroTik router (IP address 192.168.4.1), but not from our local LAN, 192.41.100.0. I didn't see any way to specify a defau...
by SilverNodashi
Fri Sep 08, 2017 6:09 am
Forum: Beginner Basics
Topic: how to NAT outside IP range?
Replies: 8
Views: 836

Re: how to NAT outside IP range?

E.g. this on one router and reverse on another (swap src and dst) should do the trick:
/ip firewall nat
add action=masquerade chain=srcnat dst-address=192.41.100.0/24 src-address=192.168.4.0/24
Great, thanx for the help ;)
by SilverNodashi
Thu Sep 07, 2017 5:17 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Feature Request - Block Country by IP Using Firewall
Replies: 16
Views: 6041

Re: Feature Request - Block Country by IP Using Firewall

Has this feature ever been implemented?
by SilverNodashi
Thu Sep 07, 2017 3:29 pm
Forum: General
Topic: Sniffer Attix5 Other communication
Replies: 2
Views: 557

Re: Sniffer Attix5 Other communication

no one?
I am guessing the "Other" traffic is traffic that isn't defined. i.e. it's not HTTP / SMTP / FTP / SSH / etc, etc traffic, perhaps IGMP or IPV6 traffic, etc
by SilverNodashi
Tue Sep 05, 2017 9:24 pm
Forum: Beginner Basics
Topic: how to NAT outside IP range?
Replies: 8
Views: 836

Re: how to NAT outside IP range?

Yes, NAT can probably help you. If you add masquerade rule for traffic from remote site (tunnel) to local, everything will appear as comming from router's internal address, i.e. from local LAN.
Thanx, I guessed as much, but honestly don't know what NAT rule to put in.
by SilverNodashi
Tue Sep 05, 2017 1:35 pm
Forum: Beginner Basics
Topic: how to NAT outside IP range?
Replies: 8
Views: 836

how to NAT outside IP range?

Hi, I wonder if someone can help me. Two remote sites are connected to each other via a MetroLAN VPN (i.e. an ISP has their own VPN for the two sites) Site1 is on 10.1.1.1 and site2 is on 10.1.1.2 Site1 LAN IP's are 192.41.100.0/24 Site2 LAN IP's are 192.168.4.0/24 I can ping both routers from both ...
by SilverNodashi
Tue Sep 05, 2017 1:12 pm
Forum: General
Topic: Throttle Windows Updates
Replies: 32
Views: 12844

Re: Throttle Windows Updates

It is a very bad idea to stop upgrades from taking place. You are placing your users under risk from all possible attacks. This will end up causing you more problems. Instead, why don't you configure cache or maybe even a local Windows update service on Windows Server? https://technet.microsoft.com...
by SilverNodashi
Tue Sep 05, 2017 12:23 pm
Forum: General
Topic: Throttle Windows Updates
Replies: 32
Views: 12844

Re: Throttle Windows Updates

/ip firewall layer7-protocol
add name=MicrosoftUpdates regexp="^.+(update.microsoft|windowsupdate|download.microsoft|wustat|ntservicepack).*\$"
[/quote]


Is there an updated list for 2017?
by SilverNodashi
Tue Sep 05, 2017 10:07 am
Forum: Beginner Basics
Topic: Layer 7 facebook block
Replies: 29
Views: 138115

Re: Layer 7 facebook block

Using layer7 to block facebook causes a lot of problems. It is better to block facebook via IP addresses like this. /ip firewall filter add action=drop chain=forward comment="Block Facebook" dst-address=\ 74.119.76.0/22 add action=drop chain=forward comment="Block Facebook" dst-address=\ 173.252.64...
by SilverNodashi
Tue Sep 05, 2017 10:00 am
Forum: General
Topic: How to block Youtube and facebook Android App in router Mikrotik
Replies: 30
Views: 53232

Re: How to block Youtube and facebook Android App in router Mikrotik

Hi,
Can someone please tell me, do I add these rules to the bottom, or the top of the Firewall list? Or does it not matter?