Hello, I am having problem for a long time. My wifi clients randomly disconnect with following message in log: 18:36:37 wireless,debug wlan1: xx:xx:xx:81:88:DF attempts to associate 18:36:37 wireless,debug wlan1: xx:xx:xx:81:88:DF not in local ACL, by default accept 18:36:37 wireless,info xx:xx:xx:8...

Today I experienced the same issue with hap ac and firmware 6.43.12.
"rebooted without proper shutdown by watchdog". No supout is generated after reboot.

Hello, I have IPSEC road warrior configured and running. I want to be able to access LAN devices. I have created secondary ip pool in the same subnet of my home network subnet: [admin@MikroTik] > ip pool print # NAME RANGES 0 dhcp 192.168.0.100-192.168.0.230 1 ipsec-rw 192.168.0.231-192.168.0.254 Al...

Bump.
This problem is not solved yet!
Using Windows 7 compatibility mode doesn't help on Windows 10 with latest updates.
It is very annoying to have to restart winbox application every time you make mistake to open DialogBox.
Hopefully this will be resolved soon!

Thank you guys for your help. My current config looks like: 0 chain=input action=accept protocol=icmp 1 chain=input action=accept connection-state=established,related log=no log-prefix="" 2 chain=input action=accept in-interface=ether1 log=no log-prefix="" ipsec-policy=in,ipsec 3...

Going back to the topic author's original question: 2frogs is correct. You are dropping requests on the INPUT chain. You need to drop on the forward chain. Also, I recommend dropping ICMP input requests. And I would also like to suggest a double or tripple port knocking as another alternative. If t...

First of all your rule to drop traffic to your STB is wrong. The input chain is traffic going to the router itself, ie Webfig, Winbox, FTP, DNS... Your drop rule should be for the forward chain. The forward chain is any traffic that is forwarded from one interface of the router to another. The term...

Guys I can put password authentication to my streaming port and its done, but I want to block specific IP address to access my network no matter what. And still have port forwarding. add action=drop chain=input in-interface=ether1 log=yes log-prefix=blacklist src-address-list=blacklist I thought th...

Guys I can put password authentication to my streaming port and its done, but I want to block specific IP address to access my network no matter what. And still have port forwarding. add action=drop chain=input in-interface=ether1 log=yes log-prefix=blacklist src-address-list=blacklist I thought thi...

If you want to look your TV out of home, you need setup a simple rule wich will allow only your IP or IPs as a source. Others will just drop. My IP is always different when I am outside. Still I should be able to block specific IP addresses. I am sure I am doing something wrong. I believe firewall ...

Hello, I need help to block specific blacklist from accessing my set-top-box which is behind NAT. I have port forwarding rule that points to my STB in my private home network. I use this port forwarding for watching TV from my STB when I am not at home, but I want to block specific IP addresses from...

0 chain=input action=accept protocol=icmp 1 chain=input action=accept connection-state=established 2 chain=input action=accept connection-state=related 3 chain=input action=accept in-interface=ether1 log=no log-prefix="" ipsec-policy=in,ipsec 4 chain=input action=accept protocol=udp in-in...

Hello, I followed wiki instructions and made IPSEC IKEv2 VPN server. I can connect. I have internet and I can access router IP but I cannot access other LAN devices. I tried putting IPSEC clients in same subnet and I tried different too. No luck. I guess I am missing some firewall rule. Can somebody...

I found out what the problem is. It was not the MTU. it was this port forwarding rule was working for the internal network too. chain=dstnat action=dst-nat to-addresses=192.168.0.63 to-ports=80 protocol=tcp dst-port=80 log=no log-prefix="" I guess i need to specify dst-address=my_external_...

Hello, I got new hap ac router. I thought I have configured it correctly but It seems I cannot access certain websites. Maybe its the famous MTU/MSS problem, but I am unable to solve it. I am connected to Internet thru Ethernet cable (UTP) and I receive my IP by DHCP. No PPPoE or other tunnels. With...