Community discussions

Search found 69 matches

  • 1
  • 2
by DummyPLUG
Fri Mar 22, 2019 12:57 am
Forum: General
Topic: Attempt of attacks through Remote Desktop
Replies: 6
Views: 234

Re: Attempt of attacks through Remote Desktop

If the computer you are using to connect to RD is using dynamic IP you can setup a ddns for it and only allow it to connect using address list
by DummyPLUG
Fri Mar 22, 2019 12:31 am
Forum: General
Topic: Feature Request: Separate the firmware(bootloader) and routeros version number
Replies: 8
Views: 297

Re: Feature Request: Separate the firmware(bootloader) and routeros version number

Please re-read what @mkx posted and note: /set sarcasm=on and /set sarcasm=off
I really miss it, I thought that is some command I didn't know :lol:
by DummyPLUG
Thu Mar 21, 2019 3:11 pm
Forum: General
Topic: Feature Request: Separate the firmware(bootloader) and routeros version number
Replies: 8
Views: 297

Re: Feature Request: Separate the firmware(bootloader) and routeros version number

or I really need to update the bootloader everytime? /set sarcasm=on You do. According to MT policy it's a major security breach to run Routerboot anything else than the latest one ... recently they started to force the same policy even for CRS328 units running SwOS ... If you don't update Routerbo...
by DummyPLUG
Thu Mar 21, 2019 2:11 pm
Forum: General
Topic: Feature Request: Separate the firmware(bootloader) and routeros version number
Replies: 8
Views: 297

Feature Request: Separate the firmware(bootloader) and routeros version number

I am so confuse to determine when will need a firmware(bootloader) update when it is the same as routeros version number, I was told I don't need to update the firmware everytime as even the version number increase the bootloader may not have change at all, so what's the point to keep they the same ...
by DummyPLUG
Tue Mar 05, 2019 8:59 am
Forum: Beginner Basics
Topic: Noob default route question
Replies: 9
Views: 319

Re: Noob default route question

That is right. You can't create manual route with distance 0.
Thanks for heads up, I think I mix up something with fortios again, ha ha
by DummyPLUG
Mon Mar 04, 2019 8:31 pm
Forum: Beginner Basics
Topic: Noob default route question
Replies: 9
Views: 319

Re: Noob default route question

did you have the manually added route 0.0.0.0/0 with distance 0? If so it may be the problem.
by DummyPLUG
Fri Mar 01, 2019 9:23 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Feature Request Are you sure Button when disabling interface
Replies: 4
Views: 207

Re: Feature Request Are you sure Button when disabling interface

anyway is it possible to have safe mode enable by default? some of our tech had always forget to enable it before work on it.
by DummyPLUG
Fri Mar 01, 2019 9:08 am
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 26286

Re: v6.44 [stable] is released!

Incorrect time is cosmetic Winbox bug noticed when there are multiple Winbox instances open. If you check in terminal, time is reported correctly.
But it happen for me even with one winbox instance, I had this problem with 3.17/3.18 and no problem with 3.16
by DummyPLUG
Sat Feb 16, 2019 10:23 am
Forum: Beginner Basics
Topic: Finding a firewalled connection [SOLVED]
Replies: 4
Views: 325

Re: Finding a firewalled connection [SOLVED]

Depends, but in most case I will log to a remote syslog server and exam later
by DummyPLUG
Fri Feb 15, 2019 7:30 pm
Forum: Beginner Basics
Topic: Setting up incoming traffic [SOLVED]
Replies: 14
Views: 487

Re: Setting up incoming traffic [SOLVED]

You mean there is another router (provide by ISP?) before the mikrotik? If so see if that router can set to "bridge mode" sometime DMZ won't solve double nat problem Its seems this DMZ actually does what it says :) Most of the time, but not everything works right for double nat even after DMZ
by DummyPLUG
Fri Feb 15, 2019 7:29 pm
Forum: Beginner Basics
Topic: Setting up incoming traffic [SOLVED]
Replies: 14
Views: 487

Re: Setting up incoming traffic [SOLVED]

Try google for solutions, may be somebody had figure a way to use bridge mode for that modem or find a way to use their own router to do pppoe
by DummyPLUG
Fri Feb 15, 2019 7:18 pm
Forum: Beginner Basics
Topic: Setting up incoming traffic [SOLVED]
Replies: 14
Views: 487

Re: Setting up incoming traffic [SOLVED]

You mean there is another router (provide by ISP?) before the mikrotik? If so see if that router can set to "bridge mode"

sometime DMZ won't solve double nat problem
by DummyPLUG
Fri Feb 15, 2019 5:28 pm
Forum: Beginner Basics
Topic: Setting up incoming traffic [SOLVED]
Replies: 14
Views: 487

Re: Setting up incoming traffic [SOLVED]

First of all make sure ping isn't filter by your ISP, as I can't see your firewall config so I can't comment on that.
and you said VPN isn't working, is that a PPTP or IPSec or OVPN?
by DummyPLUG
Mon Feb 04, 2019 6:15 pm
Forum: RouterBOARD hardware
Topic: CCR1009-8G-1S-1S+ Can't get more than 350-450 Mbps single session, can get more with multiple sessions
Replies: 10
Views: 884

Re: CCR1009-8G-1S-1S+ Can't get more than 350-450 Mbps single session, can get more with multiple sessions

I'm getting 10G easily with fasttrack, even without jumbo frames. Here's more detailed performance analysis for more home oriented usage: https://forum.mikrotik.com/viewtopic.php?t=138626 I think this really depends on config, I can also get my CCR1009 go with full 1Gbps with limited set of rules a...
by DummyPLUG
Mon Feb 04, 2019 10:40 am
Forum: RouterBOARD hardware
Topic: Cheapest way to bridge 10Gb SFP+ to 1Gb copper
Replies: 1
Views: 258

Re: Cheapest way to bridge 10Gb SFP+ to 1Gb copper

CRS305 + 1 Cheap 1G coper SPF or CRS326 ?
by DummyPLUG
Sun Feb 03, 2019 3:07 pm
Forum: Beginner Basics
Topic: Question about correct fasttrask fules
Replies: 3
Views: 212

Re: Question about correct fasttrask fules

Are these two rules one after another (no other rule in between) and in this exact order? If answer is yes to both questions, then it is indeed weird for the second one to catch anything. You could add "log=yes log-prefix=ftrack" to the second rule and check what kind of traffic triggers it. Yes it...
by DummyPLUG
Sun Feb 03, 2019 1:12 pm
Forum: Beginner Basics
Topic: Question about correct fasttrask fules
Replies: 3
Views: 212

Question about correct fasttrask fules

I am tesing these 2 rules: add action=fasttrack-connection chain=forward comment=Fasttrack connection-state=established,related add action=fasttrack-connection chain=forward comment=Fasttrack connection-state=established,related in-interface-list=WAN out-interface-list=LAN I found that the below one...
by DummyPLUG
Fri Feb 01, 2019 9:08 pm
Forum: RouterBOARD hardware
Topic: CCR1009-8G-1S-1S+ Can't get more than 350-450 Mbps single session, can get more with multiple sessions
Replies: 10
Views: 884

Re: CCR1009-8G-1S-1S+ Can't get more than 350-450 Mbps single session, can get more with multiple sessions

Same story on CCR1009-7G, need to enable fasttrack then I can have 800~900Mbps for single connection, without fasttrack it also limited at 300~500Mbps too but none of the CPU goes over 60% usage
by DummyPLUG
Wed Dec 19, 2018 3:13 pm
Forum: Announcements
Topic: Product comparison matrix
Replies: 29
Views: 2961

Re: Product comparison matrix

Need fan/fanless detail, also number of fan.
by DummyPLUG
Sun Nov 11, 2018 12:05 pm
Forum: Beginner Basics
Topic: How to bypass the VPN for a specific website?
Replies: 1
Views: 302

Re: How to bypass the VPN for a specific website?

I think if you follow that guide all you need is add !dst address for the mangle rule which the dst address is the ip you don't want to go throught the VPN, you can use a dst address list instead.
by DummyPLUG
Wed Nov 07, 2018 2:57 pm
Forum: RouterOS v7
Topic: Feature request: Force sending of DHCP options to clients
Replies: 24
Views: 4931

Re: Feature request: Force sending of DHCP options to clients

Because of the china telecom 4K IPTV devices need force option-125. I have google "ros force dhcp option" since 2016. Now time is 2018 , it disappointed me again . Ok but why don't you request china telecom to put the option 125 request in the DHCP request packet? That would be the normal way of ha...
by DummyPLUG
Mon Oct 29, 2018 6:48 am
Forum: RouterOS v6 RC and v7 BETA
Topic: v6 RC and v7 BETA
Replies: 76
Views: 12710

Re: v6 RC and v7 BETA

which one will release first, Halflife 3 or V7 beta ?
by DummyPLUG
Thu Oct 25, 2018 2:28 am
Forum: Beginner Basics
Topic: Bridge filter didn't work [SOLVED]
Replies: 2
Views: 328

Bridge filter didn't work [SOLVED]

I have a CCR1009 with 2 bridges, I want to block traffic between the bridges without vlan so I try to use bridge filter, but the bridge filter didn't catch any traffic, I had enable use ip filter and disable fastpath in bridge setting. /interface bridge filter add action=drop chain=forward in-bridge...
by DummyPLUG
Tue Oct 23, 2018 7:05 am
Forum: Announcements
Topic: v6.43.4 [stable] is released!
Replies: 78
Views: 19114

Re: v6.43.4 [stable] is released!

CCR1009, memory usage higher then normal and keep increasing slowly when compare to 6.42.7, I am talking about 100MB+ different, as I had schedule reboot so dunno if it just higher memory usage or leak. Upgraded our CCR1009s to 6.43.4 yesterday and no issues so far. In our case memory consumption e...
by DummyPLUG
Mon Oct 22, 2018 6:19 am
Forum: Announcements
Topic: v6.43.4 [stable] is released!
Replies: 78
Views: 19114

Re: v6.43.4 [stable] is released!

CCR1009, memory usage higher then normal and keep increasing slowly when compare to 6.42.7, I am talking about 100MB+ different, as I had schedule reboot so dunno if it just higher memory usage or leak.
by DummyPLUG
Sun Oct 21, 2018 7:55 pm
Forum: Announcements
Topic: Tik App, MikroTik android utility ALPHA test
Replies: 394
Views: 127900

Re: Tik App, MikroTik android utility ALPHA test

Yeah, please stop development for iOS immediately because one user dislikes Apple..
Sorry but it's already 2 users, I don't like bitten-apple too :D
Make it 3, an Apple a day scare admin away.
by DummyPLUG
Thu Oct 18, 2018 3:50 am
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 32609

Re: v6.43.1 [stable] and v6.43.2 [stable] are released!

beware that of them are using PL2303 series chipset and some of them are using fake PL2303 chipset, the latest driver and win10 driver will refuse to work with them. If you look for a Serial to USB cable better check if can work in win10 without manually install any driver. Could be, I never use Wi...
by DummyPLUG
Tue Oct 16, 2018 7:50 pm
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 32609

Re: v6.43.1 [stable] and v6.43.2 [stable] are released!

are those 3 hidden spots with Rx, Tx, and GND marking real serial port or just ... TTL serial. Get a TTL serial to USB converter from aliexpress or similar, and you can connect it to a PC and watch the boot procedure. (or even flash new firmware over serial when you are patient) Speak about TTL ser...
by DummyPLUG
Mon Oct 08, 2018 5:29 pm
Forum: Beginner Basics
Topic: Policy Base Routing not working [SOLVED]
Replies: 7
Views: 442

Re: Policy Base Routing not working [SOLVED]

Figure out I had rp_filter set to strict so it won't work, if I set rp_filter to loose then it will work correctly, but I had no idea why rp_filter=strict will work for static route but not policy routing. Because you have better interface for your packets with source address of your directly conne...
by DummyPLUG
Mon Oct 08, 2018 4:59 pm
Forum: Beginner Basics
Topic: Policy Base Routing not working [SOLVED]
Replies: 7
Views: 442

Re: Policy Base Routing not working [SOLVED]

Figure out I had rp_filter set to strict so it won't work, if I set rp_filter to loose then it will work correctly, but I had no idea why rp_filter=strict will work for static route but not policy routing. Because you have better interface for your packets with source address of your directly conne...
by DummyPLUG
Mon Oct 08, 2018 4:31 pm
Forum: Beginner Basics
Topic: Policy Base Routing not working [SOLVED]
Replies: 7
Views: 442

Re: Policy Base Routing not working [SOLVED]

Figure out I had rp_filter set to strict so it won't work, if I set rp_filter to loose then it will work correctly, but I had no idea why rp_filter=strict will work for static route but not policy routing.
by DummyPLUG
Mon Oct 08, 2018 4:15 pm
Forum: Beginner Basics
Topic: Policy Base Routing not working [SOLVED]
Replies: 7
Views: 442

Re: Policy Base Routing not working [SOLVED]

I am also not that good in this. If you only use routing then you have route also the returning package.

I use connection marking for this because I am lazy. ;-)
May you teach me how to use connection marking for policy base routing? still pulling my hair out :(
by DummyPLUG
Mon Oct 08, 2018 3:45 pm
Forum: Beginner Basics
Topic: Policy Base Routing not working [SOLVED]
Replies: 7
Views: 442

Policy Base Routing not working [SOLVED]

I am still new to RouterOS, today I try to setup a PPTP client on the CCR1009 which connect to office vpn server, I want only specific IP go through the PPTP connection only. The CCR1009 ip range is 192.168.11.0/24, office's vpn server give out 192.168.10.2 to the CCR1009's PPTP client, and the offi...
by DummyPLUG
Sun Sep 23, 2018 2:52 pm
Forum: General
Topic: Wrong "Last Link Down Time" in Winbox
Replies: 14
Views: 1462

Re: Wrong "Last Link Down Time" in Winbox

Happen to my CCr1009-7G too, everywhere is correct except in winbox, beside link down time the "last link up time" will sometime display the current time instead of the correct one
by DummyPLUG
Fri Sep 14, 2018 5:31 pm
Forum: Announcements
Topic: v6.43 [current] is released!
Replies: 149
Views: 23857

Re: v6.43 [current] is released!

CCR1009, just found out all the "last link up time" is the current time in winbox (except those have link down will be in future), anyone have the same issue?
by DummyPLUG
Thu Sep 13, 2018 10:17 am
Forum: Announcements
Topic: v6.43 [current] is released!
Replies: 149
Views: 23857

Re: v6.43 [current] is released!

After update to 6.43 sometime the time will show in future, the correct link down time should be around Sep/13/2018 3:40 AM from syslog: 03:40:18 interface,info ether3 link down 03:40:33 interface,info ether3 link up (speed 100M, full duplex) 03:40:36 interface,info ether3 link down 03:40:39 interfa...
by DummyPLUG
Mon Sep 10, 2018 8:48 pm
Forum: Announcements
Topic: v6.43 [current] is released!
Replies: 149
Views: 23857

Re: v6.43 [current] is released!

10G on CCR1009 ethernet port? cosmetic issue?
Image
by DummyPLUG
Sat Sep 08, 2018 10:03 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: NTFS support
Replies: 34
Views: 4399

Re: NTFS support

May be I should ask why our nexus can't install windows.
by DummyPLUG
Sat Sep 08, 2018 10:01 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: NTFS support
Replies: 34
Views: 4399

Re: NTFS support

It doesn't really matter what they are designed for (for most people, hAPs are way overpowered for simple AP). But even if you look at something that's supposed to be home router (RB2011 perhaps), it's still the same. MikroTik tried to expand to home market, which was great, because so many home ro...
by DummyPLUG
Mon Sep 03, 2018 5:40 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Feature requests
Replies: 1035
Views: 177183

Re: Feature requests

resend syslog email if fail to send, currently any syslog email will be discard if fail to send which raise a problem if wan or mail server down.
by DummyPLUG
Sat Aug 11, 2018 9:26 pm
Forum: Beginner Basics
Topic: Question about chain in firewall filter [SOLVED]
Replies: 2
Views: 292

Question about chain in firewall filter [SOLVED]

Forgive me if this sounds stupid, for my understanding each packet will go through all filter rules unless it have a match, if I have 10 rules for input chain and another 10 rules for forward chain, is that a packet come from Wan destination to Lan will only go though the 10 rules in forward chain o...
by DummyPLUG
Wed Aug 08, 2018 9:16 pm
Forum: Beginner Basics
Topic: Please help me get my network in order
Replies: 7
Views: 638

Re: Please help me get my network in order

Beware of the asus router if you have flow control enable, I found the RT-AC68U will send out lot of pause frame when boot which cause the whole network stop working. I had help Asus debug it but they can't find a solution, the only workaround is turn off flow control but Asus said they can't do it,...
by DummyPLUG
Mon Aug 06, 2018 6:40 pm
Forum: General
Topic: CCR1009-7G-1C-1S+ vs CCR1009-7G-1C-1S+PC
Replies: 18
Views: 1640

Re: CCR1009-7G-1C-1S+ vs CCR1009-7G-1C-1S+PC

I have both, the default CPU frequency is lower on PC model, but easy to clock it back to 1200MHz without issue (assume in a not so hot environment), it is smaller and the LCD screen is on the top so is good for wallmount in network equipment box. If you don't mind the fan noise or size get the non ...
by DummyPLUG
Mon Aug 06, 2018 12:43 pm
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 324
Views: 63097

Re: Winbox vulnerability: please upgrade

As other said make a CVE for each vulnerability, it is easier to know if we are taking about the same thing. for example right now we know which winbox vulnerability we are talking about just because there is only one, if there is another one in future how can we know which one we are talking about?...
by DummyPLUG
Fri Aug 03, 2018 8:39 pm
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 324
Views: 63097

Re: Winbox vulnerability: please upgrade

From https://wiki.mikrotik.com/wiki/Manual:IP/Services it said MAC winbox using 20561/udp, is that it is better to block this port too?
by DummyPLUG
Fri Aug 03, 2018 6:54 pm
Forum: RouterBOARD hardware
Topic: CCR1009-7G-1S-1C+PC Problem OverHeat [SOLVED]
Replies: 12
Views: 1057

Re: CCR1009-7G-1S-1C+PC Problem OverHeat [SOLVED]

I have disconnection issue few months ago, the link will down if that night is hot, and need to set to 100MB full duplex for stable connection, it usually disconnect at the same time, finally we find out it is the problem of a faulty ethernet patch panel of our building, punch it again solve the pro...
by DummyPLUG
Fri Aug 03, 2018 6:26 pm
Forum: RouterBOARD hardware
Topic: CCR1009-7G-1S-1C+PC Problem OverHeat [SOLVED]
Replies: 12
Views: 1057

Re: CCR1009-7G-1S-1C+PC Problem OverHeat [SOLVED]

I live in Hong Kong with CCR1009-7G-1S-1C+PC, o.c. to 1200MHz router temp is always above 40C (place it 45degree again the wall) and CPU is 56C at best when idle, it always go over 60C underload without problem. few things can improve the temp: 1. try place it 45 degree against the wall, this is the...
by DummyPLUG
Wed Aug 01, 2018 11:52 pm
Forum: Beginner Basics
Topic: Set vlan interface as DHCP server [SOLVED]
Replies: 12
Views: 1415

Re: Set vlan interface as DHCP server [SOLVED]

Out of interest - what would be use for VLANs on a home network? Except of course specifically learning about the technology, but otherwise at home network I have yet to find use for VLANs therefore I am happy to have avoided the complication so far. such as sperate untrusted device from trusted, a...
by DummyPLUG
Fri Jul 27, 2018 2:35 pm
Forum: Announcements
Topic: Security announcement blog
Replies: 119
Views: 28762

Re: Security announcement blog

Is there a way to sign up for email announcements of new articles too?
+1
RSS is good, but will be nice to have some mailing list for security announcement and firmware update
  • 1
  • 2