MikroTik

tigro11

good morning, I noticed that on winbox in the interface section, right click and select detail mode, winbox closes

tigro11

I wasn't kidding, I was serious, any rule that adds the attacking IP in the memory of the device, in case of thousands of IPs of a DDoS, completely exhausts the memory of the router... Sorry I was not joking, since other users seem to be making fun of me, I'm not a teacher with Mikrotik, but I do m...

tigro11

Rule # 9 on case of DDoS attack, help the attacker to reboot this router for kernel failure, out of memory...

Thanks for your kindness

tigro11

Hi guys, only help to check the order of execution of the rules on the firewall. I posted 2 photos in which the order of execution is the ones I use now and those that Mikrotik uses from default. I believe that my rules must be reorganized for the correct execution, given that if I move the rules to...

tigro11

Last time or I stop ( why do you never answer questions??)............ do both have publicly accessible IPs. ( capable of hosting a WG server ) Which side should be considered the client and the server for initial handshake OR do users at either end initiate traffic ( be it an admin for config purp...

tigro11

I did not put the public IPs since the connection works. The current configuration is site to site, and are on 2 mikrotik rb750gr3. The two networks 192.168.1.0/24 and 192.168.2.0/24 both parts work, only that the computers that they provoke from 192.168.2.10-12/24 They only have to see the server 1...

tigro11

Sorry for my English,
So as seen from the scheme, I want addresses 192.168.2.10/11/12 to see only the computer 192.168.1.170, the rest of the Network 192.168.1.0/24 must not access.

tigro11

I created a site to site tunnel and it works, only that I would like everyone who wants to connect the router B on router B addresses them only on an internal IP.

tigro11

Yes provide a decent network diagram, to show what are the two or maybe more clients connecting to the server............... If any MT devices are involved, provide the config. /export file=anynameyouwish ( minus router serial # and any public WANIP information keys etc.......) /interface wireguard...

tigro11

Hi guys, I have a tunnel made with wiregard, everything works, only I can't create a NAT on a specific IP, I would like the router's IP to when they connect to the router B the router B all on a specific IP on the net
Do you have a suggestion to give me?
Thank you

tigro11

I do not understand where is the problem :(

does not enter on winbox, blocks on that screen

tigro11

Non usare le sessioni di altri dispositivi... che magari sono di versioni differenti. Seleziona su Session <none>

niente da fare, non funziona

tigro11

moderator nite: no need to quote whole preceding post. Just use "Post Reply" button.
The Wireguard interface is on the LAN list

I have excluded all the rules of the Mangle and Raw firewall, but the connection does not work, there must be some other problems.

tigro11

moderator nite: no need to quote whole preceding post. Just use "Post Reply" button.

The Wireguard interface is on the LAN list

tigro11

winbox 3.37 windows
If I run Winbox from local, it works, if I perform winbox from wireguard tunnel, it blocks and does not enter.

news this problem?

tigro11

If I run Winbox from local, it works, if I perform winbox from wireguard tunnel, it blocks and does not enter. Is this new behaviour? Can you share your config (/ip/firewall/filter/ export)? Make sure to remove any privacy related information /interface bridge add admin-mac=X:X:X:X:X:X auto-mac=no ...

tigro11

Possible that the details are always asked and are not automatically written???
Winbox version and on what platform?
winbox 3.37 windows

If I run Winbox from local, it works, if I perform winbox from wireguard tunnel, it blocks and does not enter.

tigro11

Possible that the details are always asked and are not automatically written???
Winbox version and on what platform?

winbox 3.37 windows

tigro11

After the update, I can't enter Winbox, stay still on: download descriptors

tigro11

On the RBD52G-5HACD2Hnd it gives me the same default frequency error in red

Should be set to auto on hAP ac2 as well.

Ok perfect, can I see the real working frequency of the CPU?

tigro11

On the RBD52G-5HACD2Hnd it gives me the same default frequency error in red

tigro11

Thanks for the help, I followed this post and glued the rule, now it works.
viewtopic.php?t=130501

tigro11

Is there the possibility of deciding which WAN must go out wireguard?

tigro11

Hello, this problem happens to me, sorry for the translation. I have a tunne with wireguard between home and company, I have Mikrotik with 2 wan home side, the problem is this, when the 2 wan are on and wireguard connects with the Wan2 (Sky-WiFi) the tunnel tunged, from home I can pingare All the co...

tigro11

ok sorry

tigro11

Hello, this problem happens to me, sorry for the translation. I have a tunne with wireguard between home and company, I have Mikrotik with 2 wan home side, the problem is this, when the 2 wan are on and wireguard connects with the Wan2 (Sky-WiFi) the tunnel tunged, from home I can pingare All the co...

tigro11

Perfect, so even if I use the DHCP only for IP 192.168.169.0, I must always put 192.168.168.0 as initial. Can you confirm? No, as I explained: DHCP network address/mask has to cover the whole IP address range, assigned to DHCP server. If your address range is 192.168.169.50-192.168.169.199, then yo...

tigro11

that's right, but if I configure 192.168.169/23 it gives me error
Which is correct. It is an error.
You need 4 octets for a subnet and then netmask.

Perfect, so even if I use the DHCP only for IP 192.168.169.0, I must always put 192.168.168.0 as initial.
Can you confirm?

tigro11

Could be by-product of wrongly configured address ... it should be 192.168.169.0/23

that's right, but if I configure 192.168.169/23 it gives me error

tigro11

I wanted to report a problem, at least I think, I use a sottorete/23 so the IPs with 192.168.168.0/23 are not managed by DHCP, instead the IP 192.168.169.0/23 are assigned by the DHCP. In the configuration I use, I wanted to report this problem. If on the DHCP Network I write 192.168.169.0 and on Ne...

tigro11

Perfect sob, it works.
thank you very much for the help.
Valerio

tigro11

Quick tip before @anav tears your config to shreads: You have default gateway using WAN2, so even where there's incoming connection from WAN1, responses will go to WAN2. You need to mark (using mangle rules) new incoming connections on WAN1 and then mark routing for responses, to use default gatewa...

tigro11

A. network diagram B. /export config (hide any public IPs) C. detailed description of user requirements, which users from where need port forwarding, Light reading: https://forum.mikrotik.com/viewtopic.php?t=179343 This forum is for useful articles, beginner and general issues are where you should ...

tigro11

After various tests on how to configure Port Forwarding with 2 WAN, I still can't make it work. On the WAN1 (Static Public IP use and that's what I use for Portforwarding) Wan2 I use it as the main to navigate. (USA DYNAMIC IP) When the audience pays off the public: 8181 to access my weather webcam,...

tigro11

Hi guys, I see a mountain of configurations for the Failover with 2 WAN, only that there is no valid configuration. I am looking for a configuration to manage the Failover with 2 WAN with static IP. I had used an old configurarione that used scripts with Netwatch, but having passed to version 7, I w...

tigro11

From the console /tool Netwatch does not exist
The entered scripts does not work either

tigro11

OpenVPN client broken with AES-256-CBC since upgraded to RouterOS 7.2 (from 7.1.5), switching to Blowfish 128 works. Echoing the experience. Upgraded from 7.1.5 to 7.2 and some OpenVPN clients using AES on some routers are broken. It does not matter which AES cipher is chosen... none of them work w...

tigro11

Still no NGFW functions... this is causes serious client drift to Sophos/pfSense/Fortigate.... Can this be fixed??? Why would that have to be fixed? MikroTik makes routers, not (NGFW) firewalls. They appear to be overworked with completing RouterOS v7. Do you want them to embark on another new adve...

tigro11

Hi Guys, I noticed that the OpenVPN in UDP sessions remain active even if I am disconnected.
Check if possible.
Thank you
Valerio

Ciao Ragazzi, ho notato che la OpenVPN in UDP, le sessioni rimangono attive anche se mi sono scollegato.
Se possibile verificare.
Grazie
Valerio

tigro11

OVPN Server and PPPoE Scan are no longer visible in the Winbox PPP menu (using Winbox 3.29 in WINE on Ubuntu, I haven't tried 3.28).

tigro11

i dettagli sono questi, ho creato un filtro per limitare la banda su tutta la navigazione, nel momento che creo un filtro per i ragazzi, questo filtro non funziona perchè prende di riferimento il filtro che è in cima alla lista. Se disabilito il filtro generale che ho creato per tutte le connessioni...

tigro11

Hi guys, I was configuring the rules for the boys apparatus, but I noticed that the rule doesn't work.
Then I tried to analyze the filter, and I noticed that if there is a rule on Queue List that limits the band to all, the subsequent filters do not work.
Valerio

tigro11

in fact, they are only alternative solutions that I would not like to adopt.
We will see if effective solutions are born in the future

tigro11

http://www.hotspotsystem.com/hotspot-software there is this site that offers a hotspot service to be integrated on your router. only that I like to manage everything myself without using third-party software. now I am testing a certificate that I created, I only do authentication on https, for now i...

tigro11

it seems that from your posts, one who intends to use mikrotik for hotspots, abandon the project.

tigro11

I tried to create an SSL certificate, it seems that it works, but in any case I keep the discussion monitored, we hope that the new version of routeboard 7 will bring some hotspot news

tigro11

but then why activate the option to select https if it is not possible to use it?
https redirect can anyone use it for that function?

tigro11

hello, can you find a solution to use https pages to log in?
I hope soon that someone will solve the problem of the https protocol since now we only use web pages in https

tigro11

so we have no hope for a solution

tigro11

it would be ideal to create a script that intercepts the call to the https page and verifies if that ip that requests the https page is authenticated.
If authenticated, there are no problems, otherwise it will load the login page.
Easy to say but to do I wouldn't know where to start

tigro11

could you share your configuration? I would be grateful

tigro11

How can I ensure that I do not allow access to any site in the hotspot before the user's authorization? should I make a special rule about RB?
Could you tell me how can I do?

tigro11

hello guys, now all the pages where you browse are 80% in https. On the RB 3011 until the customer searched for pages in http, the problem of the login request was not a problem, now instead if a customer looks for example google, the page is in https and therefore the login page does not appear and...

tigro11

Hi guys, I was thinking, why routeros does not create dedicated hardware just to make utm firewalls for a small office market? the potential I think there is, I was looking for my colleagues as a firewall to be offered to those customers who have small offices with 2 to 5 computers, in a business th...

tigro11

let's not joke guys, we hope in a very short time that solve this gap

tigro11

just to know, do you know an approximate release date? I would not wait all 2019 ...

tigro11

perfetc

tigro11

hi, I wanted to know if mikrotik intends to implement the protocol udp and security sha 256 on its openvpn.
Thank you

tigro11

I saw that closes all the doors from wan to lan and that's fine. I open the doors that interest me, only that I need to open the 21tcp / ip port to access the nas from the wan side, only that it does not work. If I disable the rule:add action=reject chain=forward reject-with=icmp-admin-prohibited co...

tigro11

if I recover a backup, it gives me error 6.
the backup is NOT encrypted and not even the password.

tigro11

perfect, I try to study it well

tigro11

I wanted to find a configuration that blocks everything from WAN to LAN and then open the doors that interest me. The default configuration does not, and every time I configure a RB I go crazy every time. Surely I have inserted rules that are useless. Is there a configuration that blocks everything ...

tigro11

I have a configuration of the rb2011 with the following ports: eth1 pppoe eth2 LAN eth5 DMZ, all ports are not in bridge, I have configured a nat on pppoe to dmz without specifying any protocol, but I wanted the dmz to be isolated from the LAN. The DMZ serves only for internet service for customers....

tigro11

if someone needs to make a backup of the system and files of usermanager via ftp, I use this. I hope to please ######################################strart script############################################################# # automated backup External ftp # ftp configuration :local ftphost "1.1...

tigro11

I solved almost the whole script, I miss a function that removes the file path in the variable.
I have the variable $filename with the file name including the path (disk1/log/log.0.txt), is it possible to remove the file path (disk1/log/) with a script?
Thanks so much

tigro11

I use this script to find the old 1-day files. only that the result gives me all the files in the rb, is it possible to search in just one specific folder example disk1/log? This is the script thank you ############################################################################## { # how many days ...

tigro11

very thanks

tigro11

perfect, if I wanted to delete only the older 10-day examples, do I have to modify the script? is there a command in ftp to move the log files? it would be ideal, so you do not need to delete all the log files. are stopped on the function where you can read all the log files in the rb and through a ...

tigro11

hi guys, I have a huge problem, on my rb that I use for hotspots I have a lot of log files like log.01.txt etc .. only that in the long run I fill the rb. I wanted to create a script to copy all the log files to an ftp server and then delete all the old log files of more than 30 days. Can you help m...

tigro11

hi guys, it seems to me that it is still not possible to change the date format in dd/mm/yyyy. It would be very useful as I also work with userman reports.
Does anyone have a solution?
thank you
Valerio

news?

tigro11

hi guys, it seems to me that it is still not possible to change the date format in dd/mm/yyyy. It would be very useful as I also work with userman reports.
Does anyone have a solution?
thank you
Valerio

tigro11

very strange, now all the devices have the ability to change the format of the date ....
I am amazed that until now nobody has raised the problem

tigro11

hi guys, it seems to me that it is still not possible to change the date format in dd / mm / yyyy. It would be very useful as I also work with userman reports.
Does anyone have a solution?
thank you
Valerio

tigro11

solutions ?

tigro11

I use these rules together with other filters add chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list address-list="port scanners" address-list-timeout=2w comment="Port scanners to list " disabled=no add chain=input protocol=tcp tcp-flags=fin,!syn,!rst,!psh,!ack...

tigro11

exactly, maybe even with the list of blocked ips.
is this possible?

tigro11

I put port scanner rules, when it finds an ip that scans ports, it blocks ip that generated the scan for 30 days

tigro11

hi guys, is there a script that can send me an email when an attack on the doors comes?
thank you all

tigro11

Thanks Sindy, I have to follow a particular rule on how to insert firewall rules?

tigro11

sorry for the question, but is it possible to make sure that when I paste a firewall rule script, the doubles are not loaded?
thank you

tigro11

sorry, delete message

tigro11

sorry for the question, but is it possible to make sure that when I paste a firewall rule script, the doubles are not loaded?

thank you

tigro11

perfect, I see how to write the script because I'm not very experienced in mikrotik.
Is there any example of a script?
as regards the block, on the whole subnet pc

thank you so much
valerio

tigro11

no advertising, I have customers who mount both watchguard and mikrotik, if I can solve the problem of blocking sites with mikrotik, I wanted to pass everything to mikrotik.
My clients have problems with users who instead of working around the social networks, so they want to block everything

tigro11

I do not understand your answer, but returning to the problem, is there a possible configuration?
I would not change my mikrotik with watchguard

tigro11

I have a customer who would like to block sites like ebay facebook and social networks, there is something that can be entered manually.
Is this program valid?
https://store.biostudio.com.ar/it/home/ ... ering.html

tigro11

on pfsense ok, but I would like to block all over the network using mikrotik, is there a script or something else?

tigro11

hi guys, I would like my router mikrotik has the ability to block a list of websites both in http and https without using the transparent proxy, because I think that in https does not work. Is there a script or something else that works?

valerio

tigro11

New winbox does not work! Wrong password!

download/file.php?id=32109

tigro11

Please Help! I upgraded to 6.43rc17, could not enter and reset the settings. Now I can not go in with a new winbox, not with an old winbox. Version of the nethinstall that is needed to update, I could not find on the download page.

https://www.mikrotik.com/download/share/winbox.exe

tigro11

hi guys, I installed a hotspot with internal radius of mikrotik, now I must be able to save the navigation logs of various users logged.
Do you have any solution without installing the proxy? sil proxy seems to me that it does not work on https

valerio

tigro11

nice of the info, could I use the nas synology or qnap to save or view the logs?

tigro11

I saw the Splunk installation, but I tried not to commit a machine to mount the Splunk server. On PFsense I use NTOPNG, unfortunate that on mikrotik you can not install as memory could be used or USB sticks or better still the Micro SD. I need it because I have to keep track of the surfing of my hot...

tigro11

hello guys, in the last rc49 release, I wanted to write my hotspot logs on micro sd, only that he can not write on disk1, he always writes on flash
RG 750g3
on the log action type menu, the sd name does not appear

tigro11

my idea was to use existing wifi and filter everything through mac address. Would you give me a hint on how I could do?
thank you

tigro11

You can always configure OpenDNS as your DNS server, either as the DNS for the router itself and then advertise the router address as DNS server in DHCP or by advertising the OpenDNS servers in DHCP, and then configure an OpenDNS account on your internet address with the settings you like. You do n...

tigro11

kid-control:
hello guys, I do not know if I'm on the right page, since I have children at home I connect to the internet, I saw the kid-control utility, apart from the times and the mac address, you can also set custom dns that block adult sites?

thank you
valerio

tigro11

hello guys, I have to prepare a hotspot with userman, wandering around the net I see a lot of configuration mode, both in bridge mode and in router mode, I would like to understand the difference between the two modes. If I then want to add a vlan port is a problem or can you add it without problems...

tigro11

I have the rb 750gr3 in continuous loop, after 5 seconds reboots and makes a beep, can you restore the firmware maybe via micro sd or with the usb port? With netinstall it does not see the cpu. Try the ether1 on hEX (750Gr3) and connect it directly to PC. Tips: https://forum.mikrotik.com/viewtopic....

tigro11

I have the rb 750gr3 in continuous loop, after 5 seconds reboots and makes a beep, can you restore the firmware maybe via micro sd or with the usb port?
With netinstall it does not see the cpu.

tigro11

I tried to reset it, but it keeps rebooting with a beep at every reboot. How can I rewrite the firmware?
thank you

tigro11

Why it doesn't install? What's in Log after reboot? We're not telepathists... then, after doing a reset and installing version 6.41.2 I tried to reinstall the package user-manager-6.42rc20-mmips.npk but nothing to do. after reboot the package is not installed now he is continuously restarting by ma...

tigro11

I see that the previous posts have been deleted.
Returning to the question, it turns out to you that the package is not installed?
is this a problem already reported?
thank you

tigro11

it is only present on the beta version.
I tried to install it, but it does not install.
I have also installed the beta firmware but do not install lost

tigro11

in the zip file is not present in the package, or have changed package name.

tigro11

hi guys, on my rb750Gr3 with firmware 6.42rc28 I wanted to mount a hotspot for a job. I can not install the user-manager package.
Are there any solutions?
thank you all

Valerio

tigro11

hi guys, on my rb750Gr3 with firmware 6.42rc28 I wanted to mount a hotspot for a job. I can not install the user-manager package.
Are there any solutions?
thank you all

Valerio

Search found 107 matches