Community discussions

Search found 68 matches

by Lebzul
Mon Oct 07, 2019 3:46 pm
Forum: General
Topic: OpenWRT + RouterOS to have UPnP? [Advise needed]
Replies: 14
Views: 1092

Re: OpenWRT + RouterOS to have UPnP? [Advise needed]

Yeah, that may be one of the routes. People at OpenWRT forum say that a DumbAP would be a fast solution. Maybe we have to wait some more.
by Lebzul
Thu Oct 03, 2019 9:40 pm
Forum: General
Topic: OpenWRT + RouterOS to have UPnP? [Advise needed]
Replies: 14
Views: 1092

Re: OpenWRT + RouterOS to have UPnP? [Advise needed]

You have to accept that even "simple NAT case" is something unusual. Everything is made for client device connected directly to router (in same subnet) where it wants to open ports. Another router in the way breaks the thing. Out of curiosity, I tested the program I found previously (https://github...
by Lebzul
Thu Oct 03, 2019 6:00 pm
Forum: General
Topic: OpenWRT + RouterOS to have UPnP? [Advise needed]
Replies: 14
Views: 1092

Re: OpenWRT + RouterOS to have UPnP? [Advise needed]

I see. I read the post but I think that this is not so complicated. It is just a simple NAT case. MT (Public IP) > OpenWRT Router (Receiving IP from MT LAN) > PS3 (Private IP 192.168.x.x from OpenWRT) Just to take UPnP requests up to MT from the PS3. I've been spending days into this without getting...
by Lebzul
Wed Oct 02, 2019 6:44 pm
Forum: General
Topic: OpenWRT + RouterOS to have UPnP? [Advise needed]
Replies: 14
Views: 1092

Re: OpenWRT + RouterOS to have UPnP? [Advise needed]

The simplest explanation is that OpenWRT isn't sending anything to MT, and it would not be surprising at all, because that's normal behaviour. What you're looking for is some special kind of UPnP server, something like I found last time . I knew your name was familiar. ;) Hehehe. I've forgotten tha...
by Lebzul
Wed Oct 02, 2019 2:12 pm
Forum: General
Topic: OpenWRT + RouterOS to have UPnP? [Advise needed]
Replies: 14
Views: 1092

Re: OpenWRT + RouterOS to have UPnP? [Advise needed]

Image

Something like this. But this same port usually appears in ip/firewall/nat when PS3 in connected directly to MT.
MT is not detecting port request from a router like this one. I've tried to accept in filter, but without luck.
by Lebzul
Wed Oct 02, 2019 4:52 am
Forum: General
Topic: OpenWRT + RouterOS to have UPnP? [Advise needed]
Replies: 14
Views: 1092

Re: OpenWRT + RouterOS to have UPnP? [Advise needed]

But are there any UPnP requests from OpenWRT to MT?
I can see them within the OpenWRT router but none of them reach MT. That's the thing.
There should be a way in which the PS3 requests a port, then OpenWRT calls for it and then, MT communicates.
by Lebzul
Tue Oct 01, 2019 10:14 pm
Forum: General
Topic: OpenWRT + RouterOS to have UPnP? [Advise needed]
Replies: 14
Views: 1092

Re: OpenWRT + RouterOS to have UPnP? [Advise needed]

Either OpenWRT acts as transparent AP (simple bridge), then it shouldn't do anything with UPnP (it should be disabled) and all requests from PS3 will go directly to MT's UPnP. Or OpenWRT acts as router (PS3 is in different subnet) and then you'd need UPnP on OpenWRT act as proxy and forward request...
by Lebzul
Tue Oct 01, 2019 4:45 pm
Forum: General
Topic: OpenWRT + RouterOS to have UPnP? [Advise needed]
Replies: 14
Views: 1092

OpenWRT + RouterOS to have UPnP? [Advise needed]

Hi there, I am looking for some advice to have working a PS3 in OpenNAT. The setup is the following: MT ----- Switch ----- OpenWRT Router > PS3 MT has UPnP activated and it is receiving Public IP. OpenWRT is just normally configured as an AP and has UPnP activated with IGDv1 checked (so PS3 can requ...
by Lebzul
Sat Sep 14, 2019 3:05 am
Forum: General
Topic: Rejecting or Dropping [Help]
Replies: 24
Views: 2572

Re: Rejecting or Dropping [Help]

Sometimes you need to use multiple rules to achieve desired result. If you have something like: add action=deny dst-address=192.168.100.1 src-address=!10.50.10.120 add action=deny dst-address=192.168.100.1 src-address=!10.50.10.121 and expect access to be allowed from both addresses, then of course...
by Lebzul
Thu Sep 12, 2019 3:57 am
Forum: General
Topic: Rejecting or Dropping [Help]
Replies: 24
Views: 2572

Re: Rejecting or Dropping [Help]

You can take a hint and choose what you like better, either: a) Try with proxy config. I don't use it much, but this should work: /ip proxy access add action=deny dst-address=192.168.100.1 b) Re-evaluate if the proxy really does anything useful for you. And in case you find it doesn't, remove it an...
by Lebzul
Tue Sep 10, 2019 5:36 am
Forum: General
Topic: Rejecting or Dropping [Help]
Replies: 24
Views: 2572

Re: Rejecting or Dropping [Help]

I think I see it. You're connecting to http://192.168.100.1, i.e. to default port 80, right? Then it's this rule, it redirects those connections to local web proxy and they are no longer going through forward chain: /ip firewall nat add action=redirect chain=dstnat comment="Web Cache Redirection" d...
by Lebzul
Mon Sep 09, 2019 5:28 am
Forum: General
Topic: Rejecting or Dropping [Help]
Replies: 24
Views: 2572

Re: Rejecting or Dropping [Help]

/ip route> print Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit # DST-ADDRESS PREF-SRC GATEWAY DISTANCE 0 ADS 0.0.0.0/0 PUBLICIP 1 1 ADC 10.50.10.0/24 10.50.10.1 LAN 0 2 ADC PUBLICIP/22 PUBLICI...
by Lebzul
Sun Sep 08, 2019 2:32 pm
Forum: General
Topic: Rejecting or Dropping [Help]
Replies: 24
Views: 2572

Re: Rejecting or Dropping [Help]

Still not helpful. Let's try this: 1) What's the IP address of device you test it from? I mean some that should not be allowed to access the modem? 2) Can you show the output "/ip address print" from RB? You can censor public addresses if there are any, but keep the private ones untouched. 3) Can y...
by Lebzul
Sun Sep 08, 2019 5:46 am
Forum: General
Topic: [Feature request] Wireguard
Replies: 94
Views: 22781

Re: [Feature request] Wireguard

Thanks Erfan, are you saying I can attach my pi-hole to a port on my MT router and have it act as my wifeguard server (and then connect to it from my iphone for example)? I hope the pi-hole works better on this then it did for me on DNS. I ended up bypassing the pi-hole and router DNS and now stric...
by Lebzul
Sun Sep 08, 2019 5:42 am
Forum: General
Topic: Rejecting or Dropping [Help]
Replies: 24
Views: 2572

Re: Rejecting or Dropping [Help]

It doesn't really tell me where the modem is. It's connected to this router, right? To which port? Does the router get some address (I'd assume some other 192.168.100.x) from it using dhcp? Try to describe everything in a way that even someone who doesn't see it can understand it. ISP > Modem > Mk ...
by Lebzul
Sun Sep 08, 2019 4:31 am
Forum: General
Topic: Rejecting or Dropping [Help]
Replies: 24
Views: 2572

Re: Rejecting or Dropping [Help]

So where exactly is 192.168.100.1? I assumed connected to WAN1 PoE, but it doesn't seem to be the case.
That address is the local page of the Modem. It is like 192.168.1.1 for routers to config. This modem has 4 WANs.
by Lebzul
Sun Sep 08, 2019 3:08 am
Forum: General
Topic: Rejecting or Dropping [Help]
Replies: 24
Views: 2572

Re: Rejecting or Dropping [Help]

It does not log anything at all. Not even the bytes countered.
by Lebzul
Sat Sep 07, 2019 5:11 am
Forum: General
Topic: Rejecting or Dropping [Help]
Replies: 24
Views: 2572

Re: Rejecting or Dropping [Help]

# model = RB450Gx4 # serial number = /interface pptp-server add name="PPTP Server" user=PPTP /interface ethernet set [ find default-name=ether1 ] name=LAN set [ find default-name=ether5 ] name="WAN1 PoE" poe-out=off set [ find default-name=ether2 ] disabled=yes name=WAN2 set [ find default-name=eth...
by Lebzul
Sat Sep 07, 2019 4:38 am
Forum: General
Topic: Rejecting or Dropping [Help]
Replies: 24
Views: 2572

Re: Rejecting or Dropping [Help]

You can choose if you identify source by interface or subnet. So either: /ip firewall filter add chain=forward action=reject dst-address=192.168.100.1 reject-with=icmp-admin-prohibited in-interface=<LAN> or: /ip firewall filter add chain=forward action=reject dst-address=192.168.100.1 reject-with=i...
by Lebzul
Sat Sep 07, 2019 3:17 am
Forum: General
Topic: Rejecting or Dropping [Help]
Replies: 24
Views: 2572

Re: Rejecting or Dropping [Help]

What about simply blocking access from LAN subnet to 192.168.100.1?
That might be the one. I problem is that I am not an expert in this field. If you could provide me an example, I'll try right away.
by Lebzul
Sat Sep 07, 2019 3:01 am
Forum: General
Topic: Rejecting or Dropping [Help]
Replies: 24
Views: 2572

Re: Rejecting or Dropping [Help]

Do you want to restrict the access to the Mikrotik Web Administration? If so, you can create firewall rules for that purpose, without layer7 stuff.
Not exactly. I want to restrict access to the webpage of the modem. The one from Arris devices.
by Lebzul
Sat Sep 07, 2019 12:18 am
Forum: General
Topic: Rejecting or Dropping [Help]
Replies: 24
Views: 2572

Rejecting or Dropping [Help]

Hi guys,

I've been wondering about how to block the main webpage of the modem (usually 192.168.100.1) from within Mk so any device can't see it (except the ones I want). I've reading a lot but haven't figure it out yet.
People suggest L7 or address list but none of them worked for me.

Any ideas?
by Lebzul
Tue Aug 27, 2019 4:53 pm
Forum: General
Topic: BLOCK SPAMMERS DONT WORK - FIREWALL
Replies: 5
Views: 699

Re: BLOCK SPAMMERS DONT WORK - FIREWALL

Can you share some configs for those spam and virus rules? https://www.howtoforge.com/amavisd_postfix_debian_ubuntu https://www.akadia.com/services/postfix_amavisd.html https://blog.tinned-software.net/setup-amavisd-new-with-spamassassin-and-clamav-with-postfix/ (first three hits on Google) Thanks ...
by Lebzul
Mon Aug 26, 2019 3:35 pm
Forum: General
Topic: BLOCK SPAMMERS DONT WORK - FIREWALL
Replies: 5
Views: 699

Re: BLOCK SPAMMERS DONT WORK - FIREWALL

Hmm..
spam & virus blocking I do with a combination of Postfix regex, amavisd-new and SpamAssassin
and not with firewall rules.
Can you share some configs for those spam and virus rules?
by Lebzul
Thu Aug 22, 2019 2:34 am
Forum: General
Topic: VRRP Riddle [Help Needed]
Replies: 26
Views: 3006

Re: VRRP Riddle [Help Needed]

stop using PPTP - it provides no actual security and no known advantage as compared to L2TP, except that recent updates of Windows 10 have broken L2TP/IPsec functionality whilst PPTP seems tto have survived Yes, I had it there because of Windows. For others, I use L2TP. [*]to post configurations, p...
by Lebzul
Tue Aug 20, 2019 4:53 pm
Forum: General
Topic: VRRP Riddle [Help Needed]
Replies: 26
Views: 3006

Re: VRRP Riddle [Help Needed]

I did everything suggested but it is not working properly. Some routers (Openwrt) receive their leases fine but the following happens. I can ping them a few seconds after the Tik reboots but I get timeouts after a few seconds of receiving the lease. Openwrt receive default VRRP gateway and DNS fine....
by Lebzul
Tue Aug 20, 2019 1:09 am
Forum: General
Topic: VRRP Riddle [Help Needed]
Replies: 26
Views: 3006

Re: VRRP Riddle [Help Needed]

Attach the DHCP servers at both machines to the VRRP interface rather than the "physical" interface. The client remembers the IP address of the DHCP server from which it got the lease so it asks it for renewal using DHCPREQUEST to its individual (unicast) address before reverting to broadcasting a ...
by Lebzul
Sat Aug 17, 2019 3:27 pm
Forum: General
Topic: VRRP Riddle [Help Needed]
Replies: 26
Views: 3006

Re: VRRP Riddle [Help Needed]

What I can see is that you now only deal with the static leases (as the parameter address-pool of /ip dhcp-server is set to the default value static-only ), so the fact that the pools for dynamic leases are the same at both routers does not cause any trouble now. Yes, I use static to avoid messing ...
by Lebzul
Fri Aug 16, 2019 10:07 pm
Forum: General
Topic: VRRP Riddle [Help Needed]
Replies: 26
Views: 3006

Re: VRRP Riddle [Help Needed]

I haven't found a solution yet.
Any help will be appreciated.
by Lebzul
Thu Aug 15, 2019 7:55 pm
Forum: General
Topic: VRRP Riddle [Help Needed]
Replies: 26
Views: 3006

Re: VRRP Riddle [Help Needed]

It must be something related to the VRRP and the DHCP.
by Lebzul
Wed Aug 14, 2019 10:04 pm
Forum: General
Topic: VRRP Riddle [Help Needed]
Replies: 26
Views: 3006

Re: VRRP Riddle [Help Needed]

OK, so not in the sense that you wouldn't have to re-establish the TCP connections. Yes. So both the tablet and the mobile phone are connected to a wireless AP which just "translates wireless to Ethernet", but already the DHCP is running on the Tik. And there is a switch between the AP and the two ...
by Lebzul
Wed Aug 14, 2019 9:22 pm
Forum: General
Topic: VRRP Riddle [Help Needed]
Replies: 26
Views: 3006

Re: VRRP Riddle [Help Needed]

I managed to make my PC hold connection but not in my table or cellphone. Now wait. What means "hold connection", and what means "table" - a VoIP phone or a desktop PC? If the cellphone is connected using wireless as I suppose, there is not just the DHCP and gateway part, there is also the wireless...
by Lebzul
Wed Aug 14, 2019 8:48 pm
Forum: General
Topic: VRRP Riddle [Help Needed]
Replies: 26
Views: 3006

Re: VRRP Riddle [Help Needed]

Thanks for the clarification. Even though, my main reason using VRRP is to have active connections to the clients at home while "rebooting, moving or upgrading the main MK". The rest could wait. So far, I haven't been able to make it work. It even tried lowering the lease time so MK2 could get fresh...
by Lebzul
Wed Aug 14, 2019 6:15 pm
Forum: General
Topic: VRRP Riddle [Help Needed]
Replies: 26
Views: 3006

Re: VRRP Riddle [Help Needed]

First of all, I thank your for your dedication explaining all of these. I beg pardon first and foremost because I struggling figuring everything out (I am a Teacher. Nothing related to Networking). You can do either an import of .rsc file (which is a plaintext script) or a restore of .backup file (w...
by Lebzul
Wed Aug 14, 2019 2:53 am
Forum: General
Topic: VRRP Riddle [Help Needed]
Replies: 26
Views: 3006

Re: VRRP Riddle [Help Needed]

If you have really restored a backup rather than imported an export , you have cloned also the MAC addresses, so this is the first point to clarify. Well, I did that. Export the Master backup, restore that backup using import from PC. Both RBs show their respective MAC addresses at Winbox. I know t...
by Lebzul
Tue Aug 13, 2019 8:46 pm
Forum: General
Topic: HELP !! Install Probems
Replies: 2
Views: 377

Re: HELP !! Install Probems

Not clear.
Can you explain a little bit?
by Lebzul
Mon Aug 12, 2019 2:14 am
Forum: General
Topic: VRRP Riddle [Help Needed]
Replies: 26
Views: 3006

VRRP Riddle [Help Needed]

Hey there, I need some help from you guys. I am trying to set up a simple VRRP between two RBs. The problem is that when master drops, slave comes into play but does not make clients to be up. Slave can ping out. I am not sure why this does happen. Master: 10.50.10.1/24 Slave: 10.50.10.2/24 VRRP LAN...
by Lebzul
Sat May 18, 2019 3:48 am
Forum: General
Topic: Mk, NAT Open Request [Help needed]
Replies: 42
Views: 1926

Re: Mk, NAT Open Request [Help needed]

So there is no chain=dstnat action=dst-nat in-interface=WAN1 to-addresses=the.ip.of.the.console rule in /ip firewall nat ? If I do that, the rule only works for one of the two consoles when connected directly to MT. If I want both, I need to activate UPnP. But, the problem is when I have the consol...
by Lebzul
Fri May 17, 2019 3:25 pm
Forum: General
Topic: Mk, NAT Open Request [Help needed]
Replies: 42
Views: 1926

Re: Mk, NAT Open Request [Help needed]

I think it is time you pride the config, in terminal window, Export file=YourFileName hide-sensitive and either attach the file here or copy and paste the contents between source code brackets Modem > MT > Switch UPnP: On NAT chain=srcnat action=masquerade out-interface=WAN1 PoE log=no log-prefix="...
by Lebzul
Tue May 14, 2019 3:06 am
Forum: General
Topic: Mk, NAT Open Request [Help needed]
Replies: 42
Views: 1926

Re: Mk, NAT Open Request [Help needed]

https://ibb.co/rw50dGW
Even if the Xbox is statically connected and with all ports "open", it still shows NAT restricted at the console level.
by Lebzul
Tue May 07, 2019 4:33 am
Forum: General
Topic: Mk, NAT Open Request [Help needed]
Replies: 42
Views: 1926

Re: Mk, NAT Open Request [Help needed]

How can we have all ports open for a given client? That's the issue. That's why I talked about a single PS4 connected directly on Mikrotik's LAN (and with UPnP disabled); if it works to your satisfaction, Mikrotik's handling of 1:1 NAT is not the issue. Have you tried this simplified scenario as a ...
by Lebzul
Tue May 07, 2019 12:58 am
Forum: General
Topic: Mk, NAT Open Request [Help needed]
Replies: 42
Views: 1926

Re: Mk, NAT Open Request [Help needed]

If you'd have: MT>Router>(PS4#1,PS4#2,...) then NAT 1:1 from MT to Router and UPnP on Router should work fine (edit: although maybe not, I'm not sure if client gets public address from UPnP server, it wouldn't be public in this case, if it does). But if it would be anything like: MT>Router1>PS4#1 M...
by Lebzul
Mon May 06, 2019 11:09 pm
Forum: General
Topic: Mk, NAT Open Request [Help needed]
Replies: 42
Views: 1926

Re: Mk, NAT Open Request [Help needed]

Can this be bypassed by having an address list to DMZ? If you mean an address list of the sources in the internet, then yes. You can forward packets for wan.add.re.ss:port to private.add.ress.1:port if they come from a source on address-list "list1", and to private.add.ress.2:port if they come from...
by Lebzul
Sun May 05, 2019 2:48 pm
Forum: General
Topic: Mk, NAT Open Request [Help needed]
Replies: 42
Views: 1926

Re: Mk, NAT Open Request [Help needed]

Introducing a second router in the mix is I suspect going to be problematic regardless of which user console is going to be used.......... Have you tried connecting the consoles directly to the MT router?? That router is remotely connected through a wireless CPE so, it is necessary to have a router...
by Lebzul
Sun May 05, 2019 2:46 pm
Forum: General
Topic: Mk, NAT Open Request [Help needed]
Replies: 42
Views: 1926

Re: Mk, NAT Open Request [Help needed]

The problem is when I need more than one client in DMZ. That is why I asked about two PS4s used simultaneously. You said you need just one PS4 but at the same time you say you need two clients in DMZ. In NAT environment, 1:1 NAT is the best approximation of a DMZ you can get. When a device on a pri...
by Lebzul
Sat May 04, 2019 12:02 am
Forum: General
Topic: Mk, NAT Open Request [Help needed]
Replies: 42
Views: 1926

Re: Mk, NAT Open Request [Help needed]

So you want Mikrotik to forward packets coming to its public address to the private one of the console on the LAN, but choose the right one depending on which console is connected at the time? Because the DMZ approach (1:1 NAT) should be enough to make the console think that the NAT is the "open" t...
by Lebzul
Fri May 03, 2019 11:59 pm
Forum: General
Topic: Mk, NAT Open Request [Help needed]
Replies: 42
Views: 1926

Re: Mk, NAT Open Request [Help needed]

Good question Sindy, are you trying to establish if one gaming console is being used or two being used at the same time? Q1: Does one gaming console work with normal consumer router to modem (or isp supplied combo router/modem)? Q2: Do two gaming consoles work at the same time with normal consumer ...
by Lebzul
Fri May 03, 2019 11:14 pm
Forum: General
Topic: Mk, NAT Open Request [Help needed]
Replies: 42
Views: 1926

Re: Mk, NAT Open Request [Help needed]

Do you say that when you connect two consoles to the modem directly (i.e. without Mikrotik in between the modem and the consoles) at the same time , both consoles indicate the same NAT type "open" and you can use both simultaneously (with two players playing the same online game each on one of thos...
by Lebzul
Thu May 02, 2019 7:25 pm
Forum: General
Topic: Mk, NAT Open Request [Help needed]
Replies: 42
Views: 1926

Re: Mk, NAT Open Request [Help needed]

edit removed Good question, what is going on with MT NAT that is different from a consumer router that just works for this scenari0? I am thinking the extra granularity of MT should provide a config that works!! The thing is that I cannot open all ports to a few clients. If I assign Netmap to a cli...
by Lebzul
Thu May 02, 2019 6:31 pm
Forum: General
Topic: Mk, NAT Open Request [Help needed]
Replies: 42
Views: 1926

Re: Mk, NAT Open Request [Help needed]

I understand what you want. But think about poor router. It has one external address, let's say 1.2.3.4. If a new connection comes to e.g. 1.2.3.4:5678, how can it know if it should send it to internal 192.168.88.10, 192.168.88.20, or some other one? It can't. It's like wanting to hit two completel...
by Lebzul
Thu May 02, 2019 2:50 pm
Forum: General
Topic: Mk, NAT Open Request [Help needed]
Replies: 42
Views: 1926

Re: Mk, NAT Open Request [Help needed]

NAT hides multiple addresses behind one and it works for outgoing connections. But if there's incoming connection to external address, router must decide where to send it. With NAT 1:1, everything to external address is sent to one internal address. Ports stay the same, only destination address cha...
by Lebzul
Thu May 02, 2019 4:46 am
Forum: General
Topic: Mk, NAT Open Request [Help needed]
Replies: 42
Views: 1926

Mk, NAT Open Request [Help needed]

Hi there, I have been looking exhaustively for information regarding to have Open Nat at "multiple clients". I've seen UPnP, 1:1 (which I am doing to one client) with netmap. But what I am looking is to open full ports so my devices could have Open Nat while playing online. So far, I know that it's ...
by Lebzul
Mon Apr 29, 2019 2:24 pm
Forum: Beginner Basics
Topic: Blocking stuff [Help needed]
Replies: 5
Views: 490

Re: Blocking stuff [Help needed]

well you can block access to port 80 to the modem ip from all ips in your subnet and add an allow rule over the drop one only for the ips you want to access it
Thanks for the insight. Could you please give me an example based on the web (192.168.100.1)?
by Lebzul
Sun Apr 28, 2019 2:40 am
Forum: Beginner Basics
Topic: Blocking stuff [Help needed]
Replies: 5
Views: 490

Re: Blocking stuff [Help needed]

Any other suggestions?
by Lebzul
Thu Apr 25, 2019 3:51 am
Forum: Beginner Basics
Topic: Blocking stuff [Help needed]
Replies: 5
Views: 490

Re: Blocking stuff [Help needed]

You can create and account and use OpenDNS Home version for blocking specific or a group of web pages with the same purpose, such as group of web pages labeled as Video Sharing, News, Porn, etc. I prefer this solution than making a bunch of L7 rules, because in my experience it makes the subnet con...
by Lebzul
Wed Apr 24, 2019 8:33 pm
Forum: Beginner Basics
Topic: Blocking stuff [Help needed]
Replies: 5
Views: 490

Blocking stuff [Help needed]

Hi there,

I was trying and testing without success to block the webpage from my modem to a certain range of IPs except my devices.
Is that possible without L7 o marking?
Regards
by Lebzul
Fri Oct 19, 2018 5:24 am
Forum: General
Topic: PSN NAT Type
Replies: 5
Views: 1234

Re: PSN NAT Type

I can't tell you why your setup is not working. But what it does struck me weird is your dstnat rules. You have two, one for UDP and one for TCP, and the only action is adding DST address to a list ... and when talking about dstnat, DST address (before DST NAT does anything) is router's WAN address...
by Lebzul
Fri Sep 21, 2018 3:16 pm
Forum: Beginner Basics
Topic: Two RBs + PCC = NAT issues (Help)
Replies: 1
Views: 248

Re: Two RBs + PCC = NAT issues (Help)

Any clues?
by Lebzul
Wed Sep 19, 2018 3:25 pm
Forum: General
Topic: Improve config (Proofreading*)
Replies: 4
Views: 1144

Re: Improve config (Proofreading*)

Also your /ip firewall layer7-protocol rules probably don't work? As far as I know, now that https is everywhere the layer 7 stuff doesn't work any more because it's encrypted. You can create an address-list with the youtube and netflix dns addresses and then create a firewall filter rule to drop t...
by Lebzul
Mon Sep 17, 2018 2:22 am
Forum: Beginner Basics
Topic: Two RBs + PCC = NAT issues (Help)
Replies: 1
Views: 248

Two RBs + PCC = NAT issues (Help)

Hi there, I've experiencing some troubles that I'd like to receive some advice. My setup is the following: RB 1: RB750Gr3 (only Load balancer) 4 WAN used for PCC. IP: 10.50.5.x RB 2: RB450Gx4 (DHCP for client management, bandwidth, QoS). IP: 10.50.10.x I would like to know if possible to: 1- "See" b...
by Lebzul
Mon Sep 17, 2018 2:05 am
Forum: General
Topic: Improve config (Proofreading*)
Replies: 4
Views: 1144

Re: Improve config (Proofreading*)

Not even an advice
by Lebzul
Thu Sep 13, 2018 7:33 pm
Forum: General
Topic: Improve config (Proofreading*)
Replies: 4
Views: 1144

Improve config (Proofreading*)

Hi guys, I am a noob in regards to the world of Mikrotik and I have been implementing little by little configurations to my Rb. I have been using L7 for the management of YouTube so my devices could use specific bandwidth and the rest of the clients use a specific amount of shared bandwidth. Everyth...
by Lebzul
Thu Sep 13, 2018 4:48 am
Forum: General
Topic: RouterOS ISP identifier
Replies: 10
Views: 713

Re: RouterOS ISP identifier

I see. I was asking that because I saw in a local University campus that their Wi-Fi had in speedtest.net another University as an ISP. I was wondering if that is possible with Mikrotik devices. Is that done through Cisco's?
by Lebzul
Wed Sep 12, 2018 3:31 am
Forum: General
Topic: RouterOS ISP identifier
Replies: 10
Views: 713

Re: RouterOS ISP identifier

If you mean some external speedtest, then the answer is "no". If it shows name of your ISP, it's because connection came from there and it will happen as long as you use this ISP. And if you switch to another one, it will show name of the new ISP. In short, you can't hide on internet and no RouterO...
by Lebzul
Tue Sep 11, 2018 5:11 pm
Forum: General
Topic: RouterOS ISP identifier
Replies: 10
Views: 713

RouterOS ISP identifier

Hi there, I was wondering if it is possible to mask the ISP shown in the speedtest webpages? For example, to hide "Charter" and put my own but without dealing with public IPs, tables, rules, etc. It would be great to have a simple option in RouterOS to change that without affecting the services prov...
by Lebzul
Thu May 03, 2018 4:50 pm
Forum: General
Topic: PSN NAT Type
Replies: 5
Views: 1234

Re: PSN NAT Type

No one knows?
by Lebzul
Wed Feb 21, 2018 1:07 am
Forum: General
Topic: PSN NAT Type
Replies: 5
Views: 1234

PSN NAT Type

Hi, I was wondering if there a way to have NAT Type 2 on PS4/PSVITA? I have a RB750gr3 which is set up like this: ISP modem > TP-Link load balancer > Mikrotik > Switch > PS4 I have opened (Srcnat) all ports (Literally) to the static IP of the PS4 with no avail. Sometimes says NAT3 and plays to a ce...