Community discussions

Search found 51 matches

  • 1
  • 2
by esquirrel
Sat Mar 31, 2018 4:31 am
Forum: Beginner Basics
Topic: Web site that won't resolve
Replies: 5
Views: 418

Re: Web site that won't resolve

Is there any reason a web site would force connection to it via ipv6?
by esquirrel
Fri Mar 30, 2018 8:50 pm
Forum: Beginner Basics
Topic: Web site that won't resolve
Replies: 5
Views: 418

Web site that won't resolve

What can be done to get a web site that appears to refuse to resove under IPv4 to work?

ipv6 is disabled and isn't going to be enabled for this.
by esquirrel
Fri Mar 30, 2018 8:37 pm
Forum: General
Topic: Thank you for the great Cable Test feature!
Replies: 5
Views: 823

Re: Thank you for the great Cable Test feature!

I went to the PITA of rebuilding wireshark from source and I must be making some very dumb mistake as I still have not been able to get streaming to WS on my main machine to work for me. I need to devote some quality time to figuring it out. Once I have that running, I agree, I likely wont need to m...
by esquirrel
Thu Mar 29, 2018 11:33 pm
Forum: Beginner Basics
Topic: Tools to help figure out optimal setups?
Replies: 3
Views: 420

Tools to help figure out optimal setups?

What kinds of tools do people use to figure out optimal setups? (short of setting up a test network that duplicates your real one) I currently am using the usual, ping, traceroute, wireshark.. Dia is nice for drawing pretty pictures. Is there anything like dia which also does simulation or sanity ch...
by esquirrel
Thu Mar 29, 2018 11:21 pm
Forum: Beginner Basics
Topic: Please add a wiki document on settings to maximize home user privacy. [SOLVED]
Replies: 4
Views: 670

Re: Please add a wiki document on settings to maximize home user privacy. [SOLVED]

Squeeze, thank you, yes, this was my experience too running nmap from the outside. Also bit by bit I discovered what you suggested pretty much all of it. Your advice is good. Can you think of any reason why some big sites accuse me of having "unusual traffic from my IP" when I have not done anything...
by esquirrel
Mon Mar 26, 2018 9:29 pm
Forum: Beginner Basics
Topic: Please add a wiki document on settings to maximize home user privacy. [SOLVED]
Replies: 4
Views: 670

Please add a wiki document on settings to maximize home user privacy. [SOLVED]

Please publish an official document giving all the choices which a user can use to minimize the potential for external entities to extract information about the internal network via the router, when a home router is not a gateway to a real network, and instead is just a home device. In no small part...
by esquirrel
Mon Mar 26, 2018 8:59 pm
Forum: Beginner Basics
Topic: Extracting more info from logs about incoming packets such as ICMP and logging them persistently on another box
Replies: 1
Views: 304

Extracting more info from logs about incoming packets such as ICMP and logging them persistently on another box

I would like to request some more 'official' pages giving the best way to do things like this, especially with newer RouterOS versions.
by esquirrel
Thu Mar 22, 2018 2:56 pm
Forum: General
Topic: Thank you for the great Cable Test feature!
Replies: 5
Views: 823

Thank you for the great Cable Test feature!

Its well worth it buying one of your routers just for that!

Add in the ability to mirror ports, making one a really good diagnostic tool...
by esquirrel
Thu Mar 22, 2018 2:44 pm
Forum: Wireless Networking
Topic: Better alternative to WPS, which is insecure, a strong random password thats less than 63 chars
Replies: 2
Views: 445

Better alternative to WPS, which is insecure, a strong random password thats less than 63 chars

This article has a procedure for using /dev/urandom to generate a small file of random bits. https://security.stackexchange.com/questions/15653/recommend-length-for-wi-fi-psk It doesnt have to be 63 characters long, it can be shorter, as long as its random and is at least a minimum size, which is di...
by esquirrel
Thu Mar 22, 2018 2:35 pm
Forum: Wireless Networking
Topic: WiFi Regulatory requirements for DPRK?
Replies: 2
Views: 379

Re: WiFi Regulatory requirements for DPRK?

That answers my question,

*Thank you!*

Here is a recent article about the very limited wifi access that it seems does exist, that I just found..

https://www.extremetech.com/mobile/1992 ... izens-dont
by esquirrel
Thu Mar 22, 2018 2:48 am
Forum: Wireless Networking
Topic: WiFi Regulatory requirements for DPRK?
Replies: 2
Views: 379

WiFi Regulatory requirements for DPRK?

While performing the setup for my wifi-router I noticed that it has a regulatory setting for the DPRK (better known in some areas as North Korea) Having followed the situation in the country for some time I am curious about this, as I am sure many are. Did they actually publish wifi regulations with...
by esquirrel
Wed Mar 21, 2018 7:34 am
Forum: Wireless Networking
Topic: Peer to peer chat or fora over ad hoc wifi?
Replies: 1
Views: 280

Peer to peer chat or fora over ad hoc wifi?

I have some geeky neighbors and we were talking about adhoc networking, given that we all can see one anothers APs. So I am investigating the concept. Has anybody here done anything like this? Furthest neighbor is maybe 150-200 meters away. I probably have the best antennas, I have several commercia...
by esquirrel
Fri Mar 16, 2018 7:56 pm
Forum: Beginner Basics
Topic: "Securing Your Router" syntax
Replies: 0
Views: 310

"Securing Your Router" syntax

I am unable to make a number of the changes in "Securing your Router" and its not clear why, but I am guessing that some of the options listed are no longer correct. Edit: Thats what seems to have happened. The changes are small.. and involve the syntax of disabling/enabling mac-services and formerl...
by esquirrel
Fri Mar 16, 2018 7:44 pm
Forum: Beginner Basics
Topic: is it possible to show running firewall log- similar to tail -f i.e. in realtime?
Replies: 0
Views: 269

is it possible to show running firewall log- similar to tail -f i.e. in realtime?

I need to be able to view the results of changes to firewall rules in the logged packets. Is it possible to open the log (in ssh or directly via a hard wired console) similar to when you issue the command "tail -f" on Unix?

Alternatively, is it possible to encrypt syslog with TLS or similar?
by esquirrel
Thu Mar 15, 2018 11:54 pm
Forum: Beginner Basics
Topic: Very slow WiFi download speed. (MikroTik hAP ac2) [SOLVED]
Replies: 25
Views: 16363

Re: Very slow WiFi download speed. (MikroTik hAP ac2) [SOLVED]

That is very weird. Thinking about it, that sounds likely to be caused by some setting issue, likely in the wireless protocol settings. Its unlikely to be the antenna. That said, here are my thoughts on the antenna for one unit I saw. It could be improved if there was more space in the vertical dire...
by esquirrel
Thu Mar 15, 2018 11:11 pm
Forum: Beginner Basics
Topic: Question on behavior of unmanaged switches with 'green' features
Replies: 5
Views: 553

Re: Question on behavior of unmanaged switches with 'green' features

I don't think its the switches. I think it's likely to be a mistake in configuration on my part, perhaps combined with the unfortunate situation of having two unmanaged switches between some machines and the Mikrotik instead of just one, and sometimes having some of the switches, which are meant to ...
by esquirrel
Thu Mar 15, 2018 10:33 pm
Forum: Wireless Networking
Topic: Info on your implementation of mesh networking?
Replies: 4
Views: 2491

Re: Info on your implementation of mesh networking?

Thank you, given the low power requirements and cost of the hardware, this is extremely useful to know about. I have a few questions. If you are using a Mikrotik AP with two antennas and are in a mesh network, and suppose you connect to it with two directional antennas, one pointing at each of the o...
by esquirrel
Thu Mar 15, 2018 4:24 pm
Forum: Wireless Networking
Topic: Questions on Antenna Compatibility
Replies: 8
Views: 874

Re: Questions on Antenna Compatibility

The add on'collinear' style antennas you have are likely designed only for 2400 MHz and they are not designed to fold flat against a metallic PCB like you have them. They would work well (on 2.4 GHz) if allowed to point straight down (I'm perhaps mistakenly assuming the AP is mounted to the ceiling ...
by esquirrel
Thu Mar 15, 2018 4:54 am
Forum: Beginner Basics
Topic: Question on behavior of unmanaged switches with 'green' features
Replies: 5
Views: 553

Re: Question on behavior of unmanaged switches with 'green' features

I guess what I mean is 'reachability' without it being dynamic and subject to the router's autoconfiguration decisions. I have several subnets containing various kinds of devices. Only one is connected to the default bridge, because of issues I've previously had with unwanted broadcast traffic. My g...
by esquirrel
Thu Mar 15, 2018 4:23 am
Forum: Beginner Basics
Topic: Question on behavior of unmanaged switches with 'green' features
Replies: 5
Views: 553

Question on behavior of unmanaged switches with 'green' features

How do i tell my Mikrotik router to keep the connection open when a "unmanaged" switch in some other part of the house doesn't have anything plugged into it (besides maybe another dumb switch?) I have a bunch of these 5 or 8 port switches and previously it seems there were no issues when I used them...
by esquirrel
Wed Mar 14, 2018 5:33 pm
Forum: Wireless Networking
Topic: Info on your implementation of mesh networking?
Replies: 4
Views: 2491

Info on your implementation of mesh networking?

Where can I find out more about how Mikrotik have implemented mesh networking in RouterOS and Rb's, and how to use it?
by esquirrel
Tue Mar 13, 2018 11:51 pm
Forum: General
Topic: Slingshot APT [SOLVED]
Replies: 44
Views: 24010

Re: Slingshot APT, RouterOS spying software [SOLVED]

I would prefer to not have to run Wine at all in a context like this. This is an all-important issue. Security is the #1 thing with a device like a router. And actually, I prefer open source products with no binary blobs. All the convenience is nice but at the end of the day what matters the most is...
by esquirrel
Tue Mar 13, 2018 10:18 pm
Forum: RouterBOARD hardware
Topic: LED/GPIOs question.
Replies: 0
Views: 317

LED/GPIOs question.

I see that there is a capability to script LEDs. I have the Rb941-2nd TC.

Is there any documentation on RouterOS's hardware interface and its extend-ability, particularly re: GPIOs, and does that info apply to the diminutive and affordable Rb941-2nd?
by esquirrel
Tue Mar 13, 2018 9:57 pm
Forum: RouterBOARD hardware
Topic: Opening RB941 tower case without damaging it?
Replies: 2
Views: 534

Re: Opening RB941 tower case without damaging it?

There are a number of free programs which might be helpful for you to check your grammar in other languages than your native one. (Several run under LibreOffice, so links to them can be found there.) The problem of course is the meaning. Something may have altogether the wrong meaning but be grammat...
by esquirrel
Tue Mar 13, 2018 6:06 am
Forum: General
Topic: Hotspot Authentication Even Without Internet
Replies: 11
Views: 4792

Re: Hotspot Authentication Even Without Internet

Is it possible for a business to use the "hotspot" to give customers who visit their store access to their web site via a Virtual AP that has no login, password or encryption that just serves up their web site and nothing else? (from a local disk or server like one running on a Raspberry Pi or simil...
by esquirrel
Mon Mar 12, 2018 8:07 am
Forum: RouterOS v6 RC and v7 BETA
Topic: RB750Gr3 SSH
Replies: 4
Views: 927

Re: RB750Gr3 SSH

You need to also enable the server
See /ip services

https://wiki.mikrotik.com/wiki/Manual:IP/Services

via - as far as client, I don't know, I have not used
Mikrotik's server based client.. port forwarding, etc. But the basic functions are there.
You can ssh into it. It behaves properly.
by esquirrel
Mon Mar 12, 2018 5:55 am
Forum: The Dude
Topic: Cisco Interfaces No Longer Work in Dude GUI
Replies: 5
Views: 946

Re: Cisco Interfaces No Longer Work in Dude GUI

Sorry for asking such a beginners question..

Are there similar programs that work on Linux through SNMP, that can configure both Mikrotik's and other vendors's (Cisco's) products?

Or does "the Dude" program run under Wine?
by esquirrel
Mon Mar 12, 2018 3:17 am
Forum: RouterBOARD hardware
Topic: RouterBoard 2.4GHz Ptp links - max distance
Replies: 2
Views: 515

Re: RouterBoard 2.4GHz Ptp links - max distance

Look for a *link budget calculator*. Height above average terrain is very important because of the curvature of the earth. Even under the best conditions, with high gain antennas, etc, an antenna held at the height of a human hand held up as high as it can hold a hand held transmitter, will only be ...
by esquirrel
Mon Mar 12, 2018 2:24 am
Forum: RouterBOARD hardware
Topic: Opening RB941 tower case without damaging it?
Replies: 2
Views: 534

Opening RB941 tower case without damaging it?

I have the RB941 TC model. The sides of the case are curved upward so its kind of difficult to open. Likely pushing simultaneously on both tabs will get it open without breaking it but I just wanted to check here with others that indeed that is the correct way to open it before I damage it.
by esquirrel
Sun Mar 11, 2018 9:41 pm
Forum: Beginner Basics
Topic: [Fixed] Sudden loss of connectivity on wireless default wlan
Replies: 0
Views: 275

[Fixed] Sudden loss of connectivity on wireless default wlan

[i]Note: this has been fixed- 'wlan1' had gotten disconnected from the bridge by mistake and it wasn't obvious at first what had happened. The rest of the setup is very generic but I made some changes which may not have been the best decisions, still finding my way around. Feel free to make suggesti...
by esquirrel
Sat Mar 10, 2018 8:02 pm
Forum: General
Topic: Slingshot APT [SOLVED]
Replies: 44
Views: 24010

Re: Slingshot APT, RouterOS spying software [SOLVED]

For non-experts, how can somebody test that the vulnerability isnt there? Has Winbox particularly ever been audited? When I launch winbox under wine it seems to be loading plugins and also the wine log (or window if its been launched from a shell) keeps repeating "IPV6_ADD_MEMBERSHIP:" (string) even...
by esquirrel
Sat Mar 10, 2018 6:24 pm
Forum: General
Topic: Remote syslog not working
Replies: 7
Views: 1374

Re: Remote syslog not working

Is the memory portion of the last log lost?
by esquirrel
Sat Mar 10, 2018 6:23 pm
Forum: General
Topic: Remote syslog not working
Replies: 7
Views: 1374

Re: Remote syslog not working

what do we miss if we save logs generally to a network filesystem like for example, DDWRT, OpenWRT, and tomato?
by esquirrel
Sat Mar 10, 2018 2:47 pm
Forum: Beginner Basics
Topic: What is the best way to separate virtual WLAN APs from one another?
Replies: 8
Views: 911

Re: What is the best way to separate virtual WLAN APs from one another?

My old switch demand that I use IE to access its web interface, but that seems to be impossible, as none of the versions of IE I've tried seem to work.

So I will just use the command line and keep everything very simple.
by esquirrel
Fri Mar 09, 2018 11:50 pm
Forum: General
Topic: Slingshot APT [SOLVED]
Replies: 44
Views: 24010

Re: Slingshot APT, RouterOS spying software [SOLVED]

There is also a Wired article.

I can see why all wifi/router/switch devices would become targets..

Edit: also found Wired's "Kaspersky, Russia and the Antivirus Paradox". Also worth reading.
by esquirrel
Fri Mar 09, 2018 12:01 am
Forum: Beginner Basics
Topic: What is the best way to separate virtual WLAN APs from one another?
Replies: 8
Views: 911

Re: What is the best way to separate virtual WLAN APs from one another?

I am going to put that into a separate post, sorry for editing post-post, it just seemed to be off topic. Basically after reading other posts and thinking about it despite the fact that the three virtual wlans' vlans I am setting up dont need to be brought out to the 24 port switch, having extra jac...
by esquirrel
Thu Mar 08, 2018 7:51 am
Forum: Beginner Basics
Topic: Best way to set up WLAN w/3 Virtual APs on different subnets each with net access but not communicating +/ DNS+NTP? [SOLVED]
Replies: 2
Views: 533

Re: Best way to set up WLAN w/3 Virtual APs on different subnets each with net access but not communicating +/ DNS+NTP? [SOLVED]

I think this is a good start. I'm going to try to write up a script, and I'll bring it back here to get criticism. My better half doesn't want me taking the network down for lengthy experiments so I very much appreciate the knowledge here. Ive had to redo the entire config now it seems like maybe fo...
by esquirrel
Thu Mar 08, 2018 4:58 am
Forum: Beginner Basics
Topic: What is the best way to separate virtual WLAN APs from one another?
Replies: 8
Views: 911

Re: What is the best way to separate virtual WLAN APs from one another?

Is the concept of VLANS- basically extending the number of logical "subnets" that can be contained *alongside one another* in a virtual pipe? Thats what I am gathering, but since the end user machine/device (except for routing hardware) dont seem to have vlan settings, (except my phones do, but they...
by esquirrel
Wed Mar 07, 2018 3:57 pm
Forum: RouterBOARD hardware
Topic: How to open the puzzle-box like case of the hAp-lite TC (Rb941-2nd -for antenna mod)without scratching or destroying it?
Replies: 2
Views: 783

Re: How to open the puzzle-box like case of the hAp-lite TC (Rb941-2nd -for antenna mod)without scratching or destroying

Yes, you're right, that is exactly what they are doing, however one can solder a tiny coaxial connector to the pads which are already there for testing purposes, and then run two pigtails to a different style coaxial connector. Its very easy to attach a u.fl connector if the pads are already there. ...
by esquirrel
Wed Mar 07, 2018 5:59 am
Forum: Announcements
Topic: Winbox 3.12 released!
Replies: 55
Views: 41871

Re: Winbox 3.12 released!

Thank you to all of you for making such an awesome hardware and software ecosystem.
by esquirrel
Wed Mar 07, 2018 5:58 am
Forum: Announcements
Topic: Winbox 3.12 released!
Replies: 55
Views: 41871

Re: Winbox 3.12 released!

Please make the table column sizes in the log especially resizable. On my system its impossible to get the time to show properly. Is there a config file anywhere where that format can be adjusted? Is it possible to script the RouterOS software to save its logs to a shared folder - say on a CIFS shar...
by esquirrel
Wed Mar 07, 2018 5:23 am
Forum: RouterBOARD hardware
Topic: How to open the puzzle-box like case of the hAp-lite TC (Rb941-2nd -for antenna mod)without scratching or destroying it?
Replies: 2
Views: 783

How to open the puzzle-box like case of the hAp-lite TC (Rb941-2nd -for antenna mod)without scratching or destroying it?

There must be a trick to it but I am not coming up with it. I want to add external antennas. I have worked with Hirose style u.fl/IPX type connectors before (its easy once you get the hang of it) and have everything I need as far as soldering. My guess is that a specific tool must exist, one that fr...
by esquirrel
Wed Mar 07, 2018 5:10 am
Forum: RouterBOARD hardware
Topic: Mounting Disc Lite5
Replies: 16
Views: 2484

Re: Mounting Disc Lite5

Maybe most of us (luckily not I ) have ever had to live in one of those communities where there have extremely fussy rules on what can be mounted on the outside of a house or apartment. In a situation like that the HOA-friendly designs of the Mikrotik products I am sure make a big difference in acce...
by esquirrel
Wed Mar 07, 2018 4:58 am
Forum: Wireless Networking
Topic: Mikrotik WISPs: Where?
Replies: 94
Views: 45043

Re: Mikrotik WISPs: Where?

They are all over the world. here in the US they are widely used in rural areas where the large cable based ISPs often don't see the cost as being worth their effort. This is where small ISP providers are literally a lifeline for many communities.
by esquirrel
Wed Mar 07, 2018 4:38 am
Forum: Beginner Basics
Topic: Very slow speed on downloading
Replies: 4
Views: 1647

Re: Very slow speed on downloading

I have an RB941-2nd TC which is performing well. I'm just a beginner like yourself but I'd be happy to help. I suspect that you likely have something set up incorrectly. Its easy to do because there is so much controllability. However, I'd rather have that than many other devices lack of it. Perform...
by esquirrel
Tue Mar 06, 2018 9:51 pm
Forum: Beginner Basics
Topic: What is the best way to separate virtual WLAN APs from one another?
Replies: 8
Views: 911

What is the best way to separate virtual WLAN APs from one another?

while allowing each WLAN's devices access to the net, separating out my IP phones, and having a single server subnet. Basically like a guest LAN, because they are untrusted. I want to sandbox the mobile devices while still giving them access to the net. I have a RB941-2nd (hAp-lite) Would multiple b...
by esquirrel
Tue Mar 06, 2018 3:55 pm
Forum: Beginner Basics
Topic: Best way to set up WLAN w/3 Virtual APs on different subnets each with net access but not communicating +/ DNS+NTP? [SOLVED]
Replies: 2
Views: 533

Best way to set up WLAN w/3 Virtual APs on different subnets each with net access but not communicating +/ DNS+NTP? [SOLVED]

I recently bought a Hap Lite and I like it a lot. The performance is quite decent for the price. However, I cant seem to get the configuration right to add three virtual APS that can all use the same internal DNS+NTP server(s) but cannot flood one another with broadcast traffic, (MDNS, SSDP, IPv6 ju...
by esquirrel
Tue Mar 06, 2018 3:34 pm
Forum: RouterBOARD hardware
Topic: Mikrotik Raspberry pi video buffering
Replies: 12
Views: 1792

Re: Mikrotik Raspberry pi video buffering

Ideally, you should use a USB Gigabit Ethernet adapter that is designed to use USB3, in USB2 compatibility mode. A gentleman in the UK has done extensive testing of the network performance of various RPI models using USB NICs. The performance of that combination on an RPI seems to be the best. They ...
  • 1
  • 2