Thanks, I've pasted my config below. I don't know enough to know if it's bloated. I did the basic network config and had a so-called 'consultant' do the firewall rules. Is this helpful? Thanks so much, I'm still a beginner with the firewall stuff. Dan # mar/14/2024 01:04:14 by RouterOS 6.47.9 # soft...

Hi all, Recently the public DNS we use (8.8.8.8) has started showing up in my blocked DDOS address list on the firewall, which has never happened before. I'm not an expert at all on this stuff... Is something wrong with my DDOS config? Or does this indicate internal clients being part of an attack (...

Thank you, sorry I don't fully understand, do you mean like a virus/malware infected client on the network?
And maybe also a bad firewall configuration?
Thank,
Dan

Thanks all, here's my entire config including the few lines pertaining to the DDOS stuff. Would super appreciate anyone knowledgeable who's willing to take a look. # mar/14/2024 01:04:14 by RouterOS 6.47.9 # software id = # # model = RB1100x4 # serial number = /interface bridge add fast-forward=no n...

Thank you Rho, I made the rule, I assume I can use 192.168.0.0. to block that whole network, yes? You're probably right about the DDOS rules, I didn't create them and don't have much firewall experience at all. That said, it's a brand new thing that 8.8.8.8 shows up on the blocked list so something ...

Hi Jay5son,
I tried to do exactly that but despite googling and youtubing my rule doesn't seem to block it

HI all, I manage a small network for a non-profit and this evening they lost connectivity. Upon further inspection both the primary DNS (their ISP) and the secondary DNS (8.8.8.8) are showing up on the DDOS blocked list based on my firewall rules in the Mikrotik router. I've never seen the DNS IPs s...

Hi all, So my firewall started spewing thousands of log messages recently, they vary but look mostly like this: Mar/19/2021 15:52:33 firewall,info forward: in:bridge1 out:ether1_Spectrum WAN, src-mac 2c:0e:3d:39:2b:23, proto TCP (SYN), 10.0.0.91:45572->64.233.185.101:443, len 60 Mar/19/2021 15:52:34...

Hi all, I've been using a simple queue to set the max capacity of our Internet connection, and for that I'm using to two PCQ's, one for upload and one for download, which has been working well in setting a bandwidth maximum for each user. The simple queue is configured for the entire network (10.0.0...

Hi all, I'm using a RouterBoard RB1100AHx4 as the main router and switch to manage a network of roughly 80 clients on a campus, distributed through a few switches and WiFi access points. Most clients are WiFi connected on the Ubiquity Unifi platform and the network is a simple star type with no redu...

Thanks, see below for the config. This has been the same for months but the problem with potential loop and the DNS delays came just recently. Does it look ok? # jun/22/2020 12:00:39 by RouterOS 6.44.3 # software id = CKED-AUWZ # # model = RB1100x4 # serial number = 91D80AE30458 /interface bridge ad...

Thank you, I exported the config but got a .rsc file and I'm not sure how to turn that into a text file, any pointers?

Hi all, I have suddenly started getting multiple alerts in the log that look like this: ether7: bridge port received packet with own address as source address (74:4d:28:01:2f:3a), probably loop I also get it on ether5 sometimes but mostly ether7. It seems to indicate that the MAC that represents the...

Hi there, I don't seem to be able to use the bandwidth test server, is there a new IP or new login credentials?
Thank you in advance,
Dan

Thanks Tom, I did browse through many pages trying to find the latest syntax but apparently missed it. Works great now, really appreciate it.
Dan

Tried again, no luck, it does seem to connect now but no throughput, here's a screenshot: [mod@MikroTikLV] > /tool bandwidth-test 207.32.195.2 user=btest password=btest protocol=udp duration=30 direction=receive status: connecting rx-current: 0bps rx-10-second-average: 0bps rx-total-average: 0bps lo...

Thanks all, I'm up and working now. I fixed the firewall security stuff and also blocked outside DHCP requests. Before that I was flooded with UDP immediately to the point of maxing out my transmit interface with China originated bs traffic, it was crazy how quickly it came on. But yeah now all is w...

Thanks for making this available, unfortunately I'm not able to make it work. I have the latest packages and firmware, just updated today.
Any thoughts on why it's not working?

Thanks John and Sindy. John: I have tried adding the 'Out interface' as WAN and also tried adding the 'Src address' 10.0.0.0/24 but none of those combinations seem to make a difference. Sindy: I'll try that tomorrow. Btw, I find it weird that even though a /30 is supposed to be a 255.255.255.252 net...

Hi all, I'm trying to help a non-profit organization who is replacing their router. The old router is kaput so I cannot glean anything from the old config. I have limited router knowledge and not specific to Mikrotik. The problem is that Internet is not working. When I plug in the WAN port the route...

Hi all, I'm replacing a Mikrotik Routerboard 1100AHx4 for a non-profit since they lost the password to the old one. I have general knowledge of networking but not specific to Mikrotik. Network is just 10.0.0.1/24 so for that I have bridged the router ports and set up DHCP. Port 1 I left with the def...