Spamhaus tends to reckon many home ISP's IP addresses as spammy because the vast majority of email from them is indeed spam from hacked devices. [...] If I look at the mail server logs, a great deal of spam would be coming from home ISP address ranges, so I can fully understand why Spamhaus does it...

Yes, "/log print" is one way, [....]

[...] other than convincing ISP to give you new static address that's not blacklisted.

Many thanks!

[..] /ip firewall filter add chain=forward protocol=tcp dst-port=25 action=reject reject-with=tcp-reset log=yes log-prefix=smtp [..] Done! To see the "smtp" logs now, all I need to do is launch the "/log print" command? Anyway I think the problem is upstream and depends on the p...

...because there's no smtp server on router

One of the hypotheses was that the router was compromised and that there was software installed that could send mail.
But your guess is as entitled to consider too.
Thanks for your tips, I will try...

If it's spam, it's far more likely that it's some infected device behind the router than the router itself. I'm using only Linux SO behind the router. If you're not running mailserver, you can block access from LAN to SMTP port (tcp 25), because nothing should need it (clients should use other port...

Thanks @BartoszP,
but Spamhaus show me the exact IP address of mine not a class of 10^6 IPs.... :-(

Thanks @anav for the useful tips! But is it possible to understand if the router is hacked? I've rebooted the device and the second day, scan again the new public ip with spamhaus that put it to PBL1722199 - https://www.spamhaus.org/pbl/query/PBL1722199 So, should I think to have an unknown smtp ser...

Hi Friends! By pure chance, I verified that my public IP Address was present in "The Spamhaus", so how I could verify if the router is hacked? Note that I bought the router a couple of years ago and immediately disabled the web interface, now i log in via ssh. Here the resource information...

Hi Friends,
I'm using a Mikrotik SXT LTE kit, and for safety would like to disable the web interface via ssh, and when I still need it, always enable it via ssh.
Could you suggest me the right way?

Many thanks!

Davide

(again) from MIkrotik Support: /interface lte apn set use-peer-dns=no and then digit: 0 This one works fine! /ip dns print servers: 218.67.222.222,208.67.220.220 dynamic-servers: allow-remote-requests: yes max-udp-packet-size: 4096 query-server-timeout: 2s query-total-timeout: 10s max-concurrent-que...

From Mikrotik Support:

Disable dhcp-clients "user-peer-dns" function:

Thanks

Davide

There is a WiKi page on how to upgrade a RB: https://wiki.mikrotik.com/wiki/Manual:Upgrading_RouterOS I know that 6.45.2 (current stable) works flawless...not sure why the beta isn't. Upgrading is not without risks. Make sure you have a backup before performing the upgrade. Well, thanks! Could you ...

..excuse me for the silly question, but how I could upgrade to 6.44.5 long term? Could you give me a documentation link page?
And eventually do I run the risk of turning my SXT LTE kit into a paperweight?..

Thanks again!


Davide

/export hide-sensitive # jul/31/2019 13:59:43 by RouterOS 6.42.10 # software id = J73U-WMIG # # model = RBSXTR # serial number = A1870A9D55E4 /interface lte set [ find ] mac-address=AC:FF:FF:00:00:00 mtu=1500 name=lte1 network-mode=3g,lte /interface bridge add admin-mac=74:4D:28:23:BD:7F auto-mac=n...

/ip dns print servers: 218.67.222.222,208.67.220.220 dynamic-servers: 83.158.240.241 allow-remote-requests: yes max-udp-packet-size: 4096 query-server-timeout: 2s query-total-timeout: 10s max-concurrent-queries: 100 max-concurrent-tcp-sessions: 20 cache-size: 2048KiB cache-max-ttl: 1w cache-used: 7...

Well, this second command did not give me errors, but how can I check if Dynamic Server has been removed?
Looking into webfig -> IP -> DNS It is still present:

Dynamic Servers 83.158.240.241



Thanks Again!

Davide

Hi erlinden and thanks for your reply!
I've try:

1) /ip dhcp-client set use-peer-dns=no
2) numbers: 0

Script Error: action cancelled

"0" to the question "numbers" was that what you wanted to say?


Thanks again!

Davide

Hi Friends,
I'm using a Mikrotik SXT LTE kit (product code RBSXTR&R11e-LTE).
I've added DNS primary and secondary both by OpenDns, now I would like to remove the provider Dynamic Server.
Could you suggest the right way?
I've search on the documentation with no luck

Many thanks!


Davide

Hi Friends, on the Passthrough Example (https://wiki.mikrotik.com/wiki/Manual:Interface/LTE#Passthrough_Example) it says: If there are multiple hosts on the network it is possible to lock the Passthrough to a specific MAC. On the host on the network where the Passthrough is providing the IP a DHCP-C...

Hi Friends, I've just bought an SXT LTE kit (product code RBSXTR&R11e-LTE). I will install the SXT LTE on the roof, and connect it to my Zyxel NBG-416N router via ethernet. Now this router have a WAN port and it support Point-to-Point Protocol over Ethernet (PPPoE). I would like to use the Zyxel...

Ah, fine!

Thanks!

which means simultaneous use of two different LTE cells operating in different frequency bands Ah, though! A technical artifice, waiting for the 5G as it seems! ... and according to that presentation no architecture lost support at that time. Again, interesting! Thanks for your useful information! ...

One last question before buying:

This model (even if discontinued) could it be working fine with 4G/4G+?.

PS
when a device becomes discontinued, can it still receive firmware updates?

Many thanks again and excuse me for my silly questions


Davide

Ah, very interesting!
I would like to use LHG LTE with Iliad.com (4G/4G+) so I think should be better "LHG 4G kit", from what you write

Thanks again for your interesting information and useful help!

Davide

Hi Friends, I'm completely new about SXT LTE Router :oops: I would like to install it on the roof, and use only one sim. Now I've on the roof a Wimax antenna-modem (POE powered), can it be powered via POE? Is it standard the POE voltage? Then, on the ground floor I've a 4 ports router with one WAN i...