Community discussions

Search found 18 matches

by Link100
Wed Oct 02, 2019 2:27 am
Forum: Beginner Basics
Topic: DHCP Snooping question (CRS3xx)
Replies: 1
Views: 288

DHCP Snooping question (CRS3xx)

I didn't quite understand on the wiki page.
DHCP server is connected to ether1, access points are connected to ether 2-5.

Now my question: do I only have to activate "trusted" for Ether 1 or also for Ether 2 to 5, where access points (wlan) are connected?

On "bridge" I have DHCP Snooping activated.
by Link100
Thu Aug 29, 2019 2:01 am
Forum: General
Topic: Hardware Offload off and no Internet connection the first min/sek...
Replies: 2
Views: 446

Re: Hardware Offload off and no Internet connection the first min/sek...

For some things I can't use the firewall of the main router. For example Torrent I can't just lock it, because the Linux kernel can't be patched and complicated for Layer7. Bittorrent block in conjunction with WebProxy (squid) is not as effective as MikroTik and layer7 filters. At least I haven't fo...
by Link100
Tue Aug 27, 2019 10:39 pm
Forum: General
Topic: Hardware Offload off and no Internet connection the first min/sek...
Replies: 2
Views: 446

Hardware Offload off and no Internet connection the first min/sek...

I have the following problem with CRS326-24G Switcher running in bridge mode: bridge1 Settings, Use IP Firewall: yes ether 1: Linux Router/Server (DHCP, Gateway, DNS) ether 2: LigoWave AP1 ether 3: LigoWave AP2 ether 3: Connect Client PC directly with LAN cable. DHCP is disabled on MikroTik because ...
by Link100
Wed Aug 14, 2019 10:29 am
Forum: Beginner Basics
Topic: File download block?
Replies: 25
Views: 2501

Re: File download block?

Isn't that a limit for the two directions? The 0 is supposed to mean "unlimited" but apparently it is rejected by incorrect validation. You can put a very large number there.
Without..."-0" it doesn't work for me.
by Link100
Wed Aug 14, 2019 9:33 am
Forum: Beginner Basics
Topic: File download block?
Replies: 25
Views: 2501

Re: File download block?

@Sob, my brain is tired, been fighting with L2 fiber provider all day for poor service, but just so I can follow, I can't see what is wrong in the webfig, it shows 1970k instead of 1970000, which seems to be correct according to my current tired brain?
not 1970k, but "1970k-0" does not work.
by Link100
Wed Aug 14, 2019 9:15 am
Forum: Beginner Basics
Topic: Mikrotik VLAN isolation with external DHCP server?
Replies: 0
Views: 316

Mikrotik VLAN isolation with external DHCP server?

How can I set up VLAN-based separation in MikroTik without DHCP? A Linux server serves as Gateway/DHCP/DNS server. It has two network cards, one for LAN (eth0) and one for WAN (eth1). On the Linux server, DHCP is already configured for each VLAN (10,20,30). VLAN10: 192.168.10.0/24 VLAN20: 192.168.20...
by Link100
Tue Aug 13, 2019 2:16 am
Forum: Beginner Basics
Topic: Port Group Isolation [SOLVED]
Replies: 5
Views: 741

Re: Port Group Isolation [SOLVED]

That would also be a possibility. But it also works as mentioned above.
by Link100
Tue Aug 13, 2019 12:36 am
Forum: Beginner Basics
Topic: File download block?
Replies: 25
Views: 2501

Re: File download block?

You can believe that. I couldn't download any files. Because it seems to be the same. It starts Download, but it is stopped when downloading. And please understand that it will have false positives. Someone not downloading a file but working in a google docs document will be affected just as well. E...
by Link100
Mon Aug 12, 2019 11:17 pm
Forum: Beginner Basics
Topic: File download block?
Replies: 25
Views: 2501

Re: File download block?

This is not a problem of MikroTik! What you want is simply not possible anymore. You can blame Google and others for migrating everything to https to prevent that people like you look in the traffic. You misunderstood me. As I have already mentioned above, I have set up on airport WLAN connection a...
by Link100
Mon Aug 12, 2019 11:09 pm
Forum: Beginner Basics
Topic: Port isolating RB951G-2HnD [SOLVED]
Replies: 4
Views: 612

Re: Port isolating RB951G-2HnD [SOLVED]

Then you simply leave Hardware Offload enabled for Port 2.
by Link100
Mon Aug 12, 2019 9:38 pm
Forum: Beginner Basics
Topic: Port isolating RB951G-2HnD [SOLVED]
Replies: 4
Views: 612

Re: Port isolating RB951G-2HnD [SOLVED]

Bridge->Ports
and then select the port/etherX where the filter should be applied and disable Hardware Offload.

Works?
by Link100
Mon Aug 12, 2019 9:31 pm
Forum: Beginner Basics
Topic: File download block?
Replies: 25
Views: 2501

Re: File download block?

Okay, thank you guys for the answer.
Too bad there's no possibility for MikroTik.
by Link100
Mon Aug 12, 2019 9:28 pm
Forum: Beginner Basics
Topic: Port Group Isolation [SOLVED]
Replies: 5
Views: 741

Re: Port Group Isolation [SOLVED]

Thank you for your answer.

It is a CRS326-24G router switch.
by Link100
Mon Aug 12, 2019 5:51 pm
Forum: Beginner Basics
Topic: File download block?
Replies: 25
Views: 2501

Re: File download block?

Which I don't understand. HTTPS pages can be blocked with the above regexp, but HTTPS downloads cannot.

squid/proxy filtering with the L7 Protocol principle?
by Link100
Mon Aug 12, 2019 4:40 pm
Forum: Beginner Basics
Topic: Port Group Isolation [SOLVED]
Replies: 5
Views: 741

Port Group Isolation [SOLVED]

If I understood it correctly, I can separate ports under Bridge? There are two external DHCP/DNS/Gateway servers: Server 1 has the IP: 192.168.2.1/24 Server 2 has the IP: 192.168.3.1/24 On the MikroTik CRS326-24G now two port groups should be set up: Group1: ether1 to ether8 Group2: ether9 to ether1...
by Link100
Mon Aug 12, 2019 2:56 pm
Forum: Beginner Basics
Topic: File download block?
Replies: 25
Views: 2501

Re: File download block?

Yes, I am aware of that, but how do the others do it, at train stations, airports ... ? a few weeks ago I set up a WLAN connection at the airport and I couldn't download any files. So there has to be a solution. Strangely enough, URL Block also works for HTTPS pages. This works here, for example: ^....
by Link100
Mon Aug 12, 2019 1:58 pm
Forum: Beginner Basics
Topic: File download block?
Replies: 25
Views: 2501

File download block?

unfortunately I have no possibilities to block files (exe, iso, dmg etc.) download. I was told here viewtopic.php?f=21&t=150767&start=50#p744362 that I shouldn't use L7 Protocol for this. Do you have a solution that works?
by Link100
Mon Aug 12, 2019 3:40 am
Forum: Announcements
Topic: v6.45.3 [stable] is released!
Replies: 90
Views: 25427

Re: v6.45.3 [stable] is released!

This L7 Regexp does not work anymore since update:
\.(exe|dmg|cab|msi|flv|mp2|mp3|m4a|mp4|torrent)($|\?)
I used this to block file download. I also don't know which MikroTik version I had before. I think it was the 6.43.