Community discussions

MikroTik App

Search found 17 matches

by erkexzcx
Sat Aug 29, 2020 9:38 pm
Forum: Beginner Basics
Topic: Tunnel traffic through VPN
Replies: 20
Views: 4387

Re: Tunnel traffic through VPN

1) Is it possible to tunnel all the traffic trough a VPN provider? 2) Which VPN provider is supported by Mikrotik? 3) Are there any providers which already have filters for illegal BitTorrent websites? Or the possibility to block Bittorent at all? 4) Can I block somehow Bittorent with my Mikrotik r...
by erkexzcx
Sat Aug 29, 2020 9:32 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta2 [development] is released!
Replies: 292
Views: 73697

Re: v7.1beta2 [development] is released!

Does this beta release work great with Winbox? Or is it console-only while it's beta?
by erkexzcx
Mon Jun 29, 2020 9:02 am
Forum: Beginner Basics
Topic: EoIP setup
Replies: 3
Views: 838

Re: EoIP setup

Hi sir. would it be possible if you can give me some advice on how to go about it. Sure. EoIP instructions: https://wiki.mikrotik.com/wiki/Manual:Interface/EoIP GRE tunnel instructions: https://wiki.mikrotik.com/wiki/Manual:Interface/Gre L2TP instructions: https://wiki.mikrotik.com/wiki/Manual:Inte...
by erkexzcx
Wed Jun 24, 2020 9:20 pm
Forum: Beginner Basics
Topic: [SOLVED] Need help setting up site 2 site IPsec/IKEv2 VPN (with certificates, manually)
Replies: 1
Views: 543

Re: Need help setting up site 2 site IPsec/IKEv2 VPN (with certificates, manually)

Right, so instructions are unclear (I got confused) by Manual:IP/IPsec#NAT_and_Fasttrack_Bypass instructions: Solution is to use IP/Firewall/Raw to bypass connection tracking, that way eliminating need of filter rules listed above It actually means that eliminating need of Fasttrack bypass rules. Us...
by erkexzcx
Wed Jun 24, 2020 9:30 am
Forum: Beginner Basics
Topic: Cannot ping interface IP
Replies: 1
Views: 451

Re: Cannot ping interface IP

I believe author meant packet marking in mangle section. I don't know what command he added, but seems you are going to find required info here: https://wiki.mikrotik.com/wiki/Load_Bal ... ll_marking
by erkexzcx
Wed Jun 24, 2020 12:51 am
Forum: Beginner Basics
Topic: [SOLVED] Need help setting up site 2 site IPsec/IKEv2 VPN (with certificates, manually)
Replies: 1
Views: 543

[SOLVED] Need help setting up site 2 site IPsec/IKEv2 VPN (with certificates, manually)

So I've literally spent last few weeks, almost every evening trying to setup IPsec/IKEv2 site 2 site VPN. After hundreds of Google searches, unsuccessful and semi-successful attempts I finally gave up and came to this Mikrotik forum... So basically I have 2 routers, one has public IP, and another on...
by erkexzcx
Sun Jun 14, 2020 5:17 pm
Forum: Beginner Basics
Topic: Hairpin with port forwarding
Replies: 14
Views: 2011

Re: Hairpin with port forwarding

good video tutorial
https://www.youtube.com/watch?v=_kw_bQyX-3U&t=177s

or specify in-interface (to be your WAN interface) on your dst-nat rule so you don't mess up LAN connection to the private IP.
That youtube video is legendary...
by erkexzcx
Sat Jun 06, 2020 12:44 pm
Forum: Beginner Basics
Topic: Help! How do I delete dynamic DNS servers? [SOLVED]
Replies: 12
Views: 5231

Re: Help! How do I delete dynamic DNS servers? [SOLVED]

If anyone is using some sort of VPN provider and you connected your router to it, go to IP --> IPsec --> Mode Configs Then open up your mode config that you are using for your VPN provider, change "Use responder DNS" from "exclusively" to "No". Kill active connection (it will reconnect within few se...
by erkexzcx
Thu Jun 04, 2020 1:26 pm
Forum: Beginner Basics
Topic: Firewall Layer 7 Filter
Replies: 4
Views: 1063

Re: Firewall Layer 7 Filter

This is not what you want to hear, but using Layer7 is generally a bad practice, because: 1. You can get around this filtering by using VPN 2. You can get around this by (sometimes) doing nothing. See "DNS Over HTTPS" and some browsers do it by default now. 3. Specifically your case, you can change ...
by erkexzcx
Sun May 31, 2020 7:44 pm
Forum: Scripting
Topic: [Script] Automatically change DNS if Pi-hole is no longer working
Replies: 8
Views: 2120

Re: [Script] Automatically change DNS if Pi-hole is no longer working

Thank you. I updated my initial comment with your suggestions. :)
by erkexzcx
Sun May 31, 2020 2:44 pm
Forum: Scripting
Topic: [Script] Automatically change DNS if Pi-hole is no longer working
Replies: 8
Views: 2120

[Script] Automatically change DNS if Pi-hole is no longer working

I've wrote a script that detects when Pi-Hole is no longer working, and automatically switches to public DNS 1.1.1.2,1.0.0.2. Disclaimer : I am aware of possibility to set multiple DNS servers, but for Pi-Hole to work you need to set only Pi-Hole IP address. Use case : Set-up Mikrotik and RPI with P...
by erkexzcx
Fri May 29, 2020 10:48 am
Forum: Beginner Basics
Topic: [Solved] "Resource Temporarily Unavailable" when Mikrotik used as a simple router
Replies: 1
Views: 605

Re: "Resource Temporarily Unavailable" when Mikrotik used as a simple router

Issue solved.

I've set port forwardings without in-interface. Once I set it - everything is working again. I've set port 80, and since 443 was unused - HTTPS traffic worked fine, while 80 failed due to misconfiguration.
by erkexzcx
Fri May 29, 2020 9:32 am
Forum: Beginner Basics
Topic: [Solved] "Resource Temporarily Unavailable" when Mikrotik used as a simple router
Replies: 1
Views: 605

[Solved] "Resource Temporarily Unavailable" when Mikrotik used as a simple router

Hey, So basically I replaced Cisco RV320 router with Mikrotik RB4011iGS and everything seems fine - internet works just fine, except speedtest always fail. When I try to run from Linux CLI client, I get this output: erikas@btwOS  ~  speedtest Speedtest by Ookla [error] Error: [11] Cannot read from...
by erkexzcx
Sun Jan 26, 2020 11:50 am
Forum: Scripting
Topic: ISP Throttle Speed YouTube [SOLVED]
Replies: 2
Views: 2007

Re: ISP Throttle Speed YouTube [SOLVED]

You should look at VPN side. Talking about VPN providers, such as NordVPN. You can configure your router to connect to their VPN server and whitelist only youtube.com or all traffic to go under VPN. Then your ISP won't have any chance to throttle specific sites.
by erkexzcx
Sun Jan 26, 2020 11:48 am
Forum: RouterOS v7 BETA
Topic: Feature Request - Wireguard Protocol
Replies: 163
Views: 47408

Re: Feature Request - Wireguard Protocol

+1. I also do have additional SBC next to Mikrotik router just for Wireguard VPN server.
by erkexzcx
Tue Oct 08, 2019 9:22 pm
Forum: General
Topic: IPSec VPN fails to start - shows errors that I don't know how to solve
Replies: 2
Views: 1217

Re: IPSec VPN fails to start - shows errors that I don't know how to solve

The last rule appears to be an IPv6 ipsec issue. Are you trying to terminate the tunnel on IPv4 or IPv6? Hi, What I was going to do is to create an interface, where all traffic is being routed through VPN server. VPN IPSec connection is established from Mikrotik router, so the only thing needed to ...
by erkexzcx
Mon Oct 07, 2019 11:49 pm
Forum: General
Topic: IPSec VPN fails to start - shows errors that I don't know how to solve
Replies: 2
Views: 1217

IPSec VPN fails to start - shows errors that I don't know how to solve

Hi, I've setup IPSec VPN on Mikrotik router. Everything works fine, so I backed up configuration and restored on same model, but different router. Internet works just fine, but this is what I get (taken from logs): 21:02:16 ipsec,debug ipsec: 0.0.0.0[500] used as isakmp port (fd=25) 21:02:16 ipsec,d...