MikroTik

icommunity

Ok, here is the configuration for the hotspot service, followed by ip>firewall>nat configuration below. The hotspot service was established using the setup wizard on winbox and it works fine with our regular DSL. But when we try to feed it with internet that we get from another gateway (which is als...

icommunity

I've been stuggleing to solve this hotspot proxy problem for weeks now. I'm trying to run a hotspot service on a local mikrotik that is getting internet from another hotspot service (also run by a mikrotik machine), but each time I try to do that, I get this error msg: Mikrotik HttpProxy Error: 401 ...

icommunity

Since this reply comes from the built-in Squid Cache in Mikrotik, it seems to be related to ACL configuration. Is there any way to change the ACL list of Mikrotik's Squid? If so, how?
Thx

icommunity

Dear All! We've been trying to activate the hotspot service on top of the existing regular connections (that are hotspot-bypassed). The regular connections are ok. However, hotspot clients have been getting this error: Mikrotik HttpProxy Error: 401 Unauthorized I suspect the hotspot automatic config...

icommunity

While we're at it, can you also please include the graphing tool bug fix in the next realease? MT v2.9.14 still doesn't save the interface graphs (the previous graphs dissappear every time MT is rebooted).

Thanks!

icommunity

Anyone?

There have been 23 views so I'm sure any recommendations, tips or even just ideas or hints on this subject will be appreciated by many forumites.

Thanks!

icommunity

Hello! I read the manual and searched the forum, but to no avail. I have a hotspot setup that works well. Now I would like to limit certain hotspot users based on their traffic. I know that you can limit users using limit-bytes-in OR limit-bytes-out, but there's no hotspot parameter for both in and ...

icommunity

Does this also work with web traffic going thru the built-in web proxy? It would be nice to be able direct certain web traffic thru certain gateways.

icommunity

I like using the graphing feature of MT 2.9.x - it's a very nice tool, especially its ability to store historical data. However, every time I reboot the router, I loose the interface graphics for my WANs and LAN, and the graphs start anew again. The "store on disk" option is checked (on winbox), and...

icommunity

It works fine for me starting 2.9.7 - but I'm using 2.9.10 now. Perhaps, you have another set of firewall rule that is located before this one? Another thing: It seems the time limiting feature cannot work for the entire time period if you set it for a time period that goes over midnight (e.g. 20:00...

icommunity

Hi! I have an MT based hotspot that is running quite well. I am using the AAA system that is built-in in MT. Now I am opening a second hotspot location in another part of the town, also using another MT box. Any ideas on how to set up the MT boxes so that I can use the same user database of the firs...

icommunity

I have an MT box with 2 interface cards: WAN and LAN. I'm running hotspot on the LAN interface as well as several fixed IP clients that are "bypassed". A couple of the bypassed clients are our own computers and the rest are our users. When I was using v2.9.7, all of the bypassed clients could not co...

icommunity

I just encountered this problem. So yes, please please include the username/password smtp auth feature so we can use our smtp server to redirect emails from hotspot users. Smtp auth is so important - we got unwanted/unknown people trying to use our smtp server on daily basis, but they fail - thanks ...

icommunity

tip: In order to work you have to bind a secondary IP for emule and limit that IP.

What do you mean by "secondary IP"? Don't we use the "target IP" of the client to limit his/her bandwidth?

Thanks!

icommunity

I also had the same problem. I solved it by following the messages in these threads:

http://forum.mikrotik.com/viewtopic.php ... highlight=

and

http://forum.mikrotik.com/viewtopic.php ... t=proxyarp

Hope that it also works for you! Good luck!

icommunity

Hi Dannyboy!
Can you please explain the basics of your current load balancing setup? It might help everyone reading this thread before they email you.
Thx!

icommunity

Wine+WInbox are also running well on my Ubuntu laptop. The only problem that I found is when I open the MT's terminal window on winbox that is running on wine, I cannot see its full screen correctly (long lines are cut off). If type something like "ping 192.168.1.100", I cannot see what I'm actually...

icommunity

I also have this problem, and i posted it on the forum http://forum.mikrotik.com/viewtopic.php ... es+feature. But I'm now so glad to hear that this problem is going to be fixed in the next release. Thanks so much Eugene!

icommunity

I'm also in the process of setting up a hotspot system, and I just read that " You can run completely different HotSpot configurations on different interfaces" here:
http://www.mikrotik.com/docs/ros/2.9/ip/hotspot

icommunity

It seems you're using MTv2.9. I'm not familiar with MTv2.9 yet. But tHis is my setup using v2.8 which might help you further: This is how I mangle the traffic: IP>FIrewall>Mangle 1 src-address=192.168.1.0/24 in-interface=LAN dst-address=:1863 protocol=tcp action=passthrough mark-connection=chat_con ...

icommunity

Are you still using dual gateways? I also had this problem with Yahoo and MSN messenger when I started to use two gateways. I think it was because MT was switching between the two gateways for messenger connections - dropping the established connections that went through one gateway and switches it ...

icommunity

Hi spire2z! Thank you very much!

I actually unsuccessfully searched the forum for this, but you just pointed out exactly the right thread! I tried your solution and it really works!

Now I don't need that one router which used to bridge the host with the public IP.

Again, thanks a lot man!

icommunity

I also would like to know if two different subnets can be served by one network interface. I know that one network interface can have more than one IP addresses as described in the manual, but I don't know if these can be of different subnets.

icommunity

Hi Cabana! Thanks for sharing your script with us - that's cool! Btw, what version of MT are you using? In MT v2.9, suppossedly there's no need to use a script to do time-of-day scheduling. At least that's what the manual says. I have one MT running v2.8 and I will try your script on it. I'm just a ...

icommunity

I've been trying to prioritze skype but still with no real success so far. I've searched and browsed the forum but still haven't found a real solution. The problem is that skype uses random port numbers and it's a p2p traffic, so mangling and shaping its traffic by port number or by IP don't seem to...

icommunity

A lot of questions about this were asked in this forum. I also have this problem, and after a while I think NAT is the reason why mangling and queue tree don't work hand-in-hand. Do you use NAT? While mangling happens at the interface the traffic is COMING to the router, Queue Tree happens at the in...

icommunity

Yes, please - I'm very interested and I would appreciate it very much if we can get that list. However, unfortunately I don't know the answer how many items in the list Mikrotik can handle. Right now, I have around 20 items in my URL block list. I am also in the process of setting up Dansguardian in...

icommunity

THis is how I mangled ping traffic: IP FIrewall Mangle> ;;; Ping Traffic protocol=icmp action=passthrough mark-connection=all_ping_con protocol=icmp connection=all_ping_con action=accept mark-flow=all_ping_flow And this is how I prioritized the mangled ping traffic and allocated some low bandwidth t...

icommunity

Sorry, pero Yo no comprendo! En Ingles por favor!

icommunity

One way to do this is to separate the MSN traffic from the main bandwidth queue. You can mangle the MSN traffic and give it its own low bandwitdh allocation. That way, if the user is using up their own bandwidth that is allocated to them, there will still be a little bandwidth available for MSN traf...

icommunity

hi lquince!

Thanks for your hint. I setup a DST_NAT rule just like you said and it works! My dansguardian works in a transparent mode and it does catch the http traffic that is redirected from my mikrotik box.

Thanks again for your help!

icommunity

Hi All! I posted this question in another forum by accident, and I don't know how to delete it. Sorry! Anyways, here is my question: What do you think is the best way to integrate Dansguardian with Mikrotik? I only need to be able to filter web access from some of my clients. They are all on the 192...

icommunity

Hi All!

What do you think is the best way to integrate Dansguardian with Mikrotik? I only need to be able to filter web access from some of my clients. They are all on the 192.168.1.x subnet. I have currently only one LAN interface and one WAN interface, but I can add more if needed.

Thanks!

icommunity

Hi All!

What do you think is the best way to integrate Dansguardian with Mikrotik? I only need to be able to filter web access from some of my clients. They are all on the 192.168.1.x subnet. I have currently only one LAN interface and one WAN interface. But I can add more if needed.

Thanks!

icommunity

No one really never tried the scheduling feature of simple queues? Can anyone at least confirm that this is a working feature of MT 2.9.1 or is it only a place holder for a feature that will be implemented some time in the future?
Thx!

icommunity

Hi All! How can I get Simple Queues to work differently for day and night? I browsed the forum and found out that this question has been asked before by somebody else, but unfortunately it was not answered. This is my setup: queue #1: name="222_Day" target-addresses=192.168.1.222/32 dst-address=0.0....

icommunity

I have the same problem. I asked the tech support, but they only recommended me either to turn off the web proxy and have the ability to use dual-gateways, or do the following: 1. mark the traffic coming to the web proxy with some flow, 2. route this traffic to the first gateway 3. route other traff...

Search found 37 matches

Re: Strange error message

Strange error message

Re: Hotspot HttpProxy Problem: 401 Unauthorized

Hotspot HttpProxy Problem: 401 Unauthorized

How to limit users based on bytes in and bytes out combined?

Interface Graphing cannot be stored on disk

How can I use MT's own AAA remotely?

Hospot: How to do selected client isolation?

Prioritizing Skype - How to?

Dansguardian and Mikrotik - How to integrate?

Dansguardian and Mikrotik - How to integrate?

Dansguardian and Mikrotik - How to integrate?

Simple Queues and time of day