@anav, as rude and irrelevant tantrums as ever ;-) I have seen your bad attitude again and again, so it is quite fun to experience you trolling my request with your rather childish behavior :-) For the other souls that stumble upon this thread, better block the Service ports with own rules. If you u...

Www for mikrotik gui
Yes, I could block more internally, but that would create unesseccary complexity for my Family in case of emergency

Yes, I had that Rule because I thought that too, but the portscan showed something different.
I have now explicitly closed the ports and the portscan now reports them as closed.

I know it sounds strange but test it yourself.

-> I will post a screenshot of my rules as soon as i can

I ran the portscans externally :-) There were no explicit drop/reject rules in the defcon rules at the beginning, so I created a drop all rule at the end of Input chain. But even with this, the ports appeared reachable from the outside… Your last sentence would mean that the ip Services create hidde...

Hi, I enabled www services only from my internal ip ranges, same goes for ssh and ftp. I added a drop all Not from lan rule as the last Input rule. There are no rules that accept connections from wan to these ports. When I browse to Port 80 from external, no webpage is displayed. But: I ran a portsc...

internet ---> hex ----> accesspoint wifi ---> (wlan1 mAP---> mAP with masquerade ---> network behind the mAP) eth1, eth2, wlan2 ----> ip camera etc. It was easier than I though and I write it down here in case another person finds it useful. Disclaimer: I know the experts will fuss about this or tha...

Hello, I would like to make a ip camera accessible by wifi, so I hooked it up to a mikrotik map and told the map to connect to my wifi. In my simple mind, on the mikrotik map, I just had to add the wlan1 to the bridge with both ether1 and ether2 and the camera would get an ip from the dhcp server on...

Hello, I have found many long posts about what can cause "@wlan1: lost connection, unicast key exchange timeout" but no definitive solution. Possible solutions were setting encryption to TKIP, checking if the password für the wifi is correct, avoiding special characters in the password. My...

Your statement is correct, but the cli command does not return any address. If it would return multiple, I could select the correct one (in this use case that would be strange) . But it returns nothing for any interface. It did work until 7.12

So the questions is: what is the solution....

I face the same problem, thought that was my misonfiguration.

[/ip address get [find where interface=$theinterface] value-name=address] does also not show my current ip.

Hello, I unsuccessfully searched the mikrotik forum for a straight-to-the-objective how-to for this, but could not find one. Luckily, Quad9 created one: Link to the article from the original author: "Zachary" from quad9 https://support.quad9.net/hc/en-us/articles/4616420178061-Setup-MikroT...