Community discussions

MUM Europe 2020

Search found 71 matches

by Krusty
Tue Nov 12, 2019 9:30 am
Forum: General
Topic: IPSec VPN tunnels not working when upgraded to 6.45.1
Replies: 5
Views: 2826

Re: IPSec VPN tunnels not working when upgraded to 6.45.1

Id like se relese note for this too. This was hella long nightmare to search for it !
by Krusty
Thu Sep 14, 2017 4:14 pm
Forum: General
Topic: Need help setting up routerboard mikrotik hap lite
Replies: 7
Views: 915

Re: Need help setting up routerboard mikrotik hap lite

Yup, i would like to connect the mikrotik as a router before the unify ap wifi Is there a specific need?
no, check your DHCP pool and if you need some static address just use some from outside this pool
by Krusty
Thu Sep 14, 2017 3:30 pm
Forum: General
Topic: Need help setting up routerboard mikrotik hap lite
Replies: 7
Views: 915

Re: Need help setting up routerboard mikrotik hap lite

Well i want to setup my Mikrotik and set a static ip adddress and send out through the rest of the ports dhcp ...
so basically you want to have DHCP pool for example for 100 adresses and the rest have out of this pool so you can assign them manualy ?
by Krusty
Thu Sep 14, 2017 1:39 pm
Forum: General
Topic: Need help setting up routerboard mikrotik hap lite
Replies: 7
Views: 915

Re: Need help setting up routerboard mikrotik hap lite

I cannot understand what your setup is and what your needs are?
by Krusty
Thu Sep 14, 2017 10:06 am
Forum: General
Topic: Scripting, send particular log event to email in bulk
Replies: 0
Views: 491

Scripting, send particular log event to email in bulk

Hello, can anybody help me with this think. I have Mikrotik as DHCP server with UserMan as Radius server. I have enabled logging for evets like if somebody without authorized MAC is connected, MT will write event to log with "dhcp,error DHCP: radius authentication failed for xx:25:xx:98:21:xx: user ...
by Krusty
Wed Jun 26, 2013 7:34 pm
Forum: General
Topic: Upgrade to 6.1 killed my RB1100x2AH
Replies: 11
Views: 2756

Re: Upgrade to 6.1 killed my RB1100x2AH

As I see Im not the only one who had problem with 6.1 and RB1100x2AH. Today I tryed to update all of them to new version. But after update all IPSec tunels stopped working (there is realy many IPSec tunels in our company), and this realy make me sad and it was realy hard 3 hours of debuging and down...
by Krusty
Sat Jan 12, 2013 10:03 pm
Forum: General
Topic: Strange IPSec, please little help
Replies: 2
Views: 503

Re: Strange IPSec, please little help

nobody ?
by Krusty
Fri Jan 11, 2013 1:45 pm
Forum: General
Topic: Strange IPSec, please little help
Replies: 2
Views: 503

Re: Strange IPSec, please little help

New think, when I try to ping with ARP ping, than it seems to be ok, I got reply
by Krusty
Fri Jan 11, 2013 11:20 am
Forum: General
Topic: Strange IPSec, please little help
Replies: 2
Views: 503

Strange IPSec, please little help

Hello, Im using IPSec for few locations. Today I want to add new location and Im not able to find what is wrong, if somebody can help me with this. SITUATION: IPSec betwen two locations IPSec seems to be established, i see installed sas on both sites Im able to connect to internal network from site ...
by Krusty
Thu Nov 29, 2012 1:34 pm
Forum: General
Topic: IPSec cannot reach router from router
Replies: 4
Views: 686

Re: IPSec cannot reach router from router

Wrong interface, in your case use eth02.LAN
oh, thank you, this is it :)
by Krusty
Wed Nov 28, 2012 9:57 pm
Forum: General
Topic: IPSec cannot reach router from router
Replies: 4
Views: 686

Re: IPSec cannot reach router from router

Add a static route on each router, you don't need to a specific gateway, just the desired interface. I have routes on each router first side 0 A S 0.0.0.0/0 109.107.208.41 1 1 ADC 109.107.208.40/29 109.107.208.42 eth01.WAN 0 2 ADC 192.168.1.0/24 192.168.1.1 eth02.LAN 0 5 A S 192.168.2.0/24 eth01.WA...
by Krusty
Wed Nov 28, 2012 7:00 pm
Forum: General
Topic: IPSec cannot reach router from router
Replies: 4
Views: 686

IPSec cannot reach router from router

Hello everybody,

I have working IPsec tunel. I can reach remote network, everything works. But im not able to reach first router from second router and vice versa. Is there any trick for this ? I cant ping router from router, even cant ping remote network form router...
by Krusty
Tue Nov 27, 2012 4:24 pm
Forum: General
Topic: Radius with DHCP, block PCs not in Leases
Replies: 1
Views: 430

Radius with DHCP, block PCs not in Leases

Hello,

Subject say it all :)

is it possible to block any connection which IP is not on DHCP Leases list ? Any PC which dont have IP from DHCP server will be blocked? Of course with manualy option to set exceptions .. :)

thank you
by Krusty
Tue Nov 27, 2012 4:20 pm
Forum: General
Topic: Q: User manager for DHCP
Replies: 1
Views: 567

Re: Q: User manager for DHCP

Hello everybody, Im trying to configure Radius server for DHCP (User Manager). I have found this http://wiki.mikrotik.com/wiki/User_Manager/DHCP_Example . So I have working DHCP, with pool. I turn on radius for this DHCP, I have configured radius and paired with user manager. I create user, with MA...
by Krusty
Tue Nov 27, 2012 12:51 pm
Forum: General
Topic: Q: User manager for DHCP
Replies: 1
Views: 567

Q: User manager for DHCP

Hello everybody, Im trying to configure Radius server for DHCP (User Manager). I have found this http://wiki.mikrotik.com/wiki/User_Manager/DHCP_Example . So I have working DHCP, with pool. I turn on radius for this DHCP, I have configured radius and paired with user manager. I create user, with MAC...
by Krusty
Mon Oct 29, 2012 9:38 pm
Forum: General
Topic: NEED HELP: Allow some URLs using MK hotspot
Replies: 1
Views: 407

Re: NEED HELP: Allow some URLs using MK hotspot

If you want to allow some sitest in hotspot you have to put them to /ip hotspot walled-garden
by Krusty
Fri Oct 26, 2012 10:08 am
Forum: General
Topic: Please need help to config queues
Replies: 4
Views: 785

Re: Please need help to config queues

thank you, this was clear enough, now I have realy good tuned APs :)
by Krusty
Thu Oct 25, 2012 11:57 am
Forum: General
Topic: Please need help to config queues
Replies: 4
Views: 785

Re: Please need help to config queues

http://wiki.mikrotik.com/wiki/Connection_Rate thank you very much for help, your parents will be proud Please, spare my parents, they already are convinced that I spend too much time on PC for nothing. oh your God, litlle bit of tunning and it work like Holywood marriage. Thank you one more thing y...
by Krusty
Wed Oct 24, 2012 11:01 am
Forum: General
Topic: Please need help to config queues
Replies: 4
Views: 785

Please need help to config queues

Hello dear geeks and nerds, I have looked for some config, that will do this, if you (someone) could be so kind and help me with this What I have 1. 2x RB411AH as an AP on local network, wlan and LAN port is in bridge mode Situation If some CUF (Common User Frank) want to upload his highly needed pa...
by Krusty
Tue Apr 10, 2012 4:54 pm
Forum: General
Topic: Q: VPN L2TP/IPSec
Replies: 30
Views: 6078

Re: Q: VPN L2TP/IPSec

Ok, but this is not problem of the mikrotik! This is a property of ipsec. a solution: use openvpn so there is no solution to solve this behavior ? I didnt find any clean OpenVPN client with easy use, I have gourmet users :) Ok thanks but Open VPN isn't an option to me as there is no iPad / iPhone c...
by Krusty
Tue Apr 10, 2012 2:48 pm
Forum: General
Topic: Q: VPN L2TP/IPSec
Replies: 30
Views: 6078

Re: Q: VPN L2TP/IPSec

I am the same, I can't have two connections from the same public IP address even if I create an L2TP server for each user. This is a problem for me as you can't always guarantee where remote workers will be, there are times they may both be in the same place needing to connect back to the office. I...
by Krusty
Tue Apr 10, 2012 9:22 am
Forum: General
Topic: Q: VPN L2TP/IPSec
Replies: 30
Views: 6078

Re: Q: VPN L2TP/IPSec

Hi, thank you for your exhausive explanation :) however, I have problem you described above and how could you test it? from same public IP? because ipsec can not generate policy rule if you come same public IP. (I tested it) eg. if your users behind same firewall and it has a public IP and it is NAT...
by Krusty
Fri Apr 06, 2012 9:16 am
Forum: General
Topic: Q: VPN L2TP/IPSec
Replies: 30
Views: 6078

Re: Q: VPN L2TP/IPSec

Ok, I will try your config, but I have openvpn config too in our routers and it is same. There are in the secret IPs of user: local and remote. If you have secrets separately for users then you need to add local and remote IP pair and you have to use /30 (255.255.255.252) mask!! (eg. ...0 is net, ....
by Krusty
Thu Apr 05, 2012 4:22 pm
Forum: General
Topic: Q: VPN L2TP/IPSec
Replies: 30
Views: 6078

Re: Q: VPN L2TP/IPSec

Come on guys
by Krusty
Mon Apr 02, 2012 4:59 pm
Forum: General
Topic: Q: VPN L2TP/IPSec
Replies: 30
Views: 6078

Re: Q: VPN L2TP/IPSec

nobody ? :)
by Krusty
Mon Mar 26, 2012 9:36 am
Forum: General
Topic: Q: VPN L2TP/IPSec
Replies: 30
Views: 6078

Re: Q: VPN L2TP/IPSec

I think you have one l2tp server (?) and one secret config (?) if you have a lot of user you need separetly secret and l2tp server for each user. (but this is a idea I haven't done l2tp only openvpn and ipsec tunnel) yes, there is posibility to turn on only one server and users are dynamic no, ever...
by Krusty
Thu Mar 22, 2012 3:08 pm
Forum: General
Topic: Q: VPN L2TP/IPSec
Replies: 30
Views: 6078

Re: Q: VPN L2TP/IPSec

still nobody ?
by Krusty
Tue Mar 13, 2012 10:39 am
Forum: General
Topic: Q: VPN L2TP/IPSec
Replies: 30
Views: 6078

Re: Q: VPN L2TP/IPSec

U need to explane a bit more. Maybe with your config. thank you for reaction. I will try to explain my problem more... Im trying to use L2TP/IPSec VPN. For now I have router with public IP and working VPN server, configured by several manuals to work with windows.... but the problem is this. When a...
by Krusty
Mon Mar 12, 2012 4:55 pm
Forum: General
Topic: Q: VPN L2TP/IPSec
Replies: 30
Views: 6078

Re: Q: VPN L2TP/IPSec

somebody must know something about this :)
by Krusty
Thu Mar 08, 2012 4:14 pm
Forum: General
Topic: Q: VPN L2TP/IPSec
Replies: 30
Views: 6078

Re: Q: VPN L2TP/IPSec

nobody ? :/
by Krusty
Wed Mar 07, 2012 10:32 am
Forum: General
Topic: Q: VPN L2TP/IPSec
Replies: 30
Views: 6078

Q: VPN L2TP/IPSec

Hello,

i need little help with L2TP/IPSec VNP. ere is what is going...

I got working VPN on ROS, which is on Public IP and two clients on same LAN on remote location.
One client is able to connect and the second isnt, is it possible to resolve this in some way ?

thank you for reply
by Krusty
Tue Mar 06, 2012 2:56 pm
Forum: General
Topic: Block Youtube website on RB750 but want to allow some IP
Replies: 11
Views: 4346

Re: Block Youtube website on RB750 but want to allow some IP

Yes web proxy can block IP adresses and domain names
by Krusty
Tue Mar 06, 2012 2:52 pm
Forum: General
Topic: How to use the IPSec in Windows 7?
Replies: 7
Views: 2892

Re: How to use the IPSec in Windows 7?

hello again :) I think last question about this kind of VPN. For now I have working L2TP/IPSec VPN. Last think I want do do is to set diferent IP range to VPN clients and diferent range to LAN. Here is what I think about.... My LAN is 192.168.1.0/24 I want VPN client to take address from ROS pool (1...
by Krusty
Tue Mar 06, 2012 12:50 pm
Forum: General
Topic: How to use the IPSec in Windows 7?
Replies: 7
Views: 2892

Re: How to use the IPSec in Windows 7?

Hello, I have same problem, Im trying to configure L2TP/IPSec client (Win7) to server (ROS). Client is behind NAT (in almost all scenarios), server is with public IP. I have tryied this guide http://wiki.mikrotik.com/wiki/MikroTik_RouterOS_and_Windows_XP_IPSec/L2TP but it didnt work When I try to c...
by Krusty
Tue Mar 06, 2012 10:37 am
Forum: General
Topic: How to use the IPSec in Windows 7?
Replies: 7
Views: 2892

Re: How to use the IPSec in Windows 7?

Hello, I have same problem, Im trying to configure L2TP/IPSec client (Win7) to server (ROS). Client is behind NAT (in almost all scenarios), server is with public IP. I have tryied this guide http://wiki.mikrotik.com/wiki/MikroTik_RouterOS_and_Windows_XP_IPSec/L2TP but it didnt work When I try to co...
by Krusty
Mon Mar 05, 2012 8:50 pm
Forum: General
Topic: ssl import for SSTP
Replies: 7
Views: 3094

Re: ssl import for SSTP

do we know any solution ? have same problem here (MT 5,14). Tryied to import PEM, crt, cer, key, nothing works... :/
by Krusty
Tue Feb 28, 2012 12:42 pm
Forum: Wireless Networking
Topic: Wireless WDS setup, cannot see LAN network ..
Replies: 2
Views: 1506

Re: Wireless WDS setup, cannot see LAN network ..

I don't understand why you are using WDS. If they are connected to the same wired network, just set the same SSID and, of course, the same authentication parameters. The clients will connect to the strongest signal.
you want to say me it is that easy? Shame on me, if yes :o)
by Krusty
Tue Feb 28, 2012 11:55 am
Forum: Wireless Networking
Topic: Wireless WDS setup, cannot see LAN network ..
Replies: 2
Views: 1506

Wireless WDS setup, cannot see LAN network ..

Hello everybody, can somebody be please so kind and help me with WDS setup? Here is scenario. I have two wireless APs on my company, both are connected to same LAN and for now they are configured as stand alone AP. All I want is create WDS Wireless APs with same SSID, so that users coming from one A...
by Krusty
Mon Dec 05, 2011 4:17 pm
Forum: General
Topic: Help needed from MT GEEK :) cannot explain in title
Replies: 2
Views: 938

Re: Help needed from MT GEEK :) cannot explain in title

Thank you, thats exactly what I need !!! works :)
by Krusty
Mon Dec 05, 2011 3:34 pm
Forum: General
Topic: Help needed from MT GEEK :) cannot explain in title
Replies: 2
Views: 938

Help needed from MT GEEK :) cannot explain in title

Hello everybody, I need a little help.... My situation is.... I have server on network 192.168.1.0/24 (192.168.1.6 is exact internal IP) and have one IP on routers WAN port for example 45.12.14.5. So I need to be able from inside of network connect to this external IP and be redirected to internal 1...
by Krusty
Tue Jul 26, 2011 9:47 am
Forum: General
Topic: Winbox 2.2.16 on Windows 7 - Broken drag and drop
Replies: 29
Views: 16209

Re: Winbox 2.2.16 on Windows 7 - Broken drag and drop

same issue here, cannot drag & drop, cannot use alt + up or down Im running Win7 Pro x64, UAC disabled, administrator account, I have tryied older mikrotik OS and also the newest OS, older winbox and also newest winbox only one way I can run and work with winbox is using WinXP mode, whitch is anoyin...
by Krusty
Thu Sep 10, 2009 1:56 pm
Forum: General
Topic: Netinstall on RB411R and RB750
Replies: 38
Views: 12687

Re: Netinstall on RB411R and RB750

ok, in that case, contact the seller, sorry
no need to apologize, I am glad that you try to help me :)
thanks for help
by Krusty
Thu Sep 10, 2009 1:48 pm
Forum: General
Topic: Netinstall on RB411R and RB750
Replies: 38
Views: 12687

Re: Netinstall on RB411R and RB750

OK, do the following: 1. connect a simple ethernet cable from this pc to the first port of the RB750 2. turn off ALL firewall and antivirus programs on this PC, try to do this on a non-Vista machine :) you can even right-click and run Netinstall as administrator 3. Run netinstall and enable PXE in ...
by Krusty
Thu Sep 10, 2009 1:39 pm
Forum: General
Topic: Netinstall on RB411R and RB750
Replies: 38
Views: 12687

Re: Netinstall on RB411R and RB750

As I said, you need to change the PC first
and dont like my ethernet card
Like I said, it's a windows driver issue
I tried to connect to MAC from one PC, where It works, same error "index missing"....
by Krusty
Thu Sep 10, 2009 1:26 pm
Forum: General
Topic: Netinstall on RB411R and RB750
Replies: 38
Views: 12687

Re: Netinstall on RB411R and RB750

you must use Winbox on the first startup, it will ask you about config, and you will have the ability to push the "remove config" button. NO configuration needs to be added in your laptop. Use Winbox over MAC address if you wish I think you dont read what I wrote up there :) and dont like my ethern...
by Krusty
Thu Sep 10, 2009 1:11 pm
Forum: General
Topic: Netinstall on RB411R and RB750
Replies: 38
Views: 12687

Re: Netinstall on RB411R and RB750

1. RB450 also has default configuration, exactly the same as RB750. Strange that you didn't notice 2. at first startup, RouterOS asks you if you want to remove it, this is an option 3. Index Missing is not a RouterOS issue, but a Windows issue. Try to connect from another PC and make sure you use p...
by Krusty
Thu Sep 10, 2009 1:01 pm
Forum: General
Topic: Netinstall on RB411R and RB750
Replies: 38
Views: 12687

Re: Netinstall on RB411R and RB750

why do you need to netinstall anyway? did you try to reset it first? as I say, my installation of MT is corrupted, Im not able co connect via winbox, because it says "index missing" if I try to connect via telnet and run "check-install" than I got plenty of errors, that some files are missing. Yes ...
by Krusty
Thu Sep 10, 2009 12:14 pm
Forum: General
Topic: Ipsec Problem
Replies: 3
Views: 607

Re: Ipsec Problem

There is no need to run one more tunnel, as IpSec is already configured for tunnel mode.

If you have masquerade on those routes, then make sure that you have accept rule for ipsec traffic.
If I made IPsec only, than it dont work. Its from MT v 3, before this version IPsec works by it self
by Krusty
Thu Sep 10, 2009 11:56 am
Forum: General
Topic: Netinstall on RB411R and RB750
Replies: 38
Views: 12687

Re: Netinstall on RB411R and RB750

please look at the quick guide: http://www.routerboard.com/pricelist/download_file.php?file_id=106 it says there: Hold this button during boot time longer, until LED turns off, then release it to make RB750 look for Netinstall servers. I try this before, 1st and 5th port, netinstall dont see that RB
by Krusty
Thu Sep 10, 2009 11:38 am
Forum: General
Topic: Ipsec Problem
Replies: 3
Views: 607

Re: Ipsec Problem

you have to create IPIP or EoIP tunel and make IPsec go through it
by Krusty
Thu Sep 10, 2009 11:32 am
Forum: General
Topic: Netinstall on RB411R and RB750
Replies: 38
Views: 12687

Re: Netinstall on RB411R and RB750

same here, I got RB750 (bought for tests) and need to reinstall, no serial connector, netinstall dont see it and dont work, Im trying port 1 and port 5, no beep while booting, cause it dont have any speaker... I tried to power off, push reset, and while holding reset turn power on, it seems to boot ...
by Krusty
Thu Sep 03, 2009 12:06 am
Forum: General
Topic: NEW feature :) "admin comment"
Replies: 3
Views: 644

Re: NEW feature :) "admin comment"

You can use the sys-note feature. Create a text file named sys-note.txt and ftp it into the router or just drag and drop it into the files folder in winbox. The content of that file is displayed whenever someone log-in via terminal, telnet or ssh. hmmm, thanks this is solution if we connect through...
by Krusty
Wed Sep 02, 2009 11:36 pm
Forum: Scripting
Topic: Backup line and netwatch script
Replies: 8
Views: 4478

Re: Backup line and netwatch script

True. In that case you'd manually go into the router via the second interface and change the default route. I'm glad you found a solution that works for you. Use it if it's right for you. But your solution means that all users behind the router are down for a while every x minutes when your script ...
by Krusty
Wed Sep 02, 2009 11:14 pm
Forum: Scripting
Topic: Backup line and netwatch script
Replies: 8
Views: 4478

Re: Backup line and netwatch script

Don't monitor some random server out on the net, monitor the first hop on the route. Make sure (possibly with firewall drop rules) that you can't reach that hop via the backup gateway. I think abou this option, we can setup this, but than we will have another problem.... If I monitor some hop/serve...
by Krusty
Wed Sep 02, 2009 11:05 pm
Forum: Scripting
Topic: Backup line and netwatch script
Replies: 8
Views: 4478

Re: Backup line and netwatch script

yes I got it :) for those who are interested with this, there is no need of complicated scripting, here is one of many solutions :) you will need two internet connections, one wich gateway xxx.xxx.xxx.1 distance 1 and second xxx.xxx.xxx.2 distance 2. If first GW is disabled than comes second and you...
by Krusty
Wed Sep 02, 2009 10:39 pm
Forum: Scripting
Topic: Backup line and netwatch script
Replies: 8
Views: 4478

Re: Backup line and netwatch script

Don't monitor some random server out on the net, monitor the first hop on the route. Make sure (possibly with firewall drop rules) that you can't reach that hop via the backup gateway. I think abou this option, we can setup this, but than we will have another problem.... If I monitor some hop/serve...
by Krusty
Wed Sep 02, 2009 10:03 pm
Forum: General
Topic: NEW feature :) "admin comment"
Replies: 3
Views: 644

NEW feature :) "admin comment"

Hello MK people,

can you please add somethink like admin comment ? I think kind of comment, that can be used to store information for other administrators. Somewhere in the menu can be button "admin comment" and this will open box, in witch can be stored various notes... ?
:)
thanks
by Krusty
Wed Sep 02, 2009 9:41 pm
Forum: Scripting
Topic: Backup line and netwatch script
Replies: 8
Views: 4478

Backup line and netwatch script

Hello good people :) If somebody be so kind and make me script, Im not so good in this :) here is situation we have We got RouterBoard as router, I got configured two default gateways in route list, one to xxx.xxx.xxx.1, this one in main and second with IP xxx.xxx.xxx.2 - this is backup gateway. I g...
by Krusty
Fri Aug 21, 2009 5:11 pm
Forum: General
Topic: IPsec working realy strange
Replies: 3
Views: 583

Re: IPsec working realy strange

hmm, because nobody can help, than I will tell what I found....

I had to update from version 3,24 to version 3,28
Had to set priority to 1 (2, 3 , 4 etc.)
Had to set ipsec protocol to 255 instead of 254, like it was in older version

now it works, thanks for great support !!!
by Krusty
Thu Aug 20, 2009 3:11 pm
Forum: General
Topic: IPsec working realy strange
Replies: 3
Views: 583

Re: IPsec wornking realy strange

here I got config picture :)
by Krusty
Thu Aug 20, 2009 2:55 pm
Forum: General
Topic: IPsec working realy strange
Replies: 3
Views: 583

IPsec working realy strange

Hello again :) I got one question.... I got configured IPIP tunel and IPsec tunel throught this IPIP. It seems to work, one network can reach second network. But If I look to /ip ipsec installed-sa and to /ip ipsec remote-peers there is nothing to see, does this mean that the tunel is not encrypted ?
by Krusty
Wed Aug 05, 2009 4:43 pm
Forum: Wireless Networking
Topic: ap bridge is realy slow
Replies: 1
Views: 611

Re: ap bridge is realy slow

nobody ? :(
by Krusty
Mon Aug 03, 2009 1:27 pm
Forum: Wireless Networking
Topic: ap bridge is realy slow
Replies: 1
Views: 611

ap bridge is realy slow

Hello everybody, we use RB333 with MK v3,27 as a AP in bridge mode with Wireless (Atheros AR5413). If I use it only for internet, than there is no problem, it goes fast as hell :) but if I try to download something from server or another station through wifi, it goes realy slow and CPU load is 100% ...
by Krusty
Fri Jun 12, 2009 10:41 pm
Forum: General
Topic: firewall rule to dst host
Replies: 10
Views: 1892

Re: firewall rule to dst host

[quote="NAB"][/quote]

flawless, seems to work perfectly
thanks lot
by Krusty
Fri Jun 12, 2009 10:24 pm
Forum: General
Topic: IPsec tunnel VPN setup?
Replies: 1
Views: 528

Re: IPsec tunnel VPN setup?

you have to setup IPIP or EoIP tunel and then setup IPsec to go through this tunel.
by Krusty
Thu Jun 11, 2009 5:57 pm
Forum: General
Topic: firewall rule to dst host
Replies: 10
Views: 1892

Re: firewall rule to dst host

but MT may internally implement something like the script mentioned above: periodically check for IP address changes for selected DNS names and correct firewall rules accordingly
this is great idea



may be someone so nice and write me this script?
I would be very grateful
by Krusty
Tue Jun 09, 2009 6:16 pm
Forum: General
Topic: firewall rule to dst host
Replies: 10
Views: 1892

Re: firewall rule to dst host

Yes, but not directly. You'll have to write a script which resolves the hostname and updates the firewall rule accordingly. You'll then have to schedule the script to run regularly. Thanks, but this is unnecessarily complicated :( In the future, will be any chance to make setup simpler ? like some ...
by Krusty
Tue Jun 09, 2009 5:03 pm
Forum: General
Topic: firewall rule to dst host
Replies: 10
Views: 1892

firewall rule to dst host

Hello everybody, I got simple question. is there any chance to add firewall rule to DST host not to DST IP example I need to add this rule add action=accept chain=forward comment="" disabled=no dst-address=217.31.55.217 dst-port=40000-50000 in-interface=eth2-LAN out-interface=eth1-WAN protocol=tcp s...
by Krusty
Sun May 04, 2008 10:44 pm
Forum: General
Topic: webproxy troubleshooting
Replies: 3
Views: 756

Re: webproxy troubleshooting

What about this?; /ip firewall filter add chain=input protocol=tcp tcp-flags=!,syn etc still dont work :( I have tried this: tcp-flags=!,syn tcp-flags=syn tcp-flags=!,ack tcp-flags=ack tcp-flags=!,urg tcp-flags=urg tcp-flags=!,cwr tcp-flags=cwr dont know about other but I think there wont be differ...
by Krusty
Sun May 04, 2008 9:23 pm
Forum: General
Topic: webproxy troubleshooting
Replies: 3
Views: 756

Re: webproxy troubleshooting

somebody help please ...
24 reads and no reply ???
by Krusty
Fri May 02, 2008 11:23 pm
Forum: General
Topic: webproxy troubleshooting
Replies: 3
Views: 756

webproxy troubleshooting

Hello everybody I got this problem: I use firewall to block access to the router from the Internet and my proxy does not work. so I have found a solution Make sure you allow established TCP connections with tcp option 'non-syn-only' to the router before blocking everything else. In v2.5, the rule is...