MikroTik

NumLock

Update to 6.49.10 but keep in loop update.

NumLock

To many viewers but no one advice. Any help or advice will appreciate.

The following adjustment also helped a lot
Change

From
group-key-update=5m

To
group-key-update=1h

NumLock

I have noticed that there is something broken in the Mikrotik DNS Server with the Apple devices. allow-remote-requests: yes (Policy only allow local sub-net for security reason) On the DHCP Server the setting was; ADDRESS GATEWAY DNS-SERVER 192.168.1.0/24 192.168.1.1 192.168.1.1 Change to (this seem...

NumLock

Is there know issue with apple devices with mikrotik?
I have many issues with apple devices since version 6.4.6 and Up.

NumLock

Long post NO SUPPORT

NumLock

if ( $argc <= 4 ) { $msg .= "MikroTik's API Integration for FastNetMon - Ver: " . _VER . "\n"; $msg .= "missing arguments"; $msg .= "php fastnetmon_mikrotik.php [IP] [data_direction] [pps_as_string] [action] \n"; < ------------------Script stop working in this...

NumLock

Hi any help to make the php script running will be appreciated

NumLock

On the file "fastnetmon_mikrotik.php" line 51 has those argument
$msg .= "php fastnetmon_mikrotik.php [IP] [data_direction] [pps_as_string] [action] \n";

but I still get the same error

NumLock

Where are those arguments?

NumLock

Hi I just try to run ./notify_about_attack.sh and I get the fallowing error on "fastnetmon_mikrotik.php";

MikroTik's API Integration for FastNetMon - Ver: 1.0
missing argumentsphp fastnetmon_mikrotik.php [IP] [data_direction] [pps_as_string] [action]

Any idea?

NumLock

Yes I buy from them.

NumLock

Hi I like to share and get some feedback, I deploy the following configuration to limit P2P connection I need to make sure is this should be work properly if not I really appreciate if point me to right direction. Mark P2P Mangle: /ip firewall mangle add action=mark-connection chain=prerouting conne...

NumLock

Is there way to make the rule less sensitive? Yesterday I browse on my web server and my Firefox hangs and retry to many times and I flag as a ddoser.

Thanks!

NumLock

/ip firewall filter add action=jump chain=forward comment=Detect-Ddos connection-state=new \ disabled=no in-interface=ether1 jump-target=detect-ddos add action=return chain=detect-ddos comment=Detect-Ddos disabled=no \ dst-limit=32,32,src-and-dst-addresses/10s add action=return chain=detect-ddos com...

NumLock

Thanks this help a lot. Over 20,000 IP has been ban. Last configuration work so far so good: /ip firewall filter add action=jump chain=forward comment=Detect-Ddos connection-state=new \ disabled=no in-interface=ether1 jump-target=detect-ddos add action=return chain=detect-ddos comment=Detect-Ddos di...

NumLock

Like this: ? /ip firewall filter add action=jump chain=forward comment=Detect-Ddos connection-state=new \ disabled=no in-interface=ether1 jump-target=detect-ddos add action=return chain=detect-ddos comment=Detect-Ddos disabled=no \ dst-limit=32,32,src-and-dst-addresses/10s add action=add-dst-to-addr...

NumLock

This help a lot to prevent attackers eat my bandwidth fist attack was 100mbps on icmp and UDP (17) and hang my MK. The rule works properly but after few hours to deploy customer was unable to browse or access to the internet I just add in-interface=ether1 (My ether1 is the wan interface) and problem...

NumLock

Try to install from Serial ATA CD/DVD ROM then will work.

NumLock

Why not put some firewall behind the server you need PCI-DSS compliance.

NumLock

Upload the files with winbox then open the terminal and put this command

system package downgrade

Then reboot the unit, please by patience to unit downgrade the OS.

regards,

NumLock

Upgrade from 5.20 to 5.21 to Edge Router very stable no issues.

NumLock

ip firewall nat add chain=dstnat action=dst-nat to-addresses=xx.xx.xx.xx(Internal IP Host) to-ports=3389 protocol=tcp dst-address=xx.xx.xx.xx(MK Public Address) dst-port=3389

NumLock

The best way to use Tranzeo CPE is using Tranzeo AP. I use TR-6600 for AP and TR-SL2, no issues.

NumLock

Do you enable web proxy? If yes, make sure you block access from internet.

NumLock

I try net map not work

NumLock

I have a pool of IP 172.16.251.0/24 without NAT those IP source has access for a particular firewall. Currently I have a few users doing VPN with the following: Customer1 Remote IP 172.16.251.2 Customer2 Remote IP 172.16.251.3 Customer3 Remote IP 172.16.251.4 Now I need to assign 172.16.251.5 with I...

NumLock

btest.exe (Windows Speed Test) balance-rr interface bonding print Flags: X - disabled, R - running 0 R name="bonding1" mtu=1500 mac-address=00:0D:B9:21:4A:90 arp=enabled slaves=ether1,ether2 mode=balance-rr primary=none link-monitoring=none arp-interval=100ms arp-ip-targets="" mi...

NumLock

Thanks for quick respond. I tested on first with single interface 92Mbps and then tested with Bonding ether1,ether2 and just get me only 129Mbps.

Should be double speed?

NumLock

Hi I like to bridge two interface to increase speed.

NumLock

The P2P is red but the speed is not limit

BitTorrent.PNG

P2P-TEST.PNG

NumLock

How do I know if is encrypting traffic?

NumLock

I have 192.168.7.0/24 NAT network and I want to limit all P2P. I try this /queue simple add burst-limit=64k/64k burst-threshold=64k/64k burst-time=1m/1m comment="" \ direction=both disabled=no dst-address=0.0.0.0/0 interface=all limit-at=\ 64k/64k max-limit=64k/64k name="Limit P2P Dow...

NumLock

Can I change de listen port (1723) for other port? For example port 2000/

NumLock

RIP feature is not available in beta 5.0 beta3?

NumLock

I see that option on Radius GUI setting.
I use “Radius Manager” the core is FreeRadius.

But I contact the vendor and he say if I use “Radius Disconnection method” require more resources on the radius server.

I need a heavy server to run FreeRadius?

I have AMD Dual core with 4GB of RAM.

NumLock

Thanks for quick respond!

What Disconnection method you use?

Radius or NAS?

NumLock

Hi I use Radius with Mikrotik but when user downloads more than 4GB the connection reset.
So the user lost some GB.
I check the profile he has 150GB download and 200GB Upload.
How can I fix that?

NumLock

you cannot use transparent proxying for https

I think, you should just get IP addresses of paypal servers, allow port 443 to there addresses and then block all the rest. all in firewall filter, w/o webproxy

how?

Will redirect to paypal like proxy?

NumLock

allow only to paypal and my web site.

NumLock

Hi Chupaka

I have RoutersOS 3.22 is safe to upgrade to 4.1?

In my setup the proxy wil work only for the 10.80.40.0/24 or all ip will use this proxy?

I just want proxy for the IP pool 10.80.40.0/24

sorry I am newbie

NumLock

Thanks for help me and respond.
It’s reliable to make this implementation or there other way to make that.

Its working but I don’t have any experience with web proxy on Mikrotik.

The others IP pools work with out problems for those rules.

Please advice.

Thanks! Thanks! Thanks! Thanks!

NumLock

?????????????
????????????
???????????
??????????
?????????
????????
???????
??????
????
??
?

NumLock

Firewall Filter

/ip firewall filter
add action=drop chain=input comment="" disabled=no dst-port=8080 \
    in-interface=ether1 protocol=tcp src-address=10.80.40.0/24

For some reason I have to block the most popular web site for port 443 and skype still work.

Help please I almost done

NumLock

I have this setup and block the IP pool that I want. But the port 443 is open and the client can access any page with https: enabled: yes src-address: 10.80.40.0 port: 8080 parent-proxy: 0.0.0.0 parent-proxy-port: 0 cache-administrator: "webmaster" max-cache-size: none cache-on-disk: no ma...

NumLock

Hi I need some help. I need to make limit access for PPPoE.

PPPoE clients pool IP is 10.80.40.0/24

I want limit access only to some web site for example:

www.paypal.com

Any help I will appreciate.

Thanks!

NumLock

NumLock

No working I try but not work

NumLock

And not work

NumLock

I just try this using my example: /ip address add address=192.168.8.10/24 interface=ether1 /ip firewall nat add chain=dstnat dst-address=192.168.8.10 action=dst-nat \ to-addresses=10.66.41.41 /ip firewall nat add chain=srcnat src-address=10.66.41.41 action=src-nat \ to-addresses=192.168.8.10

NumLock

There no option to fix that or make workaround to handle this issue?

NumLock

Hi I made my hotspot with mikrotik 2 years ago. Now I found bug, for many months I search how cause this: userXX (IP) logged out: traffic limit reached The problem is the mikrotik has limit to 4.2 GB if the radius has unlimited download quota per day. Is possible to change that parameter? From 4.2 G...

NumLock

??????????????????
????????????????
??????????????
????????????
??????????
????????
??????
????
???
??
?

NumLock

I think will work but I think you will have limints in interface. Hp comes only with two Ethernet

NumLock

Hi I build hotspot and I like to know how to assign public IP to X client. Public address 192.168.8.2/24 ether1(SAMPLE IP) Hotspot DHCP pool 10.66.40.1/23 ether2 For example I want to assign public IP 192.168.8.10 (SAMPLE IP) to hotspot address 10.66.41.41. All other hotspot address should be out wi...

NumLock

Hi I like to know if Mikrotik router supports TCP Keep alive

NumLock

The host 192.168.8.15 only support SSL or clear TCP without SSL the host 192.168.8.15 is a Point of Sale Terminal.

NumLock

Thanks for respond you mean I can use ssl between 192.168.8.30 and 192.168.8.15 and PPTP tunnel to 10.1.32.28?

The communication between 192.168.8.30 and 192.168.8.15 must be ssl.

Thanks

NumLock

Ok when 192.168.8.X hit the host 192.168.8.30 port the host 192.168.8.X waits for respond. But I need to connect all traffic from 10.1.32.28 to host 192.168.8.30 to communicate host 192.168.8.X to 10.1.32.28 using the host 192.168.8.30 as SSL GATEWAY.

Any idea how to do that or any work around?

NumLock

can I do dat with reverse proxy?

NumLock

Hi I have the following configuration: ction=dst-nat chain=dstnat comment="" disabled=yes dst-address=\ 192.168.8.30 dst-port=443 protocol=tcp to-addresses=10.1.32.28 to-ports=\ 2004 I like to communicate with 192.168.8.30 with encrypted data and forward to dst-nat host 10.1.32.28 with por...

NumLock

Well the problem is we spend on 4 90 sector antennas. If they wont work why still sell those antennas GRR! any solution to me? If use use a WISP designed product, you can reuse channels as you want... This is completly doable with Motorola Canopy.. ahora esquivo! jeje que viva el chimichurri!!! y l...

NumLock

Well they will disconnect and recconect to stronger signal. I guess there is no way to avoid that.
That is the case of my setup... if I put 1 AP and the other WDS no idea.

NumLock

Well I tested yesterday I just put all my AP with same SSID.

When users move around they always will connect to stronger signal.

When they switch to other AP will be a reconnection so it’s better if you have all AP on same network to avoid authentication problems.

Sorry my bad English...

NumLock

Why not simply put them all on Channel 1 and WDS them together? Create static WDS links between each interface and add them all to the same RTSP bridge. Give all of the wireless interfaces the same ssid. Basically your array will appear as one big antenna. If I use Same SSID not cause problems? BTW...

NumLock

I plan to use 90 Array antennas with following setup:

Sector front CH 11

Sector back CH 11

Left CH 6

Right CH 6

TOP Omni backup antenna CH 1

I just make test with this setting with no lost db I guess the antenna has good insulation

NumLock

Well the problem is we spend on 4 90 sector antennas. If they wont work why still sell those antennas GRR! any solution to me?

NumLock

So there no way to setup the site with 5 AP? or I should remove the omni from the top?

Assumes I remove the Omni from the top what is the best way to setup my current antennas.

NumLock

This setup will be better? Please help

NumLock

Thanks for quick respond do you have any suggestion with current setting?

For now we have the Omni antenna.

On this week we are going to turn on the array sector antennas.

NumLock

I plan to use 90 Array antennas with following setup:

Sector front CH 11

Sector back CH 11

Left CH 6

Right CH 6

TOP Omni backup antenna CH 1

Search found 70 matches