MikroTik

amsteen

Thanks for every one here

amsteen

In fact I was using one password for all MAC addresses now I modify it Using access list with entries for MAC address and per MAC WIFI passwords I hope this solve my problem I need to know where to "Log the internet connects" Also some of WIFI client overcomes my queues bandwidth limiting ...

amsteen

the status for /system/ntp/client was waiting
but today I check it becomes synchronized
And dat and time becomes right
I do not do any thing

amsteen

This is my setting [code] # 2023-09-24 19:02:42 by RouterOS 7.10.2 # software id = GY05-HEA2 # # model = RB951G-2HnD # serial number = 643005FB23A9 /interface bridge add name=GuestBr add name=SteenBr add name=Stydybridge add admin-mac=E4:8D:8C:67:1C:DB auto-mac=no fast-forward=no name=bridge-local /...

amsteen

Update

amsteen

I try cloud timd and ntp client but it is not working check photos the date is wrong and time is manually entered I noticed one thing when I enter clock menu the date shows correct for less than second then changed to wrong date ( decreases by 5 days ), also ntp client keeps invalid address for host...

amsteen

Rb951g-2hnd clock is not right
I try to adjust it manualy many times
Even date is wronge
But when power off it reset clock
I am not using ntp server or client

It should read clock from internet. Is it right ??

amsteen

I have RB951G-2Hnd I used wifi access list to give access to clients using Mac address of their devices Every thing was working right. Last days I notice that some clients disconnects from wifi and they do many trials to connects again I found out that there is some one hacked wifi password and use ...

amsteen

so it is not possible ??

amsteen

I have rb951ui-2hnd working well with wireless access list I add a wireless repeater for extend range and add to rb951ui-2hnd wireless access lists it connects and work fine but it accepts any device even its mac address is not listed in rb951ui-2hnd wireless Access lists. I want the devices which l...

amsteen

I have access and admin to ISP router But I can not physically add a network cable between ISP router and DVR they are connected through mikrotik.
So I need to set direct access between port1 and port3 in mikrotik.

amsteen

I am beginner I have Mikrotik Router model RB951G-2HnD This is my situation:- 1. I have a DVR connected to port 3 2. ISP router connected at port 1 3. Port 1 works as gateway to deliver internet to my LAN 4. DVR must connected to ISP router to be accessed from outside But can not do it physically. I...

amsteen

Ok thanks for all

amsteen

In fact I do not know it will work or not So that I ask here may some one try it

amsteen

I have mikrotik router 951G-2HnD and I upgrade it to v 7.3.1 stable to get zerotier package After upgrade every thing is working as normal but I can not find zerotier package. I know that zerotier is released for arm devices only But did anyone succeeded to run it on any other type of mikrotik Route...

amsteen

I have mikrotik router 951G-2HnD and I upgrade it to v 7.3.1 stable to get zerotier package
After upgrade every thing is working as normal but I can not find zerotier package.

Please help

amsteen

No way I try every thing, I use about 10 VMware Machine with different setting but fail
So I give up ..

amsteen

Ok I will upgrade to 6.48.1 and try again

amsteen

Is Mikrotik version is the issue ??

My Mikrotik is on VMware Machine with 6.48 Version.

amsteen

This my new code :- /certificate add common-name=172.30.7.90 name=ca days-valid=3650 sign ca ca-crl-host=172.30.7.90 add common-name=172.30.7.90 subject-alt-name=DNS:srv key-usage=tls-server name=server days-valid=3650 sign server ca=ca /certificate add common-name=client0 name=client0 key-usage=tls...

amsteen

There is no error in log This is log for 2 attempts to connect from win 10 machine: 11:42:25 ipsec,info new ike2 SA (R): 172.30.7.90[500]-51.36.67.38[1626] spi:ea813f1383fd8136:c1480222a9ef96d6 11:42:25 ipsec,info,account peer authorized: 172.30.7.90[4500]-51.36.67.38[1627] spi:ea813f1383fd8136:c148...

amsteen

I know that my Problem is certificate So is this right:- /certificate add name=CA common-name=I2KE subject-alt-name=DNS:I2KE days-valid=3650 key-size=2048 organization=I2KE key-usage=crl-sign,key-cert-sign /certificate add name=template-Router common-name=I2KE subject-alt-name=DNS:I2KE days-valid=10...

amsteen

Dear Mr. own3r1138 I follow your setting step by step and I found out that : # you are using these certificates serverikev2, ssl.domain.local, ca-ike.local, and client-ike.local.p12 ===> I am confused as these are 4 certificates. I understand that serverikev2 = server certificate, client-ike.local.p...

amsteen

This is my settings:- [code] /interface ethernet set [ find default-name=ether2 ] name=LAN set [ find default-name=ether1 ] name=WAN /ip ipsec policy group add name=group-vpn /ip ipsec profile add dh-group=modp2048,modp1536,modp1024 enc-algorithm=aes-256,aes-192,aes-128 \ hash-algorithm=sha256 name=...

amsteen

Many thanks Mr. own3r1138 I need some details : 1. is "client-ike.ikev2.org" should be true existing or can be any thing. 2. I notice that name, common-name, and subject-alt-name they all same is this right ?? 3. can we use "anyname" instead of "client-ike.ikev2.org" or...

amsteen

any help ??

amsteen

I follow the author note but Still same error. My Problem is misunderstanding of these parameters :- domain.com ==> I don't have a domain we have a workgroup so what to write here ?? ( I write an non existing domain name "IKE2.net": ) user@domain.com ==> which user to use here ?? ( I use w...

amsteen

I follow this tutorial
https://www.reddit.com/r/mikrotik/comme ... =post_body
All works but When trying to connect it on win10 gives error "IKE authentication credentials are unacceptable"

amsteen

I need to set mikrotik as IKEv2 VPN for outside users to work from home, After searching I found only a site to site mikrotik IKEv2 VPN
But I need a user to site, but I did not find.

My users at home uses windows 10 pc's and at work I have a virtual machine with mikrotik ROS ver 6.48

Please help

amsteen

I did not fix the first one

amsteen

Now I get another vulnerability

SSL/TLS: Report 'Anonymous' Cipher Suites OID: 1.3.6.1.4.1.25623.1.0.108147

Any Help

amsteen

For me I do not have problems but for my manager he recommended to remove and vulnerability

amsteen

The Problem is that Vulnerability Scanners consider TCP timestamps as Vulnerability
So Mikrotik should take this in consideration .

amsteen

Thanks for your response but SNMP is already disabled on my router

[attachment=0]Mik0.jpg[/attachment]

amsteen

I have Mikrotik 6.48 VM Machine it works fine.
When I When I scan my network for Vulnerabilities I get this

TCP timestamps OID: 1.3.6.1.4.1.25623.1.0.80091

I google it but I can not find a solution to remove this Vulnerability.

Can Any one help Please ??

amsteen

This will not work with me as there no one connected to physical interfaces.
All my users are connected over WiFi only.
And as I tell before simple queues works but only over one day.

amsteen

I see this page before but I do not want to use any other program. Also it do not Gove what I want I try simple queue for each user it is good but only for one day then reset the total usage.
I need simple method.

amsteen

I have RB951G and I use DHCP with leases for static IP's

I need to calculate total internet usage for each user per month ( in GB ).

Note: my router may be restared due to power goes off.

Please help

amsteen

Mr. ZeroByte

Thanks for your concern
Ok I will Try, but which Route I should add as a gateway as I do not have one
And What is the NAT rule I should Add.

Thanks Again

amsteen

Any news ???

amsteen

In fact I found an article on mikrotik wiki on that issue and I try it in
Many ways But I fail.

All this articles depends on that there is a gateway with the proxy but I do not
Have a gateway, it is a proxy only.

So I need help from some one who try this situation.

Thanks in advance

amsteen

Ok Fine

Can you help in my situation ??

Or send me setting of your working machine ..

amsteen

Hi All

Is IT possible Or not ??

Do Any one try this situation Before ??

amsteen

Hi All [attachment=0]cloud.jpg[/attachment] Our ISP gives us only proxy server without any gateways. They give us this proxy server : 172.30.7.211 Port : 808 When I try it on one computer it works. I try also with CCPROXY software and it works and deliver internet to clients. I need to deliver inter...

amsteen

Hi All I have mikrotik 6.28 server and it was working good but our isp Changes his setting and give us a proxy server with port Instead of direct gateway. So I need to change mikrotik setting to use these ISP Proxy settings My Mikrotik setting is very simple as one wan interface One lan interface ga...

amsteen

Dear All

IT works with me fine bu I need to reset the track on daily usage
I set this setting in the SnifferService.ini file:

ClearSchedule=Daily

And how to reset it manually

But It do not work so please help

amsteen

Thanks you very much

amsteen

Yes It Works perfect
Many thanks to all of you and this respective forum

amsteen

Mr. BartoszP

I need another thing, I need a script to change all my simple queues
max-limit to unlimited so I do this one but not working :

:for i from=1 to= 300 do={
/queue simple set number="$i" max-limit=0/0
}

can you check it

amsteen

I get it IT was not the script it was the queue type it should be Default. In Mikrotik 6.28 When you create a simple queue it makes its Default type --- Default-Small. When I change the type to Default the Script work very well, and I think the first script will work also. Thank you very much for yo...

amsteen

I try also not working I think the problem is the total-bytes when
I try ---- /queue simple> get number=0 value-name=total-bytes from
the terminal it show nothing and from browser I consumed about 100MB

Also in the queue status there no traffic check this photo :

amsteen

I do this yesterday but no way it is not working, check photo I do one trail I replace the > sign with < and add manually a simple queue With the IP the I am testing from it 192.168.100.50 and it works and changes the queue speed But without any traffic ( this is to check script errors ). Sorry to d...

amsteen

This the photo for my schedule is this ok ??

amsteen

I Try your script but it is not working also I am testing from a pc with ip 192.168.100.50 by download and youtube and brwosing is this ok ?? Do I have to make simple queue for all the IP's in network 192.168.100.0/24 Or the script will create a simple queue for the ip it get ??? By the way my netwo...

amsteen

I get this script from a friend : :local traf; /queue simple { :for i from=1 to= 254 do = { :if ([/queue simple find target-addresses=("192.168.100." . $i)] != "") do={ :set traf [get [find target-addresses=("192.168.100." . $i)] total-bytes] :if ($traf > 5242880) do = ...

amsteen

Dear All Is this subject is closed or not as I try this on my server but I fail any help.. My Server settings: /ip address add address=192.168.100.1/24 interface=Mangers network=192.168.100.0 add address=192.168.1.50/24 interface=External network=192.168.1.0 /ip dns set allow-remote-requests=yes ser...

amsteen

In Fact I am doing it now manually by making a simple queue for any IP with any speed I want I want and it works well. But I have to check the all IP traffic manually all the time and this is a very bad work. I found this article: http://forum.mikrotik.com/viewtopic.php?f=9&start=50&t=308 th...

amsteen

First Of all thanks for your response
But I think the script should check local int for local IP's not wan
I try it but it do not work

I hope you can help

amsteen

I have mikrotik 6.28 server with simple configuration : /ip address add address=192.168.100.1/24 interface=Mangers network=192.168.100.0 add address=192.168.1.50/24 interface=External network=192.168.1.0 /ip dns set allow-remote-requests=yes servers=208.67.222.222,208.67.220.220 /ip firewall nat add...

amsteen

Dear all I am new here and I try many times but not working here is my situation: 1. Mikrotik server 6.19 2. I try blink and it works fine and I get my mikrotik command prompt. 3. The sniffer Services starts well but its log file shows the error: 2016/01/05 13:50:49 - Error: Cannot get traffic: http...

amsteen

I have mikrotik server which take INTERNET from a proxy server
I understand that parent proxy is used for this so I try it
But I failed

Is there is another way or any article or Example about parent proxy ??

amsteen

No way it is not working
Any other idea

amsteen

Thanks for your help but I try and it is not working this is my rules: /ip firewall nat add action=masquerade chain=srcnat comment="" disabled=no out-interface=\ !Internal add action=redirect chain=dstnat comment="" disabled=no dst-port=80 \ in-interface=External protocol=tcp to-...

amsteen

If my mikrotik working settings helps I can send it here !!!!!

amsteen

I have mikrotik Ver 4.16 operating on one pc and it works good for 1 year. It was working from a DSL router. My router ip for wan card was 172.30.7.208/24 My router ip was 172.30.7.225 reachable external Now Our new ISP give us internet from cable with proxy server 192.168.11.200 And port is 8080 Wh...

amsteen

I read this page before and I use these rules in my server but notice that
you can use redirect only with denied option, this means if the traffic matches rapidshare.com
I can deny then redirect the traffic to other site.
In fact I need to redirect the traffic to another router on matching

amsteen

Thanks Mr. JJOliver998 for your replay but the link you send is invalid,
If you have simple rule for DNS routing please help.

Thanks

amsteen

I am using a proxy full time, So how can I do that ????

amsteen

How to stop redirect traffic destined for rapidshare.com to the proxy.

amsteen

I have mikrotik O.S working, and all users using mikrotik proxy server in their browsers. I have a local site in my network but I can not run it with proxy in browser. If I remove proxy from my browser the local site works fine. I try to use "bypass proxy server for local address" in IE bu...

amsteen

Please Help

amsteen

How to Detect and Block Hotspot Shield program traffic(openvpn application) Some companies and organizations has its own security policy , sometimes they use OPENDNS addresses in order to prevent users in these companies and organization from accessing certain web sites .But there are many PROXY and...

amsteen

Sorry the link is

http://wiki.mikrotik.com/wiki/How_to_De ... plication)

amsteen

Hi every one I need to block Hotspot Shield program from mikrotik I found this page on wiki http://wiki.mikrotik.com/wiki/How_to_Detect_and_Block_Hotspot_Shield_program_traffic(openvpn_application) But I have Mikrotik 4.16 so when I try it it did not work as they say that in page "it work for m...

amsteen

hi every one I have mikrotik server ver 4.2 and it was working good on my cisco network at work place. We recently change our cisco switches to have 3 VLAN and the mikrotik is connected to one of them, every thing is working well except firewall rolls. For Example I have 5 roles that block INTERNET ...

amsteen

I have two internet lines first line 172.30.7.216/22 second line 172.30.7.209/22 first gateway 172.30.7.224 second gateway 172.30.7.225 Local 192.168.1.10/24 and I apply the following code to use both of them on one server -----------------------------CODE--------------------------------------------...

amsteen

Thanks for every one who respond to my case.

But the problem is that if I drop one proxy server ( say 1.1.1.1 ) today,
Tomorrow he will find another one and use it.

I need a code to prevent using any external proxy server ?

amsteen

I check the url you send but there is nothing about external proxy ????

amsteen

Sorry how to block it from firewall ( I need the role )

amsteen

Hi
I have a mikrotik server 4.11 it work with webproxy and my users
works without using proxy server.

some of my users uses an external proxy server so they bypass
my download and sites filters.

How to prevent my users from using another proxy server ?????

amsteen

yes I want that as it work good for me before

amsteen

this is the ip route on the new isp

/ip route
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
87.101.225.129 scope=30 target-scope=10

amsteen

attached again with zip file

amsteen

Of course I change the old addresses to new one.
And you can see that in my first attachment

amsteen

These are my old and new IP'S ----------OLD ISP Was Working good--------- /ip address add address=192.168.0.200/24 broadcast=192.168.0.255 comment="" disabled=no \ interface=Internal network=192.168.0.0 add address=192.168.1.10/24 broadcast=192.168.1.255 comment="" disabled=no \ ...

amsteen

Hi every one, I have mikrotik server ver 4.11 and it was working good but we change our I.S.P Our new I.S.P give us his new ip's which are : ip: 87.101.225.132/29 gw: 87.101.225.129 dns: 87.101.238.5,87.101.238.6 I try this ip's direct on my pc and the INTERNET work perfect but when I put them on mi...

amsteen

I try policy routing But it is not what I need. policy routing routes a subnet to specific router. I need to route depending on user request - for example if user browse local address ( like 172.30.16.200 ) it direct him to router 1 and if he browse the wan address it direct him to router 2 Thanks t...

amsteen

Strange No one try to help?

May I ask in wrong way? Then I will try to ask in another way ...

My question is :

I want to route the requests for specific IP ( http://172.16.100.202 -- web server )
to another gateway than the one we use for INTERNET?

How to do that?

amsteen

Hi every one

Is it possible or not

amsteen

I have mikrotik server 4.6 and it work good with web proxy its ip is 172.30.4.1 Now I have another application wep server working by IP-VPN on another gateway which is 172.30.7.254 and they are on the same network. My problem is that if the user want to use application server he should use the gatew...

amsteen

Thanks Mr. Megateq But I do not want to use Mikrotik Hotspot and
user manager as I have a lot of users and they are working without
Login

amsteen

There should be some one know how to stop hotspot shield

I was having ISA server before 2 years and it was stop it, so Mikrotik
Should do also

I hope that ..... ????

amsteen

Thanks Mr. roadracer96 but please tell ( as am biginner ) from where to start ?

I do not know how to capture a packet of using hotspotshield
From where you get this "CA plaintext information"

amsteen

Hi every one

My problem is that I do not know how to use L7 filter to block
hotspot shield and I know it is possible to do that with L7 filter

So please help

amsteen

Do you Have any thing about it ?

Did any one know how to do this with L7 Filter ?

Please help

amsteen

Hi everyone I have mikrotik Ver 4.6 Licensed and I use web proxy to control
users access to INTERNET.

some of my users uses hotspot shield to have open link without any limitations to
INTERNET, I need to block hotspot shield?

Please help

amsteen

First of all thanks to Mr. cvelee You are such a nice guy; your instruction is very simple and effective When I try to connect to Mk it verifies the user and pass word ok then "Registering your computer on the network" then give an error 720 One thing My Wan IP on MK. Is 172.30.7.208 My Lo...

amsteen

I was not expect such that replay from the this board. In fact I am certified from CCNA and MCSA and have experience In networking for 19 years. I work as network administrator for 15 years. I am 42 years OLD. In my working place I build Exchange 2007 Servers and VPN servers with windows 2003 server...

amsteen

I do not try any thing as I do not know how to do VPN

But I take pervios code from the manual direct but it not working

amsteen

my local interface name is "Internal" I try these setting /interface bridge add name=bridge_local protocol-mode=rstp /interface bridge port add bridge=Internal interface=ether1_local /interface bridge set bridge_local admin-mac=00:0C:29:C3:46:5E //// where xx:xx:xx:xx:xx:xx is MAC address ...

amsteen

Ok I have checked this manual before but I was thinking that you have another
Setting.
My issue is different from this as they are working on VPN between two MIKROTIK
Routers, and I do not have MIKROTIK router, but I have only one MIKROTIK server 3.22

Any suggestions

amsteen

Yes I have a public IP address on my Mikrotik

can you send my link for example or steps for this

Thanks

amsteen

Is it possible to setup MK O.S-3.2 Server as VPN server

Like this picture

1.png

I mean Clients have to connect to the MK server from internet and browse the
Local network.
If so please write some instructions.

amsteen

OK This is my Settings Tota.jpg /ip address add address=172.30.7.209/24 broadcast=172.30.7.255 comment="" disabled=no \ interface=ISPONE network=172.30.7.0 add address=220.200.200.12/24 broadcast=220.200.200.255 comment="" disabled=\ no interface=ISPTWO network=220.200.200.0 add ...

amsteen

Ok I use an open DNS
208.67.222.222
208.67.220.220

and it work now, but still need to block sites and some file extensions (download) from
Firewall as I disable Web-proxy now, so do you have any idea how to do this.

I appreciate you help very much

amsteen

Yes it work with me with web proxy before, but my configuration prevent me from
using web proxy as I have 2 ISP in my MK so I use some mangle rules which are impossible to run with web-proxy enabled

amsteen

need a nat rule to redirect website to another one
for example redirect www.google.com to www.cnn.com

I do not use webproxy on my MK.OS 3.22

I try to do this from DNS with

/ ip dns static
add name="www.google.com" address=216.36.51.233 ttl=1d

but it do not work

amsteen

The Problem is that I need to add 4 DNS I have Two ISP and each one has primary-DNS and secondary-DNS I try to add the primary DNS for the first ISP as primary and the primary DNS For the second ISP as secondary but the first ISP work and the second no Another thing I was block sites and some file e...

amsteen

Ok Mr. butche Every thing works with me fine like your example but I use differnt ip's and some little changes in Natting as follows: /ip route add gateway=220.200.200.1 routing-mark=ISP2 add gateway=172.30.7.225 routing-mark=ISP1 add gateway=172.30.7.225 /ip route rule add dst-address=192.168.0.0/2...

amsteen

I try many times before to run MK with webproxy disabled but I fail
is there is some way to run MK without webproxy?
the attached file contains all my MK. settings
please check if you have some time

amsteen

Ok I Turn off web proxy and the nat rules that redirect traffic to the web proxy but it is not working ( this never work with me before even with one DSL line ). If you have a copy of backup file or settings file for the machine that you try your example on it please send it. my email is am.steen@gm...

amsteen

I try to made the setting as that in the PCC example. but the MK3.22 is accept these two rules add chain=prerouting dst-address-type=!local in-interface=Local per-connection-classifier=both-addresses:2/0 \ action=mark-connection new-connection-mark=wlan1_conn passthrough=yes add chain=prerouting dst...

amsteen

Mr Butch Evans I am very sorry for disturbance But, I was thinking that the required nat rules is special for this matter. I add that nat rules but still not working the new nats are /ip firewall nat add action=masquerade chain=srcnat comment="" disabled=no out-interface=ISPONE add action=...

amsteen

Thank Mr. Butch Evans

Can you help me with nat rules as I do not know how to nat traffic that leaves
the router ( I have MK 3.22 Not MK router ) on ISPONE and ISPTWO interfaces

And about the ISP router the static routes from where to where

amsteen

Yes I adjust the ISP gateways (these routers are in my site and I can change there IP's as I want)
as 10.10.11.1 and 10.10.10.1

2.jpg

I have two DSL lines connected to two routers ( cisco - linksys ), these routers are in my site
so I can change thier IP's as I want

Thanks

amsteen

I forget to tell you that in the two subnet
192.168.0.0/24 and 192.168.1.0/24
INTERNET is not working

amsteen

great thanks to Mr. fewi and Mr.butche the site you give is great 1.jpg I made all the address as in the example exactly but not work these are the codes /interface ethernet set 0 arp=enabled auto-negotiation=yes cable-settings=default comment="" \ disable-running-check=yes disabled=no ful...

amsteen

first thanks for your replay In fact I have two DSL lines with two routers one is cisco and the other is speed linksys The out line from cisco router ( 172.30.7.225 ) is connected to the wan card of MK. server and the lan card of the MK is connected to network switch to provide INTERNET to 60 client...

amsteen

A lot of people read my message but no one try to help

Is there are an error in my message

Why ?

amsteen

I need a mangle rule to add two routes for two DSL lines with different gateways
to be delivered to two ip ranges

I have two external NIC cards and one internal card

I have router OS Ver 3.22 on HP P4 machine

Please help

amsteen

Ok I add you

My Email is am_steen@hotmail.com

Thanks

amsteen

I forget to tell you that each Line has its DNS
this means we also have 2 different DNS

amsteen

Thanks Mr. pastranini I add the addtional nic card and connect the second line, but I do not know how to use the mangle in order to select the gateway for each line. The first wan NIC address 172.30.7.208 and its gateway 172.30.7.225 with out to lan NIC address 172.30.4.1 The Second wan NIC address ...

amsteen

Hi every one Is it possible to have 2 route lists? I have two DSL lines one of them connected to speed touch router and from that router To MK OS. V3.22 server and MK deliver Internet to a group of 300 users. The other line deliver internet from Cisco router to 100 users direct. Is it possible to co...

amsteen

Thanks very much I solve the problem and for others who get the same problem here is some details for my problem and solution I have cisco DSL router 1841 from the router one out line connected to one interface of MK Server ( normal pc ) 3.22 the other interface of the MK is connected to my network ...

amsteen

First off all thanks very much as no one care except you I try to run my MK on Another router works in another department the internet work very well from it. And when I try my router whitch connected to MK by connect it direct to my pc it work vey good. my router is cisco 1841 this means the router...

amsteen

I have MK OS 3.22 connected to cisco 1841 router, they was working very good from 3 months.
from 4 days the server stops and the router also, when I disable Internal interface of the MK
the router work again, and when I enable it the router hung

Please help very argent

amsteen

Hi every one I have MK OS 3.22 it was working very good, but from 4 dayes it stops. I check all the setting and nothing changed. I reformat the server and install it again with out any rules Only ip's and dns and routers, but the same problem. I notice that when I disable the internal interface on M...

amsteen

IS this work with MK V3.22

amsteen

Hi Every One I have MK V3.22 and I setup web-proxy step by step for cache. The web-proxy status now is running, But the cache is not working I down load one file 32Mb then I close the browser I open the browser again and download the same file from the same site, But it download from internet with i...

amsteen

I have mikrotik 3.2 OS installed on 80 GB hard disk

The mikrotik 3.2 OS only map 101 MB of the hard disk so the cash size is limited.

please check the attached picture

any one know how to set the mikrotik 3.2 OS to have the whole hard disk size

Thanks

Eng. Amgad

amsteen

I am using web proxy in Mikrotik 3.2 OS to block some sites, but
my clients uses "AnchorFree Hotspot Shield" to access these sites.

Is there is some way to block using "AnchorFree Hotspot Shield" software

Eng. Amgad

amsteen

A great thanks to Mr. cyph3r

Yes it work

thanks again

Eng. Amgad

amsteen

There no one know how to deliver internet by mac address
or it is not possible

Please try to help me

amsteen

Dear Sir's

If we block a pc from internet with web-proxy (with its IP)
is it possible to allow iternet for it by mac address (from firewall filter)

thanks
Eng. Amgad

amsteen

A great Thanks For Mr Fewi

your command is work but instead of "prerouting" chain I use "input" chain then it work

it should be like this

/ip firewall filter add chain=input action=drop src-mac-address= aa:bb:cc:dd:ee:ff

Thanks Again

Eng. Amgad

amsteen

Thanks Mr Fewi for your concern

I try your command and it is not working, the internet still working on that pc

one notice the ip of that pc is allowed from web proxy is this affect the command

any help

Thanks again

amsteen

First thanks for Mr Ibersystems for his concern I have a Mikrotik OS 3.2 It delivers internet to 60 computers, and I have another 10 computers should not have internet, so I want to block them with thier MAC address Or deliver internet to the 60 computer by thier MAC address I am using web proxy rul...

amsteen

Hi
any one know how to block some machines by its mac address,
without using hotspot.

my be from ip--arp

Please advice how to do

Amgad

amsteen

Yes tunnel VPN via HTTP can not be stop or I will you block all HTTP

But you know I was working on isa2006 before and it blocks all kind of
VPN by default, so I have to add rules to open what I want.

Thanks for your respond

Eng. Amgad

amsteen

I try the code and it work but as you say for some kind
Of vpn only.

I wonder if there is some way to stop all the vpn connections with any type.

thanks.

Eng. Amgad

amsteen

Then from where I can block TCP 1723 and GRE protocols, I do not
care about stop too much stuff.

I am using the web-proxy on my MK server.

Amgad

amsteen

I mean I have many users in my network connection to vpn throught MK3.23 server.

How to stop them
where is the pptp-client interface

Thanks
Amgad

amsteen

Did any one know how to stop the vpn connection on MK 3.23

Amgad

amsteen

Dear Sir
I mean by "hotspot shield" a comany site with this name.

how to stop it from microtik hotspot I never use it before.

amgad

amsteen

Sir

I wonder is there is some way to stop vpn tunnel.

I have to stop vpn tunnel by anyway to hotspot servers.

Amgad

amsteen

I am not using "Hotspot" in RouterOS, but I use only webproxy rules.

Please give me an example rule based on IP to overcome them.

thanks
amgad

amsteen

Dear Sir's

My users uses anchorfree software, so they can overcomes any rules
on mikrotik.

Did any ine know how to stop this software.

"hotspot shield - http://anchorfree.com"
I thing it uses port "172.0.0.1:895"
Please help

Amagd

amsteen

Dear sir's

I have MK 3.23 on an HP pc with 1 GB memory and 160 GB Hard drive.

I need to calculate the Max. suitable cache size for memory and hard disk.

Please give the size in KiB as on web-proxy setting page.

thanks
Eng. amgad

amsteen

Thank you man

I reinstall with MK 3.23 and I get the full hard drive size.
I restore my Backup and system is working good now.

Thanks again

amsteen

Sir

My Old system was MK 3.22, is there is any problem to restore
my old backup on the new MK 3.23 version.

Thanks
Eng. Amgad

amsteen

Mr. Normis

Is there is any setting during reinstalling RouterOS to adjest the
correct hard disk size, or it automatic detect it.

I will reinstall with MK3.2 CD.

Thanks
Eng. Amgad

amsteen

Sear Sir's My MK3.2 server hard disk is 160GB. I use winbox to admin my server. When I check resources tab Under system, all resources are Ok except hard disk it give my a total size of 101 MB, and free space is 55 MB. My system slow as the cash is limited. My system is installed on HP pc with sata ...

amsteen

Dear Sir's

I have a small question.

Is there a relation between license level (3,4,5,6) and the
max. no. of clients.

I am not using hot spot, I only have a firewall rule for 400 users,
than I use web-proxy to control them.

Thanks
Eng. Amgad Steen

amsteen

Mr Normis

I do not know how to thank you.

You solve a great problem for me.

Thanks again

En. Amgad Steen

amsteen

I try using Internet explorer, and I found the file anf click on it
I choose to save to my c drive but it give me the login request was denied

Eng. Amgad

amsteen

I have FTP server, waht is the code for export to ftp server
Eng. Amgad

amsteen

Mr. Normis

thanks for your replay, but this file will be saved on the system drive.
I need to take this file to a save location on another pc.

Thanks

Eng. Amgad

amsteen

Dear Sir's Did Any one know how to export MK3 setting to a file, so we can import it again after format. Or How to copy Backup file to another location ( like windows drive ). Also I get am error message when I try backup the MK3 I get " couldn't make backup - action failed (6) " Can any b...

amsteen

Did any one know how to stop file download in https.

Another Words, how to stop file download from inside email
sites like yahoo or gmail.

Thanks in advance.

Eng.
Amgad Steen

amsteen

yes It is enabled and running. as when I block sites or download with web-proxy it work. But this happen it I cancel the range. I do it in another way I leave the firewall rules without range, and I add the required range in web-proxy rules and It work for me. Thanks for your response. Eng. Amgad st...

amsteen

Dear Sir's I was unsing MK2.9 firewall with no problems, as follows 1. main rule with address range 172.30.4.20-172.30.4.80 2. rule for redirect port 80 on wan interfaceto port 8080 3. rule for redirect port 80 to port 8080 with out choose any interface this is work very good in the given range. But...

amsteen

Mr. Normis

It is ok, But when some one put proxy server in yahoo messenger
it work again.

thanks

Eng. Amgad

amsteen

yes it is working, and yahoo messenger stops

Thanks again Mr. Normis

Eng. Amgad

amsteen

Dear Sir's

I can block msn messenger from fire wall, but I try that for yahoo messenger
With ports 5050,5000-5010,5001 but I fail.
I am using MK ver 3.
Please help me to block yahoo messenger from firewall.

Thanks Eng. Amgad

amsteen

Thanks Mr. normis

Your link solves my problem.

Thanks agian

Eng. amgad steen

amsteen

Dear Sir's

I have MK ver3, I use web-proxy

I can block file download very good, but I can not
block web site.

And there is no example is manual related to this issue.

How to block sites with MK 3 Web proxy?

Thanks

Eng. Amgad

amsteen

Can we block it by name I mean www.youtube.com

amsteen

Ok

Thanks Mr. Chupaka

I will Upgrade my MK ver to 3

Thanks very much

Eng. Amgad steen

amsteen

Dir Sir's I get this code for bloking youtube from this forum : 1. add these ip's to a address list.. (this is the ip for youtube site) / ip firewall address-list add list=youtube address=208.65.153.251 comment="" disabled=no add list=youtube address=208.65.153.253 comment="" dis...

amsteen

Yes You are right

I have MK v3 On VMware Machine I try address range on its web proxy
and it accept it.

But is there some way with ver 2.9

Thanks very much
Eng Amgad

amsteen

Thanks Mr. Chupaka for your replay

I try with Web-proxy to but '172.30.4.30-172.30.4.80' In Src. address
But when I apply I get "Error in src. address - network address expected!"
It only accept the format 0.0.0.0/0 this includes all the range.

thanks
Eng. Amgad

amsteen

Dir Sir's I have one question: Is there is some way to block web sites or block some files like *.mp3 from downloading , by using firewall. If there is please give me code for this I try this ip firewall filter add action=reject chain=forward comment="" content=.mp3 disabled=no reject-with...

amsteen

Hi All I wonder What the Access List means, from its name it looks like Groups of address in lists. But if we check it in MK manual (web proxy for example) we find it Talks about one source address for rule and do not accept address range. While in the firewall rules it accepts an address range as s...

amsteen

Dir Mr Mrz your codes is very good it works with me very good even on my mikrotik ver 2.9. now the schdule is working fine. Still I need only one thing : How to make web-proxy rule for address range (172.30.4.30-172.30.4.54) I try the links that Mr. normis give to me but I think they are about anoth...

amsteen

Mr Normis I have finished install mikrotik ver 3.2, I make basic setting. the internet now is working on one client PC. I notice that There is no proxy menu under ip, but there are WEB PROXY. in old version there was a proxy and web proxy menus under ip. Now I want start with a script for block mp3 ...

amsteen

yes sir you are right I use ver 2.9 and I will Upgrade.
But I have one question
If I upgrade could I keep My setting keep my setting or not.

I have mikrotik ver 3.2 and I install it to VMware for test after
test I will install to real machine.

thanks

Eng. Amgad

amsteen

First of all thanks for your quick respond

I use this web-proxy code to block download:
[admin@MikroTik] ip web-proxy access> add url="*.mp3" action=deny

And this work for me very well

Can we start from this code and made a schedule for it.

Thanks

Amgad

amsteen

Dear Sir's As I am new on microtik, Can you please give me codes for this "create a transparent proxy, ie catch all out going traffic and nat to 8080 and schedule a script to enable" "make the NAT rule forward only those addresses ( say 172.30.4.30-172.30.4.80 ) to the transparent pro...

amsteen

Dear Sir's I am new here and I need some Help. I have two questions: First: I want to make a script for block mp3 files download During two hours in the morrining from 8:00 to 10:00. I use this web-proxy code to block download: [admin@MikroTik] ip web-proxy access> add url="*.mp3" action=d...

amsteen

:? Dear Sir's I am new here and I need some Help. I want to make a script for block mp3 files download During two hours in the morrining from 8:00 to 10:00. I use this code from web-proxy to block download: [admin@MikroTik] ip web-proxy access> add url="*.mp3" action=deny any time except t...

Search found 181 matches