Community discussions

MUM Europe 2020

Search found 22 matches

by maozilee
Thu May 19, 2011 7:56 am
Forum: General
Topic: webfig
Replies: 17
Views: 31841

Re: webfig

webfig is not to connect to any other router, it's for connecting to the router where webfig is present. it's not a separate application, it's built into RouterOS. hello normis When can customize WEBFIG? include the following functions: 1、customized interface(different languages ); 2、customized use...
by maozilee
Sat May 14, 2011 5:01 am
Forum: General
Topic: how to use radius server return some custom error message.
Replies: 3
Views: 2121

Re: how to use radius server return some custom error messag

and how to use in radius ??? :shock:

I did see the issue posted previously but one of the MT guys that the issue was acknowledged (radius attributes not being displayed on the login page) and would be fixed in ROS v4.4.

Mikrotik sergejs replied value like this : $(radius3-18)
by maozilee
Mon May 09, 2011 8:12 am
Forum: General
Topic: how to use radius server return some custom error message.
Replies: 3
Views: 2121

how to use radius server return some custom error message.

We are using MT HotSpot. I need to use radius server return some custom error message. But I didn't find the right radius-reply Attribute of MT. I only found MIKROTIK Radius Attributes here: # MikroTik Attributes VENDOR Mikrotik 14988 ATTRIBUTE Mikrotik-Recv-Limit 1 integer Mikrotik ATTRIBUTE Mikrot...
by maozilee
Mon Mar 07, 2011 7:46 am
Forum: RouterBOARD hardware
Topic: SXT LED didn't work fine!!
Replies: 2
Views: 1206

Re: SXT LED didn't work fine!!

i just test it ....

it is the RouterOS software bug !!!

when the SXT works in bridge mode....the signal LEDs only one LED lighting!

the next works in station pseudobridge mode , it works fine!!!
by maozilee
Mon Mar 07, 2011 7:39 am
Forum: RouterBOARD hardware
Topic: SXT LED didn't work fine!!
Replies: 2
Views: 1206

SXT LED didn't work fine!!

I got a problem of SXT.

I have two SXT briged,one of SXT signal LED always very low,but the real signal is very high !

But the second one did not have this problem!!!

my routeros version is 4.17,,,i have tried to upgrade to Version 5.0,but it still the same!!
by maozilee
Fri Jan 14, 2011 10:09 am
Forum: General
Topic: can RouterOS running in DD-WRT based hardware??
Replies: 6
Views: 2326

Re: can RouterOS running in DD-WRT based hardware??

I hope Mikrotik becomes more OPEN!!!! :) From my experience, anything that went "more open" became buggier and less supported too. That's why I always liked using dedicated "closed" products like MT, Cisco and the rest. :) YES,OPEN Means more market place!.maybe Mikrotik profit come down for a litt...
by maozilee
Thu Jan 13, 2011 11:18 am
Forum: General
Topic: can RouterOS running in DD-WRT based hardware??
Replies: 6
Views: 2326

Re: can RouterOS running in DD-WRT based hardware??

Customers needs more flexibility products to choose.

I hope Mikrotik becomes more OPEN!!!! :)
by maozilee
Wed Jan 12, 2011 11:55 am
Forum: General
Topic: can RouterOS running in DD-WRT based hardware??
Replies: 6
Views: 2326

can RouterOS running in DD-WRT based hardware??

We know that DD-WRT is a linux based OS,the hardware archetecture is also similar...


So,,,,,i think ,Atheros Based chips also can running RouterOS.......Powered By RouterOS???


Somebody,,,,do you think so???
by maozilee
Tue May 11, 2010 7:30 pm
Forum: Wireless Networking
Topic: hotspot server is attacked by Non-authenticated users
Replies: 12
Views: 2374

Re: hotspot server is attacked by Non-authenticated users

maozilee, you can try to implement the idea of additional AP. One wireless AP is installed on router, you can create additional virtual AP. Payed customers use one AP (with security settings WPA/WPA2), free AP with HotSpot is another interface for all other clients. What kind of router do you have ...
by maozilee
Tue May 11, 2010 10:15 am
Forum: Wireless Networking
Topic: I find the real problem of HotSpot Login Page by DDOS ATTACK
Replies: 3
Views: 850

I find the real problem of HotSpot Login Page by DDOS ATTACK

Anonymous users always Refresh the login page,or make a web DDOS(i could see from firewall-connection when attack happened),it cause my routerboard cpu very high > 90%! you could make a simple hotspot enviroment (just press F5 to login page!) then watch your cpu useage! please see the picture I uplo...
by maozilee
Tue May 11, 2010 10:09 am
Forum: Wireless Networking
Topic: hotspot server is attacked by Non-authenticated users
Replies: 12
Views: 2374

Re: hotspot server is attacked by Non-authenticated users

Hello, I think you can combine fewi post with this: http://wiki.mikrotik.com/wiki/Bruteforce_login_prevention_%28FTP_%26_SSH%29 Please give me the right answer! See , My TOPIC is "hotspot server is attacked by Non-authenticated users" you just setup a simple hotspot ,then not login ,just press F5 t...
by maozilee
Tue May 11, 2010 10:01 am
Forum: Scripting
Topic: Using Scripting Anti DDOS!
Replies: 9
Views: 5525

Re: Using Scripting Anti DDOS!

@maozilee ddos attack from intranet :shock: Why won't you limit connections per user? Regards, Grzegorz. you could try to do limit connections per user in RouterOS hotspot and non-authenticated (just a redirect to login page web DOS ATTACK!) environment ! I have tried many times, it doesn't work we...
by maozilee
Mon May 10, 2010 6:58 pm
Forum: Wireless Networking
Topic: hotspot server is attacked by Non-authenticated users
Replies: 12
Views: 2374

Re: hotspot server is attacked by Non-authenticated users

From your original post: i could see from firewall-connection when attack happened If you can see excessive connections in the firewall connection table, limit the number of connections. If there's not an excessive number of connections during the perceived attack that won't work. The real problem ...
by maozilee
Mon May 10, 2010 6:24 pm
Forum: Wireless Networking
Topic: hotspot server is attacked by Non-authenticated users
Replies: 12
Views: 2374

Re: hotspot server is attacked by Non-authenticated users

Maybe try limiting the number of connections for unauthenticated clients in the pre-hs-input chain. To only give each unauthenticated client 20 connections at a time: /ip firewall filter add chain=pre-hs-input hotspot=!auth connection-limit=20,32 action=drop i'm sorry ,your configuration does not w...
by maozilee
Mon May 10, 2010 5:49 pm
Forum: Wireless Networking
Topic: hotspot server is attacked by Non-authenticated users
Replies: 12
Views: 2374

Re: hotspot server is attacked by Non-authenticated users

Perhaps you can switch to PPPoE (if there is no problem to configure PPPoE client on every current client), then non-authorized user will not be able to get access to the network at all. thanks sergejs , We know through MUM China. There is too much problem to confirgure PPPOE client on every curren...
by maozilee
Mon May 10, 2010 5:43 pm
Forum: Scripting
Topic: Using Scripting Anti DDOS!
Replies: 9
Views: 5525

Re: Using Scripting Anti DDOS!

I want explain why i want to use scripting to solve ddos attack from intranet ! When ddos happening, i could check connection table manually,then put the MAC address to black list! drop it! So ,I think that if i could solve it manually ,why not make RouterBoard solve it automatically? let me show my...
by maozilee
Sun May 09, 2010 5:48 am
Forum: Scripting
Topic: Using Scripting Anti DDOS!
Replies: 9
Views: 5525

Using Scripting Anti DDOS!

hello. I have a good idea to reduce DDOS attack to RouterOS. when DDOS attack happening , IP->Firewall->Connections from one src-address increasing very fast (more than 100 connections per a second) ,it makes cpu useage up to 99%! My solution is write a script which check cpu useage ,when cpu up to ...
by maozilee
Sat May 08, 2010 3:06 pm
Forum: Wireless Networking
Topic: hotspot server is attacked by Non-authenticated users
Replies: 12
Views: 2374

hotspot server is attacked by Non-authenticated users

i setup a hotspot wireless server. All of the customers using username and password login to the net. my problem is: Anonymous users always Refresh the login page,or make a web DDOS(i could see from firewall-connection when attack happened),it cause my routerboard cpu very high > 90%! My client is n...
by maozilee
Sat May 08, 2010 2:46 pm
Forum: General
Topic: can pcc run as a load balancing server?
Replies: 5
Views: 945

Re: can pcc run as a load balancing server?

or use 'per-connection-classifier' instead of 'random': it will make results more predictable Could you check my example? the result l want is: 192.168.200.1:80->192.168.1.2:80 192.168.200.1:80->192.168.1.3:80 what i did: add action=dst-nat chain=dstnat comment="" disabled=no dst-address=192.168.20...
by maozilee
Sat May 08, 2010 2:44 pm
Forum: General
Topic: can pcc run as a load balancing server?
Replies: 5
Views: 945

Re: can pcc run as a load balancing server?

you can probably just setup 2 dst-nat rules, with the first one using a 50/50. just a thought. add action=dst-nat chain=dstnat comment="" disabled=no dst-address=1.2.3.4 \ dst-port=80 protocol=tcp random=50 to-addresses=192.168.1.2 add action=dst-nat chain=dstnat comment="" disabled=no dst-address=...
by maozilee
Fri Apr 30, 2010 5:24 am
Forum: General
Topic: can pcc run as a load balancing server?
Replies: 5
Views: 945

can pcc run as a load balancing server?

I have one internet connection,two intranet servers.

I know that PCC can run for two internet connections,,,,,

My question is how to make pcc work as a load balancing server????

the result like this:
XXX.XXX.XXX:80->192.168.1.2:80
XXX.XXX.XXX:80->192.168.1.3:80

thx!
by maozilee
Sat Apr 18, 2009 7:51 am
Forum: Scripting
Topic: [Help]How to get an ipaddress connections by scripting?
Replies: 0
Views: 423

[Help]How to get an ipaddress connections by scripting?

I'm using RB433AH ,Routeros Version 3.22 In order get an ipaddress connection count [include all of the port connections from the ip], it could work in this scripting /ip firewall connection> print where src-address="10.5.50.1:64874" i tried in /ip firewall connection print where src="1.2.3.0/24:0-6...