Community discussions

MikroTik App

Search found 85 matches

by eghtedari2000
Sun Mar 25, 2012 10:15 am
Forum: General
Topic: quee tree, burst , ....
Replies: 0
Views: 290

quee tree, burst , ....

hi all i have a quee tree qos, and i limit some ports on my quee tree for a subnet. can i have a limitation per ip with burst and burst threshold in this quee tree. i explain more, for example i limited the bandwidth of some ports in 20 mb in quee tree for 256 ip addresses( one subnet ). can i have ...
by eghtedari2000
Sat Mar 24, 2012 11:19 pm
Forum: General
Topic: New firewall matcher - CONNECTION RATE
Replies: 64
Views: 14500

Re: New firewall matcher - CONNECTION RATE

please think mikrotik can calculated every connection throuput, so easily can calculate totals of that. am i right? unfortunately, you're not. router's connection tracking facility gives firewall the information about the connection currently being processed, but it will be very CPU-expensive to ca...
by eghtedari2000
Fri Mar 23, 2012 6:48 am
Forum: General
Topic: New firewall matcher - CONNECTION RATE
Replies: 64
Views: 14500

Re: New firewall matcher - CONNECTION RATE

please think mikrotik can calculated every connection throuput, so easily can calculate totals of that. am i right? unfortunately, you're not. router's connection tracking facility gives firewall the information about the connection currently being processed, but it will be very CPU-expensive to ca...
by eghtedari2000
Wed Mar 21, 2012 8:17 pm
Forum: General
Topic: New firewall matcher - CONNECTION RATE
Replies: 64
Views: 14500

Re: New firewall matcher - CONNECTION RATE

please think mikrotik can calculated every connection throuput, so easily can calculate totals of that. am i right? unfortunately, you're not. router's connection tracking facility gives firewall the information about the connection currently being processed, but it will be very CPU-expensive to ca...
by eghtedari2000
Tue Mar 20, 2012 8:13 am
Forum: General
Topic: New firewall matcher - CONNECTION RATE
Replies: 64
Views: 14500

Re: New firewall matcher - CONNECTION RATE

it put much load on billing. "welcome to the real world, Neo" how can billing say to router to change the QOS, only way is disconnect user and give him another ip that is on that QOS, do you have any other idea? I know absolutely nothing about your billing system and its possibilities, so I can't a...
by eghtedari2000
Tue Mar 20, 2012 7:35 am
Forum: General
Topic: New firewall matcher - CONNECTION RATE
Replies: 64
Views: 14500

Re: New firewall matcher - CONNECTION RATE

i didnt torrent, i download an .iso file by flashget from http://www.ubuntu.com
and if you will download your ubuntu via torrent, even grouping connection-bytes by src and dst addresses won't help you - that's what I'm saying
you didnt reply me another post, i sent you again
by eghtedari2000
Tue Mar 20, 2012 7:34 am
Forum: General
Topic: New firewall matcher - CONNECTION RATE
Replies: 64
Views: 14500

Re: New firewall matcher - CONNECTION RATE

your billing system should count total traffic, this feature is just to detect 'long' connections and apply QoS rules to them it put much load on billing. but if i said ok, i count that by billing, how can billing say to router to change the QOS, only way is disconnect user and give him another ip ...
by eghtedari2000
Mon Mar 19, 2012 11:05 pm
Forum: General
Topic: New firewall matcher - CONNECTION RATE
Replies: 64
Views: 14500

Re: New firewall matcher - CONNECTION RATE

i think if mikrotik can take a total from all connections from a source ip to a destination IP and use in connection byte, it is a good way for limit download torrent protocol downloads from hundreds IPs - it won't limit anything :) i didnt torrent, i download an .iso file by flashget from www.ubun...
by eghtedari2000
Mon Mar 19, 2012 11:04 pm
Forum: General
Topic: New firewall matcher - CONNECTION RATE
Replies: 64
Views: 14500

Re: New firewall matcher - CONNECTION RATE

your billing system should count total traffic, this feature is just to detect 'long' connections and apply QoS rules to them it put much load on billing. but if i said ok, i count that by billing, how can billing say to router to change the QOS, only way is disconnect user and give him another ip ...
by eghtedari2000
Mon Mar 19, 2012 10:27 pm
Forum: General
Topic: New firewall matcher - CONNECTION RATE
Replies: 64
Views: 14500

Re: New firewall matcher - CONNECTION RATE

it's about single connection, so every of 7 connections will have 50 Mbytes (350 Mbytes in total) i think if mikrotik can take a total from all connections from a source ip to a destination IP and use in connection byte, it is a good way for limit download, but when it calculate from connection one...
by eghtedari2000
Mon Mar 19, 2012 10:20 pm
Forum: General
Topic: New firewall matcher - CONNECTION RATE
Replies: 64
Views: 14500

Re: New firewall matcher - CONNECTION RATE

it's about single connection, so every of 7 connections will have 50 Mbytes (350 Mbytes in total) i tested for example flashget. when you use this software every 1 minute start a new connection to server with new port. so mikrotik start counter for new connection from zero and my download speed did...
by eghtedari2000
Mon Mar 19, 2012 9:08 pm
Forum: General
Topic: New firewall matcher - CONNECTION RATE
Replies: 64
Views: 14500

Re: New firewall matcher - CONNECTION RATE

it's about single connection, so every of 7 connections will have 50 Mbytes (350 Mbytes in total) so, with some software user can take up number of its connection, when wants to download huge files take it to 30 connections. so this policy cant monitor download!!!! does it posiible that when mikrot...
by eghtedari2000
Mon Mar 19, 2012 3:35 pm
Forum: General
Topic: New firewall matcher - CONNECTION RATE
Replies: 64
Views: 14500

Re: New firewall matcher - CONNECTION RATE

The next RouterOS version will include a new exciting feature - matching connections by their speed. This will help you assign different rules for http downloads, in contrast to just surfing, find P2P downloads even if they mask themselves as HTTP, give priority to VOIP etc. See more here: http://w...
by eghtedari2000
Wed Feb 22, 2012 7:33 pm
Forum: General
Topic: connection byte and rate
Replies: 0
Views: 547

connection byte and rate

hi

i wanted to user these rules in this age to manage download.

but when i setup no counter work on mangle.

http://wiki.mikrotik.com/wiki/Manual:Connection_Rate

can anybody help me?

thanks
by eghtedari2000
Wed Feb 22, 2012 11:27 am
Forum: General
Topic: PSD
Replies: 0
Views: 515

PSD

hi

i found in a web site that packet size upper than 1023 bytes are more download packet.

i wanted to filter in router but i think it isnt good idea

i went for PSD, how can i configure that?

does PSD help me about that?

or is there any way to help me about that?
by eghtedari2000
Wed Feb 15, 2012 1:22 pm
Forum: General
Topic: ultra surf blocking
Replies: 0
Views: 1061

ultra surf blocking

hi

i want to block ultra surf in my network.

how can i do that? does it possible in layer7 ?

i do some works that said in mikrotik sites to do but doesnt work

please help me.

thanks
by eghtedari2000
Sun Dec 11, 2011 7:45 pm
Forum: General
Topic: upnp and socks
Replies: 0
Views: 304

upnp and socks

hi

can i cross voip packets from socks or upnp when my isp blocked?

if it is possible how can i do that?

thanks
by eghtedari2000
Wed Dec 07, 2011 12:30 pm
Forum: General
Topic: user manager questions
Replies: 3
Views: 676

user manager questions

hi in usermanager i wanted to know more in website i found subscriber, customer and user. can i know difference of subscriber and customer. also i want to start accounting which my system has one admin and after that i can show all of thing of my reseller, i want to charge their deposit and have mon...
by eghtedari2000
Mon Oct 03, 2011 11:02 am
Forum: General
Topic: socks authentication
Replies: 2
Views: 833

Re: socks authentication

That is not possible.

this is possible in windows server 2008, but in mikrotik not!!!!
by eghtedari2000
Sat Oct 01, 2011 11:58 pm
Forum: General
Topic: socks authentication
Replies: 2
Views: 833

socks authentication

hi

i wanted to know how can i setup socks server in mikrotik and let user connect to socks server by radius.

if it is possible what is the software for client?

thanks
by eghtedari2000
Mon Jun 06, 2011 3:45 pm
Forum: General
Topic: DDOS attack
Replies: 3
Views: 981

DDOS attack

hi all

how can i block DDOS attack in mikrotik routers?

thanks
by eghtedari2000
Fri May 13, 2011 7:46 pm
Forum: General
Topic: problem between BRAS and accounting
Replies: 2
Views: 699

Re: problem between BRAS and accounting

Well NTTAC is to old to expect do anything for you... You should use a radius that can support update packets to/from BRAS. I think you better hook up with IBSng.
free IBSng doesnt support reseller service, i heasr about RSC, do you know that and commands in mikrotik?
by eghtedari2000
Fri May 13, 2011 7:44 pm
Forum: General
Topic: change protocol and pot
Replies: 8
Views: 752

Re: change protocol and pot

yeah, use L2TP - it's UDP-based =)
i cant use L2TP, because of in special time all of such these protocols blocked, so i need to change protocol directly
by eghtedari2000
Fri May 13, 2011 10:58 am
Forum: General
Topic: change protocol and pot
Replies: 8
Views: 752

Re: change protocol and pot

huh, where do you need that? O_o
do you have any way for me?

i need to change tcp to udp for cross some filters.

thanks
by eghtedari2000
Fri May 13, 2011 10:54 am
Forum: General
Topic: problem between BRAS and accounting
Replies: 2
Views: 699

problem between BRAS and accounting

hi

i have 3 mikrotik in 3 places and my accounting is in one place,

when a problem occured for band width of 2 other places my users be onlined on my accounting ( NTTAC Plus )

is there any way to check real user on mikrotik and NTTAC and if there is please help me about commands

thanks
by eghtedari2000
Tue Mar 01, 2011 10:55 pm
Forum: General
Topic: change protocol and pot
Replies: 8
Views: 752

change protocol and pot

hi

i want to change a protocol to another, UDP to TCP and also change the PORT, in one time

i found to change port in ip , firewall, NAT but for protocol i didnt found.

please help me
by eghtedari2000
Wed Feb 02, 2011 3:06 pm
Forum: General
Topic: OpenVPN - UDP?
Replies: 59
Views: 28317

Re: OpenVPN - UDP?

I solved it with metarouter, openwrt works perfectly on rb450g, then you can install openvpn and luci to mnage it. Isn't the best option but for now there is no other with mikrotik... I saw a fortinet seller after a pilot test vs openvpn going out with his expensive hardware, and I think the real d...
by eghtedari2000
Wed Feb 02, 2011 2:36 pm
Forum: General
Topic: OpenVPN - UDP?
Replies: 59
Views: 28317

Re: OpenVPN - UDP?

here there is nothing for mikrotik exactly, openwrt is not RouterOS, it is not maintained by Mikrotik. It is completely different open source operating system that you can run virtually on RouterOs. And how to configure it you can find in their manual. so can you give me more guide to find how can ...
by eghtedari2000
Wed Feb 02, 2011 2:20 pm
Forum: General
Topic: OpenVPN - UDP?
Replies: 59
Views: 28317

Re: OpenVPN - UDP?

refer to openwrt documentation.
http://wiki.openwrt.org/doc/start

here there is nothing for mikrotik, or may be i didnt find, i want to setup this router that my users can connect to this router through udp by openvpn.

please help me i really need that

thanks
by eghtedari2000
Wed Feb 02, 2011 1:57 pm
Forum: General
Topic: OpenVPN - UDP?
Replies: 59
Views: 28317

Re: OpenVPN - UDP?

when i type interface bridge in metarouter command doesnt work!!
OpenWRT is not RouterOS, so there is no interface bridge command.
so how can i configure my openwrt, i want to have UDP openvpn connection.

can you help me about that?
by eghtedari2000
Wed Feb 02, 2011 1:02 pm
Forum: General
Topic: OpenVPN - UDP?
Replies: 59
Views: 28317

Re: OpenVPN - UDP?

If you want to keep RouterOS then openwrt should be set on metarouter. If you don't need RouterOS at all you can try to install OpenWRT on routerboard. Which part exactly you didn't understand? Easiest way is to download precompiled image and import it and Thats it - virtual OpenWRT is up and runni...
by eghtedari2000
Wed Feb 02, 2011 12:48 pm
Forum: General
Topic: OpenVPN - UDP?
Replies: 59
Views: 28317

Re: OpenVPN - UDP?

If you want to keep RouterOS then openwrt should be set on metarouter. If you don't need RouterOS at all you can try to install OpenWRT on routerboard. Which part exactly you didn't understand? Easiest way is to download precompiled image and import it and Thats it - virtual OpenWRT is up and runni...
by eghtedari2000
Mon Jan 31, 2011 8:56 pm
Forum: General
Topic: when i have 2 or more bandwidth from 2 or more 3 providers
Replies: 6
Views: 818

Re: when i have 2 or more bandwidth from 2 or more 3 provide

Search the forum for PCC or look at the wiki for PCC. It meats all of your conditions. There are a couple of more reliable ways to discover if a route is down or not than what is provided by default. You can write a script that will perform the functions for you, or there a method that does not use...
by eghtedari2000
Fri Jan 28, 2011 1:54 pm
Forum: General
Topic: OpenVPN - UDP?
Replies: 59
Views: 28317

Re: OpenVPN - UDP?

If you want to keep RouterOS then openwrt should be set on metarouter. If you don't need RouterOS at all you can try to install OpenWRT on routerboard. Which part exactly you didn't understand? Easiest way is to download precompiled image and import it and Thats it - virtual OpenWRT is up and runni...
by eghtedari2000
Fri Jan 28, 2011 9:35 am
Forum: General
Topic: OpenVPN - UDP?
Replies: 59
Views: 28317

Re: OpenVPN - UDP?

UDP! UDP! UDP! if routeros can not do it, can someone comment an alternative to run on routerboard? and if routerboard is not good enough, can someone comment good hardware to run openvpn? we are using cisco 1841 routers for all our offices now, and we want to replace them with openvpn hardware. th...
by eghtedari2000
Thu Jan 27, 2011 7:33 am
Forum: General
Topic: SSL OpenVPN
Replies: 4
Views: 649

Re: SSL OpenVPN

From that link:
There is one limitation to using OpenVPN on the RouterOS platform: currently only tcp is supported. udp will not work.
i found at forum that i can have openvpn connection on mikrotik trough UDP by openwrt.

can you guide me more about that?
by eghtedari2000
Wed Jan 26, 2011 6:52 pm
Forum: General
Topic: SSL OpenVPN
Replies: 4
Views: 649

Re: SSL OpenVPN

MikroTik RouterOS OpenVNP capabilities,
http://wiki.mikrotik.com/wiki/OpenVPN
hi

if i want to have openvpn connection on UDP port, does it possible?
by eghtedari2000
Wed Jan 26, 2011 11:45 am
Forum: General
Topic: SSL OpenVPN
Replies: 4
Views: 649

SSL OpenVPN

hi

i want to setup secure OpenVpn on mikrotik, does it possible or not?

now i do that on windows XP in client and windows server on server and have key and can bypass filter of government.

so i want to setup on mikrotik

thanks
by eghtedari2000
Fri Jan 21, 2011 8:03 am
Forum: General
Topic: when i have 2 or more bandwidth from 2 or more 3 providers
Replies: 6
Views: 818

when i have 2 or more bandwidth from 2 or more 3 providers

hi i have 2 bandwidth from 2 provider. i want to use from both ( load balance ) by packet or other ways that you offer. also i want that if one of the bandwidth found problem for example disconnect or have packet loss or latency the router automatically found that and send packets trough another gat...
by eghtedari2000
Fri Jan 07, 2011 2:35 pm
Forum: General
Topic: pptp l2tp openvpn
Replies: 2
Views: 998

Re: pptp l2tp openvpn

For OpenVPN you specify port, which is used for tunnel 443 is by default, /interface ovpn-server server print enabled: no port: 443 thanks alot can you please guide me more for pptp to write mangle configure on that and also for protocol for l2tp? thanks
by eghtedari2000
Fri Jan 07, 2011 8:05 am
Forum: General
Topic: separate netwoks
Replies: 7
Views: 967

Re: separate netwoks

/ip firewall address-list add list=whatever address=172.17.5.0/24 add list=whatever address=192.17.6.0/28 /ip firewall mangle add chain=prerouting action=accept src-address-list=whatever Paste that into the terminal window of the GUI and then inspect the things the commands created in the GUI to fi...
by eghtedari2000
Fri Jan 07, 2011 8:01 am
Forum: General
Topic: pptp l2tp openvpn
Replies: 2
Views: 998

pptp l2tp openvpn

hi i wanted to have manage bandwidth on all type of vpn and i dont need to see content of vpn for pptp, i found to have manage on 1723 tcp port. for l2tp, on mangle , i found protocol, that have some kind of ipsec and GRE. another problem for this way is in every mangle you can put only 1 protocol, ...
by eghtedari2000
Thu Jan 06, 2011 3:39 pm
Forum: General
Topic: separate netwoks
Replies: 7
Views: 967

Re: separate netwoks

You can use only range there, ip firewall mangle add src-address= SrcAddress ::= [!]Range Range ::= A.B.C.D[-A.B.C.D |0..32 |/A.B.C.D ] (IP address range) To use one mangle rule for both networks, use address-list. can you type the sample for me with my ip addresses that i said in top, and the way ...
by eghtedari2000
Thu Jan 06, 2011 3:33 pm
Forum: General
Topic: separate netwoks
Replies: 7
Views: 967

Re: separate netwoks

1) Use address-list, if you need one mangle rule for both subnets. Add both networks to /ip firewall address-list, set one mangle rule with src-address-list. 2) Create two mangle rules with the same mark-connection/mark-packet. i know but i wanted to know in source address i separate them with comm...
by eghtedari2000
Thu Jan 06, 2011 3:23 pm
Forum: General
Topic: separate netwoks
Replies: 7
Views: 967

separate netwoks

hi

i have 2 range of ip

172.17.5.0/24 and 192.17.6.0/28

i want to mangle these, can you please say me in source address with which character , i can separate them form together?

thanks
by eghtedari2000
Thu Jan 06, 2011 8:27 am
Forum: Scripting
Topic: learn how to Shape Download Traffic only & leave Browsing
Replies: 24
Views: 17357

Re: learn how to Shape Download Traffic only & leave Browsin

add comment="" name="Extension \" .exe \"" regexp="\\.(exe)"
add comment="" name="Extension \" .exe \"" regexp="\\.(zip)"

question can we make it in one line
to add tow extension toghether
try

add name="ExtensionZ" regexp="\\.(zip|exe)"
by eghtedari2000
Mon Jan 03, 2011 11:42 pm
Forum: General
Topic: layer 7 for download application
Replies: 9
Views: 3158

Re: layer 7 for download application

I don't understand the question. explain you more. for example in my router i have 100 mb of bandwidth, but i dont want that users use the all of that for download, i want they can use only 70 mb for download so if i use this script , web browsing will be limit in 70 mb or only download is in 70 mb...
by eghtedari2000
Mon Jan 03, 2011 11:20 pm
Forum: General
Topic: layer 7 for download application
Replies: 9
Views: 3158

Re: layer 7 for download application

The two are the same. Downloading an HTML page and downloading - for example - an MP3 file uses the same protocol.
so i have a question

if i use this script and limit the bandwidth, both download and web browsing limit or only download limit?

thanks alot for your reply
by eghtedari2000
Mon Jan 03, 2011 8:52 pm
Forum: General
Topic: layer 7 for download application
Replies: 9
Views: 3158

Re: layer 7 for download application

From your link: :if ([:len [find name=http]] > 0) do={ :put "already have http" } else={ add name=http regexp="http/(0\\.9|1\\.0|1\\.1) [1-5][0-9][0-9] [\09-\0D -~]*(connection:|content-type:|content-length:|date:)|post [\09-\0D -~]* http/[01]\\.[019]" } That expression detects HTTP. so also it is ...
by eghtedari2000
Mon Jan 03, 2011 7:14 pm
Forum: General
Topic: layer 7 for download application
Replies: 9
Views: 3158

Re: layer 7 for download application

What is a "download application"? Do you mean download managers for HTTP(S), FTP, etc.? Those just talk HTTP, FTP or whatever other protocol they support. "Application" refers to layer 7 of the OSI model, not the executable run on a computer. i want that in layer7 i can detect, http download packet...
by eghtedari2000
Mon Jan 03, 2011 2:31 pm
Forum: General
Topic: layer 7 for download application
Replies: 9
Views: 3158

layer 7 for download application

hi

can everybody help me to have script for " download application " to use in layer 7?

i have this link: http://www.mikrotik.com/download/l7-protos.rsc

but i dont know which is exactly for download!!

thanks
by eghtedari2000
Mon Dec 27, 2010 11:26 am
Forum: General
Topic: packet size and port
Replies: 8
Views: 4031

Re: packet size and port

Mikrotik Support Object Size ??? not getting ur point.
in linux with object size we an say to OS if the object of that come to router for example bigger than 5 KB have lower priority
by eghtedari2000
Mon Dec 27, 2010 10:46 am
Forum: General
Topic: packet size and port
Replies: 8
Views: 4031

Re: packet size and port

Downloading with different Sites depend upon the Payload they cary. And it seems that different sites using different payload. So restricting traffic on MTU based is not a gud idea. L7 Filter works with known pattern.
thanks alot

i wany to know mikrotik support "object size"?
by eghtedari2000
Mon Dec 27, 2010 9:00 am
Forum: General
Topic: packet size and port
Replies: 8
Views: 4031

Re: packet size and port

AFAIK !! The packet size means MTU size of packets. Here you can find the MTU size support on different mikrotik Hardware. http://wiki.mikrotik.com/wiki/Manual:Maximum_Transmission_Unit_on_RouterBoards. You can mark packet according to packet size even port based too via Mangle rule. Then use queue...
by eghtedari2000
Mon Dec 27, 2010 8:31 am
Forum: General
Topic: packet size and port
Replies: 8
Views: 4031

Re: packet size and port

AFAIK !! The packet size means MTU size of packets. Here you can find the MTU size support on different mikrotik Hardware. http://wiki.mikrotik.com/wiki/Manual:Maximum_Transmission_Unit_on_RouterBoards. You can mark packet according to packet size even port based too via Mangle rule. Then use queue...
by eghtedari2000
Mon Dec 27, 2010 7:58 am
Forum: General
Topic: packet size and port
Replies: 8
Views: 4031

packet size and port

hi i want to have manage on bandwidth on port 80 for web and download. so i thinks it is better that i work on packet size on port 80 for web and download, because of i think web packets are smaller thatn download packets. at first i wanted to know does it possible on mikrotik that i have manage on ...
by eghtedari2000
Thu Nov 25, 2010 5:58 pm
Forum: General
Topic: can mikrotik in L7 filter work on VPN services ( PPTP, L2TP)
Replies: 9
Views: 1878

Re: can mikrotik in L7 filter work on VPN services ( PPTP, L

hi thanks alot for your attention now i use quee tree for my QOS. i wanted to have axact information about that. can you say me how can i limit bandwidth on port and also i dont want to do this limit for all of my users i want to do that for some of my ip address classes. please say me about all of ...
by eghtedari2000
Thu Nov 25, 2010 4:33 pm
Forum: General
Topic: can mikrotik in L7 filter work on VPN services ( PPTP, L2TP)
Replies: 9
Views: 1878

Re: can mikrotik in L7 filter work on VPN services ( PPTP, L

hi

i dont want to look to content of encrypted data in packet, i need that router from kind of encryptuion or other way know that it is vpn packet to manage bandwidth for that.

thanks
by eghtedari2000
Thu Nov 25, 2010 7:08 am
Forum: General
Topic: can mikrotik in L7 filter work on VPN services ( PPTP, L2TP)
Replies: 9
Views: 1878

Re: can mikrotik in L7 filter work on VPN services ( PPTP, L

hi

so you said that i cant find packets for although it uses standard vpns that uses statndard protocol, such as ipsec and,...

how can i solve my problem, is there another way?

thanks
by eghtedari2000
Thu Nov 25, 2010 12:36 am
Forum: General
Topic: can mikrotik in L7 filter work on VPN services ( PPTP, L2TP)
Replies: 9
Views: 1878

Re: can mikrotik in L7 filter work on VPN services ( PPTP, L

hi

i mean that my router is pppoe server and i want to control my users bandwidth that take from vpn servers on internet, does it encrypted or not.

and if it is encrypted you said that it is impossible, so how can i control that

thanks
by eghtedari2000
Wed Nov 24, 2010 7:21 pm
Forum: General
Topic: can mikrotik in L7 filter work on VPN services ( PPTP, L2TP)
Replies: 1
Views: 787

can mikrotik in L7 filter work on VPN services ( PPTP, L2TP)

hi

i wanted to know can mikrotik work on L7 filter on vpn ( PPTP, L2TP)

if it can, please send me its file

thanks
by eghtedari2000
Wed Nov 24, 2010 7:15 pm
Forum: General
Topic: can mikrotik in L7 filter work on VPN services ( PPTP, L2TP)
Replies: 9
Views: 1878

can mikrotik in L7 filter work on VPN services ( PPTP, L2TP)

hi

can any body help me about that, i want to have L7 filter on vpn packets, L2TP and PPTP.

if any body can help, please give its file.

thanks
by eghtedari2000
Mon Jun 28, 2010 9:59 pm
Forum: General
Topic: problem in layer7
Replies: 0
Views: 324

problem in layer7

hi

i configure the router and separate one of my IPs .

this range have this policy that " download, p2p and FTP packets" have limited bandwidth and separate by layer7.

and other protocols have exterem band.

but when i ping i have big delay and browsing is slow.

can you help me about that?

thanks
by eghtedari2000
Thu Apr 29, 2010 6:31 pm
Forum: General
Topic: Burst for quee tree not working
Replies: 7
Views: 1491

Re: Burst for quee tree not working

I think, you should read some neighbour topics about queues and priorities. for example, there's no such things like 'strict priority' (http://forum.mikrotik.com/viewtopic.php?f=1&t=40823) - you should (approximately) know your bandwidth, and create leaf queues with necessary limitations for basic ...
by eghtedari2000
Thu Apr 29, 2010 6:12 pm
Forum: General
Topic: Burst for quee tree not working
Replies: 7
Views: 1491

Re: Burst for quee tree not working

you can match packet size in firewall mangle, and then send in to necessary queue (by packet-mark) really thanks alot for your response speed. i found the packet size, so i think the UNIt is at byte, am i right? also i want to have the first priority for VOIP packets, after that WEB and after that ...
by eghtedari2000
Thu Apr 29, 2010 3:55 pm
Forum: General
Topic: Burst for quee tree not working
Replies: 7
Views: 1491

Re: Burst for quee tree not working

if you use PCQ, it's impossible to use burst for each subqueue ok, thanks alot for your guide so i have questions: 1-does it possible to set priority for the size of packet and if it is possible how can i do that 2-does it possible to set priority for kind of packet VOIP, WEB, download and etc. ple...
by eghtedari2000
Mon Apr 26, 2010 1:24 pm
Forum: General
Topic: Burst for quee tree not working
Replies: 7
Views: 1491

Burst for quee tree not working

hi all i setup a quee tree in mikrotik and setup priority for bandwidth usage in quee tree. one if my tree is with lowest priority is for download users. and i want to have burst service on the bandwidth of this group, but burst doesnt work when i test, also i cant use burst threshhold because of al...
by eghtedari2000
Thu Apr 15, 2010 5:15 pm
Forum: Scripting
Topic: need help for have script for hourly bandwidth with quee tre
Replies: 4
Views: 1020

Re: need help for have script for hourly bandwidth with quee

they work together (queue tree and simple queues) but it is not simple configuration. You have to mark packets at certain places, otherwise queues will not limit traffic as you wish it was doing that. I would suggest to watch tiktube.com videos about QoS and read available presentation materials an...
by eghtedari2000
Thu Apr 15, 2010 11:21 am
Forum: Scripting
Topic: need help for have script for hourly bandwidth with quee tre
Replies: 4
Views: 1020

Re: need help for have script for hourly bandwidth with quee

you should check very carefully of possible configuration where you combine queue tree and simple queues together. when you figure out how these 2 work together, you can add simple queue for client and use time limit feature in the queue. so you mean that this combination maybe doesnt work or this ...
by eghtedari2000
Thu Apr 15, 2010 6:44 am
Forum: Scripting
Topic: need help for have script for hourly bandwidth with quee tre
Replies: 4
Views: 1020

need help for have script for hourly bandwidth with quee tre

hi i have a quee trees and have priority of bandwidth and other QOS in router also i want to have a script that can let me to limit the bandwidth of some of IPs that are in quee tree from 9 A.M. till 17 . every day in 6 mb/s and between 17 till 9 A.M. in tomorow it can have 20 mb/s. i say again also...
by eghtedari2000
Tue Feb 23, 2010 4:02 pm
Forum: General
Topic: QOS and load balance and IBGP
Replies: 4
Views: 860

Re: QOS and load balance and IBGP

i dont understand what do you mean?
by eghtedari2000
Tue Feb 23, 2010 10:01 am
Forum: General
Topic: QOS and load balance and IBGP
Replies: 4
Views: 860

QOS and load balance and IBGP

hi

i had QOS in Quee trees and when i start loadbalance in 2 backbone or start IBGP that can use from service of 2 provider my QOS doesnt work.

can anybody help me?

thanks
by eghtedari2000
Fri Feb 12, 2010 8:54 am
Forum: General
Topic: USER priviliage Access for users
Replies: 1
Views: 306

USER priviliage Access for users

hi

in the acces gruop of user we can only set user as read or write.

do you have any program in future in new OS to possible us to customize acces of user such az Cisco routers?

Thanks
by eghtedari2000
Fri Feb 12, 2010 8:52 am
Forum: General
Topic: GRE Tunneling
Replies: 1
Views: 719

GRE Tunneling

hi

i wanted to say we need to GRE Tunneling in our network , but mikrotik doesnt support that.

is there any program in future OS to help us and solve this problem

Thanks
by eghtedari2000
Tue Feb 09, 2010 10:48 am
Forum: General
Topic: problem in schedular NAT
Replies: 16
Views: 1179

Re: problem in schedular NAT

Remove the time constriction from the NAT line you marked red, and add the following to your firewall in a place that makes sense (if you aren't sure where that is post your "/ip firewall filter" ruleset): /ip firewall filter add chain=forward action=drop disabled=no src-address=192.168.132.0/24 ti...
by eghtedari2000
Sun Feb 07, 2010 12:21 am
Forum: General
Topic: problem in schedular NAT
Replies: 16
Views: 1179

Re: problem in schedular NAT

Remove the time constriction from the NAT line you marked red, and add the following to your firewall in a place that makes sense (if you aren't sure where that is post your "/ip firewall filter" ruleset): /ip firewall filter add chain=forward action=drop disabled=no src-address=192.168.132.0/24 ti...
by eghtedari2000
Thu Feb 04, 2010 12:16 am
Forum: General
Topic: problem in schedular NAT
Replies: 16
Views: 1179

Re: problem in schedular NAT

Remove the time constriction from the NAT line you marked red, and add the following to your firewall in a place that makes sense (if you aren't sure where that is post your "/ip firewall filter" ruleset): /ip firewall filter add chain=forward action=drop disabled=no src-address=192.168.132.0/24 ti...
by eghtedari2000
Wed Feb 03, 2010 1:35 pm
Forum: General
Topic: problem in schedular NAT
Replies: 16
Views: 1179

Re: problem in schedular NAT

in Terminal, use 'export' command in any submenu (for example, '/ip firewall nat export') Dear Friend Thanks alot from you and excuse me because of latency and ask much of questions from you because of i am not too expert /ip firewall nat add action=src-nat chain=srcnat comment="" disabled=no src-a...
by eghtedari2000
Tue Feb 02, 2010 4:39 pm
Forum: General
Topic: problem in schedular NAT
Replies: 16
Views: 1179

Re: problem in schedular NAT

i configured a schedular NAT
this part of config, of course
hi

i configured that via winbox, can you send me configuration for schedular firewall

thanks
by eghtedari2000
Tue Feb 02, 2010 10:20 am
Forum: General
Topic: problem in schedular NAT
Replies: 16
Views: 1179

Re: problem in schedular NAT

post your config
Dear Friend

thanks alot for your support

which part of router s config do you need?

and you need that in terminal mode?

thanks
by eghtedari2000
Mon Feb 01, 2010 5:07 pm
Forum: General
Topic: problem in schedular NAT
Replies: 16
Views: 1179

Re: problem in schedular NAT

post your config. in general, you should do the same scheduler as for NAT, but for Firewall Filter with chain=forward
hi

thanks alot

can you help me more about configuration that you said at top, aout schedular firewall and chain-forwars?

thanks
by eghtedari2000
Mon Feb 01, 2010 12:28 pm
Forum: General
Topic: problem in schedular NAT
Replies: 16
Views: 1179

Re: problem in schedular NAT

Can you start _new_ downloads after the schedule expires, or is it just that connections started before it expired keep going even afterwards? NAT is only applied at the beginning of the connection and then read from a state table, the rule is not consulted again. Instead of scheduling the NAT rule...
by eghtedari2000
Sun Jan 31, 2010 4:06 pm
Forum: General
Topic: problem in schedular NAT
Replies: 16
Views: 1179

Re: problem in schedular NAT

please explain in more details... i have a free service for night that thet user is a local user in router the username is "night@night" this service is 2-7 a.m. but when you connected from 2 A.M. till the admin kill the user manualy the user can use the service and doesnt stop automatically. i con...
by eghtedari2000
Sat Jan 30, 2010 11:05 pm
Forum: Scripting
Topic: script for disconnect a local user in router in special time
Replies: 3
Views: 1052

script for disconnect a local user in router in special time

hi

i want to have a script that can disconnect all of users that the username is in router ( local ) in a special time, only 1 time in 24 hours.

does it possbile?

or if it is possible i want to have an script that can disable and enable a network interface of router one time in 24 hour .

thanks
by eghtedari2000
Sat Jan 30, 2010 10:36 pm
Forum: General
Topic: problem in schedular NAT
Replies: 16
Views: 1179

problem in schedular NAT

hi

i configured a schedular NAT on my routers but until i dont disconnect the user manualy the service for the doesnt stop.

can any body help me?