Community discussions

MikroTik App

Search found 113 matches

by mstead
Mon Oct 07, 2019 4:05 am
Forum: General
Topic: Limiting pps
Replies: 16
Views: 3284

Re: Limiting pps

In version 6.43.12 still not resolve.

This would be a good function to able to control the device under DDOS attacks on conntrack table.
(I need to control 900kpps on CCR1036)

I have raised a ticket for this - it's Ticket#2019100422002897 in case @janisk is reading this
by mstead
Wed Jul 17, 2019 6:14 pm
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 112027

Re: v6.45.1 [stable] is released!

Is this the new API that sends the password in plain text?? I cannot figure WHY you guys would revert to that way of operation.
by mstead
Mon Apr 01, 2019 7:45 pm
Forum: General
Topic: UKNOF 43 CVE
Replies: 223
Views: 47340

Re: UKNOF 43 CVE

where the reporter didn't report it as a security concern and left it for 6 months till he was able to get a CVE The full timeline will be available next week. But when I reported this in April 2018, my request to MikroTik was to plead with support to treat this as a serious security vulnerability,...
by mstead
Sun Mar 31, 2019 11:52 pm
Forum: General
Topic: UKNOF 43 CVE
Replies: 223
Views: 47340

Re: UKNOF 43 CVE

Mikrotik have publicly disclosed the details of the vulnerability, on a Sunday, in a way that a child could exploit it - before even providing a fixed beta, let alone a stable release version, let along giving us time to test and deploy it. Truly despicable behaviour there Mikrotik. Do you have no ...
by mstead
Sat Mar 30, 2019 7:17 pm
Forum: General
Topic: UKNOF 43 CVE
Replies: 223
Views: 47340

Re: UKNOF 43 CVE

I would make a good guess that the technique involves sending lots and lots of oversized neighbor discovery packets with the target IP of the victim. Easy to craft and while I never tested it, most likely could run the victim out of memory space if done at a high enough rate.
by mstead
Tue Feb 05, 2019 4:58 am
Forum: Wireless Networking
Topic: wAP 60G experience
Replies: 300
Views: 51686

Re: wAP 60G experience

Hello. We have a strange problem. We made a PtMP on wAP 60G (v6.44beta40) with 5 clients (4 LHG and 1 wAP same ROS version). Everything is working fine, but when anyone will shutdown MT (or reboot it) then we get disconnect on all stations and they don't want to connect again. We have to manually d...
by mstead
Wed Dec 12, 2018 4:19 am
Forum: Announcements
Topic: v6.43.7 [stable] is released!
Replies: 53
Views: 16815

Re: v6.43.7 [stable] is released!

Anyone from Ireland should be aware that Europe/Dublin timezone is screwed up in this release and will set your system clock to GMT+2 hours.

I have emailed Mikrotik support so we will see what happens.
by mstead
Thu Aug 02, 2018 8:43 am
Forum: Wireless Networking
Topic: LHG 60G experience
Replies: 565
Views: 88632

Re: LHG 60G experience

we are having loads of disconnects. Up and down constantly signal is solid at -53. If we load 6.43rc5 no disconnects at all. All the newer versions constant disconnects. Any ideas on how to solve this? We are currently on 6.43rc45 Same here. 6.43rc40 and 6.43rc44 both have constant disconnects on l...
by mstead
Wed Jul 04, 2018 4:04 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 557
Views: 133036

Re: v6.43rc [release candidate] is released!

Try to upgrade the 6.40.4 first to the current version (6.42.5) and then upgrade to 6.43rc from there.
I did - and that does work :-D

Well, saying it is not crazy, the fact that it happens for some versions is a different question ;-)
That comment made me smile ;-)
by mstead
Wed Jul 04, 2018 2:16 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 557
Views: 133036

Re: v6.43rc [release candidate] is released!

It has been stated multiple times here that most of the upgrade process is performed by the old version from which you upgrade. So if you in all cases upgraded from 6.40.4., the issue may also be that one, not the 6.43rc40. Yeah well that doesn't change the value of the warning that I am giving - e...
by mstead
Wed Jul 04, 2018 12:22 am
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 557
Views: 133036

Re: v6.43rc [release candidate] is released!

This also may depend on the configuration of the device. That was a valid point - however I just tested another fresh unit from the same batch which was fully reset with no defaults and I can confirm it is also bricked. So once again - BEWARE!!!! v6.43rc40 can brick your device - PLEASE CHECK befor...
by mstead
Tue Jul 03, 2018 9:10 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 557
Views: 133036

Re: v6.43rc [release candidate] is released!

WARNING!!! This version 6.43rc40 just bricked two RBSXTsq5HPnD units I was testing it with. Software upgrade went fine from the factory installed 6.40.4 but then the firmware upgrade bricked the units. Netinstall currently underway. I'm successfully upgraded a hAp ac2. hAp ac2 is not a RBSXTsq5HPnD...
by mstead
Tue Jul 03, 2018 8:01 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 557
Views: 133036

Re: v6.43rc [release candidate] is released!

WARNING!!! This version 6.43rc40 just bricked two RBSXTsq5HPnD units I was testing it with. Software upgrade went fine from the factory installed 6.40.4 but then the firmware upgrade bricked the units. Netinstall currently underway.
by mstead
Thu Apr 19, 2018 3:05 am
Forum: General
Topic: MNDP "Hack" - Is This A Bug Or Not?
Replies: 10
Views: 1564

Re: MNDP "Hack" - Is This A Bug Or Not?

I simply do not see this as a problem. A standard firewall config with a default drop resolves any potential issue. Do you disable the DNS, WWW, API, and SSH services, or otherwise block public access to those services on routers you administer? If so, why do you do that? If not, you may want to ch...
by mstead
Wed Apr 04, 2018 12:22 am
Forum: General
Topic: MNDP "Hack" - Is This A Bug Or Not?
Replies: 10
Views: 1564

Re: MNDP "Hack" - Is This A Bug Or Not?

While I am happy to accept those suggestions relating to firewall rules there does seem to be a hint of ignoring the root problem. After all neighbour discovery is exactly that - not for discovering devices halfway around the world!!
by mstead
Tue Apr 03, 2018 10:32 pm
Forum: General
Topic: MNDP "Hack" - Is This A Bug Or Not?
Replies: 10
Views: 1564

Re: MNDP "Hack" - Is This A Bug Or Not?

Sure, Mikrotik could require MNDP to accept only broadcast. There are some benefits to allowing unicast. An administrator might want to poll his entire AS with MNDP for example. I cannot see any place in Winbox where you can set MNDP to work in unicast or any good reason for it to be that way. I ag...
by mstead
Tue Apr 03, 2018 9:32 pm
Forum: General
Topic: MNDP "Hack" - Is This A Bug Or Not?
Replies: 10
Views: 1564

Re: MNDP "Hack" - Is This A Bug Or Not?

What would you have Mikrotik change about MNDP's behavior? Requiring authentication of some kind is counter to the purpose of MNDP.

Well my answer to that question is that MNDP should only respond to broadcast packets and not routed.
by mstead
Tue Apr 03, 2018 9:14 pm
Forum: General
Topic: MNDP "Hack" - Is This A Bug Or Not?
Replies: 10
Views: 1564

Re: MNDP "Hack" - Is This A Bug Or Not?

It is not correct what you write. The default firewall on a small device blocks this traffic. And on a large device (CCR/CHR) it is the full responsibility of the admin to setup a firewall to secure the router. Actually you are correct about the small device and it's defaults. However it is more wo...
by mstead
Tue Apr 03, 2018 8:46 pm
Forum: General
Topic: MNDP "Hack" - Is This A Bug Or Not?
Replies: 10
Views: 1564

MNDP "Hack" - Is This A Bug Or Not?

So I have already reported this directly to Mikrotik and they say it is normal and nothing to worry about. I disagree and would like to know what other people here think. This "bug / hack" allows you to add device(s) to the neighbour list of any Mikrotik device anywhere in the world without knowing ...
by mstead
Sat Feb 10, 2018 9:29 pm
Forum: Announcements
Topic: v6.41.2 [current]
Replies: 125
Views: 33486

Re: v6.41.2 [current]

The ping tool is broken and has been for many versions - I only noticed this tonight. The "timeout" option doesn't change the ping timeout but rather the interval between pings. So this is either a bug or a badly labelled "ping interval" option. However timeout is a crucial parameter for any ping to...
by mstead
Tue May 31, 2016 3:56 pm
Forum: Scripting
Topic: System Scheduler / Move Command Problem
Replies: 0
Views: 530

System Scheduler / Move Command Problem

Hi there, I have studied the wiki page for the system/scheduler which reads: "If more than one script has to be executed simultaneously, they are executed in the order they appear in the scheduler configuration. This can be important if one scheduled script is used to disable another one. The order ...
by mstead
Wed Jul 01, 2015 11:52 am
Forum: General
Topic: Leap second bug present on TILE devices?
Replies: 49
Views: 11442

Re: Leap second bug present on TILE devices?

Is it just me or is Normis incapable of say "sorry - we screwed up"?? I have read through all his replies and I don't see the apology anywhere - but frankly I am not in the least bit surprised....
by mstead
Wed Jul 01, 2015 4:14 am
Forum: RouterBOARD hardware
Topic: all CCR crashed
Replies: 40
Views: 8972

Re: all CCR crashed

Can people please edit their posts to include ROS version and if BGP, NTP server etc was running?
by mstead
Wed Jul 01, 2015 4:00 am
Forum: RouterBOARD hardware
Topic: all CCR crashed
Replies: 40
Views: 8972

Re: all CCR crashed

I can confirm all my border CCR crashed at 01:00BST. The common factor was BGP and NTP server. All other CCR in my network were just using OSPF and NTP client. What a pile of shite - seriously!!!!

All running v6.27 and were CCR1036-8G-1S
by mstead
Sun Nov 30, 2014 2:35 pm
Forum: RouterBOARD hardware
Topic: Warning!! - NetMETAL 5 2xRPSMA, 2000mW Are NOT Weatherproof
Replies: 31
Views: 7521

Re: Warning!! - NetMETAL 5 2xRPSMA, 2000mW Are NOT Weatherpr

So I just got time to examine a third unit which I withdrew from service at the same location as a precaution - the attached photos speak for themselves. The serial number is shown in one of the pictures as requested by Normis. These pictures clearly show a manufacturing error and obviously is not g...
by mstead
Wed Nov 26, 2014 1:21 pm
Forum: RouterBOARD hardware
Topic: Warning!! - NetMETAL 5 2xRPSMA, 2000mW Are NOT Weatherproof
Replies: 31
Views: 7521

Re: Warning!! - NetMETAL 5 2xRPSMA, 2000mW Are NOT Weatherpr

I just want to add a comment from one of my technicians who has many years of experience in the field of electrical and electronic engineering. I instructed him to remove the LED sticker and fill the holes with clear silicone. He was expecting the sticker to be difficult to remove but found it came ...
by mstead
Fri Nov 14, 2014 5:49 am
Forum: RouterBOARD hardware
Topic: Warning!! - NetMETAL 5 2xRPSMA, 2000mW Are NOT Weatherproof
Replies: 31
Views: 7521

Re: Warning!! - NetMETAL 5 2xRPSMA, 2000mW Are NOT Weatherpr

Today I had to replace a NetMetal. It went out of service after 3 days (2 with rain) from installation. I found it full of water. I have several other installed and only this one was affected, so I suppose it's something like an assembling error more than a design flaw. Will see what happens to the...
by mstead
Fri Nov 14, 2014 2:40 am
Forum: RouterBOARD hardware
Topic: Warning!! - NetMETAL 5 2xRPSMA, 2000mW Are NOT Weatherproof
Replies: 31
Views: 7521

Re: Warning!! - NetMETAL 5 2xRPSMA, 2000mW Are NOT Weatherpr

Attached are two pictures which clearly show the water damage is localised around the LED window. This is a ridiculous design flaw which I am certain other users will suffer from at some stage. In general the NetMETAL unit is a very good design - however to have a cheap sticker acting as a window fo...
by mstead
Tue Nov 11, 2014 5:21 pm
Forum: RouterBOARD hardware
Topic: Warning!! - NetMETAL 5 2xRPSMA, 2000mW Are NOT Weatherproof
Replies: 31
Views: 7521

Warning!! - NetMETAL 5 2xRPSMA, 2000mW Are NOT Weatherproof

This is why I despair with Mikrotik. They make equipment that functions quite well yet neglect to make the kit properly waterproof. Just had two NetMETAL 5 2xRPSMA, 2000mW fail last night due to rainwater getting in the window where the LED's are visible. I had numerous Groove units fail this way an...
by mstead
Mon May 20, 2013 4:43 am
Forum: General
Topic: Verified By Visa and other Walled Garden Nightmares
Replies: 2
Views: 912

Re: Verified By Visa and other Walled Garden Nightmares

Hi

Did anyone figure a good solution to this question because I am running into the same problems as well.

Anyone??

Thanks in advance
by mstead
Fri Dec 14, 2012 8:53 am
Forum: RouterBOARD hardware
Topic: Groove 5Hn - Large number damaged!!
Replies: 5
Views: 1573

Re: Groove 5Hn - Large number damaged!!

I have had the same problem and am about to RMA a whole load of them back to the distributor. This is a faulty batch in my opinion.

To be honest the Groove has been a design disaster for Mikrotik. They are very prone to flooding when the wind blows rain into the back of them.
by mstead
Mon May 09, 2011 5:29 pm
Forum: RouterBOARD hardware
Topic: New Products
Replies: 188
Views: 30541

Re: New Products

Groove is still on track, for this month.
Thank you for that. I will keep my eyes open.
by mstead
Sat May 07, 2011 7:40 pm
Forum: RouterBOARD hardware
Topic: New Products
Replies: 188
Views: 30541

Re: New Products

Can we get a status update on the Groove please. What is the estimated timescale on this product and will it have a similar price model to the Ubiquiti Bullet.

Thanks
by mstead
Wed May 04, 2011 4:35 am
Forum: Wireless Networking
Topic: What would happen if...
Replies: 20
Views: 4598

What would happen if...

Hi. Can anyone tell me what would be the result of connecting an SR-71 802.11n card with two dishes (one per chain) and pointing them in different directions. My intention would be to hook up two remote 802.11n sites using one frequency only. Will the two chains work independently and give me a reas...
by mstead
Tue Mar 22, 2011 2:02 am
Forum: Beginner Basics
Topic: Automatic RoS reboot at a specifit time
Replies: 31
Views: 5949

Re: Automatic RoS reboot at a specifit time

The reboot problem still exists in v4.17. I can confirm that with RB493AH.
by mstead
Tue Mar 22, 2011 2:01 am
Forum: General
Topic: rb450 reboot problem
Replies: 50
Views: 9791

Re: rb450 reboot problem

I can confirm the reboot problem on v4.17 with RB493AH. Reboot makes the board shutdown instead.
by mstead
Sat Feb 19, 2011 10:46 pm
Forum: General
Topic: UPGRADE F'in FAILGREAT for SXT and 802.11N - CRAPPY FOR ELSE
Replies: 3
Views: 1358

Re: UPGRADE F'in FAILGREAT for SXT and 802.11N - CRAPPY FOR

Why is this forum filled with people who insist on upgrading every board in their network 24 hours after a new (and probably buggy) release comes out? So xlteks while I cannot answer the hard drive cleanup question I can provide a reasonable solution to your main problem - your a fool!!! I'm sorry i...
by mstead
Mon Sep 06, 2010 5:18 am
Forum: The User Manager
Topic: User Manager Problem When Using Multiple Interfaces
Replies: 2
Views: 1082

User Manager Problem When Using Multiple Interfaces

Hi, Has anyone else noticed that if the radius request comes in one interface of a user manager and back via a different one (circular routing) it is rejected no matter what? To explain I have two RB1000's running v4.10 with the standard user manager. They are linked directly together and have two b...
by mstead
Sun Nov 15, 2009 8:44 pm
Forum: General
Topic: Feature request
Replies: 12
Views: 2369

Re: Feature request

Add my name to the list of people who would like CoA for pppoe!!

Malcolm
by mstead
Sat Oct 03, 2009 5:31 am
Forum: Scripting
Topic: Script To Add Hotspot IP Binding
Replies: 2
Views: 1691

Re: Script To Add Hotspot IP Binding

For anyone else with this problem - here is the reply from MT support: >Hello, >Try to put following line at the beginning of the script >/ip hotspot ip-binding print >This will save into buffer item numbers ad script will be able to use >place-before=0 >Regards, >Maris It still is a pain in the ass...
by mstead
Thu Oct 01, 2009 5:02 am
Forum: Scripting
Topic: Script To Add Hotspot IP Binding
Replies: 2
Views: 1691

Re: Script To Add Hotspot IP Binding

ok. This seems to be yet another stupid Mikrotik coding mistake. If I change my command to: /ip hotspot ip-binding add address=192.168.100.24 place-before= 1 then it works in a script. It will fail in the terminal, which at least means I can work around the problem. But frankly just goes to show the...
by mstead
Thu Oct 01, 2009 2:24 am
Forum: Scripting
Topic: Script To Add Hotspot IP Binding
Replies: 2
Views: 1691

Script To Add Hotspot IP Binding

Hi, I cannot get the following single line to work in a script: /ip hotspot ip-binding add address=192.168.100.24 place-before=0 I already have an ip binding that is a pass-all rule in case anyone is curious about the place-before command. I am running v3.30. If I run this from the command line it w...
by mstead
Sat Jul 25, 2009 4:31 am
Forum: The User Manager
Topic: How to assign profiles to users in 4.04b
Replies: 4
Views: 1162

Re: How to assign profiles to users in 4.04b

I am also trying to figure this out!!

Malcolm
by mstead
Thu Jul 09, 2009 11:26 pm
Forum: RouterBOARD hardware
Topic: 411R disappointment?
Replies: 36
Views: 6570

Re: 411R disappointment?

Well Poland is Poland, in some countries 5GHz is not even an option You can also add Ireland to the list of countries which will not be buying this board in huge numbers. I can speak for most of the WISP's in my area who will say exactly the same. Ubiquiti are on the right road - pity MT are lost i...
by mstead
Fri May 08, 2009 10:21 pm
Forum: The User Manager
Topic: Can A PPPOE Client View Their Own Stats?
Replies: 3
Views: 1179

Re: Can A PPPOE Client View Their Own Stats?

Thanks for the reply sergejs. I did closely read that wiki page but am still stuck. I go to http://Router_IP_address/user (I only have one subscriber setup). There I see the normal user manager login page - so I tried one of the pppoe username/password but that is an invalid login. Sorry if I'm miss...
by mstead
Thu May 07, 2009 7:51 pm
Forum: The User Manager
Topic: Can A PPPOE Client View Their Own Stats?
Replies: 3
Views: 1179

Can A PPPOE Client View Their Own Stats?

I am trying out user manager and would like to know if its possible for a pppoe client to be able to view their own stats? I have looked through the MT wiki and searched the forum but cannot see the answer I'm looking for. I tried logging into user manager with the pppoe username/pass but that did n...
by mstead
Sat May 02, 2009 6:15 am
Forum: General
Topic: pppoe-relay
Replies: 29
Views: 19324

Re:

If you have an wireless link to an AP with mode=station and no WDS it's almost imposible. I've managed to workaroun with those rules: / interface bridge nat add chain=dstnat in-interface=wireless-client mac-protocol=0x8863 action=dst-nat \ to-dst-mac-address=MAC-OF-REMOTE-PPPOE-SERVER comment="" di...
by mstead
Thu Apr 23, 2009 12:05 am
Forum: General
Topic: Where Is Routing Test 3.23 For PPC?
Replies: 3
Views: 1076

Re: Where Is Routing Test 3.23 For PPC?

Hi, Thanks for the reply. However if you click on the "view content" link for the above named file it clearly mentions routing-test as one of the contained packages. Can you see a separate link for routing-test-3.23-ppc.npk as I cannot? Malcolm Just to add - I did a bit of detective work and found i...
by mstead
Wed Apr 22, 2009 11:41 pm
Forum: General
Topic: Where Is Routing Test 3.23 For PPC?
Replies: 3
Views: 1076

Where Is Routing Test 3.23 For PPC?

Hi,

Am I blind or is the routing-test package v3.23 missing from the PPC download. I am downloading the file all_packages-ppc-3.23.zip from MT.

Regards,

Malcolm
by mstead
Sun Mar 29, 2009 5:39 am
Forum: General
Topic: l2tp bridge
Replies: 5
Views: 3526

Re: l2tp bridge

Interesting thread.

I'm trying to create an L2TP tunnel where the client end is bridged to a real interface - ether1.

Can someone tell me if this is actually possible?

Thanks in advance

Malcolm
by mstead
Fri Jan 02, 2009 3:12 am
Forum: General
Topic: 133c & v3.17/3.16/3.14 Firewall NAT Failure
Replies: 27
Views: 3456

Re: 133c & v3.17/3.16/3.14 Firewall NAT Failure

jcremin - I feel your pain here. I had a few stressful days dealing with this problem. I feel that I am justified in getting very annoyed with Mikrotik in this matter as they have failed to address this problem in a professional and timely manner. Christmas came and went and there is still no fix. T...
by mstead
Sat Dec 20, 2008 4:13 am
Forum: General
Topic: Input voltage readout
Replies: 3
Views: 868

Re: Input voltage readout

Gunzoid

The cheapest option is to replace the 532 with a 433AH if it is just one single board per site. I have yet to find a solution under EUR250 that will measure DC voltage via SNMP other than using the Mikrotik board itself.

Malcolm
by mstead
Fri Dec 12, 2008 4:59 am
Forum: General
Topic: 133c & v3.17/3.16/3.14 Firewall NAT Failure
Replies: 27
Views: 3456

Re: 133c & v3.17/3.16/3.14 Firewall NAT Failure

This is how I am getting round the problem at the moment. These commands will keep rebooting the box until the firewall starts to work!! /ip firewall filter add chain=input action=accept dst-address=127.0.0.1 comment="firewall-test-rule" place-before=0 /system script add name="check-firewall-script"...
by mstead
Wed Dec 10, 2008 11:41 pm
Forum: General
Topic: Regarding "MikroTik Success stories" e-mail message
Replies: 8
Views: 1349

Re: Regarding "MikroTik Success stories" e-mail message

>At this moment I can really use just AH routerboards, all others are way slow.

I'm really curious to know what you are doing that can only just work on an AH type board??

Mine are lucky to go over 25% cpu

Malcolm
by mstead
Wed Dec 10, 2008 1:34 am
Forum: General
Topic: 133c & v3.17/3.16/3.14 Firewall NAT Failure
Replies: 27
Views: 3456

Re: 133c & v3.17/3.16/3.14 Firewall NAT Failure

The good news is that Mikrotik have now confirmed the problem in an email to me and can create the same in their lab. So now we just need to wait for 3.18........

Until then its 3.10 for me:-)

Malcolm
by mstead
Sun Dec 07, 2008 7:15 pm
Forum: General
Topic: 133c & v3.17/3.16/3.14 Firewall NAT Failure
Replies: 27
Views: 3456

Re: 133c & v3.17/3.16/3.14 Firewall NAT Failure

Upgrade the firmware

T
Already upgraded to 2.18. That makes no difference.

Malcolm
by mstead
Sat Dec 06, 2008 10:51 pm
Forum: General
Topic: 133c & v3.17/3.16/3.14 Firewall NAT Failure
Replies: 27
Views: 3456

Re: 133c & v3.16 Firewall NAT Failure

Is 3.13 OK? That's what I am at now for most of our clients. I am told by a reliable source that 3.11 is ok. Someone mentions 3.13 being ok earlier in the thread but I don't know them personally so would not want to rely on the information myself. I might try 3.13 out on my test rig - basically a s...
by mstead
Sat Dec 06, 2008 10:22 pm
Forum: General
Topic: 133c & v3.17/3.16/3.14 Firewall NAT Failure
Replies: 27
Views: 3456

Re: 133c & v3.16 Firewall NAT Failure

This seems to be only a problem with mipsle boards. I have a ticket open with support but was suprised I had not heard anyone else report the problem. I am baselining at 3.10 until its fixed. If anyone has 3.16 on an RB133c it is vital they dont try to downgrade to an older version via wireless. The...
by mstead
Sat Dec 06, 2008 4:49 am
Forum: General
Topic: 133c & v3.17/3.16/3.14 Firewall NAT Failure
Replies: 27
Views: 3456

Re: 133c & v3.16 Firewall NAT Failure

This is still present in v3.17. RB133c users BEWARE!!

Malcolm
by mstead
Thu Dec 04, 2008 3:34 pm
Forum: General
Topic: How to NAT smb from one network to another in ROS?
Replies: 7
Views: 4711

Re: How to NAT smb from one network to another in ROS?

Chupaka. What you describe is not really NAT but rather working with Samba to redirect. This was the direction I was heading in when I gave up due to time constraints. What I'm saying is that to just NAT traffic to a different Samba server does not work for the reasons I already gave. As far as I co...
by mstead
Thu Dec 04, 2008 6:23 am
Forum: General
Topic: 133c & v3.17/3.16/3.14 Firewall NAT Failure
Replies: 27
Views: 3456

133c & v3.17/3.16/3.14 Firewall NAT Failure

Hi, Is anyone else having issues with the 133c and v3.16. I am being driven crazy with random failures all over my network. The same thing every time - customer calls saying there is no internet access and when I log into the box the NAT rule has zero hits - even though everything else works either ...
by mstead
Thu Dec 04, 2008 1:48 am
Forum: General
Topic: How to NAT smb from one network to another in ROS?
Replies: 7
Views: 4711

Re: How to NAT smb from one network to another in ROS?

I don't think you can NAT samba. I researched this a long time ago and if I remember correctly the problem is that the data payload contains IP information - and NAT will only modify the headers of a data packet not the contents.

Malcolm
by mstead
Sat Aug 16, 2008 10:32 pm
Forum: RouterBOARD hardware
Topic: RB493
Replies: 10
Views: 3322

Re: RB493

Can I ask if the RB493 will work as a fully unified 9 port switch? I know someone just asked this but the old 192 board only had 4 ports within the switching chip (lan2 -> lan5). It was not possible to use all in one switching group.

Also can it work as a vlan tagged switch?

Regards,

Malcolm
by mstead
Wed Jan 30, 2008 6:52 pm
Forum: General
Topic: bug in v 3.1
Replies: 4
Views: 2140

Re: bug in v 3.1

My mk v3.1 have bug jan/27/2008 02:49:06 system,error,critical router was rebooted without proper shu tdown jan/27/2008 13:16:24 system,error,critical router was rebooted without proper shu tdown It would be worth beefing up the PSU if your using an RB333. I find they need a good stable supply. A u...
by mstead
Sat Jan 26, 2008 11:34 pm
Forum: Wireless Networking
Topic: RouterOS V3.1 stops forwarding traffic on 2.4GHz interface
Replies: 28
Views: 2873

Re: RouterOS V3.1 stops forwarding traffic on 2.4GHz interface

I have a similar problem with one or two of my AP's.

Henrik - does the client last activity timer in winbox show a stupid value for all the associated users - kinda 18450.4s

Malcolm
by mstead
Fri Jan 25, 2008 10:24 am
Forum: General
Topic: ROS v3.0 freezing client computers!
Replies: 5
Views: 3224

Re: ROS v3.0 freezing client computers!

Hi, Unfortunately this is not a Mikrotik problem. Your client PC's are where the problem lies. Your best bet is a to replace all the d-link cards with a mikrotik ethernet based client. It MAY be that someone here can suggest a workaround for you but I really doubt it. This is probably why nobody has...
by mstead
Sun Jan 13, 2008 10:47 pm
Forum: General
Topic: Possible Bug In RC14 Ping Watchdog
Replies: 4
Views: 2104

Re: Possible Bug In RC14 Ping Watchdog

Gerard,

Thanks for that - I did not realise that was the way it works.

Regards,

Malcolm
by mstead
Sun Jan 13, 2008 5:11 am
Forum: Wireless Networking
Topic: Link CCQ quality problem
Replies: 5
Views: 1361

Re: Link CCQ quality problem

Good evening, I have a problem with two RB532 with R52H radio: I work in 5 Ghz mode and the link is very-very short only 200 mt. Assuming there is line of sight and decent antennas - turn down the power to max 5dBm at each end. You really should get rid of the R52H from such a link. The word overki...
by mstead
Sun Jan 13, 2008 2:36 am
Forum: Wireless Networking
Topic: Backhaul speed XR5 100%CCQ
Replies: 7
Views: 2811

Re: Backhaul speed XR5 100%CCQ

RB333 should be the way to go but in my opinion they fall short of being a backhaul class board. Build quality is poor and you are forced to use non-release software. Can you please explain in which way the RB333 is "poor build quality" and what consequences it might have? Just curious. Hi, My main...
by mstead
Sun Jan 13, 2008 2:29 am
Forum: General
Topic: Possible Bug In RC14 Ping Watchdog
Replies: 4
Views: 2104

Re: Possible Bug In RC14 Ping Watchdog

Just tested RC13 - same bug here too.

I have a backhaul with IP watchdog. The link was disabled and I unchecked the tickbox to halt the watchdog. However the RB333's continue to reboot at both ends until the watchdog has the IP's removed totally.

Malcolm
by mstead
Sat Jan 12, 2008 10:18 pm
Forum: Wireless Networking
Topic: Backhaul speed XR5 100%CCQ
Replies: 7
Views: 2811

Re: Backhaul speed XR5 100%CCQ

I have a similar problem. I use RB133 and never can pass above 22-27 Mbps barrier. RB133 is a low grade CPE unit ONLY!! Anyone using them for any major link needs a kick in the leg :lol: RB333 should be the way to go but in my opinion they fall short of being a backhaul class board. Build quality i...
by mstead
Sat Jan 12, 2008 10:11 pm
Forum: General
Topic: Possible Bug In RC14 Ping Watchdog
Replies: 4
Views: 2104

Possible Bug In RC14 Ping Watchdog

Hi, I am not 100% on this one and don't really want to take my live system down again to test but....... RC14 installed on two RB333's. Ping watchdog tickbox set to off in winbox and double checked in terminal to show off. However the IP address to ping WAS filled in. I think this may be where the p...
by mstead
Fri Jan 11, 2008 7:17 am
Forum: General
Topic: Netinstall RC14 Problem Solved - Useful Info Here!!
Replies: 14
Views: 2132

Re: Netinstall RC14 Problem Solved - Useful Info Here!!

I think my R52 is still alive after the upgrade. It certainly appears in the card list still.

andryan - Is your R52 working when you put it back in after the netinstall? By dead do you mean the board won't boot or does it just not show in the card list?

Malcolm
by mstead
Fri Jan 11, 2008 6:43 am
Forum: General
Topic: Netinstall RC14 Problem Solved - Useful Info Here!!
Replies: 14
Views: 2132

Netinstall RC14 Problem Solved - Useful Info Here!!

Hi, I have spent the last hour struggling to get netinstall rc14 to work and finally solved it. I have a 133c with an R52 card in that died for some reason so I formatted the flash and tried to install routeros. I could get it to boot and take the netinstall supplied ip but it would hang on the load...
by mstead
Sat Dec 29, 2007 4:11 pm
Forum: General
Topic: RC13 Scripting Broken
Replies: 2
Views: 1289

Re: RC13 Scripting Broken

Hi,

That works thanks. I would like to just point out that a lot of people are going to have issues during upgrades if the scripting format keeps changing!!

Regards,

Malcolm
by mstead
Fri Dec 28, 2007 2:01 am
Forum: General
Topic: RB333 reboots very often
Replies: 17
Views: 3745

Re: RB333 reboots very often

There are only 2 possible reasons for that: 1) insufficient power - are you using XRs or all 3 SRs?? Then you should find more powerfull power adapter, or go for RB600 2) Software crash - in this case guys from MT will be able to see it in the (auto)supout.rif file Can I add number 3 to the list......
by mstead
Fri Dec 28, 2007 1:50 am
Forum: General
Topic: RC13 Scripting Broken
Replies: 2
Views: 1289

RC13 Scripting Broken

Hi, I cannot get the following to work: /ip firewall address-list remove [find list=over2gb] And in the terminal if I use the up-arrow to reuse a previous command the prompt goes totally wierd - sometimes saying <perl> and other times just random bits of the previous command. This worked better in R...
by mstead
Wed Dec 26, 2007 5:14 am
Forum: Scripting
Topic: How to remove and address list
Replies: 6
Views: 2529

Re: How to remove and address list

Hi,

Can anyone confirm this is broken in RC13 and if so is there a workaround for the moment?

Regards,

Malcolm
by mstead
Thu Dec 20, 2007 3:48 am
Forum: General
Topic: Explanation of 3.0 RC 13 wireless Tx/Rx rate values?
Replies: 4
Views: 2903

Re: Explanation of 3.0 RC 13 wireless Tx/Rx rate values?

So what does SP mean? Seems to be only on 2.4 when AP and client are both Mikrotik.

eg TX/RX rate = 11Mbps-SP/11Mbps-SP

Malcolm
by mstead
Mon Dec 10, 2007 8:43 pm
Forum: General
Topic: XR5 frequent disconnects when adjusting power
Replies: 10
Views: 2537

Re: XR5 frequent disconnects when adjusting power

nope, there will be rc12 out shortly. Just saying rc12 has a fix for this.
I think that may be a bad idea!!

"Warning, v3rc12 has an error when upgrading the x86 version.
There are no know issues for v3rc12 when upgrading RouterBOARDS.
Please wait for for v3rc13."
by mstead
Sun Dec 09, 2007 3:08 pm
Forum: General
Topic: XR5 frequent disconnects when adjusting power
Replies: 10
Views: 2537

Re: XR5 frequent disconnects when adjusting power

Also, know crash issue in rc10/11. Upgrade...
There is no RC12 at the moment. Is this a typing error on your part?

Malcolm
by mstead
Thu Dec 06, 2007 12:03 am
Forum: General
Topic: RB333 reboots very often
Replies: 17
Views: 3745

Re: RB333 reboots very often

I can second this. Seen a lot of 333 reboot issues. Some help is gained by using the reset-configuration command in terminal mode. This got rid of reboots every few minutes and now its measurable in hours.

Malcolm
by mstead
Mon Dec 03, 2007 2:39 am
Forum: General
Topic: Midnight Crash On X86 With RC
Replies: 4
Views: 1457

Midnight Crash On X86 With RC

Hi, This has happened a couple of times now. On a Dell poweredge the system will crash at the stroke of midnight. This has been with two different RC versions - most recently rc9. Has anyone else seen this? I have a script that runs at midnight this time but last time there was no such script. Is th...
by mstead
Wed Oct 31, 2007 9:02 pm
Forum: General
Topic: Power out differences on RB333
Replies: 17
Views: 2756

Re: Power out differences on RB333

Hi,

Just a thought but I remember some MiniPCI cards would be 10dB down if you were using the wrong antenna - ie A instead of B in advanced settings. Worth a look though probably not the problem here.

Malcolm
by mstead
Tue Oct 30, 2007 10:26 pm
Forum: General
Topic: IPTables Quota Module / Patch Please
Replies: 7
Views: 2776

Re: IPTables Quota Module / Patch Please

Hi Jorj, With regards to searching I meant that I did look for discussion on limiting traffic per user and did not find the wiki article - I felt you were under the impression I was one of those lazy bums that breeze in and ask stuff without bothering to look. I clicked the links in your post and ha...
by mstead
Tue Oct 30, 2007 10:16 pm
Forum: General
Topic: Keep Frequency, Set CPU Frequency
Replies: 9
Views: 2601

Re: Keep Frequency, Set CPU Frequency

we will try to fix it in the next version.
Thanks Uldis. Would be great if you could do that. I'm still running some older 532's. I think the memory leak in v3rc6 caused the watchdog timer to kick in and reset the clock back to 266MHz.

Regards,

Malcolm
by mstead
Sun Oct 28, 2007 2:29 am
Forum: General
Topic: Keep Frequency, Set CPU Frequency
Replies: 9
Views: 2601

Re: Keep Frequency, Set CPU Frequency

How about lose the attitude or get lost. We are all volunteers here if you're looking for someone to shit on find someone you can pay. I'm not wanting to start a flame war here but I seem to be getting a lot of attitude from certain members here and was just saying that I'm not interested in hearin...
by mstead
Sat Oct 27, 2007 11:51 pm
Forum: General
Topic: IPTables Quota Module / Patch Please
Replies: 7
Views: 2776

Re: IPTables Quota Module / Patch Please

Hi, I did plenty of searching jorj (thanks for asking :roll: ) but did not find that wiki entry about scripts. It is interesting alright but frankly the quota module would be a damn sight easier to deal with. However, beggars cannot be choosy so I'll have to enter 508 dumb forwarding rules and get m...
by mstead
Sat Oct 27, 2007 11:46 pm
Forum: General
Topic: Keep Frequency, Set CPU Frequency
Replies: 9
Views: 2601

Keep Frequency, Set CPU Frequency

Hi, Where has the option to change the CPU frequency gone? It used to be in system/routerboard/settings but I cannot see it any more? For anyone dying to post a smart assed "research before asking" comment I have trawled all over the place for the answer. For anyone who is going to suggest "use a nu...
by mstead
Tue Oct 23, 2007 5:29 am
Forum: General
Topic: IPTables Quota Module / Patch Please
Replies: 7
Views: 2776

Re: IPTables Quota Module / Patch Please

Would the hotspot package have what you need? Perhasp even soem scripts that check usage. Not being a hotspot user I installed the package for a look. I cannot see anything that would suit. TBH the quota module would be much easier for me as I could just add any overlimit IP to an address list and ...
by mstead
Sun Oct 21, 2007 6:02 am
Forum: General
Topic: IPTables Quota Module / Patch Please
Replies: 7
Views: 2776

IPTables Quota Module / Patch Please

Hi, I was wondering if there was a way to add a client ip to an address list once their bytes passed had exceeded a set limit. The nearest I could see in MT is the dst-limit feature which uses packets passed - sadly I cannot see this being a very accurate method. I notice that IPtables has a quota m...
by mstead
Fri Sep 14, 2007 4:38 am
Forum: The Dude
Topic: Authenticated SMTP
Replies: 5
Views: 2047

Re: Authenticated SMTP

Another request for SMTP authentication. Cannot be THAT hard to implement.

Seems mad that I have to run my own mail relay.

Malcolm
by mstead
Thu Sep 06, 2007 4:22 pm
Forum: General
Topic: encrypted nstream2
Replies: 22
Views: 3909

Re: encrypted nstream2

I dont understand why people would use NStreme 2 anyhow? It halves the link reliability as far as I can see - i.e. there is no failover if one leg dies. I would be tempted to run two NStreme 1 links in parallel and asymmetrically route over them. That way at least you can double the link reliability...
by mstead
Mon Aug 27, 2007 2:00 am
Forum: General
Topic: Kiss The Net (KTN) Beta available
Replies: 19
Views: 6495

Re:

It worked to a point, but it kept popping up a debugger window on me. It did actually scan the network, but I just have to keep telling it not to debug. what do you mean by a debugger window? can you make a screenshot? I think what people are referring to can be disabled by turning off all script d...
by mstead
Wed Aug 08, 2007 3:42 pm
Forum: Wireless Networking
Topic: Wireless Tweaks - optimizing client connections?
Replies: 2
Views: 3332

Re: Wireless Tweaks - optimizing client connections?

Hi,

Did you ever get any answers to these questions as I would love to know myself.

Regards,

Malcolm
by mstead
Mon Jul 09, 2007 5:23 am
Forum: General
Topic: Transparent Proxy Causes File Upload (e.g. GMAIL) to Fail
Replies: 14
Views: 8581

Re: Transparent Proxy Causes File Upload (e.g. GMAIL) to Fail

Ok. I have confirmed that my nat rule matches that of the manual: /ip firewall nat> print Flags: X - disabled, I - invalid, D - dynamic 0 chain=dstnat action=redirect to-ports=3128 dst-port=80 protocol=tcp However I am still getting no joy. I can manually set the browser to use the proxy so it is up...
by mstead
Sun Jul 08, 2007 9:28 pm
Forum: General
Topic: Transparent Proxy Causes File Upload (e.g. GMAIL) to Fail
Replies: 14
Views: 8581

Re: Transparent Proxy Causes File Upload (e.g. GMAIL) to Fail

Hi eugenevdm From the manpage for IPtables which I assume is what routeros uses: REDIRECT This target is only valid in the nat table, in the PREROUTING and OUT- PUT chains, and user-defined chains which are only called from those chains. It alters the destination IP address to send the packet to the...
by mstead
Sun Jul 08, 2007 2:35 pm
Forum: General
Topic: Transparent Proxy Causes File Upload (e.g. GMAIL) to Fail
Replies: 14
Views: 8581

Re: Transparent Proxy Causes File Upload (e.g. GMAIL) to Fail

Hi, thanks for the reply sergejs I have tried the NAT rule but cannot get it to work transparently. If I manually configure the browser all is well. I am using v3 Beta10 My web-proxy (not proxy as this is an x86 system) settings are: /ip proxy> print enabled: yes src-address: 0.0.0.0 port: 3128 pare...
by mstead
Sat Jul 07, 2007 4:24 pm
Forum: General
Topic: Transparent Proxy Causes File Upload (e.g. GMAIL) to Fail
Replies: 14
Views: 8581

Re: Transparent Proxy Causes File Upload (e.g. GMAIL) to Fail

Hi,

I don't mean to hijack this thread but can anyone tell me if Beta10 x86 web-proxy will work as a transparent proxy? I cannot see any option to enable it.

Regards,

Malcolm
by mstead
Sun Jan 07, 2007 7:35 pm
Forum: General
Topic: V3 b5 wireless seems great
Replies: 19
Views: 5919

Grrr. Channels are still incorrect for Ireland, and possibly many other counties.

5725 – 5875MHz cannot be accessed!! This is a basic feature that needs to be fixed now - way ahead of anything else.

http://www.comreg.ie/5_8GHzRegistration ... vID=198&M=

Malcolm
by mstead
Tue Aug 29, 2006 5:06 am
Forum: RouterBOARD hardware
Topic: RB112 Serial Port Setup Problem
Replies: 5
Views: 2677

Anyone managed to set the port speed in Winbox on an RB112?

Malcolm
by mstead
Sun Aug 27, 2006 3:31 pm
Forum: RouterBOARD hardware
Topic: RB532 Locks up on boot with APC UPS Attached
Replies: 9
Views: 2886

I can confirm that this problem exists. I have an RB532 that locked up with a UPS attached a couple of weeks ago. When the 532 boots the UPS beeps randomly which would indicate to me that the initial boot messages are confusing the system. In fact it took more than a simple reboot to recover the 532...
by mstead
Sat Aug 26, 2006 9:00 pm
Forum: Wireless Networking
Topic: IP Conflicts - just started after 1 year
Replies: 6
Views: 1208

.. who said this was in Russia? No it was working very well, and when something works well we don't stuff with it till we have to...
UK, France, Russia is what it says by your name. Anyhow perhaps an upgrade is worthwhile as I don't know how much support you will get on an older version?

Malcolm
by mstead
Sat Aug 26, 2006 2:32 pm
Forum: Wireless Networking
Topic: IP Conflicts - just started after 1 year
Replies: 6
Views: 1208

Re: IP Conflicts - just started after 1 year

We have a small WiFi Hotspot running on an MT v2.9.6 router
Don't want to jump to conclusions here but someone still running v2.9.6 from Russia...............

Malcolm.
by mstead
Sat Aug 26, 2006 3:38 am
Forum: General
Topic: Proxy-ARP And Public IP's Over A LAN
Replies: 2
Views: 1766

Proxy-ARP And Public IP's Over A LAN

Hi guys, I am trying to route a block of public IP's over a private LAN. The following is a diagram of what I am trying to achieve: http://www.eastcork.net/arp.jpg I can use the public IP on the 10.14.0.0/24 subnet. However I would like to use it on the 10.14.5.128/26 subnet. I enabled Proxy-ARP on ...
by mstead
Sat Aug 26, 2006 12:47 am
Forum: RouterBOARD hardware
Topic: RB112 Serial Port Setup Problem
Replies: 5
Views: 2677

RB112 Serial Port Setup Problem

Hi, I am trying to link a UPS to an RB112 but cannot set the port speed. I remove the serial console but still the settings cannot be changed. Also after a reboot the console comes back!! I can do this with the RB532 no problem so it must be related to the RB112. I don't know if this is a RouterOS o...
by mstead
Fri Aug 25, 2006 11:22 pm
Forum: Wireless Networking
Topic: Two SR5s in an RB112
Replies: 6
Views: 1601

I have about a dozen RB112's with two SR2's running with no problems. I also have several others with a SR9 and either a SR5 or SR2.. I only use the Pac Wireless POE-48i power injectors.. -Gerard Gerard, Do you run them at full power and are they in busy locations - am thinking duty cycle here? Do ...
by mstead
Fri Aug 25, 2006 5:42 pm
Forum: Wireless Networking
Topic: Two SR5s in an RB112
Replies: 6
Views: 1601

I would be interested to know the answer to this as well.

Reading the manual for the RB532 there seems to be ~10W spare for MiniPCI cards whereas its more like ~6W spare on the RB112.

Would I be correct in saying that if you run the SR5's at 200mW they will consume less power?

Malcolm
by mstead
Wed Aug 23, 2006 4:08 pm
Forum: Wireless Networking
Topic: WLM54g vrs CM9
Replies: 12
Views: 2881

Well I tried them :-( CM9 in scan picked up my station at -77 Thse cards - 88 Would not connect, I tried 2 cards 2ghz-10mhz nstreame on I'm sticking to the trusty cm9 for now That was exactly what I found - 10dB down on the CM9. Surely this cannot be due to an inferior RX frontend. I assumed the MT...
by mstead
Fri Jul 21, 2006 12:40 pm
Forum: General
Topic: ECMP Using The Same Gateway Address
Replies: 1
Views: 722

ECMP Using The Same Gateway Address

Hi, I have looked through the forums and this topic keeps coming up. However people seem to end up having to sidestep it as no solution is found. I have a small WISP in Ireland. I am currently feeding it with dual ADSL lines from the same company. They only have two subnets so now I want to add a th...
by mstead
Wed Apr 12, 2006 3:45 am
Forum: General
Topic: OSPF Invalid Routes Question
Replies: 0
Views: 539

OSPF Invalid Routes Question

Hi,

I am trying out OSPF on 2.9.20 and am getting invalid entries in my routing table. Is this normal and what is the reason they occur? I can post more info if it would help.

Thanks in advance

Malcolm.
by mstead
Tue Mar 28, 2006 10:38 pm
Forum: General
Topic: Redirecting To Local Hotspot Webpages
Replies: 4
Views: 1033

Can anyone suggest anything or is this impossible to do?

Malcolm
by mstead
Sun Mar 26, 2006 12:32 am
Forum: General
Topic: Redirecting To Local Hotspot Webpages
Replies: 4
Views: 1033

Redirecting To Local Hotspot Webpages

Hi, I have looked through the manuals but cannot find the answer to this one. I am running a pppoe based internet gateway. I want anyone who tries to access the internet without dialing in to see a couple of local webpages held on the Mikrotik server. I was thinking if I could access the hotspot pag...