Community discussions

Search found 23237 matches

by normis
Tue Sep 25, 2018 8:34 am
Forum: General
Topic: MikroTik's GPL compliance regarding RouterOS
Replies: 27
Views: 5174

Re: MikroTik's GPL compliance regarding RouterOS

Of course you will receive the changes and Kernel patches. You will even get it online (no CD), if you ask for it. Well, I asked and... I was ignored :). I tried it twice on email to mt@mikrotik.com 05/2018 and 02/2017. No respond. So what should I do to get the sources? I am curious to read them a...
by normis
Fri Sep 21, 2018 9:07 am
Forum: General
Topic: How to change mikrotik password if you forgot?
Replies: 1
Views: 86

Re: How to change mikrotik password if you forgot?

You can't.

Reinstall and reset is the only option.
by normis
Thu Sep 20, 2018 11:47 am
Forum: RouterBOARD hardware
Topic: 100Mb LAN - what's the point?
Replies: 11
Views: 744

Re: 100Mb LAN - what's the point?

OP has a point. New 60Ghz "Lite" model can do 60Ghz connection so up to Gbit over the air in full duplex and is specced with a 10/100 port. Mental! This is a CPE unit for connecting to an access point. If the AP has a gigabit connection and there are 8 CPEs connected, nobody can get more than 125Mb...
by normis
Wed Sep 19, 2018 2:13 pm
Forum: General
Topic: Add VirtIO-SCSI driver to CHR 6.40.9 (LONG-TERM)
Replies: 1
Views: 81

Re: Add VirtIO-SCSI driver to CHR 6.40.9 (LONG-TERM)

You seem to misunderstand how these versions work.
If we add something to long-term, it is no longer long term. This version can't be touched. Only this makes it so stable!
by normis
Tue Sep 18, 2018 1:46 pm
Forum: Wireless Networking
Topic: Mikrotik RB962UIGS wifi speed problem
Replies: 12
Views: 378

Re: Mikrotik RB962UIGS wifi speed problem

Bring it further away. Try other wifi frequency in settings. Make sure you have all 3 chains enabled.
by normis
Tue Sep 18, 2018 10:40 am
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 73
Views: 8560

Re: v6.44beta [testing] is released!

Remember that in MikroTik RouterOS, backup file is for restoring past configuration on the same device, not a safeguard against a lost or damaged device, for restoring on other devices, you should be using "export" config files.
by normis
Tue Sep 18, 2018 9:25 am
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 224
Views: 24756

Re: Winbox vulnerability: please upgrade

See above configuration line. It can't be default, because I don't know at what time you don't need any internet.
by normis
Mon Sep 17, 2018 3:38 pm
Forum: Announcements
Topic: Winbox v3.18 released!
Replies: 19
Views: 2381

Re: Winbox v3.18 released!

It is not a bug :D because you can't group something that is sorted by number, not by category. this is just how it works.
by normis
Mon Sep 17, 2018 1:47 pm
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 224
Views: 24756

Re: Winbox vulnerability: please upgrade

You can already do it. In system scheduler, add new entry that does this every 24 hours or whenever: /system package update check-for-updates once :delay 1s; :if ( [get status] = "New version is available") do={ install } https://wiki.mikrotik.com/wiki/Manual:Upgrading_RouterOS#RouterOS_auto-upgrade
by normis
Mon Sep 17, 2018 1:24 pm
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 224
Views: 24756

Re: Winbox vulnerability: please upgrade

Securely ? I only have winbox access opened to WAN and with different port than default one.
So it means you can keep using it without worry, and there is no urgent need for the manufacturer to force upgrade your device.
Also, how could we upgrade it, if you have a firewall.
by normis
Mon Sep 17, 2018 12:27 pm
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 224
Views: 24756

Re: Winbox vulnerability: please upgrade

I disagree. It is the job of the administrator to configure the device securerly, and then decide when to upgrade. MikroTik can't reboot mission critical devices without consent. We have no access to your devices. The vulnerability doesn't affect anyone that has the default firwall, or has configure...
by normis
Mon Sep 17, 2018 12:17 pm
Forum: General
Topic: DEVICE HACKED
Replies: 8
Views: 7135

Re: DEVICE HACKED

Guys, if your device has no firewall and winbox is open to the world, your device is in danger. Please upgrade, change password, and then inspect every line of configuration for things you don't recognize. Remove everything your don't recognize, then implement a secure firewall according to the manu...
by normis
Mon Sep 17, 2018 10:46 am
Forum: General
Topic: WInbox "Master Password"
Replies: 5
Views: 1834

Re: WInbox "Master Password"

You can't. That is the whole point of the password :)
by normis
Mon Sep 17, 2018 10:29 am
Forum: General
Topic: Really simple question about RB3011UiAS-RM
Replies: 6
Views: 224

Re: Really simple question about RB3011UiAS-RM

No it does not. There are other devices with wireless.
by normis
Fri Sep 14, 2018 2:40 pm
Forum: General
Topic: Can't Log in After Upgrade
Replies: 20
Views: 654

Re: Can't Log in After Upgrade

Did you try to log in with SSH/Telnet/Webfig also?
by normis
Fri Sep 14, 2018 11:47 am
Forum: Announcements
Topic: Security announcement blog
Replies: 90
Views: 11791

Re: Security announcement blog

We also have RSS for those that use it. Both in the Blog and also for releases.
by normis
Fri Sep 14, 2018 11:31 am
Forum: Beginner Basics
Topic: Got hacked, think I need help with configuring routerOS
Replies: 17
Views: 970

Re: Got hacked, think I need help with configuring routerOS

Netinstall gives the option to restore config from an RSC file like you have. Try that. It will only apply the config in your file, no defaults.
by normis
Fri Sep 14, 2018 10:59 am
Forum: Beginner Basics
Topic: Got hacked, think I need help with configuring routerOS
Replies: 17
Views: 970

Re: Got hacked, think I need help with configuring routerOS

Yes, it will be accepted.
That is the wrong command to restore an RSC file, you are trying to restore a backup file, but you have an export file. Different things.

You need

/import file=name

in the terminal
by normis
Fri Sep 14, 2018 10:40 am
Forum: Beginner Basics
Topic: Got hacked, think I need help with configuring routerOS
Replies: 17
Views: 970

Re: Got hacked, think I need help with configuring routerOS

Johannes, what commands are you entering, when you get "file not found"?

I suggest emailing support@mikrotik.com with the RSC file, and more details about where you see the error. It might be due to incorrectly entered command
by normis
Thu Sep 13, 2018 1:32 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: FEATURE REQUEST: LED Dark-mode settings available on all devices
Replies: 4
Views: 826

Re: FEATURE REQUEST: LED Dark-mode settings available on all devices

some devices have the led hard wired to the power, you can't control them in software.
we try to include software control in newer products though
by normis
Thu Sep 13, 2018 11:57 am
Forum: General
Topic: Mikrotik The Hack Continues following Winbox attack STP attack?
Replies: 2
Views: 342

Re: Mikrotik The Hack Continues following Winbox attack STP attack?

You have two choices

1) Netinstall with v6.43 and reconfigure it, this is the safe choice
2) Remove Scheduler rule, Scripts, SOCKS config and fix the firewall rules that the attackers have changed. CHANGE YOUR PASSWORD also.
by normis
Wed Sep 12, 2018 4:52 pm
Forum: General
Topic: Changed router country, now can't access router
Replies: 4
Views: 143

Re: Changed router country, now can't access router

Yes, most likely completely unrelated.

Unplug power, hold reset button, plug in power, keep holding until the user LED blinks. Then release to reset.
by normis
Wed Sep 12, 2018 2:31 pm
Forum: Beginner Basics
Topic: Got hacked, think I need help with configuring routerOS
Replies: 17
Views: 970

Re: Got hacked, think I need help with configuring routerOS

that is not the correct command to output.

/export hide-sensitive
by normis
Wed Sep 12, 2018 2:21 pm
Forum: General
Topic: Can't change username on ROS 6.43 [SOLVED]
Replies: 4
Views: 399

Re: Can't change username on ROS 6.43 [SOLVED]

Make a new user, then re-login. There are big security changes in last versions, rename is no longer possible.
by normis
Wed Sep 12, 2018 2:00 pm
Forum: Announcements
Topic: Newsletter #84
Replies: 33
Views: 4398

Re: Newsletter #84

Am I correct in assuming the RB4011iGS+RM is a fanless model? That would be awesome! :D Yes, both models are fanless, and have a very big heatsink (half of the body itself is the heatsink). A thing to note, is that the tested ambient temperature level is up to +70C on the Ethernet only model, and +...
by normis
Wed Sep 12, 2018 1:42 pm
Forum: RouterBOARD hardware
Topic: Design error in LtAP Mini
Replies: 6
Views: 578

Re: Design error in LtAP Mini

We tried to do the same, and found that you have drilled the hole to one side, so the connector is hitting the card. See attachment that illustrates the problem.
When drilling in the center, the case can be closed with identical connectors in place.
20180912_105237.jpg
by normis
Wed Sep 12, 2018 12:53 pm
Forum: Announcements
Topic: Security announcement blog
Replies: 90
Views: 11791

Re: Security announcement blog

Why would you put every beta release on a security announcement blog?
Please subscribe to the releases RSS or Email list, those exists for 10 years or more.

The blog is for long-term stable releases and security announcements or other monumenally important things, not every nightly build release.
by normis
Wed Sep 12, 2018 10:53 am
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 224
Views: 24756

Re: Winbox vulnerability: please upgrade

This is normal, if you open a Terminal. There is no hacker here.
by normis
Wed Sep 12, 2018 10:43 am
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 224
Views: 24756

Re: Winbox vulnerability: please upgrade

Sorry I don't understand that question. Try to re-phrase it.
by normis
Wed Sep 12, 2018 9:43 am
Forum: Announcements
Topic: Security announcement blog
Replies: 90
Views: 11791

Re: Security announcement blog

BUGFIX UPDATE 6.40.9 RELEASED -- https://blog.mikrotik.com/software/bugf ... eased.html

Well, that was the first and last blog entry about a release...
What other releases did you expect? There have been no other releases!
by normis
Wed Sep 12, 2018 9:40 am
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 224
Views: 24756

Re: Winbox vulnerability: please upgrade

Let me understand this.

1. You have an open router with no firewall
2. You ask why somebody connected to it

Correct?
by normis
Wed Sep 12, 2018 8:44 am
Forum: General
Topic: Security breached devices - Port TCP 4145
Replies: 11
Views: 993

Re: Security breached devices - Port TCP 4145

nabilx, this has been discussed many times already. Yes, disable socks, fix the firewall (it also could be modified) and make sure you change your passwords. And run the latest 6.43
by normis
Tue Sep 11, 2018 1:30 pm
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 224
Views: 24756

Re: Winbox vulnerability: please upgrade

How about possibility of a staff member, that used the attack script from the allowed IP range?
IP services works well, there is zero evidence that this limit can be overcome in some way.
by normis
Tue Sep 11, 2018 1:20 pm
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 224
Views: 24756

Re: Winbox vulnerability: please upgrade

Did you always have the IP SERVICES limitation? The hack could have happened last year. Is it correctly set up, and was it always?
by normis
Tue Sep 11, 2018 1:11 pm
Forum: Scripting
Topic: Crazy bug mess in routerOS wireless scripting
Replies: 5
Views: 180

Re: Crazy bug mess in routerOS wireless scripting

Please post full command entry and output information, maybe you are doing something differently.
by normis
Mon Sep 10, 2018 11:31 am
Forum: Wireless Networking
Topic: SXTsq Lite60
Replies: 5
Views: 271

Re: SXTsq Lite60

I suggest looking at this product from the mentioned point of view. For higher requirements, we still have the other models.
by normis
Mon Sep 10, 2018 11:20 am
Forum: Wireless Networking
Topic: SXTsq Lite60
Replies: 5
Views: 271

Re: SXTsq Lite60

it is a client device for multipoint setups, so if your wAP60G has Gigabit port and capabilities, you will split it into 8 clients. Then each client doesn't need 1Gbit port.
by normis
Mon Sep 10, 2018 9:39 am
Forum: Announcements
Topic: Newsletter #84
Replies: 33
Views: 4398

Newsletter #84

In this MikroTik newsletter: - new RB4011 series - CWDM products - combine up to eight fiber links into one - new 2.4 GHz sector AP mANTBox 2 12s - new 60 GHz CPE SXTsq Lite60 - new 6 GHz AP BaseBox 6 - new SFP 1.25 Gbps modules for 80 km links - upcoming MUM events in 2018 Download newsletter: http...
by normis
Fri Sep 07, 2018 4:21 pm
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 178
Views: 11987

Re: RB4011

There is no speaker
by normis
Fri Sep 07, 2018 1:46 pm
Forum: General
Topic: iPhone tethering to Mikrotik?
Replies: 12
Views: 4014

Re: iPhone tethering to Mikrotik?

Yes, just like any other wireless connection. Router must be in wireless "Station" mode
by normis
Fri Sep 07, 2018 10:02 am
Forum: RouterBOARD hardware
Topic: RB4011
Replies: 178
Views: 11987

Re: RB4011

Yes, like the above poster points out, consistency is required to be able to compare devices. The test must be done in the same way, so you will know which product is better than others. Absolute numbers don't even matter that much. It is the difference that matters.
by normis
Thu Sep 06, 2018 4:47 pm
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 224
Views: 24756

Re: Winbox vulnerability: please upgrade

ROS is that old default settings
That is not correct. Since beginning of default firewall, it protects the default wan port. The issue is that some people want to make VPN in their home router, so they turn off the firewall.
by normis
Thu Sep 06, 2018 11:27 am
Forum: RouterBOARD hardware
Topic: Cracked cover on RouterBOARD DISC Lite5
Replies: 39
Views: 2969

Re: Cracked cover on RouterBOARD DISC Lite5

Something like that. But since we have no control over the distributors, they might have some other procedure. They will decide how to handle it best.
by normis
Thu Sep 06, 2018 10:27 am
Forum: RouterBOARD hardware
Topic: Cracked cover on RouterBOARD DISC Lite5
Replies: 39
Views: 2969

Re: Cracked cover on RouterBOARD DISC Lite5

Distributors have this information, like I said, you must contact them to find out the details. I am not in a position to post serial numbers on a forum.
by normis
Wed Sep 05, 2018 4:28 pm
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 224
Views: 24756

Re: Winbox vulnerability: please upgrade

I have contacted them on behalf of MikroTik. Let's see if it helps
by normis
Wed Sep 05, 2018 4:19 pm
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 224
Views: 24756

Re: Winbox vulnerability: please upgrade

Boris, did you read the first post in this thread? Did you read the blog entry?
https://blog.mikrotik.com/security/winb ... ility.html
by normis
Wed Sep 05, 2018 3:27 pm
Forum: RouterBOARD hardware
Topic: Cracked cover on RouterBOARD DISC Lite5
Replies: 39
Views: 2969

Re: Cracked cover on RouterBOARD DISC Lite5

Sorry but I can't know which device could possibly break. This is a thing that can happen randomly.
by normis
Wed Sep 05, 2018 3:25 pm
Forum: Announcements
Topic: Winbox vulnerability: please upgrade
Replies: 224
Views: 24756

Re: Winbox vulnerability: please upgrade

If you're curious how the bug works, this article is a good read: https://n0p.me/winbox-bug-dissection/ This article respectively the new vulnerability CVE-2018-14847 makes me afraid of using any mikrotik product anymore There is no new vulnerability, it is all the same old. It is in one of the fir...