Community discussions

MUM Europe 2020

Search found 82 matches

by zaherhamiyah
Wed May 02, 2018 8:23 am
Forum: General
Topic: Again, how to use all public IPs i have. [SOLVED]
Replies: 10
Views: 996

Re: Again, how to use all public IPs i have. [SOLVED]

The easiest solution, will be to use a script that changes each hour for example the srcnatted public ip.

Forget about this statement, it is not related to the main goal of this thread. :)


Best Regards
by zaherhamiyah
Tue May 01, 2018 11:40 pm
Forum: General
Topic: Again, how to use all public IPs i have. [SOLVED]
Replies: 10
Views: 996

Re: Again, how to use all public IPs i have. [SOLVED]

Hello, same.........does not help for this purpose. I am affraid of asymmetric routing problem here. Also will Mikrotik keep tracking all connections from both directions between each public ip and its own related (translated) internal ip. Just quick questions came to my mind.... I will check for a ...
by zaherhamiyah
Tue May 01, 2018 8:29 pm
Forum: General
Topic: Again, how to use all public IPs i have. [SOLVED]
Replies: 10
Views: 996

Re: Again, how to use all public IPs i have. [SOLVED]

No explanations (except that 199.10.1.224/22 is not a valid range of addresses so I use 199.10.224.0/22 instead). /ip firewall nat add chain=srcnat action=src-nat to-addresses=199.10.224.1-192.10.227.254 out-interface=your-wan-interface-name Hello Sindy, are you sure, Mikrotik will use all public i...
by zaherhamiyah
Tue May 01, 2018 8:25 pm
Forum: General
Topic: Again, how to use all public IPs i have. [SOLVED]
Replies: 10
Views: 996

Re: Again, how to use all public IPs i have. [SOLVED]

No explanations (except that 199.10.1.224/22 is not a valid range of addresses so I use 199.10.224.0/22 instead). /ip firewall nat add chain=srcnat action=src-nat to-addresses=199.10.224.1-192.10.227.254 out-interface=your-wan-interface-name :). ofcourse i gave as an example without checking if it ...
by zaherhamiyah
Tue May 01, 2018 6:00 pm
Forum: General
Topic: Again, how to use all public IPs i have. [SOLVED]
Replies: 10
Views: 996

Again, how to use all public IPs i have. [SOLVED]

Hi,

i have for example 199.10.1.224/22 (not my public ip). I want to srcnat all customers using all public ips from the same ISP in the example. If doable.

Please no need for more setup explanations. The question is so simple. If anyone has an idea....I am all ears.


Best Regards.
by zaherhamiyah
Tue May 01, 2018 5:57 pm
Forum: General
Topic: public ip conf on srcnat [SOLVED]
Replies: 17
Views: 1299

Re: public ip conf on srcnat [SOLVED]

SNAG- 2018-04-29 01 18 58.png
by zaherhamiyah
Tue May 01, 2018 7:30 am
Forum: General
Topic: Method to mark youtube and facebook connections
Replies: 11
Views: 3604

Re: Method to mark youtube and facebook connections

I tested two configurations. Method 1 did not work at all, while method 2 worked successfully. Method #1: add action=add-dst-to-address-list address-list=youtube address-list-timeout=none-dynamic chain=prerouting in-interface=all-ppp protocol=tcp tls-host=*.youtube.com add action=add-dst-to-address-...
by zaherhamiyah
Sun Apr 29, 2018 1:20 am
Forum: General
Topic: public ip conf on srcnat [SOLVED]
Replies: 17
Views: 1299

Re: public ip conf on srcnat [SOLVED]

@Discmandj


I am from Lebanon. And u?
Welcome eben El 3am , me too , so you want to use src nat instead of masquerade right?


Gesendet von iPhone mit Tapatalk
eben El 3am??????????!!!!!!!!!!! UMMMMMMMMMMMm....
Call me @ my number....you can know it.:)

Best Regards.
by zaherhamiyah
Sun Apr 29, 2018 12:59 am
Forum: General
Topic: public ip conf on srcnat [SOLVED]
Replies: 17
Views: 1299

Re: public ip conf on srcnat [SOLVED]

If your public IPs do not change then I think its okay to use srcnat vice masquerade. However, I have a dual WANIP and dynamic public IPs and by using masquerade and out-interface list=WAN, I am covered! Also I believe if one wants to use hairpin nat, its necessary to identify the public IPs?? Bro,...
by zaherhamiyah
Sat Apr 28, 2018 6:50 pm
Forum: General
Topic: public ip conf on srcnat [SOLVED]
Replies: 17
Views: 1299

Re: public ip conf on srcnat [SOLVED]

@Discmandj


I am from Lebanon. And u?
by zaherhamiyah
Sat Apr 28, 2018 6:46 pm
Forum: General
Topic: public ip conf on srcnat [SOLVED]
Replies: 17
Views: 1299

Re: public ip conf on srcnat [SOLVED]

Instead of asking for some bizarre solution, why not tell us up front what the functional requirement is........ For example, If have a block of public IPs, how do I ensure srcnat will work for all outgoing traffic for all users/servers etc......... In other words why are you trying to mash a list ...
by zaherhamiyah
Sat Apr 28, 2018 6:43 pm
Forum: General
Topic: public ip conf on srcnat [SOLVED]
Replies: 17
Views: 1299

Re: public ip conf on srcnat [SOLVED]

Guys,

the goal of my question is that if i use CIDR notation, will Mikrotik take the whole range and make inside users' ips srcnatted based on a round-robin way.?

Or i have to just use one public ip and lose the others within the range.

Thanks
by zaherhamiyah
Sat Apr 28, 2018 6:39 pm
Forum: General
Topic: public ip conf on srcnat [SOLVED]
Replies: 17
Views: 1299

Re: public ip conf on srcnat [SOLVED]

Instead of asking for some bizarre solution, why not tell us up front what the functional requirement is........ For example, If have a block of public IPs, how do I ensure srcnat will work for all outgoing traffic for all users/servers etc......... In other words why are you trying to mash a list ...
by zaherhamiyah
Sat Apr 28, 2018 6:37 pm
Forum: General
Topic: public ip conf on srcnat [SOLVED]
Replies: 17
Views: 1299

Re: public ip conf on srcnat [SOLVED]

Hi, i want to check if i can put for example: /ip firewall nat> add chain=srcnat out-interface=ether1-wan action=src-nat to-addresses=[b]199.10.1.224/22[/b] instead of: 199.10.1.225 as a public IP. Would MK, take all usage of pulic IPs in 199.10.1.224/22 ????? Thanks. This is not my real IP. I just...
by zaherhamiyah
Sat Apr 28, 2018 6:22 pm
Forum: General
Topic: public ip conf on srcnat [SOLVED]
Replies: 17
Views: 1299

public ip conf on srcnat [SOLVED]

Hi,

i want to check if i can put for example:
/ip firewall nat> add chain=srcnat out-interface=ether1-wan action=src-nat to-addresses=199.10.1.224/22
instead of: 199.10.1.225 as a public IP.

Would MK, take all usage of pulic IPs in 199.10.1.224/22 ?????


Thanks.
by zaherhamiyah
Fri Apr 27, 2018 8:44 am
Forum: General
Topic: Backup Script Problem with date time format [SOLVED]
Replies: 2
Views: 661

Re: Backup Script Problem with date time format [SOLVED]

https://forum.mikrotik.com/viewtopic.php?t=95845 It’s not real simple. WOW! Forget it. I suffered a lot (since i am not programmer) to make email daily backup works after trial and error. And of this one just to change the date/time format. :( P.S. the normal backup from /system backup section, mak...
by zaherhamiyah
Fri Apr 27, 2018 12:53 am
Forum: General
Topic: Backup Script Problem with date time format [SOLVED]
Replies: 2
Views: 661

Backup Script Problem with date time format [SOLVED]

Hi, i have this script: /export file=([/system identity get name] . "-" . [:pick [/system clock get date] 7 11] . [:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 4 6]. ".rsc"); :delay 5; The result is: System identity- 2018apr27 .rsc I need to make it like this: System identit...
by zaherhamiyah
Thu Apr 26, 2018 5:39 pm
Forum: General
Topic: IP Pool [SOLVED]
Replies: 1
Views: 265

IP Pool [SOLVED]

Hi All, I want to know if it is possible to create a full class A, B or C in the private range in ip pool. I check the manual, it is not clear if we can do it if it is availabe as a feature. /ip pool> add ranges= Ranges ::= Range[,Ranges] (max 100 times) Range ::= A.B.C.D[-A.B.C.D |0..32 |/A.B.C.D ]...
by zaherhamiyah
Thu Apr 26, 2018 2:41 am
Forum: General
Topic: Queue Tree and CCR
Replies: 0
Views: 274

Queue Tree and CCR

Hi,

we have two options (check below with reference). Which one is the best?

1 or 2?

1-
SNAG- 2018-05-02 08 37 27.png

2-




Thanks.
SNAG- 2018-05-02 08 42 41.png


Reference
SNAG- 2018-04-26 01 39 53.png

Thanks.
by zaherhamiyah
Thu Apr 26, 2018 2:37 am
Forum: General
Topic: MQ PFIFO
Replies: 0
Views: 456

MQ PFIFO

Hi,

based on Janis Megis presention.

I want to know if this is valid for CCR1016 and where to do it?

1- Does this mean that if i have a queue tree, then i should do it?
2- i did not know how to check it in /system resources irq menu. How?


Thanks.
by zaherhamiyah
Thu Apr 26, 2018 2:22 am
Forum: General
Topic: Interface Queue Type
Replies: 0
Views: 268

Interface Queue Type

Hi All,

I want to know if i have to change the Interface Queue Type of a PPPoE Interface client on MK.


This is on my MK



Thanks.
by zaherhamiyah
Wed Apr 25, 2018 2:29 am
Forum: General
Topic: Method to mark youtube and facebook connections
Replies: 11
Views: 3604

Re: Method to mark youtube and facebook connections

Hi Sindy, yes the count was "0" for both youtube and facebook (i did the tests again). Below is the configuration: 0 chain=prerouting action=accept protocol=tcp in-interface=ether2-LAN packet-size=0-80 log=no log-prefix="" 1 chain=prerouting action=mark-connection new-connection-mark=FACEBOOK-CONN p...
by zaherhamiyah
Wed Apr 25, 2018 2:04 am
Forum: General
Topic: Strange results from two different RBs with the same setup [SOLVED]
Replies: 3
Views: 365

Re: Strange results from two different RBs with the same setup [SOLVED]

You are right.

That cleared the picture to me.

I did tests also on forward and postrouting chaing with connection marking. The same results. Internal IPs, appeared in address list.

But the problem is that with RB 750 r2, this does not happen!!!!

:)
by zaherhamiyah
Wed Apr 25, 2018 12:01 am
Forum: General
Topic: Method to mark youtube and facebook connections
Replies: 11
Views: 3604

Re: Method to mark youtube and facebook connections

the configuration above did not work Have you analyzed which part did not work? Use /ip firewall mangle print stats to see whether the rules with tls-host work. My problem during testing was that my Android phone has established a TLS session to Youtube once forever, so I had to disconnect it from ...
by zaherhamiyah
Tue Apr 24, 2018 11:56 pm
Forum: General
Topic: Strange results from two different RBs with the same setup [SOLVED]
Replies: 3
Views: 365

Strange results from two different RBs with the same setup [SOLVED]

I have RB CCR10-16-12G and heX Lite. Both with the same setup (pppoe server, wan, lan, etc...) When i use: /ip firewall mangle add action=add-src-to-address-list address-list=FACEBOOK-MANGLE-ADDRLIST address-list-timeout=none-dynamic chain=forward in-interface=ether1-wan layer7-protocol=facebook add...
by zaherhamiyah
Tue Apr 24, 2018 11:21 pm
Forum: General
Topic: Method to mark youtube and facebook connections
Replies: 11
Views: 3604

Re: Method to mark youtube and facebook connections

Maybe look into using TLS-Host TLS-host matcher is similarly resource-intensive as L7 matcher - it uses pattern matching as well, except that the pattern syntax is more limited (thus simpler to execute) and that it takes place only after parsing the packet for being a TLS Client Hello and for conta...
by zaherhamiyah
Tue Apr 24, 2018 8:33 pm
Forum: General
Topic: Disable Queue at Certain Times [SOLVED]
Replies: 3
Views: 597

Re: Disable Queue at Certain Times [SOLVED]

Thanks CZFan and Sindy.

I knew that i can play with mangle rules times or scheduling, but it is a administrative headache to work on both solutions.

But i think i prefer to work on CZFan's method.

I hope Mikrotik guys, add timeing option for queue tree section.


:-D
by zaherhamiyah
Tue Apr 24, 2018 6:34 am
Forum: General
Topic: Disable Queue at Certain Times [SOLVED]
Replies: 3
Views: 597

Disable Queue at Certain Times [SOLVED]

Hello Guys, I have simple queues (QoS per user-ip) with limitation during day and unlimited speeds after midnights I have also queue tree, for traffic prioritization. Users after midnight are limited by queue tree only. For example if someone watching youtube or downloading something from internet, ...
by zaherhamiyah
Sat Apr 21, 2018 2:30 pm
Forum: General
Topic: Method to mark youtube and facebook connections
Replies: 11
Views: 3604

Re: Method to mark youtube and facebook connections

Thanks Sindy,

I will check and test your post and revert back soon. :wink:
by zaherhamiyah
Fri Apr 20, 2018 2:01 pm
Forum: General
Topic: Method to mark youtube and facebook connections
Replies: 11
Views: 3604

Method to mark youtube and facebook connections

I have 800 internet users and want to mark youtube and facebook connections to prioritize traffic. I ran script for whatsapp, to fetch DNS cache and it worked very well... But for youtube and facebook it did not. I have CCR1016 The option i have it to use: 1- Layer7 protocols . I am affraid that CC...
by zaherhamiyah
Thu Apr 19, 2018 2:07 pm
Forum: General
Topic: icmp marking is showing tcp protocol in connection tracking [SOLVED]
Replies: 1
Views: 247

icmp marking is showing tcp protocol in connection tracking [SOLVED]

I have mangled ICMP traffic, but it is show some icmp protocols and the rest is TCP protocol in connection tracking.

illustration in screenshots....

Do you have explanation?

Thanks.

Mangle Rules:
SNAG- 2018-04-19 1.24.35 PM .png
Connection Tracking:
SNAG- 2018-04-19 1.24.18 PM .png
by zaherhamiyah
Tue Dec 27, 2016 4:02 am
Forum: General
Topic: A story to tell about troubleshoting PPPoE and DNS
Replies: 0
Views: 250

A story to tell about troubleshoting PPPoE and DNS

I came to customer who has two ISPs. Mikrotik RB connected to both....but no loadblancing is needed. Manual failover is required. One of ISPs use PPPoE connectivity method. The problem was each time mikrotik restarts or connection lost, we have to wait around 5 to 10 minutes to retain connection.......
by zaherhamiyah
Tue Dec 27, 2016 3:50 am
Forum: General
Topic: Client to server PPTP VPN and DNS Split
Replies: 0
Views: 339

Client to server PPTP VPN and DNS Split

Dears, did anyone came into situation where you want VPN users at branch offices to browse internet from their local internet instead of passing through Head office's internet. This is client to vpn pptp not site to site vpn. Note: this feature is available at old cisco vpn client..... Please advise...
by zaherhamiyah
Tue Dec 27, 2016 3:47 am
Forum: General
Topic: PCC with RB2011 vs. RB450G
Replies: 2
Views: 456

Re: PCC with RB2011 vs. RB450G

Hello Pukkita, you are right..... I just noticed a big mistake i did....after 3 days of leaving the router and now with clear mind i found the conf mistake. It was very easy and subtle conf that any one could do that without paying attention. May be because i am getting old. hahahahah the mistake wa...
by zaherhamiyah
Sun Dec 25, 2016 9:13 pm
Forum: General
Topic: PCC with RB2011 vs. RB450G
Replies: 2
Views: 456

PCC with RB2011 vs. RB450G

I had configured PCC with 4 WAN links successfully, and the fifth WAN link for web browsing only on RB450G. Today, I used the same configuration on RB2011, but did not work at all.except for load balancing via PCC. browsing did not go to fifth link at all. Is this related to RB2011 that has two inte...
by zaherhamiyah
Thu Apr 12, 2007 7:56 pm
Forum: General
Topic: [ASK] how to make mikrotik count only traffic to internet?
Replies: 8
Views: 1492

my dear i think you can google internet for NTop ,,,, it is one of the best progs for your purpose
by zaherhamiyah
Tue Jun 27, 2006 7:55 am
Forum: General
Topic: cache http downloads
Replies: 8
Views: 1583

yes
by zaherhamiyah
Tue Jun 27, 2006 12:24 am
Forum: General
Topic: cache http downloads
Replies: 8
Views: 1583

u have to know that 8kbps=1KB so 80kbps=10KB. KB=kilobytes and kb=kilobits Kilobytes is for storage and kilobits is for speed. KIB in Mikrotik is about KB they use it ,and it is an old abbreviation that nobody use today.i dont know why they still use the mikroik guys. At the end i am using now 500MB...
by zaherhamiyah
Sun Jun 11, 2006 2:04 pm
Forum: General
Topic: i hope this question is not silly
Replies: 4
Views: 972

OK!
First: what should i use for mangle?forward,prerouting,postrouting,input,or output?
Second: i use simple Qs here so i cant use the packect mark unless u ask me to use the settings under the advanced tab in simple Q settings.Does this work?
by zaherhamiyah
Sun Jun 11, 2006 1:20 pm
Forum: General
Topic: i hope this question is not silly
Replies: 4
Views: 972

i hope this question is not silly

i use simple Q/user and i use MT as a cache server.My problem is that when a user tries to download a file already found in the cache for example MSN messeger (15 MB) and the user has 80kpbs download limit the server will consider this limit from SERver to user so the user will not feel the speed of...
by zaherhamiyah
Sun Jun 11, 2006 1:08 pm
Forum: General
Topic: Time Format
Replies: 14
Views: 3697

Are you sure your problem lies with the time format and not with some other setting? If you create a most basic simple queue in winbox (just the target IP and the time field) do you see the counters change? And that's my friend why they call it Simple Queue to make our lives more complicated :lol: ...
by zaherhamiyah
Sun Jun 11, 2006 12:24 am
Forum: General
Topic: Time Format
Replies: 14
Views: 3697

How about if you tried to read the manual or maybe just tried to look at the console and read what it says?... ok, the manual is less then readable on this subject but winbox gives a hint when the second field is "1d 00:00:00" The time field for simple queues is starttime-duration,weekdays to use! ...
by zaherhamiyah
Sat Jun 10, 2006 5:06 pm
Forum: General
Topic: Time Format
Replies: 14
Views: 3697

name="zaher" target-addresses=192.168.0.4/32 dst-address=0.0.0.0/0 interface=all parent=none direction=both priority=8 queue=default-small/default-small limit-at=0/0 max-limit=24000/80000 total-queue=default-small time=17h-1h30m,sun,mon,tue,wed,thu,fri,sat This is a sample conf of my simple Q. My q...
by zaherhamiyah
Sat Jun 10, 2006 4:58 pm
Forum: General
Topic: Time Format
Replies: 14
Views: 3697

Ohhhhhh God !!!!!!!!!!!
can u plz read the first post and then try to help me ?plz
by zaherhamiyah
Sat Jun 10, 2006 3:27 pm
Forum: General
Topic: Time Format
Replies: 14
Views: 3697

[xxxx@DeltaNet] system ntp server> print enabled: no broadcast: no multicast: no manycast: no [xxxx@DeltaNet] system ntp client> print enabled: no mode: unicast primary-ntp: 0.0.0.0 secondary-ntp: 0.0.0.0 status: stopped these are the conf of my NTP but again i think this has nothing to do with NTP
by zaherhamiyah
Sat Jun 10, 2006 12:55 pm
Forum: General
Topic: 2 isp
Replies: 14
Views: 3153

i dont have much time to read all of your config but i advice increase your DNS cache to 10MB=10240KB
by zaherhamiyah
Sat Jun 10, 2006 12:52 pm
Forum: General
Topic: Time Format
Replies: 14
Views: 3697

Dear i think this has nothing to do with NTP Client Or Server.
I am talking about the Time we set in Simple Queue to make it Working during that time from start to end.But the problem is that it didn't work as mentioned above.
by zaherhamiyah
Sat Jun 10, 2006 1:20 am
Forum: General
Topic: Time Format
Replies: 14
Views: 3697

Time Format

Why when i put time limit at my simple Qs the rules dont work? For example: start time=17:30:00(5 and 30 afternoon)/End time=00:00:00 (midnight) Is my understanding of this format correct or not?and if it is correct why the rules dont work when i put that time in its place? Thanks in advance. zaherh...
by zaherhamiyah
Sat Jun 03, 2006 11:56 pm
Forum: General
Topic: Block MSN Messenger
Replies: 11
Views: 6220

well guys i say to u dont use any of these suggestions.why? coz msn messenger uses 1863 and 445 tcp ports.u can user netstat -n to see which msn messenger uses when it connects. so i created a jump rule inside the forward chain like that: 0 ;;; Drop invalid connection packets chain=forward connectio...
by zaherhamiyah
Sat Jun 03, 2006 11:10 pm
Forum: General
Topic: web proxy --> cache size/ram size
Replies: 3
Views: 1005

By default the proxy cache can use as much disk space as there is allocated for it. When the system allocates the space for the proxy cache, 1/7th of the total partition (disk) size is reserved for the system, but not less than 50MB. The rest is left for the proxy cache. The system RAM size is consi...
by zaherhamiyah
Sat Jun 03, 2006 11:04 pm
Forum: General
Topic: drop port scanners
Replies: 4
Views: 2253

4 ;;; port scanners to list chain=input protocol=tcp psd=21,3s,3,1 action=add-src-to-address-list address-list=port scanners address-list-timeout=2w 5 ;;; drop port scan connections chain=input src-address-list=port scanners action=drop i use only the following two rules in input chain and it works ...
by zaherhamiyah
Sat Jun 03, 2006 10:57 pm
Forum: General
Topic: troubleshoot msn
Replies: 1
Views: 520

First u have to look at what Microsoft says about this error code and then u look at your configuration that u did in MT. And as u r new to MT,and i was like u b4,u have to study the manual carefully and ofcourse i say that the manual isn't perfect and needs a lot of improvment but anyway it will he...
by zaherhamiyah
Thu Jun 01, 2006 12:14 pm
Forum: General
Topic: what first ?
Replies: 6
Views: 1091

:idea: first we have to know what are the goals u intend to reach. for example i have the following conf: 0 chain=forward p2p=all-p2p src-address-list=not_me action=mark-connection new-connection-mark=p2p-con passthrough=yes 1 chain=forward connection-mark=!p2p-con src-address-list=not_me action=mar...
by zaherhamiyah
Thu Jun 01, 2006 11:54 am
Forum: General
Topic: msn problems over mikrotik
Replies: 16
Views: 4313

Also as normis said u have to try UPNP and try to read the manual part about it. The UPnP protocol is used for most of DirectX games as well as for various Windows Messenger features (remote asisstance, application sharing, file transfer, voice, video) from behind a firewall. It is highly recommende...
by zaherhamiyah
Thu Jun 01, 2006 11:28 am
Forum: General
Topic: msn problems over mikrotik
Replies: 16
Views: 4313

nice to meet u romana, i am proud to meet a girl from my country lebanon coz i live in lebanon and i am lebanese to the bones. :lol: and for the problem u have i think u can try to use socks proxy by enabling it at MT and configure MSN messenger to use it, but without username and password. :idea: a...
by zaherhamiyah
Tue May 30, 2006 1:52 am
Forum: General
Topic: cache http downloads
Replies: 8
Views: 1583

thank u normis

thanks to u normis i was suffering the same problem and now when i read ur post ,i changed the max object size to 100 MB and made some tests and it worked so great.And this what i wanted from a long time. i thought that MT dont cache Data files. My test was to download a file and then download it ag...
by zaherhamiyah
Tue Apr 18, 2006 10:19 am
Forum: General
Topic: mikrotik makes me crazy
Replies: 4
Views: 1049

hi maroon,
u can catch me at :
zaherhamiyah@hotmail.com
by zaherhamiyah
Mon Apr 17, 2006 9:12 pm
Forum: General
Topic: mikrotik makes me crazy
Replies: 4
Views: 1049

heheheheheh
u make me drop on the floor while i am laughing.

but my dear ,
as u know no one is perfect
so if u can think as the USA guy thought and gave me a clue i think u have to think again.!!!!!!!!!!!!!!!!!!!!!!!!!!

Yours ,

zaher hamiyah[/b]
by zaherhamiyah
Sun Apr 16, 2006 1:06 pm
Forum: General
Topic: ping issue
Replies: 6
Views: 1296

My guess would be an accidental filter rule ment for the external interface that got aplied to the internal interface.. The issue could be a simple typo / oops in a filter rule... I have made MANY oops in filter rules in my day... I am a,,, dare I say it ,,, CNE and I mess up with the best of them....
by zaherhamiyah
Sun Apr 16, 2006 12:14 am
Forum: General
Topic: ip web proxy
Replies: 4
Views: 1060

Mabye start some other business like sheep breeding :wink: There are no need for queues p2p filtering and so on.... well Mr as u know microsoft sucks and it is still the largest and richest company in the world and it still sucks!!!!!!!!!!!!!!!!!!!! and we keep using what is called Windows XPired!!...
by zaherhamiyah
Sat Apr 15, 2006 11:55 pm
Forum: General
Topic: ping issue
Replies: 6
Views: 1296

Dear Christian, First :u need to notice that : 1-u dont need to read all my posts 2-i have only 19 posts and u have about 767 posts 3-i hold MCP,MCDST,MCSA(S+M) in 2000 & 2003,MCSE(S+M) in 2000 & 2003,CCNA,and CCA 4-i am new to linux world Second: 1-i read all the manual regarding what i want from i...
by zaherhamiyah
Sat Apr 15, 2006 11:34 pm
Forum: General
Topic: ip web proxy
Replies: 4
Views: 1060

my dear, if u go to http://forum.mikrotik.com//viewtopic.php?t=7696 and read what cmit-Christian Meis-said (if RouterOS does detect that P2P protocol at all). you will notice that mikrtoik doesn't catch or stop p2p tarrffic.and by the way i tried whay they said in there manual and applied all their ...
by zaherhamiyah
Sat Apr 15, 2006 11:17 pm
Forum: General
Topic: prerouting and postrouting
Replies: 3
Views: 1082

thanks a lot :D
by zaherhamiyah
Sat Apr 15, 2006 5:14 pm
Forum: General
Topic: prerouting and postrouting
Replies: 3
Views: 1082

prerouting and postrouting

i am new to these terms and i can't find any clear definition for these two terms and how to use them in mikrotik.does any one know exactly how to use them ?and what is the difference between them and the forward chain and why they are found in mikrotik if we have the forward chain do the same job f...
by zaherhamiyah
Sat Apr 15, 2006 5:06 pm
Forum: General
Topic: routing
Replies: 0
Views: 495

routing

i have the following setting public ip:xxx.xxx.79.45 internal ip:192.168.0.1 srcnat from 192.168.0.4 to xxx.xxx.79.46 (my pc) dstnat from xxx.xxx.79.46 to 192.168.0.4 (my pc) route:destination 0.0.0.0/0 ,G.W:xxx.xxx.79.41 pref src:xxx.xxx.79.45 when i look at the routing table i see that MR mikrotik...
by zaherhamiyah
Sat Apr 15, 2006 5:00 pm
Forum: General
Topic: mikrotik makes me crazy
Replies: 4
Views: 1049

mikrotik makes me crazy

i have a mikrotik server with the following settings: public ip:xxx.xxx.79.45 internal ip:192.168.0.1 when i put another server with mikrotik and give it an ip with the same range and ofcourse not the same ip example:xxx.xxx.79.46 heheheheh mikrotik stop and all my users cant browse internet. does t...
by zaherhamiyah
Sat Apr 15, 2006 4:56 pm
Forum: General
Topic: dns
Replies: 0
Views: 427

dns

we want mikrotikls to add a feature inside dns so that we can enter as many dns servers as we want.i think this is not a hard and impossible request. :idea:
by zaherhamiyah
Sat Apr 15, 2006 4:54 pm
Forum: General
Topic: ping issue
Replies: 6
Views: 1296

ping issue

my internal ip is 192.168.0.1
my public ip is xxx.xxx.79.45
i enter mikrotik throught winbox and ping 192.168.0.1 and the result is timeout.
i ping 192.168.0.1 from 192.168.0.4 the result is success.
so why i cant ping mikrotik from inside it ?. :twisted: :evil:
by zaherhamiyah
Sat Apr 15, 2006 4:51 pm
Forum: General
Topic: ip web proxy
Replies: 4
Views: 1060

ip web proxy

today i had a problem with ip web proxy.i had a many troubleshooting steps and tried everything but no hope.suddenly i realised that msn and yahoo messengers works fine so i disabled the ip web proxy and dstnat to 3128 port and the problem is solved.now i decided to not use ip web proxy or ip proxy ...
by zaherhamiyah
Fri Apr 14, 2006 4:54 pm
Forum: General
Topic: Interface problem
Replies: 0
Views: 462

Interface problem

hi there , i have one public interface: xxx.xxx.79.43 and one internal interface: 192.168.0.1 i added another network card to the server on the internal lan with 10.10.0.1 -The problem is that from 10.10.0.2 (my pc) -i can't ping other hosts on 192.168.0.0/24 -i can ping yahoo site -i can ping 192.1...
by zaherhamiyah
Sat Apr 08, 2006 10:19 pm
Forum: General
Topic: error in ip proxy(http proxy)
Replies: 0
Views: 500

error in ip proxy(http proxy)

what is this error about?
web-proxy error message.cpp.55: ERROR: message header too big:55276 bytes:
by zaherhamiyah
Sat Apr 08, 2006 2:30 am
Forum: General
Topic: IN and OUT interface
Replies: 2
Views: 693

thanks
by zaherhamiyah
Fri Apr 07, 2006 5:52 pm
Forum: General
Topic: added WinBox support in webproxy-test package
Replies: 0
Views: 722

added WinBox support in webproxy-test package

hello guys mikrotikls added WinBox support in webproxy-test package but do they show us the meaning of the settings inside it.And if u can go to http://forum.mikrotik.com/viewtopic.php?t=7672&highlight= and follow the conversation between me and sergejs u will see that we have two things according t...
by zaherhamiyah
Fri Apr 07, 2006 5:33 pm
Forum: General
Topic: IN and OUT interface
Replies: 2
Views: 693

IN and OUT interface

my dear colleagues, when u look at some configurations u see that the in-interface is internal(local) and the out-interface is public. But some times the proffesional who is offering his configuration sample he uses !internal for in-interface instead of using in-interface public .The same goes for o...
by zaherhamiyah
Tue Apr 04, 2006 2:19 pm
Forum: General
Topic: /ip proxy (not /ip web-proxy) and logging
Replies: 5
Views: 1198

yup.
And u can go to this link http://forum.mikrotik.com//viewtopic.php?t=7672 where u can find a conversation between me and other guy.There i posted a question for the purpose of making things clearer as for "ip proxy" and "ip web proxy"
by zaherhamiyah
Tue Apr 04, 2006 6:04 am
Forum: General
Topic: /ip proxy (not /ip web-proxy) and logging
Replies: 5
Views: 1198

i think you can add a filter rule as follows :

ip firewall filter> add chain=forward protocol=tcp dst-port=8080 action=log log-prefix=ip-proxy_log comment="ip proxy logging"
by zaherhamiyah
Tue Apr 04, 2006 5:43 am
Forum: General
Topic: P2P traphic on port 80...
Replies: 3
Views: 2630

First go to mangle and configure your router as the following: 0 chain=prerouting p2p=all-p2p src-address-list=not_me action=mark-connection new-connection-mark=p2p_conn passthrough=yes 1 chain=prerouting protocol=tcp dst-port=80 connection-mark=!p2p_conn src-address-list=not_me action=mark-connect...
by zaherhamiyah
Sun Apr 02, 2006 7:25 pm
Forum: General
Topic: what is the differnce between ip proxy and web proxy?
Replies: 4
Views: 1492

thanks

thanks
by zaherhamiyah
Sun Apr 02, 2006 2:56 pm
Forum: General
Topic: what is the differnce between ip proxy and web proxy?
Replies: 4
Views: 1492

my dear, when i activate "webproxy-test" in package list the "webproxy" package disappears, and when i activate only webproxy i get the two http proxy and webproxy!!!!! And inside the mikrotik's manual v 2.9(http://www.mikrotik.com/docs/ros/2.9/) we have two subjects: 1-http proxy and , 2-webproxy f...
by zaherhamiyah
Sun Apr 02, 2006 4:14 am
Forum: General
Topic: hiding my internal ip
Replies: 0
Views: 667

hiding my internal ip

i did the following test on this site http://www.lagado.com/proxy-test and i get the following: Proxy Test This request appears to have come via a proxy. The proxy host has ip address 62.84.76.19 The proxy server has announced itself as 1.1 deltaNet:3128 (squid/2.5.STABLE11), 1.0 C1200 (NetCache Net...
by zaherhamiyah
Sun Apr 02, 2006 4:08 am
Forum: General
Topic: emule and port forwarding
Replies: 5
Views: 2609

emule and port forwarding

i have a problem with emule coz i want to forward traffic as it is said by emule company ,but the problem is i dont know how to forward 4661 and 4672 tcp and udp ports respectively.i read some info on the net for example http://www.portforward.com but nothing obvious on how to do it in mikrotik rout...
by zaherhamiyah
Sun Apr 02, 2006 3:34 am
Forum: General
Topic: what is the differnce between ip proxy and web proxy?
Replies: 4
Views: 1492

what is the differnce between ip proxy and web proxy?

what is the differnce between ip proxy and web proxy?
and can i use them at the same time in mikrotik router os?