Community discussions

MUM Europe 2020

Search found 133 matches

by lordkappa
Sat Feb 13, 2016 12:23 pm
Forum: Beginner Basics
Topic: TikTool for MikroTik
Replies: 10
Views: 1839

Re: TikTool for MikroTik

TikTool is not provided or supported by Mikrotik. Try asking around the developer's website. http://www.tiktool.com/
by lordkappa
Fri Feb 05, 2016 9:40 pm
Forum: General
Topic: Steam VPN Streaming!
Replies: 3
Views: 1373

Re: Steam VPN Streaming!

The discovery of local steam clients is done using broadcasts. You'd have to be using a single flat ip range and a TAP VPN setup.
by lordkappa
Sat Jan 23, 2016 11:51 am
Forum: Beginner Basics
Topic: Android only WiFi connection issue? Win7 Laptop no issue?
Replies: 2
Views: 696

Re: Android only WiFi connection issue? Win7 Laptop no issue?

See http://wiki.mikrotik.com/wiki/Manual:Wireless_Station_Modes#Mode_station-pseudobridge . This mode is limited to complete L2 bridging of data to single device connected to station (by means of single MAC address translation) ... bridging of non-IP protocols to more than one device will not work P...
by lordkappa
Sat Sep 19, 2015 3:37 am
Forum: General
Topic: users lost in export file
Replies: 3
Views: 955

Re: users lost in export file

To my knowledge, Users and groups are not exported in the plaintext file exports. If you want to export them to an identical RB Model with the same ROS version, you can use /system backup save These can be encrypted or not, but they are not human-readable and can't be moved between Routerboard model...
by lordkappa
Sat Sep 19, 2015 2:45 am
Forum: General
Topic: New Software Release Strategy
Replies: 2
Views: 670

Re: New Software Release Strategy

A good software/hardware vendor can create enormous impact when it take user feedback seriously. We had to wait almost a decade to get some sense of what update package are we uploading to a tower 500km away... Congratulations, Hellbound! Though faced with negativity and criticism, you have perseve...
by lordkappa
Tue Sep 15, 2015 1:52 pm
Forum: General
Topic: Queuing on PPTP connection interface lost after reconnect
Replies: 2
Views: 820

Re: Queuing on PPTP connection interface lost after reconnect

You'll want to specify a queue type in the pptp server profile. This is strangely absent from the wiki (http://wiki.mikrotik.com/wiki/Manual:PPP_AAA#User_Profiles) , but it's visible in winbox. Otherwise the command arguments are: /ppp profile add queue-type=" " parent-queue=" " insert-queue-before=...
by lordkappa
Tue Sep 15, 2015 1:27 pm
Forum: Beginner Basics
Topic: WOL from WAN
Replies: 20
Views: 9776

Re: WOL from WAN

If you are trying to use standard "Magic packet" WOL this will never work. WOL is strictly layer 2. It won't be routeable since it's only addressed to the broadcast address. Also, since it's a layer 2 affair the magic packet doesn't even need to use a port. UDP is only used for programmer convenienc...
by lordkappa
Tue Sep 15, 2015 9:47 am
Forum: General
Topic: Cable test
Replies: 4
Views: 1462

Re: Cable test

Here's a nice visual color guide for cat5 cables - http://www.duxcw.com/digest/Howto/network/cable/cable5.htm I would not recommend this site as it only specifies the cross-wired pattern used for 100BASE-T wiring. This deprecated crosswiring pattern will cause devices that don't implement MDI/MDI-X...
by lordkappa
Sat Sep 12, 2015 10:16 pm
Forum: General
Topic: Cable test
Replies: 4
Views: 1462

Re: Cable test

I run cable test and it report the 2nd pairs is open
But I don't know the 2nd pairs's color ?
It's listed in the TIA-568-B specification document.

Here is the table from page 7:
colour codes.png
by lordkappa
Sat Sep 12, 2015 9:59 pm
Forum: RouterBOARD hardware
Topic: New hAP Lite with Level 0 Licence [SOLVED]
Replies: 7
Views: 1693

Re: New hAP Lite with Level 0 Licence ?

http://routerboard.com/RB941-2nD-TC
The hAP lite is equipped with a powerful 650MHz CPU, 32MB RAM, dual chain 2.4GHz onboard wireless, four Fast Ethernet ports and a RouterOS L4 license. USB power supply is included.
The text description does specify that it has a level 4 license.
by lordkappa
Wed Sep 09, 2015 4:31 am
Forum: General
Topic: IP cloud dynamic hostname update
Replies: 2
Views: 483

Re: IP cloud dynamic hostname update

http://wiki.mikrotik.com/wiki/Manual:IP ... on_details
When enabled '/ip cloud' will send encrypted UDP packets to port 15252 to hosts that resolves from cloud.mikrotik.com.
10/10. Would Wiki again.
by lordkappa
Sun Sep 06, 2015 11:53 pm
Forum: Beginner Basics
Topic: Is there an RB2011 for Dummies?
Replies: 6
Views: 1168

Re: Is there an RB2011 for Dummies?

A lot of people will probably reply that "You can just use 'quick-set' and forget it." I disagree with this. I wouldn't sell someone a plane and say "It's great, just leave it on autopilot." I would expect that they know how (or want to learn how) to fly when something goes wrong. Mikrotik products ...
by lordkappa
Sun Sep 06, 2015 1:26 pm
Forum: General
Topic: SNMP
Replies: 2
Views: 628

Re: SNMP

The MIB is posted on the wiki. http://wiki.mikrotik.com/wiki/Manual:SNMP#Management_information_base_.28MIB.29 From the MIB file: iso.org.dod.internet.private.enterprises.mikrotik.mikrotikExperimentalModule.mtXRouterOs.mtxrHealth.mtxrHlTemperature.0 (OID 1.3.6.1.4.1.14988.1.1.3.8.0) - 350.0.000000 L...
by lordkappa
Sun Sep 06, 2015 12:34 pm
Forum: General
Topic: Layer 7 Protocol question
Replies: 1
Views: 600

Re: Layer 7 Protocol question

This is explained in the summary of the L7 page on the wiki. http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/L7

Also, any attempts to layer-7-match either Youtube or Facebook traffic will be fruitless; they both use HTTPS. The router has to be able to see the traffic to match it. :lol:
by lordkappa
Sun Sep 06, 2015 12:23 pm
Forum: General
Topic: Air flow direction on CCR's
Replies: 1
Views: 484

Re: Air flow direction on CCR's

Why would you want to do that? Are you going to mount the router backwards on the rack?

I don't think they offer this. The fans are mounted at the back and I don't see any mounting slots at the front. I also don't think just flipping the fans around would be very effective.
by lordkappa
Fri Sep 04, 2015 10:21 pm
Forum: Beginner Basics
Topic: Share Bandwidth equally in between Users using PCQ
Replies: 7
Views: 4296

Re: Share Bandwidth equally in between Users using PCQ

thanks for your reply... in my case I put rate = 0 so that is divide the BW dynamically, and put max limit to be 480 kbps so that the total BW doesn't exceed 480 kbps, but when I monitor the queue status from queue tab---> queue tree I see the Avg. rate raise more than the max limit so I could see ...
by lordkappa
Thu Sep 03, 2015 10:17 pm
Forum: Beginner Basics
Topic: Share Bandwidth equally in between Users using PCQ
Replies: 7
Views: 4296

Re: Share Bandwidth equally in between Users using PCQ

there is should a common point (for example in Mikrotik itself) to see how much each device is consuming
Sorry; To my knowledge, there is not.
by lordkappa
Tue Sep 01, 2015 10:15 pm
Forum: Beginner Basics
Topic: Share Bandwidth equally in between Users using PCQ
Replies: 7
Views: 4296

Re: Share Bandwidth equally in between Users using PCQ

thanks for your reply... I am using it and had put the PCQ-rate to be 0 as per the manual it should share whatever BW available in between users, but how to make sure what I did is correct or is taking affect? , where in Mikrotik I can prove this ? As explained on the linked wiki page, please make ...
by lordkappa
Tue Sep 01, 2015 11:59 am
Forum: General
Topic: New Hex Router Wan to Lan Speed
Replies: 12
Views: 6501

Re: New Hex Router Wan to Lan Speed

hEX has Gigabit ports http://routerboard.com/RB750Gr2
hEX lite has 100Mbit ports http://routerboard.com/RB750r2

Question was about hEX
Normis is correct. My mistake.
by lordkappa
Tue Sep 01, 2015 11:54 am
Forum: General
Topic: New Hex Router Wan to Lan Speed
Replies: 12
Views: 6501

Re: New Hex Router Wan to Lan Speed

If you want to process this traffic, it will take a toll on the speed. If you don't want any processing, only a private IP in your LAN, you can enable Fasttrack for the LAN IP addresses and get maybe even 900Mbit. Depends on what you need the router for. Likely not on this model, though... Consider...
by lordkappa
Tue Sep 01, 2015 11:48 am
Forum: General
Topic: New Hex Router Wan to Lan Speed
Replies: 12
Views: 6501

Re: New Hex Router Wan to Lan Speed

Ha ha. A ha ha... This guy. That's a good one.

Quote Routerboard.com:
10/100 Ethernet ports - 5
10/100/1000 Ethernet ports - None
by lordkappa
Fri Aug 28, 2015 11:52 pm
Forum: Beginner Basics
Topic: Best way to set up the ports on my router. Switch vs Bridging
Replies: 6
Views: 1029

Re: Best way to set up the ports on my router. Switch vs Bridging

1. Yes
2. Ostensibly, yes. It will be as-if they were plugged into ether2.
by lordkappa
Fri Aug 28, 2015 9:57 am
Forum: Beginner Basics
Topic: different dns for for different users on different times
Replies: 2
Views: 580

Re: different dns for for different users on different times

hi guys, we are using OpenDNS to block certain sites. how to implement this? 1. Certain "privilege users" must passthru a another DNS like google. 2. Force all other users to use OpenDNS during office ours and use GoogleDNS on non office hours. Please help. thanks, OcaVid Forward it to IT, recline ...
by lordkappa
Thu Aug 27, 2015 2:40 am
Forum: General
Topic: Incoming forwarding / Proxy based on URL
Replies: 1
Views: 367

Re: Incoming forwarding / Proxy based on URL

If you're using HTTP, (Bad bad, you should be using HTTPS) then you can use a regular expression to tag the connection in Prerouting, and use NAT rules from there. See http://www.w3.org/Protocols/rfc2616/rfc2616-sec5.html for HTTP GET request structure. This will work because Mangle Prerouting happe...
by lordkappa
Thu Aug 27, 2015 2:28 am
Forum: Beginner Basics
Topic: winbox for mac
Replies: 2
Views: 775

Re: winbox for mac

MTCNA, MTCWE, MTCRE
That's a lot of certs to have without learning out how to use the terminal, dual boot, virtualbox or use wine.

Also, wrong section. -> Forum -> General
by lordkappa
Wed Aug 26, 2015 10:53 pm
Forum: RouterBOARD hardware
Topic: Wifi speed of RB2011UiAS-2HnD-IN
Replies: 6
Views: 1980

Re: Wifi speed of RB2011UiAS-2HnD-IN

I just need to ensure it supported up to 300 Mbps. I'm worry about it can be worked only 54 MB. May be i configured some thing wrong. :D Try installing inSSIDer 2 on a laptop. It will show you exactly what modes your access point supports, given its current configuration, as well as frequencies and...
by lordkappa
Wed Aug 26, 2015 10:47 pm
Forum: General
Topic: Port forwarding - 80
Replies: 5
Views: 2556

Re: Port forwarding - 80

Hi! I'm afraid I don't understand this fully. :( The problem, is that routers deal with traffic flowing in BOTH directions. The reason you couldn't access the web was because the router was NATing any outgoing traffic destined for port 80 as well as any incoming. As marting pointed out, you need to...
by lordkappa
Wed Aug 26, 2015 1:01 pm
Forum: RouterBOARD hardware
Topic: Wifi speed of RB2011UiAS-2HnD-IN
Replies: 6
Views: 1980

Re: Wifi speed of RB2011UiAS-2HnD-IN

Your results are typical of most Wireless N scenarios. Please bear in mind, 300 is a "perfect world" "dreamland" number. This will never be achieved in the real world.
by lordkappa
Wed Aug 26, 2015 12:35 pm
Forum: General
Topic: Port forwarding - 80
Replies: 5
Views: 2556

Re: Port forwarding - 80

Let's step through what you're asking the router to do, together. chain=dstnat action=dst-nat DST-Nat protocol=tcp dst-port=80 Any packet with a dst-port of 80. to-addresses=192.168.88.5 to-ports=80 Change its destination IP to 192.168.88.5. Hopefully now the problem is quite clear. ;) Think through...
by lordkappa
Wed Aug 26, 2015 12:22 am
Forum: Wireless Networking
Topic: 28Mhz with 1Gbps...
Replies: 8
Views: 1842

Re: 28Mhz with 1Gbps...

If your microwave can achieve 1Gbps I'm amazed. I barely mange 35Mbps on high/15Mbps on defrost. Tends to heat up a lot, either way.

This is all without NV2, though. I can't seem to get NV2 to work, might need to upgrade to a new turn-table.
by lordkappa
Tue Aug 25, 2015 1:40 pm
Forum: Beginner Basics
Topic: Can't Change SFP Port Speed
Replies: 1
Views: 580

Re: Can't Change SFP Port Speed

Please note the speed listed on an SFP transceiver, here: http://routerboard.com/S-31DLC20D

See how it the Data Rate says 1.25G and not 10M/100M/1000M/1.25G?

You can't change the 'speed', or Data Rate of an SFP module.
by lordkappa
Tue Aug 25, 2015 2:39 am
Forum: General
Topic: Port forwarding issue
Replies: 26
Views: 1792

Re: Port forwarding issue

Is your ISP doing some filtering? It's possible certain ports are being blocked at your ISP's ingress and will never make it to you.

Or they may be doing deep packet inspection and blocking inbound telnet connections. (Also, obligatory scolding for using Telnet on the public internet.) ;)
by lordkappa
Sat Aug 22, 2015 1:34 am
Forum: General
Topic: Port forwarding issue
Replies: 26
Views: 1792

Re: Port forwarding issue

sorry for my ignorance, but how do I enable that log? and how do I look at it?
You can append "log=yes" to your firewall rule, and optionally "log-prefix=" to apply a prefix to those log entries. "/log print" shows log if you're using terminal.
by lordkappa
Sat Aug 22, 2015 12:54 am
Forum: RouterBOARD hardware
Topic: Best routerboard for 200 active users and a 240 Mbps line
Replies: 2
Views: 1964

Re: Best routerboard for 200 active users and a 240 Mbps line

I'd probably look into an RB850Gx2.

If money is no object, an RB1100AHx2 or CCR1009-8G-1S would be awesome but they're big, have fans, and are way more router than you need.
by lordkappa
Sat Aug 22, 2015 12:41 am
Forum: General
Topic: Port forwarding issue
Replies: 26
Views: 1792

Re: Port forwarding issue

is there anyway trace that traffic and see what is blocking it? You can try setting the 'log' flag on all your firewall rules and see if anything pops up. Also, clear your counters and watch if any of the NAT rules have their counters incremented when you try to connect. I'm out of ideas; I've trie...
by lordkappa
Thu Aug 20, 2015 2:14 am
Forum: General
Topic: Port forwarding issue
Replies: 26
Views: 1792

Re: Port forwarding issue

add chain=srcnat dst-address=10.1.1.0/24 src-address=10.1.3.0/24 What is the purpose of this line? Are you trying to stop 10.1.3.0/24 traffic from being masqueraded? Since it isn't going out the gateway interface it wouldn't be, anyway. Its existence might be stopping traffic from hitting your othe...
by lordkappa
Thu Aug 20, 2015 1:11 am
Forum: General
Topic: Port forwarding issue
Replies: 26
Views: 1792

Re: Port forwarding issue

that didn't work either...
I feel there may be something fundamentally flawed with your testing method. Are you attempting to test it by connecting to the external IP of your router from within your local LAN?
by lordkappa
Thu Aug 20, 2015 12:45 am
Forum: General
Topic: Port forwarding issue
Replies: 26
Views: 1792

Re: Port forwarding issue

Delete your first firewall rule. Change your DST-NAT action to action=netmap instead. Like this, add action=netmap chain=dstnat dst-port=8016 in-interface=ether1-gateway \ protocol=tcp to-addresses=10.1.3.185 to-ports=8016 Also, best practice is having your masquerade rule at the top of your NAT rul...
by lordkappa
Wed Aug 19, 2015 10:49 pm
Forum: General
Topic: Port forwarding issue
Replies: 26
Views: 1792

Re: Port forwarding issue

Any ideas?
You haven't posted your firewall/NAT config yet.
by lordkappa
Wed Aug 19, 2015 9:48 pm
Forum: General
Topic: Email Tool Servers IP Addresses
Replies: 2
Views: 440

Re: Email Tool Servers IP Addresses

Most every email provider posts their SMTP server publicly... I didn't think we needed a canonical list.
by lordkappa
Wed Aug 19, 2015 12:29 pm
Forum: Beginner Basics
Topic: Setup as router and switch for a second pc to be outside the firewall.
Replies: 2
Views: 427

Re: Setup as router and switch for a second pc to be outside the firewall.

You could put Eth0 and Eth1 in a bridge. Get a DHCP address on the bridge interface, and use that as your WAN-facing interface.

Bridging is done in software, but provided the throughput is not overly high this is the easiest way.
by lordkappa
Wed Aug 19, 2015 12:16 pm
Forum: General
Topic: Router hacked from outside
Replies: 10
Views: 6849

Re: Router hacked from outside

You did your due dilligence and kept backups of your working configurations, right? ;) Just do a reset and load your backup configuration... Don't forget to lock it down this time. Seriously though, if you don't have a backup from before the hack, I wouldn't use any configuration settings currently ...
by lordkappa
Tue Aug 18, 2015 11:28 am
Forum: Beginner Basics
Topic: How to Reset Rb 2011 Uias-Rm
Replies: 2
Views: 1948

Re: How to Reset Rb 2011 Uias-Rm

Googled "Routerboard Reset".

First result:
http://wiki.mikrotik.com/wiki/Manual:Password_reset
by lordkappa
Sat Aug 15, 2015 10:48 pm
Forum: General
Topic: Port forwarding issue
Replies: 26
Views: 1792

Re: Port forwarding issue

It would help to post your config so we can see what's going on. Also, It would be easier to use the Netmap action, with in-interface specified, to perform port forwarding. This way you won't have to modify your rule if your external IP changes. add action=netmap chain=dstnat comment="Your Comment" ...
by lordkappa
Wed Aug 05, 2015 11:13 pm
Forum: General
Topic: Forwarding an internal IP address to an external IP address
Replies: 4
Views: 1842

Re: Forwarding an internal IP address to an external IP address

You could possibly add a 'dummy' IP on the Router that forwards all traffic to the target machine on the LAN except that traffic you wish to forward externally, but this will be somewhat hacky. If you were willing to be that hacky, you wouldn't even need the dummy IP. :P Just point your client to t...
by lordkappa
Wed Aug 05, 2015 10:04 am
Forum: General
Topic: Forwarding an internal IP address to an external IP address
Replies: 4
Views: 1842

Re: Forwarding an internal IP address to an external IP address

No, there isn't. The router can't redirect traffic it doesn't receive. A PC will only send traffic to the default gateway if the destination IP isn't in its own local subnet. You can check your PC's local routing table to see why this makes sense; your local subnet will show up as a separate routing...
by lordkappa
Wed Jul 15, 2015 2:04 pm
Forum: General
Topic: Xbox Live NAT Issues With 2 Xbox Ones On Same Network
Replies: 8
Views: 1629

Re: Xbox Live NAT Issues With 2 Xbox Ones On Same Network

Have you enabled UPnP?
Universal Plug n' Pwned? Why hand over control of your router to any internal device that wants it? In that case, Just open up ALL the ports; it's just as secure and at least then nobody else can make changes to your NAT and firewall policies without your knowledge.
by lordkappa
Tue Jul 14, 2015 12:25 pm
Forum: General
Topic: Xbox Live NAT Issues With 2 Xbox Ones On Same Network
Replies: 8
Views: 1629

Re: Xbox Live NAT Issues With 2 Xbox Ones On Same Network

Unfortunately, what you are trying to achieve is impossible with only one IP. Let me explain. NAT involves sharing a single external IP with multiple internal devices. To do this, the router swaps the source IP of each outgoing packet with it's own IP, and then makes a note of the original IP, the d...
by lordkappa
Mon Jul 13, 2015 3:42 am
Forum: Announcements
Topic: 6.30 released
Replies: 180
Views: 43368

Re: 6.30 released

where to download older relese ? mipsbe
Older releases are considered "Not officially supported" and are not available on the mikrotik download page.

If you have a special need, make your case to support@mikrotik.com; they might send you an older version.
by lordkappa
Mon Jul 13, 2015 2:13 am
Forum: General
Topic: PCQ Specific Setup
Replies: 1
Views: 468

Re: PCQ Specific Setup

Trivial. The pcq-rate option does exactly this. This page from the Wiki has the information you desire.
http://wiki.mikrotik.com/wiki/Manual:Qu ... e_Examples
by lordkappa
Sat Jul 11, 2015 11:20 pm
Forum: General
Topic: Feature request: Remove fasttrack dummy rule
Replies: 33
Views: 39606

Re: Feature request: Remove fasttrack dummy rule

This feature should be nixed. Not even optional, just removed.

Having a do-nothing rule in firewall because your OS can't correctly track fastpathed traffic is just kludgy and unprofessional. As stated before, the same counters are available in ip->settings.
by lordkappa
Thu Jul 09, 2015 11:43 am
Forum: Announcements
Topic: 6.30 released
Replies: 180
Views: 43368

Re: 6.30 released

*) wireless - added WMM power save suport for mobile devices;
Wow. I've been forced to run Ubiquiti APs for the last 3 years due to exactly this.
by lordkappa
Wed Jul 08, 2015 9:27 am
Forum: Beginner Basics
Topic: Unable to do Remote Desktop Connection after adding NAT Rule
Replies: 6
Views: 880

Re: Unable to do Remote Desktop Connection after adding NAT Rule

From what I'm hearing, it doesn't sound like you need NAT. If all you want is connectivity between 2 computers you don't need NAT. There are lots of in-depth explanations on what NAT does but here's the short version. NAT is used when you need to change the IP addresses in a packet. src-nat changes ...
by lordkappa
Tue Jul 07, 2015 12:34 pm
Forum: Beginner Basics
Topic: Unable to do Remote Desktop Connection after adding NAT Rule
Replies: 6
Views: 880

Re: Unable to do Remote Desktop Connection after adding NAT Rule

Yes, but what is your desired effect? NAT is a tool; it can be used for many things depending on your needs. Saying "I want NAT between these 2 computers" is like saying "I want to saw these wooden boards, where should I cut them?" without telling me what you're trying to build. I recommend you lear...
by lordkappa
Mon Jul 06, 2015 12:57 pm
Forum: Beginner Basics
Topic: Unable to do Remote Desktop Connection after adding NAT Rule
Replies: 6
Views: 880

Re: Unable to do Remote Desktop Connection after adding NAT Rule

Well... The reason you can still ping is that the first NAT rule redirects all traffic destined for 192.168.3.11 to the router's 192.168.33.1 interface. The router is responding to your pings, not the PC. Obviously the router isn't running RDP, so that's why it isn't responding anymore. Then, your s...
by lordkappa
Sat Jun 27, 2015 12:10 am
Forum: General
Topic: masquerading srce-nat still showing internal IP
Replies: 2
Views: 771

Re: masquerading srce-nat still showing internal IP

Use
out-interface=
instead of
to-addresses=
Masquerade used without an out-interface specified is liable to wreak all kinds of havok. :? That's likely causing your issue.
by lordkappa
Fri Jun 12, 2015 10:04 pm
Forum: General
Topic: Is it possible to unbrand a router?
Replies: 9
Views: 1478

Re: Is it possible to unbrand a router?

Paint?
by lordkappa
Mon Jun 01, 2015 2:54 am
Forum: Wireless Networking
Topic: MikroTik Video - Ski Field Upgrade
Replies: 3
Views: 628

Re: MikroTik Video - Ski Field Upgrade

Cool stuff, thanks for sharing!
by lordkappa
Sat May 30, 2015 10:37 pm
Forum: Beginner Basics
Topic: Simple NAT rule
Replies: 10
Views: 1546

Re: Simple NAT rule

If you click on the rule, you can see the full list. It will include the to-address.
by lordkappa
Mon Mar 02, 2015 11:39 am
Forum: Beginner Basics
Topic: newbe cloud router switch config
Replies: 1
Views: 777

Re: newbe cloud router switch config

In my experience you need to set the master-port to none on a port first before you change it.

Set all ports to master=none. Then retry your script.
by lordkappa
Thu Feb 05, 2015 11:10 am
Forum: Beginner Basics
Topic: Disable DHCP
Replies: 2
Views: 6575

Re: Disable DHCP

IP -> DHCP Server.

Just remove it from the list. :?
by lordkappa
Thu Feb 05, 2015 10:59 am
Forum: General
Topic: How to calculate Bytes to MB
Replies: 1
Views: 611

Re: How to calculate Bytes to MB

Depends on who you're talking to.
https://en.wikipedia.org/wiki/Units_of_ ... _multiples

In my experience Storage and networking typically use 10^6. Hardware specs, programs, and programmers typically use 2^20.
by lordkappa
Tue Feb 03, 2015 11:00 pm
Forum: Beginner Basics
Topic: open port from outside
Replies: 6
Views: 1468

Re: open port from outside

took this out then put it back to no affect: [admin@<router>] /ip firewall filter> print [...] 7 ;;; 8322 to .29:8322 chain=forward action=accept protocol=tcp dst-address=192.168.29.33 dst-port=8322 log=no log-prefix="" What do the rest of your firewall rules look like? It's very possible the packe...
by lordkappa
Mon Oct 06, 2014 10:21 pm
Forum: General
Topic: NAT firewall Chain Input or Forward?
Replies: 2
Views: 1180

Re: NAT firewall Chain Input or Forward?

It's classified as Input, unless there is already an associated entry in ip tracking or NAT; Then it's forwarding.
by lordkappa
Thu Sep 04, 2014 1:50 pm
Forum: General
Topic: How to block tor browser?
Replies: 1
Views: 1338

Re: How to block tor browser?

You've done everything you can. IP lists don't work well because TOR Entry and bridge nodes constantly change. Unless you block HTTPS traffic entirely, blocking TOR Traffic from users is impossible. It was designed this way. If you'd like further proof it's efficacy, please contact: State Council In...
by lordkappa
Mon Aug 25, 2014 10:45 am
Forum: General
Topic: Secure Firmware Downloads??
Replies: 1
Views: 589

Re: Secure Firmware Downloads??

Good idea, HTTPS would be welcome.

Posting an MD5 is worthless though; as any attacker who could intercept or alter your download would also be able to modify the downloads page so it showed the new modified file's MD5. :lol:
by lordkappa
Mon Aug 11, 2014 4:15 am
Forum: Scripting
Topic: How to Remote Private IP as a Public IP
Replies: 5
Views: 4859

Re: How to Remote Private IP as a Public IP

The 2 rules I suggested will only link one external PPPoE interface directly to one internal IP; all ports (Essentially, a DMZ.) If you're asking how you can select which ports are mapped, you can use protocol=<tcp/udp> dst-port=<ports> in your original IN->NAT rule. e.g. add action=netmap chain=dst...
by lordkappa
Sat Aug 09, 2014 11:08 pm
Forum: General
Topic: Voip server behind NAT
Replies: 1
Views: 694

Re: Voip server behind NAT

Try using action=netmap instead of dst-nat.
by lordkappa
Fri Aug 01, 2014 1:48 am
Forum: General
Topic: PPTP VPN Different subnet groups per User
Replies: 1
Views: 1175

Re: PPTP VPN Different subnet groups per User

Create 2 pools, create 2 ppp profiles and specify a different profile for each secret based on what access level you'd like them to have.

If there's a conflict between the default profile and the one a user is assigned, the one assigned to that user takes precedence.
by lordkappa
Thu Jul 31, 2014 9:28 am
Forum: Beginner Basics
Topic: Hot to change default Gateway
Replies: 1
Views: 587

Re: Hot to change default Gateway

/ip address add interface=InterfaceName address=your.desired.ip.here netmask=your.netmask.goes.here You will also have to change your DHCP network so your LAN clients know the new gateway's IP, as well as change your DHCP pool so that the addresses lie within the same subnet. Or, easier, you could ...
by lordkappa
Mon Jul 28, 2014 12:51 am
Forum: Beginner Basics
Topic: SOLVED: What do the different types of interfaces mean ?
Replies: 4
Views: 11684

Re: What do the different types of interfaces mean ?

the association between interfaces and switches[1|2] if fixed and cannot be modified Correct, the exact association is visible in the block diagram listed on routerboard.com: Example http://i.mt.lv/routerboard/files/Block-RB2011.pdf without further configuration, no switching takes place, all ports...
by lordkappa
Sun Jul 27, 2014 9:51 am
Forum: General
Topic: Bugs.... Really?
Replies: 7
Views: 1116

Re: Bugs.... Really?

This is found on version 6.13, but I am sure it will still be there....
How can you be sure? Support won't help you if you can't even be bothered to update your software.
by lordkappa
Sun Jul 27, 2014 8:58 am
Forum: Beginner Basics
Topic: SOLVED: What do the different types of interfaces mean ?
Replies: 4
Views: 11684

Re: What do the different types of interfaces mean ?

1) They're all ethernet interfaces, so they are the same type.
2) You can name an interface whatever you want, the names 'mean' nothing.
3) Slave, under the default name, means it has master-port set and is part of a switchgroup.

http://wiki.mikrotik.com/wiki/Manual:De ... igurations
by lordkappa
Sat Jul 26, 2014 10:21 pm
Forum: Beginner Basics
Topic: NTP Client not displaying in Winbox
Replies: 2
Views: 838

Re: NTP Client not displaying in Winbox

The NTP client and server are available as an optional ROS package.

Basic package uses SNTP.
by lordkappa
Fri Jul 25, 2014 10:09 am
Forum: RouterBOARD hardware
Topic: CCR1036-License-required..!!!!!!
Replies: 3
Views: 789

Re: CCR1036-License-required..!!!!!!

Routerboard product licenses are built-in.
Contact support: http://www.mikrotik.com/support.html.
by lordkappa
Sat Jul 19, 2014 12:07 am
Forum: Beginner Basics
Topic: About WHIITE LIST
Replies: 3
Views: 711

Re: About WHIITE LIST

/ip firewall connection tracking set enabled=yes /ip firewall filter add action=accept in-interface=<WAN-NAME> connection-state=related place-before=0 add action=accept in-interface=<WAN-NAME> connection-state=new place-before=0 add action=accept in-interface=<WAN-NAME> connection-state=established...
by lordkappa
Fri Jul 18, 2014 2:03 pm
Forum: Beginner Basics
Topic: Site-to-site VPN and NAT using load balancing
Replies: 2
Views: 1029

Re: Site-to-site VPN and NAT using load balancing

1.) Here http://www.catb.org/~esr/faqs/smart-questions.html 2.) Then here, http://wiki.mikrotik.com/wiki/L2TP_%2B_IPSEC_between_2_Mikrotik_routers http://wiki.mikrotik.com/wiki/Improved_Load_Balancing_over_Multiple_Gateways http://wiki.mikrotik.com/wiki/Monitor_logs,_send_email_alert_/_run_script Th...
by lordkappa
Fri Jul 18, 2014 1:30 pm
Forum: Beginner Basics
Topic: About WHIITE LIST
Replies: 3
Views: 711

Re: About WHIITE LIST

Enable connection tracking.
Add 3 firewall rules above your blacklist rule to allow each "new", "established" and "related" connections.
by lordkappa
Fri Jul 18, 2014 12:59 pm
Forum: Scripting
Topic: How to Remote Private IP as a Public IP
Replies: 5
Views: 4859

Re: How to Remote Private IP as a Public IP

You should be accomplish this by using two different actions; Masquerade for outbound and netmap for inbound. I think masquerade would be the only way to do srcnat with a dynamic IP (Without doing more complicated scripting... Keeping it simple.) /ip firewall nat add action=masquerade chain=srcnat c...
by lordkappa
Sun Jun 15, 2014 10:09 pm
Forum: Beginner Basics
Topic: CRS125 and simple VLAN setup problem
Replies: 3
Views: 1305

Re: CRS125 and simple VLAN setup problem

If you're not using VLAN Tags or trunking (You didn't say that you were) and only require that the 2 segments are seperated, you could just set them as 2 groups with different master ports and treat them as 2 different switches; forget VLAN entirely. Just set ports 2-12 as master-port=ether-1 and po...
by lordkappa
Thu Jun 12, 2014 6:26 am
Forum: General
Topic: SSL VPN
Replies: 5
Views: 21150

Re: SSL VPN

Yes I have, I've found :
http://wiki.mikrotik.com/wiki/Manual:Interface/SSTP

which just gives the explanation
Really? I see some workable samples at the bottom.
http://wiki.mikrotik.com/wiki/Manual:In ... n_Examples
by lordkappa
Thu Jun 12, 2014 3:36 am
Forum: General
Topic: IP Cloud
Replies: 113
Views: 67855

Re: IP Cloud

Thanks for a handy feature! Hopefully it sees more refinement to add the ability to specify which Public IP(s) are ddns'd, and the ability to revoke/delete a domain.

I too use my own scripts for DDNS, but this is a very nice feature for those times you just want a domain and don't need any fluff.
by lordkappa
Sat Dec 14, 2013 1:23 am
Forum: General
Topic: 6.6 to 6.7 CRS very slow LAN speed
Replies: 41
Views: 10963

Re: 6.6 to 6.7 CRS very slow LAN speed

Same issue. To clarify, the issue is being caused by the switch chip behaving as a hub... All traffic coming in any port is being forwarded out all other slaved ports (broadcasts or not). If you have even one 10Mbit link, all links must transmit at that speed. Only affects hardware switched ports, n...
by lordkappa
Sat May 18, 2013 8:30 pm
Forum: Beginner Basics
Topic: Exchange marks of packets betwean two routers
Replies: 4
Views: 1013

Re: Exchange marks of packets betwean two routers

http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Mangle

No. As per the documentation, they are only used internally.
by lordkappa
Wed Apr 24, 2013 7:45 am
Forum: Forwarding Protocols
Topic: routing problem with hotspot in this scenario.
Replies: 1
Views: 1051

Re: routing problem with hotspot in this scenario.

Are you trying to bridge the two connections? If so, are the hotspot and the SXT-A Ethernet-interface both added to a bridge? Or are you trying to actually route the packets... If so, where are the hotspot and it's clients getting their IP addresses? DHCP will not reach beyond the SXT-A unless it's ...
by lordkappa
Wed Apr 24, 2013 6:55 am
Forum: General
Topic: VPN problems please help if you can ?
Replies: 2
Views: 450

Re: VPN problems please help if you can ?

There's a Wiki page on setting up PPTP and VPN, did you remember to enable Proxy-Arp as detailed in the Application Examples here?
http://wiki.mikrotik.com/wiki/Manual:In ... n_Examples
by lordkappa
Wed Apr 24, 2013 6:42 am
Forum: Beginner Basics
Topic: Security - services behind NAT
Replies: 2
Views: 752

Re: Security - services behind NAT

Ideally you wouldn't want to expose a service that is not already secure. Trying to add security back in, at the network layer, isn't really the best solution. Do you have reason to believe that the NAS does not offer an acceptable level of security? If someone were trying to brute force a password ...
by lordkappa
Mon Apr 08, 2013 4:41 am
Forum: Beginner Basics
Topic: config WAN port to LAN port
Replies: 7
Views: 5794

Re: config WAN port to LAN port

spoke too soon. Adding a port to a bridge (no matter how I do it) causes the router to switch to bridge mode. :( I'm not sure what you mean by Bridge "mode". The basic steps are to ensure ports 3-5 have their master port set to port 2 in Winbox, thereby making them switched together. Then create a ...
by lordkappa
Sun Apr 07, 2013 9:17 am
Forum: Beginner Basics
Topic: config WAN port to LAN port
Replies: 7
Views: 5794

Re: config WAN port to LAN port

The RB750 series uses the Atheros7240 Hardware switching chip on only ports 2-5; So you'll have to bridge ports 1 & 2 if you wish to use it in this way. Note that bridging increases CPU usage, where switched traffic does not.
by lordkappa
Sun Apr 07, 2013 7:32 am
Forum: General
Topic: Super basic port forwarding doesn't work
Replies: 9
Views: 4105

Re: Super basic port forwarding doesn't work

It would be easier to use the Netmap action to perform port forwarding. add action=netmap chain=dstnat comment="Your Comment" disabled=no dst-port=8888 in-interface=ether1-WAN protocol=tcp to-addresses=192.168.1.50 This statically maps the external port "8888" on ether-1 to the specified machine 192...
by lordkappa
Sun Apr 07, 2013 6:10 am
Forum: Beginner Basics
Topic: Really SLOW wireless
Replies: 20
Views: 3353

Re: Really SLOW wireless

Had the same problem. The issue seems to be with the TX-Rate selection on Mikrotik products. I've contacted Support and viewed numerous threads about this but never was able to rectify the issue. Sad to see it still hasn't been fixed. In the end, I used separate Ubiquiti AP's and let Mikrotiks handl...
by lordkappa
Sat Aug 25, 2012 3:53 am
Forum: Beginner Basics
Topic: cut off all access but winbox
Replies: 3
Views: 716

Re: cut off all access but winbox

Firewall rules still run, even if there is no service listening on that port.
by lordkappa
Wed Aug 01, 2012 7:02 am
Forum: Beginner Basics
Topic: 751G-2HnD full duplex problem
Replies: 11
Views: 1705

Re: 751G-2HnD full duplex problem

I think you're entirely misunderstanding the concept of 'usable' bandwidth. Link speed is the theoretical maximum transfer rate over the link. The RB751G simply cannot generate 1Gbit worth of traffic, nor could it ROUTE 1Gbit worth of traffic, since every single packet needs to be processed by the C...
by lordkappa
Mon Jul 23, 2012 11:49 pm
Forum: Beginner Basics
Topic: Why MikroTik uptime in reverse?
Replies: 1
Views: 496

Re: Why MikroTik uptime in reverse?

But the browser (webfig) I see the second server, the remaining time of 3 hours and 30 minutes door (This means that less time will not stand up to 0 - while both the server settings as well) In Server 5.7 is that good shows like Winbox shows What is the problem? Uh, what? I think you're going to h...
by lordkappa
Mon Jul 09, 2012 1:59 am
Forum: Beginner Basics
Topic: How to deny/allow website by IP address in RB750 router?
Replies: 14
Views: 49211

Re: How to deny/allow website by IP address in RB750 router?

You could block by IP, but many sites like youtube have a slew of ip's. Use the "Content" option in the firewall to filter based on a keyword. "Facebook.com" or "Youtube.com". /ip firewall filter add chain=forward action=reject reject-with=tcp-reset protocol=tcp content="Host: www.facebook.com" You...
by lordkappa
Sun Jul 08, 2012 3:37 am
Forum: General
Topic: all you tube ip
Replies: 3
Views: 644

Re: all you tube ip

Use the "Content" field in your firewall and/or Mangle rules, as per here. http://forum.mikrotik.com/viewtopic.php?f=13&t=63290

Youtube could always get/change ip's, so it's not practical to try and filter them based on that.
by lordkappa
Fri Jul 06, 2012 4:29 am
Forum: Beginner Basics
Topic: RB2011L , Multiple public IPs NAT to 5 DHCP Pools to 5 ports
Replies: 9
Views: 3085

Re: RB2011L , Multiple public IPs NAT to 5 DHCP Pools to 5 p

Here is something else I was told by my lovely ISP. From ISP demarcation point they told me to put a 8 port switch, run the cable to each location and install something like RB751 there with its own public IP address. Would this setup work ok? Do I have to worry about any traffic/discovery problems...
by lordkappa
Wed Jul 04, 2012 10:43 pm
Forum: Beginner Basics
Topic: FTP global
Replies: 3
Views: 733

Re: FTP global

Also, TFTP is not FTP. They are not the same and use different ports. You want FTP, under IP->Services. If you're not using TFTP specifically, you should turn it off.
by lordkappa
Wed Jul 04, 2012 1:46 pm
Forum: Beginner Basics
Topic: rb411 setup
Replies: 4
Views: 2953

Re: rb411 setup

You want station mode.

There's information on it, and the different modes, in the wiki,
Here: http://wiki.mikrotik.com/wiki/Manual:Wireless_AP_Client
and Here: http://wiki.mikrotik.com/wiki/Manual:Wi ... tion_Modes
by lordkappa
Tue Jul 03, 2012 6:50 am
Forum: Beginner Basics
Topic: How to deny/allow website by IP address in RB750 router?
Replies: 14
Views: 49211

Re: How to deny/allow website by IP address in RB750 router?

Hi, As your comment we can block all in network. As I need I want to block by IP address. Some user I don't allow to access website. I'm confused. Did you solve the problem? If my rule didn't work as written, see http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter regarding how to write firewal...
by lordkappa
Tue Jul 03, 2012 4:29 am
Forum: Beginner Basics
Topic: Station connect to WDS
Replies: 2
Views: 790

Re: Station connect to WDS

Pretty sure you're looking for Station Bridge mode. http://wiki.mikrotik.com/wiki/Manual:Wi ... ion-bridge Otherwise, if you aren't able to use that mode, you can try Station-pseudobridge.
by lordkappa
Tue Jul 03, 2012 3:22 am
Forum: General
Topic: Radius PPPoE/SSTP/L2TP fail, but login works
Replies: 3
Views: 1016

Re: Radius PPPoE/SSTP/L2TP fail, but login works

Are your firewall rules set to allow access to port 1723?
by lordkappa
Tue Jul 03, 2012 3:11 am
Forum: Beginner Basics
Topic: Client-based load balancing
Replies: 6
Views: 1304

Re: Client-based load balancing

A quick search of the wiki turned up this: http://wiki.mikrotik.com/wiki/NTH_load_ ... pproach%29.

It details what I think you're looking for.
by lordkappa
Mon Jul 02, 2012 2:25 pm
Forum: Beginner Basics
Topic: How to deny/allow website by IP address in RB750 router?
Replies: 14
Views: 49211

Re: How to deny/allow website by IP address in RB750 router?

You could block by IP, but many sites like youtube have a slew of ip's. Use the "Content" option in the firewall to filter based on a keyword. "Facebook.com" or "Youtube.com". /ip firewall filter add chain=forward action=reject reject-with=tcp-reset protocol=tcp content="Host: www.facebook.com" You ...
by lordkappa
Mon Jul 02, 2012 5:52 am
Forum: Forwarding Protocols
Topic: dif. bet. ap bridge and station bridge
Replies: 2
Views: 1166

Re: dif. bet. ap bridge and station bridge

From the wiki: http://wiki.mikrotik.com/wiki/Manual:Interface/Wireless
AP modes:

    ap-bridge - Basic access point mode.
    bridge - Same as ap-bridge, but limited to one associated client. 
You should be using AP Bridge for access points. Station is for PtP and PtM links.
by lordkappa
Mon Jul 02, 2012 12:43 am
Forum: General
Topic: external squid proxy
Replies: 4
Views: 1300

Re: external squid proxy

I suggested separate IP spaces because it may make administration a bit easier, and having the proxy on a different port on your router will provide better throughput. If you prefer not to do that, you could create a specific DSTNat rule for the proxy server's IP which immediately hands off the pack...
by lordkappa
Mon Jul 02, 2012 12:07 am
Forum: Forwarding Protocols
Topic: RIP with over diffrent RB versions. problem
Replies: 5
Views: 1223

Re: RIP with over diffrent RB versions. problem

There's nothing in the patch notes about it, but since updating takes barely a minute, it's easy to just update and find out.

If you have a lot of hardware to update, use The Dude to deploy the updates quickly and easily to all your devices.
by lordkappa
Sun Jul 01, 2012 9:10 pm
Forum: General
Topic: external squid proxy
Replies: 4
Views: 1300

Re: external squid proxy

Yes, that is why it doesn't work.

If you want to use NAT instead of configuring each individual PC with the IP of the proxy, You could solve it by putting the proxy on a different port on the router, and giving it an IP in a different subnet which won't hit the DSTNat rule.
by lordkappa
Sun Jul 01, 2012 7:08 pm
Forum: Beginner Basics
Topic: NTP client set time [solved]
Replies: 4
Views: 34833

Re: NTP client set time

Check here: http://wiki.mikrotik.com/wiki/Manual:System/Time

Which command you use depends on whether you installed the optional NTP package or not.
by lordkappa
Sun Jul 01, 2012 6:28 am
Forum: General
Topic: PPTP not responding on WAN port
Replies: 2
Views: 654

Re: PPTP not responding on WAN port

1. On the wiki, there is a page about PPTP. http://wiki.mikrotik.com/wiki/Manual:Interface/PPTP Which tells you what port PPTP uses. 2. Also on the wiki, there is a page about IP Firewall. http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter which tells you how to accept packets on a given port.
by lordkappa
Sun Jul 01, 2012 5:42 am
Forum: Wireless Networking
Topic: Dropping wireless clients on RB751U-2HnD
Replies: 19
Views: 5369

Re: Dropping wireless clients on RB751U-2HnD

Likewise. I have also sent this file to support along with my supout.
by lordkappa
Sun Jul 01, 2012 4:03 am
Forum: Forwarding Protocols
Topic: RIP with over diffrent RB versions. problem
Replies: 5
Views: 1223

Re: RIP with over diffrent RB versions. problem

Why not? While you're there, you may as well upgrade them all to 5.18 so you're current.
by lordkappa
Sun Jul 01, 2012 3:26 am
Forum: General
Topic: Create VLANs with independent dhcp servers
Replies: 1
Views: 456

Re: Create VLANs with independent dhcp servers

You should be able to create 3 VLAN interfaces, with VLAN ID's and assign them to one physical interface. As per: http://wiki.mikrotik.com/wiki/VLAN /interface vlan add name=VLAN2 vlan-id=2 interface=ether1 disabled=no add name=VLAN3 vlan-id=3 interface=ether1 disabled=no add name=VLAN4 vlan-id=4 in...
by lordkappa
Sun Jul 01, 2012 2:51 am
Forum: RouterBOARD hardware
Topic: Is it possible to use SMB service for USB printer sharing?
Replies: 4
Views: 1841

Re: Is it possible to use SMB service for USB printer sharin

Not currently. SMB filesharing was only added recently, so who knows what the future holds, but with the proliferation of wifi capable printers, I don't think this feature would be a priority.
by lordkappa
Sat Jun 30, 2012 9:56 pm
Forum: Beginner Basics
Topic: Having some issues getting UPNP working.
Replies: 2
Views: 876

Re: Having some issues getting UPNP working.

Not to preach but you really shouldn't use uPnP; it's not secure. Port forwards should be done as-needed, by hand. But anyway, did you check your firewall rules to see if traffic is being dropped by a rule in there? It's also entirely possible your ISP blocks incoming port 80 requests, as many do (r...
by lordkappa
Sat Jun 30, 2012 10:44 am
Forum: Beginner Basics
Topic: No dns on hotspot [solved]
Replies: 3
Views: 670

Re: no dns on hotspot

Did you punch 192.168.88.1 into the DNS page, like the example showed? If so, that's your problem.

Beyond that, more information about your specific configuration would be needed. an "export compact file" would help.
by lordkappa
Sat Jun 30, 2012 7:31 am
Forum: Beginner Basics
Topic: RB2011L , Multiple public IPs NAT to 5 DHCP Pools to 5 ports
Replies: 9
Views: 3085

Re: RB2011L , Multiple public IPs NAT to 5 DHCP Pools to 5 p

By using srcnat I will also have to put dstnat rules, right? Not for normal surfing. Connection tracking will automatically DSTnat any return traffic which is expected. If you need so-called "Port Forwarding", you will need to set up manual DSTNat rules. - What about RB2011L performance if I have 5...
by lordkappa
Sat Jun 30, 2012 3:32 am
Forum: Wireless Networking
Topic: Dropping wireless clients on RB751U-2HnD
Replies: 19
Views: 5369

Re: Dropping wireless clients on RB751U-2HnD

I have the same problem Matt does with my 751u-2hnd. It's an intermittent problem where the TX rates will drop to abysmal levels, (1-10mbps) stay there for some period of time (Between 1 and 10 minutes) then eventually rise back to normal rates. It happens with all clients, on any combination of set...
by lordkappa
Fri Jun 29, 2012 5:00 am
Forum: RouterBOARD hardware
Topic: Backing up / restoring
Replies: 4
Views: 1133

Re: Backing up / restoring

Use the export command.
Export compact file %name%
then
import %file%
on the new box.
by lordkappa
Fri Jun 29, 2012 4:39 am
Forum: General
Topic: Firewall rule to separate networks
Replies: 3
Views: 946

Re: Firewall rule to separate networks

I think insyne just wanted to block public addresses from entering his router from the outside; not set up VLANs.

Looks like your problem is that your first firewall rule is not set up correctly. You seem to have transposed the src and dst ip's.
by lordkappa
Thu Jun 28, 2012 10:40 pm
Forum: Beginner Basics
Topic: Home: Controling/Blocking Connections
Replies: 3
Views: 1031

Re: Home: Controling/Blocking Connections

For specifics, reference here: http://wiki.mikrotik.com/wiki/Manual:IP/Firewall . -Create an address list with the 2 PC's you want to exclude in it. -Create a "forward" chain firewall rule to drop packets arriving at your LAN-facing interface and originating from machines *NOT* on the address list. ...
by lordkappa
Thu Jun 28, 2012 1:22 pm
Forum: Beginner Basics
Topic: Proper way to set up switching and basic Wifi in US
Replies: 3
Views: 929

Re: Proper way to set up switching and basic Wifi in US

So, if you are getting 2MB/s with G, then it is pretty close to the max. If you are getting 2MB/s with N, then something is definately wrong. +1. The max with 802.11g is, of course, 54mbit but typically you only get just over half that due to overhead. I usually average no more than 2.6MB/s over G.
by lordkappa
Thu Jun 28, 2012 1:17 pm
Forum: Beginner Basics
Topic: Port Forwarding setup frusterations with Dynamic IP (Home)
Replies: 16
Views: 60591

Re: Port Forwarding setup frusterations with Dynamic IP (Hom

I assume you've set up a master SRC-Nat rule to NAT all your privately addressed traffic over your outbound interface. Your issue is only that the examples used a specific external destination IP for the DST-Nat rule? When you're setting up the specific DST-Nat rule, about halfway down the window, t...
by lordkappa
Thu Jun 28, 2012 12:52 pm
Forum: Beginner Basics
Topic: Redirect prot help
Replies: 4
Views: 782

Re: Redirect prot help

Forgive me, but It sounds like you're running a NAT within a NAT, and I think you're asking how to forward packets bound for a certain TCP port on Router-1 to a certain computer behind Router-2. Assumptions: Current setup ISP ----------- Router-1 ------------ Router-2 ---------- PC Router-1: Eth1- F...
by lordkappa
Sun Jun 24, 2012 9:59 pm
Forum: Beginner Basics
Topic: Bridge the router - direct connection
Replies: 3
Views: 787

Re: Bridge the router - direct connection

If you're using NAT and don't want to expose your entire network by bridging to the internet, you could add an explicit NAT-All rule at the end of your nat config to create a DMZ to a required machine. The advantage being that you could enable and disable the rules only when you needed them. /ip fir...
by lordkappa
Fri Jun 15, 2012 4:36 am
Forum: Beginner Basics
Topic: OmniTIK U-5HnD system health
Replies: 3
Views: 1086

Re: OmniTIK U-5HnD system health

The system health command shows system monitors such as CPU/System temp and/or voltages. As per the product page, http://routerboard.com/RBOmniTikU-5HnD , this board does not have those sensors built-in. Connection strengths for each client can be seen under wireless registration. I believe the exte...
by lordkappa
Tue Jun 12, 2012 2:32 pm
Forum: Beginner Basics
Topic: Online training?
Replies: 1
Views: 1096

Re: Online training?

Lots of places have online training There are online courses, and some free training videos at www.mikrotikuniversity.com, for example.
by lordkappa
Tue Jun 12, 2012 2:25 pm
Forum: Beginner Basics
Topic: rtp issues
Replies: 2
Views: 692

Re: rtp issues

I'm having trouble understanding your exact problem. Have you enabled Proxy Arp on the local-LAN-facing Ethernet port?
by lordkappa
Fri Jun 08, 2012 6:05 am
Forum: Beginner Basics
Topic: RB450g: Share WAN (Port 1) with 2xDHCP (1x port2, 1x port3)
Replies: 6
Views: 1878

Re: RB450g: Share WAN (Port 1) with DHCP/NAT on port 2, 3

Are my expectations of MikroTik and their "community" too high? Should I not expect quick responses? No need to be condescending. None of us are paid to be here to fulfill your expectations. We take time out of our schedules to help each-other out where and when we can. Some more information regard...