Community discussions

MikroTik App

Search found 5 matches

by Felix
Mon Nov 18, 2013 7:47 pm
Forum: General
Topic: Need to open firewall for NAT?
Replies: 3
Views: 1364

Re: Need to open firewall for NAT?

Hallo, same "problem" here on an routerboard 2011-uas-rm. running 6.2 (beginning with 6.x rc) and using two pppoe connections for internet. at the end of the forward and input chains are drop rules without any conditions. so portforwarding (netmap) is not working without accept rules in th...
by Felix
Fri Nov 08, 2013 8:21 pm
Forum: General
Topic: PCI Compliance - DNS server problems
Replies: 5
Views: 4731

Re: PCI Compliance - DNS server problems

The german ISP "Deutsche Telekom" recently has startet to scan their customers for vulnerabilitys. Much of our ADSL (T-DSL Business) using customers got Letters stating the have an open recursive dns resolver. Our checks showed the DNS was not open. We always had firewall rules to drop the...
by Felix
Thu Jul 11, 2013 8:17 pm
Forum: RouterBOARD hardware
Topic: RB2011UAS-RM as hotspot and DHCP server
Replies: 6
Views: 3097

Re: RB2011UAS-RM as hotspot and DHCP server

Hi, we are using an 2011UAS-RM for two DSL lines 6mbit. Routing 7 local subnets, using vlan (software), running dhcp and hotspot. router acts as dns server and VPN gateway. we have 80 firewall, 22 nat and 14 mangle rules. traffic is around 10 gigabytes a day. cpu is not a problem, max 25% memory usa...
by Felix
Wed Jan 16, 2013 8:27 pm
Forum: General
Topic: Hotspot Redirect Problems with Macbook Pro and Windows 7
Replies: 19
Views: 16524

Re: Hotspot Redirect Problems with Macbook Pro and Windows 7

Hi, take a look a the post from "redsalamander" the dns and walled garden settings are necessary. Windows 7 and 8 do the same like apple devices. They try to reach a txt file from microsoft servers to determine if the network has internet access. http://www.msftncsi.com/ncsi.txt see also h...
by Felix
Wed Jan 16, 2013 8:01 pm
Forum: General
Topic: IPSEC tunnel issues - SAs need flushing from time to time
Replies: 23
Views: 9312

Re: IPSEC tunnel issues - SAs need flushing from time to tim

hi, i had simmilar proplems with ipsec. on both routers i use this script: ping interface=internal internal.ip.of.other.site count=1 run this with scheduler every 5 minutes or somthing like. if you do so there is no idle.... works fine from 5.12-6.rc6 in a different mix of versions. for the problem ...