TDMA period auto drops packets. But TDMA period size 4ms fine. I set TX power on both devices to 10dBm (13dBm MIMO? ). In this configuration TX/RX signal streinght is -45/-45. TX Rate doesn't drops more from 780Mbps to 6Mbps. Just from 780Mbps to 702Mbps. Is TX/RX signal streinght is -45/-45 safe fo...

Hello. I have installed SXT Lite5 ac instead of SXT Lite 5 and have a bug. When Channel width 20/40/80Mhz Ceee Band 5Ghz-only-AC is selected Tx Rate is dropping from 780Mbps to 6Mbps all the time with packets losts. When I use 20/40Mhz Ce 5Ghz-only-AC then Tx Rate is dropping much seldom from 360Mbp...

Hi, everybody. I want to share some hardware experience with you. Here is the USB Ethernet 100Mbit adapter working fine with Mikrotik 6.36. Model number - KBT010185 - chipset Asix AX8872B. Price - 4$. Found it on Aliexpress. Is't real speed is 100Mbit (97 Mbit on speedtest). All drivers are build in...

6.34.6 is Bugged on RB2011

Little network with 8 users and low traffic. Today router stucked. Reboot helped in this situation.

Profiling
http://puu.sh/pxmSP/897ba95573.png

CPU Load 100%
http://puu.sh/pxmKq/fab14396e8.png

Reverted to 6.34.3

Switches mikrotik without igms snooping and DHCP snooping is cheap toys ! Why these toys you produce?

+1

RB1100AHx2 v6.27 http://puu.sh/h5LXn/32a96e0e88.png There is no cable connected to ether10, but log tells that link on ether10 is up/down often. MAC adresses on ether10 and LANs_bridge are the same - 00:D4:FF:6D:53:10 No problems are detected, but I can't understand why is it happening with port10 o...

Today my ping on mikrotik routerboard growed up to 350ms and CPU load to 100%. After adding this 2 firewall rules problem was eleminated. Will be usefull to block this attack using Mikrotik DNS Server. /ip firewall filter add action=add-src-to-address-list address-list="dns flood" address-...

yes +1

This problem? http://forum.mikrotik.com/viewtopic.php?f=1&t=79914

http://forum.mikrotik.com/viewtopic.php?f=1&t=79914 Hi I have a customers who love your products, are subject to DDoS attacks (SYN flood), and it hurts that Mikrotik doesn't have "notrack" target, just SYN flood over his CCR will knock down CPU to 100%. And if it had -j NOTRACK (or new...

Is it fixed in ROS 6.9 ?

up_

u_p

We can confirm this issue. Impossible to solve issue on any version ov RouterOS. Anybody can cause 100% CPU load on CCR oe any other Mikrotik router. Ih hurts...

There is the big problem after upgrading RouterOS rc9 to rc10. All information (screenshots and support files) in the attached zip. On rc10 after reboot some settings dissapeared. Brige interface dissapeares, pridge ports dissapears, dhcp on bridge "LANs" settings stop working, ip on bridg...

My router D-Link DIR-300 DD-WRT 300Mhz CPU had been under atack in past. But that was DOS (not DDOS) atacks. Packet flooding.

Protection rules were useful to prevent this tipe of attack.

So summary I need this rules? To protect Router and Minecradt server. Yes? /ip firewall filter add chain=forward protocol=tcp dst-port=25565 tcp-flags=fin,syn,rst,ack connection-limit=5,32 action=drop add chain=forward protocol=udp dst-port=25565 connection-limit=15,32 action=reject add chain=input ...

Please answer detailed. I'm noob in Mikrotik yet. But protection of Minecraft server is very important.

What are the specific rules (or commands in terminal) I need to accept?

Thaks to everybody. Rules have been accepted.
Are this rules enough to protect Minecraft server?

Can there be a syntax error?

add chain=input protocol=tcp dst-port=25565 tcp-flags=fin,syn,rst,ack connection-limit=5/32 action=drop

expected , (line 1 column 92)

RouterBoard Mikrotik 751G-2HnD firmware 2.39 RouterOS 5.18 . Minecraft online game server Gamai.Ru . 100 Megabits upload/download channel. Minecraft uses ports 25565 TCP/UDP. Last router D-Link DIR-300 had this protection rules in configuration: iptables -A INPUT -p tcp -m tcp --dport 25565 --tcp-f...