Community discussions

Search found 18 matches

by Modestas
Thu Aug 02, 2018 12:44 am
Forum: Announcements
Topic: Security announcement blog
Replies: 120
Views: 38706

Re: Security announcement blog

Doesn't that contradict with the other point made? there are people who examine security updates to see what exactly was fixed and quickly write exploits for them to use the time window between release of the updates and installation by the majority of users It would take certain time to reverse-en...
by Modestas
Tue Jun 19, 2018 3:17 pm
Forum: General
Topic: bug persists after updating to 6.42.3
Replies: 14
Views: 6243

Re: bug persists after updating to 6.42.3

By the way , i tracked the hackers MAC-ADDRESS and i found this result : E4:8D:8C:3A:E5:96 .. which it belongs to RouterBoard.Com ! That's your WAN interface MAC address. How did u know that ! :D I really wonder how you have pulled MAC address from remote server RouterBoard.Com No buddy i have chec...
by Modestas
Sat Jun 16, 2018 6:55 pm
Forum: Announcements
Topic: v6.42.3 [current]
Replies: 80
Views: 23041

Re: v6.42.3 [current]

FW: 6.42.3 (stable) If my Mikrotik router(RB433L) is configured in native Ipv6 mode(without IPV4 address) i cant get package update from mikrotik CDN. It seems that Mikrotik does not receive AAAA from my DNS, but if I make a request through DIG - my DNS gives AAAA [romas@ns0 unbound]# dig mikrotik....
by Modestas
Fri Jun 08, 2018 8:04 pm
Forum: Announcements
Topic: VPNfilter official statement
Replies: 191
Views: 77546

Re:

Just upgrade your routers to RouterOS bugfix >6.40.8 or stable >6.42.1 As I said, doing that I would lose opportunity to find out if our otherwise heavily secured network has been breached. So I would really appreciate to know, i mean really know, not only guess if we were infected. No one asked me...
by Modestas
Fri Jun 08, 2018 7:46 pm
Forum: Announcements
Topic: VPNfilter official statement
Replies: 191
Views: 77546

Re: VPNfilter official statement

Are they supposed to be there or is this Mikrotik ROS system VPNfilter compromised ?
Do you have another clean router with up to date OS to compare? Actually, it should be possible to flash clean router with older SW.
by Modestas
Thu May 24, 2018 11:08 pm
Forum: General
Topic: Colliding Gateway IP on WAN
Replies: 4
Views: 458

Re: Colliding Gateway IP on WAN

Is there a way I can specify which gateway to use when there are two routers with similar ip address, maybe by mac address? Example: There are two routers both with ip 192.168.1.1. One has more bandwidth and throughput than the other. I would like to use the fastest one all the time and ignore the ...
by Modestas
Thu May 24, 2018 6:47 pm
Forum: General
Topic: Can't ping to any device in LAN through VPN
Replies: 40
Views: 6890

Re: Can't ping to any device in LAN through VPN

I cant ping from VPN to any device in LAN but I can ping from VPN to routers (IN WANs) WAN1, WAN2,WAN3,WAN4 (192.168.0.1,192.168.2.1,192.168.3.1,192.168.4.1) Looks like symptom of either wrong IP subnet mask or wrong default gateway on LAN devices. Try capturing traffic at LAN device interface, see...
by Modestas
Thu May 24, 2018 6:03 pm
Forum: Announcements
Topic: VPNfilter official statement
Replies: 191
Views: 77546

Re: VPNfilter official statement

BartosP are you working for juniper ;-P Nokia-Alcatel-Lucent has strong presence in Poland with numerous competence centers, Juniper perhaps doesn't :) Anyway, it's great to see prompt statement and clarification from Mikrotik on this threat. I wonder if Mikrotik offers some mailing list for custom...
by Modestas
Thu May 24, 2018 4:50 pm
Forum: General
Topic: backup,critical error creating backup file, ROS 6.42.1
Replies: 29
Views: 6103

Re: backup,critical error creating backup file, ROS 6.42.1

I couldn't identify which "detail" is causing this message !!! You may want to investigate removing line by line from the configuration and see when backup will succeed. I think it's good coding practice to generate detailed diagnostics output when software is not happy about some parameters built ...
by Modestas
Wed May 23, 2018 11:32 pm
Forum: Announcements
Topic: v6.42.2 [current]
Replies: 65
Views: 14497

Re: v6.42.2 [current]

Hi
I wonder if VPNFilter malware threat is addressed in this release.
See https://www.symantec.com/blogs/threat-i ... ot-malware and https://blog.talosintelligence.com/2018 ... ilter.html for more details.
by Modestas
Sun May 06, 2018 3:23 pm
Forum: Announcements
Topic: v6.42.1 [current]
Replies: 272
Views: 45575

Re: v6.42.1 [current]

RB2011UiAS-2HnD I get the Internet by DHCP After upgrade to 6.42.1 : On 6.42.0 work fine... if ISP (or router before this) dhcp lease is short (i guess it is 5minutes in Your case), with 6.42.1 version mikrotik asks for ip ~30seconds before lease (not ~2min). If there are many dhcp users, a lot bro...
by Modestas
Sun Apr 29, 2018 7:26 pm
Forum: Announcements
Topic: v6.42.1 [current]
Replies: 272
Views: 45575

Re: v6.42.1 [current]

Please send the above to support@mikrotik.com (or shout loud, you're closer to Mikrotik premises than most of us :-) ), but don't rely on Mikrotik staff picking this information from this forum. I have no formal support contract with Mikrotik, but will try to do so. Anyway, there was once SW defect...
by Modestas
Sun Apr 29, 2018 6:25 pm
Forum: Announcements
Topic: v6.42.1 [current]
Replies: 272
Views: 45575

Re: v6.42.1 [current]

Would be interesting to see more details in this capture: how does transaction look like, flags set, mac addresses etc etc. Seems, DHCP server is not happy with unicast requests (renewal messages) sent from mikrotik router if these are sent out. I did few DHCP tests with CHR versions 6.42, 6.42.1, ...
by Modestas
Sun Apr 29, 2018 2:01 pm
Forum: Announcements
Topic: v6.42.1 [current]
Replies: 272
Views: 45575

Re: v6.42.1 [current]

WAN IP Lease expires on daily basis Since upgrading to 6.42.1, I noticed that on a daily basis I get the following log entries apr/24 15:16:35 dhcp,critical,error dhcp-client on ether1 lost IP address <WAN IP> - lease expired 12:28:52 dhcp,critical,error dhcp-client on ether1 lost IP address <WAN I...
by Modestas
Thu Sep 21, 2017 9:21 am
Forum: General
Topic: Remote Host Scanning our IPv6 Network
Replies: 50
Views: 5712

Re: Remote Host Scanning our IPv6 Network

Hope that helps someone who encounters this rather… pointless scanning. Hi I think you have found risk which calls for mitigation techniques in RouterOS. Default IPv6 max-neighbor-entries table size is 8K, entries with status="failed" stay there nearly 30 secs. Quite easy to keep such table busy. U...
by Modestas
Fri Aug 25, 2017 4:03 pm
Forum: Announcements
Topic: FastTrack - New feature in 6.29
Replies: 237
Views: 139984

Re: FastTrack - New feature in 6.29

RB850Gx2 is not supported. https://wiki.mikrotik.com/wiki/Manual:IP/Fasttrack#Supported_hardware However, both OS CLI and WinBox happily allow to enable Fasttrack on RB850Gx2. Filter rule with action=fasttrack-connection is also OK on RB850Gx2. I really wonder what technical limitations on RB1xx, R...
by Modestas
Fri Oct 31, 2014 11:12 am
Forum: General
Topic: v6.21 released!
Replies: 25
Views: 6575

Re: v6.21 released!

What's new in 6.21 (2014-Oct-30 12:34): If you already run some RouterOS v6.x version, simply click “Check for updates” in QuickSet, Webfig or Winbox packages menu. Hi Take care. I've just upgraded my 450G to 6.21. Now box reboots right after starting services, gives not enough time to even enter p...
by Modestas
Fri Oct 31, 2014 10:47 am
Forum: General
Topic: v6.21 released!
Replies: 25
Views: 6575

Re: v6.21 released!

What's new in 6.21 (2014-Oct-30 12:34): If you already run some RouterOS v6.x version, simply click “Check for updates” in QuickSet, Webfig or Winbox packages menu. Hi Take care. I've just upgraded my 450G to 6.21. Now box reboots right after starting services, gives not enough time to even enter p...