I guess it's possible to netinstall directly to 7.13. Just tried to netinstall v7.13. One attempt to retain current configuration, another attempt configuring device from scratch. This did not help regarding throughput, 220-230 Mbps is the ceiling. Switching fasttrack on/off does not make any diffe...

But anyway, I'm still supporting my suggestion about netinstall ... as much as it's unattractive, it'll give you the highest possible routing performance. If performance stays too low, then going back to 6.49.11 is still a viable option. Specially so if you don't intend to use any of new features, ...

The perception of CPU savings occurs on firewall, a /tool prifile is the best way to compare. In IP Setting you will see that fasttrack is actually active. I tried both scenarios. Fasttrack was disabled or enabled in IP>Settings, followed with reboot. No difference in performance was observed. CPU ...

The most certain way of getting firewall act according to set rules is to reboot router after making changes Unfortunately, reboots did not help. I was curious enough to check if reboot will have any effect when fasttrack feature is disabled or enabled in IP>Settings. I'd start from scratch (netins...

You are using more conditions as connection limits, my suggestion would be something like below. After add action=fasttrack-connection chain=forward comment="Fasttrack Connection" \ connection-state=established,related hw-offload=yes Thank you, this had certain positive impact on fasttrac...

The fast-track rule has set property connection-type="" ... this is not the same as the property not being set. I think you should unset this property.

Thank you for the suggestion. Just removed blank connection-type value, but it did not help.

Hi After SW upgrade 6.49.11->7.13 on RB850Gx2 I experience throughput ceiling at 220 Mbps while 500+ Mbps throughput was observed before upgrade. It seems that enabling/disabling FastTrack has no impact on throughput. FastTrack counters in the filter rule are not increasing as well. CPU utilization ...

Doesn't that contradict with the other point made? there are people who examine security updates to see what exactly was fixed and quickly write exploits for them to use the time window between release of the updates and installation by the majority of users It would take certain time to reverse-en...

By the way , i tracked the hackers MAC-ADDRESS and i found this result : E4:8D:8C:3A:E5:96 .. which it belongs to RouterBoard.Com ! That's your WAN interface MAC address. How did u know that ! :D I really wonder how you have pulled MAC address from remote server RouterBoard.Com No buddy i have chec...

FW: 6.42.3 (stable) If my Mikrotik router(RB433L) is configured in native Ipv6 mode(without IPV4 address) i cant get package update from mikrotik CDN. It seems that Mikrotik does not receive AAAA from my DNS, but if I make a request through DIG - my DNS gives AAAA [romas@ns0 unbound]# dig mikrotik....

Just upgrade your routers to RouterOS bugfix >6.40.8 or stable >6.42.1 As I said, doing that I would lose opportunity to find out if our otherwise heavily secured network has been breached. So I would really appreciate to know, i mean really know, not only guess if we were infected. No one asked me...

Are they supposed to be there or is this Mikrotik ROS system VPNfilter compromised ?

Do you have another clean router with up to date OS to compare? Actually, it should be possible to flash clean router with older SW.

Is there a way I can specify which gateway to use when there are two routers with similar ip address, maybe by mac address? Example: There are two routers both with ip 192.168.1.1. One has more bandwidth and throughput than the other. I would like to use the fastest one all the time and ignore the ...

I cant ping from VPN to any device in LAN but I can ping from VPN to routers (IN WANs) WAN1, WAN2,WAN3,WAN4 (192.168.0.1,192.168.2.1,192.168.3.1,192.168.4.1) Looks like symptom of either wrong IP subnet mask or wrong default gateway on LAN devices. Try capturing traffic at LAN device interface, see...

BartosP are you working for juniper ;-P Nokia-Alcatel-Lucent has strong presence in Poland with numerous competence centers, Juniper perhaps doesn't :) Anyway, it's great to see prompt statement and clarification from Mikrotik on this threat. I wonder if Mikrotik offers some mailing list for custom...

I couldn't identify which "detail" is causing this message !!! You may want to investigate removing line by line from the configuration and see when backup will succeed. I think it's good coding practice to generate detailed diagnostics output when software is not happy about some paramet...

Hi
I wonder if VPNFilter malware threat is addressed in this release.
See https://www.symantec.com/blogs/threat-i ... ot-malware and https://blog.talosintelligence.com/2018 ... ilter.html for more details.

RB2011UiAS-2HnD I get the Internet by DHCP After upgrade to 6.42.1 : On 6.42.0 work fine... if ISP (or router before this) dhcp lease is short (i guess it is 5minutes in Your case), with 6.42.1 version mikrotik asks for ip ~30seconds before lease (not ~2min). If there are many dhcp users, a lot bro...

Please send the above to support@mikrotik.com (or shout loud, you're closer to Mikrotik premises than most of us :-) ), but don't rely on Mikrotik staff picking this information from this forum. I have no formal support contract with Mikrotik, but will try to do so. Anyway, there was once SW defect...

Would be interesting to see more details in this capture: how does transaction look like, flags set, mac addresses etc etc. Seems, DHCP server is not happy with unicast requests (renewal messages) sent from mikrotik router if these are sent out. I did few DHCP tests with CHR versions 6.42, 6.42.1, ...

WAN IP Lease expires on daily basis Since upgrading to 6.42.1, I noticed that on a daily basis I get the following log entries apr/24 15:16:35 dhcp,critical,error dhcp-client on ether1 lost IP address <WAN IP> - lease expired 12:28:52 dhcp,critical,error dhcp-client on ether1 lost IP address <WAN I...

Hope that helps someone who encounters this rather… pointless scanning. Hi I think you have found risk which calls for mitigation techniques in RouterOS. Default IPv6 max-neighbor-entries table size is 8K, entries with status="failed" stay there nearly 30 secs. Quite easy to keep such tab...

RB850Gx2 is not supported. https://wiki.mikrotik.com/wiki/Manual:IP/Fasttrack#Supported_hardware However, both OS CLI and WinBox happily allow to enable Fasttrack on RB850Gx2. Filter rule with action=fasttrack-connection is also OK on RB850Gx2. I really wonder what technical limitations on RB1xx, R...

What's new in 6.21 (2014-Oct-30 12:34): If you already run some RouterOS v6.x version, simply click “Check for updates” in QuickSet, Webfig or Winbox packages menu. Hi Take care. I've just upgraded my 450G to 6.21. Now box reboots right after starting services, gives not enough time to even enter p...

What's new in 6.21 (2014-Oct-30 12:34): If you already run some RouterOS v6.x version, simply click “Check for updates” in QuickSet, Webfig or Winbox packages menu. Hi Take care. I've just upgraded my 450G to 6.21. Now box reboots right after starting services, gives not enough time to even enter p...