MikroTik

przent

Last time I was telling such a bad lie I was six years old.

przent

+1 for BugTracker!

przent

downvote for mysql

but an official SDK to compile add-on software would be nice. Then anybody can have virtually anything.

przent

indeed

+1

This way it would be possible to create "zones" which would make for less FW rules which in turn makes them more readable.

przent

downvote
only if routeros had dnssec active, else there is a security risk doing this

but,

providing a dig like tool would be great

przent

One company from Poland install some distrubution of Linux on CCR, and filtering 2mln/packets of TCP with 50% CPU.. So I thing there is a posibillity to do that the same on RouterOS..

Post a link/contact please. I`m very curious about this. Thanks.

przent

yes, cat5/6 patch cords should be at least 1m (3 feet) long, but only if operated in half duplex mode or ring topology. in full duplex and star topology, there is no minimum limit on length, but 2 other limits still correlate with it. first there is a bend radius limit which can be easily broken on ...

przent

No, you cannot access rc.local

What is wrong with using scheduler to run at-startup? and then auto-delete itself?

What's wrong with that?

It is a hack with dirty workaround for a missing feature?

przent

OK the paragraph sentence with CCR exception is this sentence: We do not offer repairs for products that are not covered by warranty. Exceptions can be made for RB1000, RB1100 and RB1200, CCR. I understand your point with reseller service center but the emploees with such skills are still on high de...

przent

No, I understand you perfectly. The question what I`m trying to clear out is: How would Mikrotik react on a official _resellers_ (not end customer) request to return a broken CCR (or any future device above 500$) after the 1 year of manufacturer warranty is over, but the reseller warranty is not yet...

przent

Everything you buy in Poland even if its made in Latvia must have a warranty of at least 2 years, because it is an EU wide law. It is the problem of the reseller if Mikrotik does not offer 2 years warranty. So if CCR dies after 1.5 year, you return the device to your reseller and get a new one or 1...

przent

Hape could you explain please? so in EU if a device broke down in first year warranty issues producer (mikrotik) if it is broken down in second year warranty issues store (reseller have to pay from his pocket?) Is this what apple doing? And it is demanded by EU wide law? http://europa.eu/youreurope...

przent

yes reinstal as honzam said. the kernel is crashing during file system access. This can be because of damaged NAND or just software corruption of vital data or a kernel bug triggered be something unique to your NAND or data. NAND problem is the most probable one. NetInstall should help in all cases ...

przent

you take out the hard drive, put it in a temporary computer, install routeros and put it back, maybe?

przent

Everything you buy in Poland even if its made in Latvia must have a warranty of at least 2 years, because it is an EU wide law. It is the problem of the reseller if Mikrotik does not offer 2 years warranty. So if CCR dies after 1.5 year, you return the device to your reseller and get a new one or 10...

przent

Gratulations to new products!

I wish: CRS rackmount version with 2xSFP to be able to have a fibre loop
and
stacked management, full CLI, wire speed MPLS and vlan (with trunking), dual power suply in rackmount for redundancy, rSTP, mSTP, IGMP proxy

its a switch so everything wire speed please

przent

Hello Dobby, I do not share your opinion: Fom point of view: Your statement that everything must be done new is incorrect. Stability and Bugs: Tilera provides an running SDK witch can compile any _well_written_ C and C++ program for their architecture. Work porting the Linux kernel to Tilera is done...

przent

Waste of time, really. Or more seriously, think about some way to get original OpenVPN into RouterOS, because the current self-written implementation (as I understood it) does not go anywhere. Basically it means either violating GPL (bad), finding some clever way how to use GPL source without viola...

przent

It seems like ROS v6rc11 is not saving graphs for interfaces?

Have same issue. Upgrade from 6.0rc9 to rc11

przent

Same here. Interface graphs lost after reboot. SNTP set and working.
Intervall is 1Hour.

przent

OpenWrt is GPLv2 software and they even didn`t modify anything, they just compile the source code against their libs. Ubiquity EdgeCore routers on modified Vyatta use a Debian OpenVpn source package with a config frontend which is GPLed as well. They use OpenVPN under GPL terms so they have and will...

przent

Nothing about Hotspot in the changelog. Does it work again?

przent

It is possible that they do not want to touch OpenVPN because of licensing issues. They do not want to wake-up the dragon as they know he will eat (sue) them. OpenVPN Technologies, Inc. owns all of the rights to the OpenVPN core and maintains a dual license for the use of the technology. We support ...

przent

No backup needed to compromise. It`s much easier to get access to physical equipment of a WISP. Most of the equipment is protected by nothing. If I`m a script kiddy I do this: a) Crack the case on the tower b) http://manio.skyboo.net/mikrotik/ c) Do harm d) Tell all my friends how good hacker I am....

przent

If you follow the manual, and store the file "in a secure location", no harm can be done. There is no solution to this, except by using encryption, which would require decryption keys. Normis, read the three part article in more depth or give the links to somebody able to understand it. I...

przent

No backup needed to compromise. It`s much easier to get access to physical equipment of a WISP. Most of the equipment is protected by nothing.

If I`m a script kiddy I do this:
a) Crack the case on the tower
b) http://manio.skyboo.net/mikrotik/
c) Do harm
d) Tell all my friends how good hacker I am.

przent

the bridge gives about 200 to 300 mbps in your config but you can use a switched configuration and then you will get wire speed.

http://wiki.mikrotik.com/wiki/Manual:Sw ... p_Features

przent

a) hard to notice b) Applies to RouterOS: 2.9, v3, v4 I have something which most of you might not know... Read especially part III. I bet ROS 5.x, 6.x are about the same security level.... http://felinemenace.org/~andrewg/MikroTik_Router_Security_Analysis_Part1/ http://felinemenace.org/~andrewg/Mik...

przent

I actually wonder how fastpath is implemented without using ASIC chips. Mikrotik added fastpath to almost all currently produced models by a software change. The wiki states that the packets are forwarded without additional processing in the kernel. That would basically mean that: a) the cpu`s (old ...

przent

Did you recognized it? RC9 is out! http://forum.mikrotik.com/viewtopic.php?f=3&t=69728 Note for Cloud Core Router users: after upgrading, please also upgrade the RouterBOOT with the console command "/system routerboard upgrade" This is a highly recommended upgrade for all CCR series u...

przent

seams like the egress side is not == the ingress side when fastpath turned on so there are packet drops with fastpath on

do you see any drops in statistics?

could you try to test throughput with different MTU sizes using fastpath on/off?

przent

Hello again, The RB is detected using MAC in netinstall. The problem is after clicking the install button. The RB sends bootp requests but netinstall FAILS TO REPLY in your position I would like to try out the following. - Connect to the RB1200 via Winbox and Mac address - Give the RB1200 a valid I...

przent

Did you try out to connect to the RB1200 over Winbox using both methods like IP and MAC address?

The RB is detected using MAC in netinstall. The problem is after clicking the install button. The RB sends bootp requests but netinstall FAILS TO REPLY

przent

I have same issue with wine + netinstall in Ubuntu 12.04 with rb750g. I suppose it is not rb hardware dependant and eighter a wine or netinstall.exe problem. wine was started as root and using netstat I could see that it`s bound to the proper bootp port. I had to use windows for netinstall. In case ...

przent

beside the fact that rb2011uas is a very sexy CPE device I would recomend to put the servers on the gigabit interfaces and the slow adsl lines on the 100mbit ones.

przent

The "All packages" link for 6.x is missing completly after your pull back operation. I`ve just bricked a testboard with partitions on it and there is no 6.x (all packages) to download and use netinstall... Lucky that that was a test board...

przent

Hi, I`ve put MetaRouter under test on rb2011uas-rm with 6.0rc7. Problems: a) when creating metarouter via CLI the size units of ram and disk space aren`t the same (confusing) b) sometimes, the shutdown of a metarouter takes very long time (minutes), so it seams to be hanging somewhere c) when stress...

przent

This might be of interest here:

http://www.phoronix.com/scan.php?page=n ... px=MTI5MjA

Hope cross-site linking is ok...

przent

Yes thats the exact same problem. This seams to be easily testable and 100% reproducible bug than. Why it`s not fixed for that long time? Or is it and it popped up in 6.x again?

Where can I take a look on the reported bugs?

przent

Hi, I`m new to Mikrotik and RouterOS so if this question is "lame" and I haven`t read documentation properly than I`m sorry. I`m using RB2011-UAS-RM with RouterOS 6.0rc7. I`m using L7 regexp to block some web-sites which works, but I think I`ve spotted a real problem: Following traffic sni...

Search found 40 matches