ip/firewall/filter chain=forward action=fasttrack-connection connection-state=established,related log=no log-prefix="" chain=forward action=accept connection-state=established,related log=no log-prefix="" Only a test in RB750g, no result... Same on RB750G 6.33.3, fasttrack filte...

No fastpath or fasttrack on x86 for now...

or ever? Isn't fastpath/fasttrack using hardware specific capabilities? And for x86, why do you even need it?

So
1) How to run multiple DHCPv6 client?
2) How to change DUID? I changed the interface MAC but that had no effect on DUID

What protocol do you want to use where? The inside and outside of the router can (and usually will) use different protocols. Here I use DHCPv6 on the outside to get an prefix pool and allocate prefixes to the internal interfaces from that pool, but on the inside I don't use DHCPv6 but just SLAAC. S...

How can I get a new DUID for DHCPv6 client? and how to run multiple instances of DHCPv6 client on the same interface? I remember seeing somewhere RouterOS generates DUID based on first available hardware MAC, so it can't be changed? I need a new DUID for troubleshooting.

I am on Time Warner Cable with Arris TG1672G (TS0800124_110614_16XX.GW_PC20_TW) IPv6 worked fine and I could get a /56 prefix assigned to me. Now the DHCPv6 client just says searching and I can no longer get IPv6 working. No config changes (upgraded from 6.32.2 to 6.32.3). DHCPv6 packet counter in f...

pptp server is still broken in 6.30.2
ppp,error,critical 16: Encryption got out of sync - disabling

Is it a MTU related issue?

Console logging
echo: ppp,error,critical 16: Encryption got out of sync - disabling

Nothing in syslog, pptp connectivity lost but the link stays up in ppp

version 6.30.1 (wasn't this bug supposed to be fixed in 6.30)

Any timeout that was below 5 seconds.

I increased all timers by x2 and still see some of these dropped packets. Some from Google's server 80/443 TCP RST or SYN

I had this issue when on a ads line. Solution was to 3x the timeout on connection tracking.

Which timeout did you change?

In the firewall the first 5 rules are #1 input ICMP accept #2 input established accept #3 input related accept #4 input OpenVPN UDP/port accept #5 input any drop & log I am getting 100K dropped packets from rule #5 within 12 hours. The majority of them seems to be TCP RST, TCP FIN from NAT trans...

Is the wiki editing restricted to employees/partners only?

OpenVPN feature request:

• IPv6 inside the tunnel
  IPv6 as a transport

+1 to implement the 4 unsupported features of OpenVPN... I never thought a working VPN server could do without those features

There doesn't seem to be a syntax error here... Certainly not a parse time one. I can add it to "/system script" with no problem, and I don't see any "I" flag... It seems that flag there refers to something else. Try to copy and paste the source into a new script, and remove the...

AFAIK, when you run a script, if there's a parse time error, the whole script will abort. If it's a post-parse time, all lines before the offending line will run normally, and the fatal one will show either a syntax error or runtime error, after which the whole script terminates. Stuff like mismatc...

What behaviors should I expect when the script encounters an error (syntax error, runtime error etc)? Does it continue or abort? And will there be any output if not explicitly specified in the script with log command? When I print the script I see "Flags: I - invalid" but there is no synta...

I did a netinstall and it fixed the problem. The web interface looks totally different. I guess the v6 has a new web interface but for some reason the previous installation/upgrade did not update the web portion.

This is the first time I see teamviewer causes another application to malfunction.

On the router web admin page, all the images are 404 and attempts to log in to webbox leads to Error 501. I did an upgrade from 6.15 to 6.18 and it didnt fix the problem. This is on a RB750G. Is it caused by missing files? Any way to fix it without reinstallation?

I am using a separate IPv6 interface (6in4 tunnel) for outbound ipv6 traffic. Is there a way to set up a tracker to remove the IPv6 static route if the link loses connectivity (tunnel endpoint not working). Right now if the tunnel goes down, computers still try to use IPv6 and traffic just get black...

Thanks. I have a pptp-client set up on RouterOS. So all I need to do is to change the parameters? #************************************************************************************************ # Parameters #******************************************************************************************...

This is badly needed. If the vpn server fails, vpn client on RouterOS is just wasting resources/bandwidth and more importantly generating it generates so many repeated logs... and there is no log suppress feature on RouterOS as I know of.

Connect to only allows ip address. My pptp server uses DDNS so connect to IP doesn't work really well. Any solutions?

I have a sit interface on RouterOS and have a routed /48 I use for LAN. (tunnelbroker) HE_endpoint ---(sit1)RouterOS(LAN)---(f0/0)Cisco1(f0/1)---(f0/0)Cisco2 prefix63:1::/64 between RouterOS and Cisco1(f0/0) prefix63:2::/64 between Cisco1 and Cisco2(f0/1) Everything works on Cisco1 Cisco2 can ping C...

What do you not understand? If you know how TCP/UDP/ICMP works, the values are self-explanatory. http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Connection_tracking If you don't even read the questions, why bother posting a reply? Which question does that wiki page answer? FFS the questions are ab...

I used the network diag tool here http://n2.netalyzr.icsi.berkeley.edu/ Basic UDP access is available. The client was unable to send fragmented UDP traffic. The most likely cause is an error in your network's firewall configuration or NAT. The maximum packet successfully sent was 1476 bytes of paylo...

You can find timing entries under /ip firewall connection tracking.

I read that before I asked... It was very confusing to me...

1. What is the default timer for NAT table and IP/IPv6 firewall established? Are they the same thing(I assume not because they have different position in the flow)? 2. IP/IPv6 firewall is iptables, ip6tables on Linux? 3. Which extension is used for connection state tracking? -m state --state ESTABLI...

Version 6.0rc11 x86

The graph timestamp is totally off in webfig... time is properly configured and the graph is normal in winbox and /graph