Community discussions

Search found 40 matches

by kivimart
Sat Dec 23, 2017 5:44 pm
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 76841

Re: v6.41 [current]

No problem here upgraded firmware also. RB1100ahx2, ccr1009-8G-1S-1S+, Runs Capsman RB962UiGS-5HacT2Hnt, RB750gr3, RB750GL, RB912UAG-2HPNnD, CRS12524G-1S. I love the releases on Friday and big weekends so i can play with the new releases on the weekends and then upgrade customers routers later. Merr...
by kivimart
Tue May 02, 2017 11:17 pm
Forum: Announcements
Topic: v6.39 [current]
Replies: 89
Views: 33469

Re: RE: Re: v6.39 [current]

HAP ac lite - After update I can't create SMB share on external drive (usb). Can somebody confirm that?
can confirm with hEX and attached 1 TB USB SSD
also the exisiting shares are inaccessible!

please fix it :)
Same here on HapAC

Sent from my SM-G930F using Tapatalk
by kivimart
Thu Mar 09, 2017 10:43 pm
Forum: Beginner Basics
Topic: https, 443 proxy configuration
Replies: 8
Views: 6515

Re: https, 443 proxy configuration

How did you find the ip addresses.?
by kivimart
Mon Nov 14, 2016 6:22 pm
Forum: RouterBOARD hardware
Topic: New CPU - new product RB750Gr3 - RB750G family - now mmips
Replies: 180
Views: 66944

Re: RE: Re: New CPU - new product RB750Gr3 - RB750G family - now mmips


RB750Gr3

CPU usage in profile >> winbox show 100% unclassified
Same here

Skickat från min Nexus 6P via Tapatalk
by kivimart
Mon Nov 07, 2016 2:51 pm
Forum: General
Topic: Throttle Windows Updates
Replies: 32
Views: 15627

Re: Throttle Windows Updates

another example here. /ip firewall layer7-protocol add name=WINUPDATE regexp="^.*(download.*windowsupdate|l.windowsupdate|.*delivery.*mp.*microsoft)" /ip firewall mangle add action=add-dst-to-address-list address-list=A9-WinUpdate address-list-timeout=15m chain=postrouting comment=WinUpdate \ dst-ad...
by kivimart
Fri Oct 28, 2016 3:23 pm
Forum: General
Topic: Block Play Store / Android Updates
Replies: 8
Views: 13070

Re: Block Play Store / Android Updates

Try this Layer7 protocol

/ip firewall layer7-protocol
add name=GOOGLEAPPS regexp="^.*(apqxgv.*gvt)"
by kivimart
Fri Sep 30, 2016 8:27 pm
Forum: Beginner Basics
Topic: Mikrotik + AdBlock Plus
Replies: 20
Views: 24342

Re: RE: Re: Mikrotik + AdBlock Plus

adblock-dns.rsc
adblock-addrlist.rsc[/quote]

Is this lists updated Daily or how often.?

Skickat från min Nexus 6P via Tapatalk
by kivimart
Sat Sep 24, 2016 8:12 am
Forum: General
Topic: Easy Dynamic Dual Wan Failover
Replies: 14
Views: 5594

Re: Easy Dynamic Dual Wan Failover

Combination off ip-cloud and script i think.

Skickat från min Nexus 6P via Tapatalk
by kivimart
Wed Sep 07, 2016 10:48 am
Forum: Scripting
Topic: Copying Dynamic Address Lists To Another router
Replies: 3
Views: 1062

Re: Copying Dynamic Address Lists To Another router

Export command
ip firewall address-list export file=copy

Import command
import file=copy.rsc
by kivimart
Tue Sep 06, 2016 10:14 pm
Forum: Scripting
Topic: dns to address lists scripts.
Replies: 7
Views: 9264

Re: dns to address lists scripts.

hi this script is very slow and high cpu usage i had to change it i think this one is quicker :foreach i in=[/ip dns cache all find where (name~"facebook" || name~"fbcdn" || name~"bbc" || name~"akamai" || name~"youtube") && (type="A") ] do={ :local tmpAddress [/ip dns cache get $i address]; delay d...
by kivimart
Thu Aug 11, 2016 10:29 pm
Forum: Scripting
Topic: Blacklist Filter update script
Replies: 632
Views: 104252

Re: RE: Re: RE: Re: Blacklist Filter update script

You can maybe start to distribute the blacklist via dns records to 6.36. An user can just put one domain name that would load whole list of ip addresses and keep it updating according the ttl. No need for scripts and files further. One vote for dns distribution Skickat från min Nexus 6P via Tapatalk
by kivimart
Tue Jul 12, 2016 12:35 am
Forum: The Dude
Topic: The Dude, v6.36rc test builds.
Replies: 112
Views: 20204

Re: The Dude, v6.36rc test builds.

in rc37 snmpwalk dosnt work, no profile, nothing happens.
by kivimart
Thu Jul 07, 2016 9:19 am
Forum: The Dude
Topic: The Dude, v6.36rc test builds.
Replies: 112
Views: 20204

Re: The Dude, v6.36rc test builds.

Same problem here the dude crash after 10 to 60 min.

Downgrade to 36rc30 solves the problem.
by kivimart
Mon May 30, 2016 6:52 pm
Forum: Wireless Networking
Topic: Huawei ME909u-521 LTE
Replies: 3
Views: 1403

Re: Huawei ME909u-521 LTE

Please post firmware file & instructions.
by kivimart
Fri Apr 22, 2016 1:59 pm
Forum: Announcements
Topic: v6.36rc [release candidate] is released, wireless-fp package is discontinued!
Replies: 295
Views: 64735

Re: v6.36rc [release candidate] is released, wireless-fp package is discontinued!

Hi. Is any chance to improve TCP performance on single session over IPSEC on IPIP/GRE tunnel in this version? Now is max 40-80 Mbps per session regardless of device model (tested on CCR 1009 and CCR 1036). What encryption are you running? We see close to 600mbit/s over EoIP/IPSEC with AES256-AES256...
by kivimart
Tue Feb 23, 2016 7:00 pm
Forum: Beginner Basics
Topic: How to slow down torrent?
Replies: 11
Views: 4579

Re: How to slow down torrent?

Me to would like to see those Mangles and queue three. :D
by kivimart
Fri Jan 08, 2016 11:41 am
Forum: The Dude
Topic: The Dude is back! v6.34rc test build released
Replies: 269
Views: 73864

Re: The Dude is back! v6.34rc test build released

Yes that problem is solved, but i cant see live trafic in the history tab on static image of bandwith.
by kivimart
Wed Oct 14, 2015 9:17 pm
Forum: Scripting
Topic: Blocklister WebAPI to get precompiled IP Addresslists
Replies: 10
Views: 3471

Re: Blocklister WebAPI to get precompiled IP Addresslists

This is great thanks.
by kivimart
Thu Jun 25, 2015 4:14 pm
Forum: Announcements
Topic: Comments about RouterOS release schedule
Replies: 35
Views: 10988

+1

Skickat från min HTC One via Tapatalk
by kivimart
Wed May 06, 2015 9:23 am
Forum: Announcements
Topic: RouterOS v6.28 released
Replies: 229
Views: 61705

Re: RouterOS v6.28 released

Hi
Unfortunately, the new version (6.28) web proxy does not work
Please check :(
i have 2 diffrrent RB that runs web-proxy on 6.28, no problem
by kivimart
Fri Apr 03, 2015 3:17 pm
Forum: General
Topic: VPN log full with failed attempts -> any way to make sure the system is not compromised?
Replies: 4
Views: 1200

Sv: Re: VPN log full with failed attempts -> any way to make sure the system is not compromised?

At least the source ip should be logged, so i can add it to a firewall rule
Could you share how this is done.

Skickat från min HTC One via Tapatalk
by kivimart
Sun Mar 29, 2015 9:12 pm
Forum: General
Topic: Blocking Torrent in 6.27
Replies: 9
Views: 8878

Re: Blocking Torrent in 6.27

This is user ohara ip firewall rules poasted in the other thread. These rules block new torrents not the ones u already have started. /ip firewall filter add action=drop chain=forward comment="TORRENT No 1: Classic non security torrent" disabled=no p2p=all-p2p add action=drop chain=forward comment="...
by kivimart
Sun Mar 29, 2015 5:42 pm
Forum: General
Topic: Blocking Torrent in 6.27
Replies: 9
Views: 8878

Re: Blocking Torrent in 6.27

by kivimart
Sun Mar 29, 2015 5:40 pm
Forum: General
Topic: Blocking Torrent in 6.27
Replies: 9
Views: 8878

Re: Blocking Torrent in 6.27

What torrent program are you using?
by kivimart
Sun Mar 29, 2015 12:35 pm
Forum: General
Topic: Blocking Torrent in 6.27
Replies: 9
Views: 8878

Re: Blocking Torrent in 6.27

I Use this in layer 7 protocol to identify Torrent then block rule in firewall forward chain. /ip firewall layer7-protocol add name=bittorrent regexp="^(\\x13bittorrent protocol|azver\\x01\$|get /scrape\ \\\?info_hash=get /announce\\\?info_hash=|get /client/bitcomet/|GET /data\\\ \?fid=)|d1:ad2:id20...
by kivimart
Fri Mar 27, 2015 8:31 pm
Forum: Beginner Basics
Topic: Layer 7 Adblock?
Replies: 6
Views: 7538

Re: Layer 7 Adblock?

Here you go attached file with about 175 lines. The way i got this 175 lines i have tested about 94000 lines and these were the ones getting hit in deny rule. My router is a RB1100ahx2 and has no problen handling these 175 lines but when i tested with about 30000 the router processor worked hard. At...
by kivimart
Fri Mar 27, 2015 8:17 pm
Forum: Beginner Basics
Topic: Using RouterOS to prioritize (Qos) traffic for a Class C net
Replies: 111
Views: 184617

Re: Using RouterOS to prioritize (Qos) traffic for a Class C net

I put my master interface in a bridge and the problem off cap local traffic went away.
by kivimart
Thu Mar 26, 2015 4:23 pm
Forum: Beginner Basics
Topic: Layer 7 Adblock?
Replies: 6
Views: 7538

Re: Layer 7 Adblock?

by kivimart
Tue Mar 24, 2015 10:28 pm
Forum: Beginner Basics
Topic: Layer 7 Adblock?
Replies: 6
Views: 7538

Re: Layer 7 Adblock?

i think its better to use webproxy and block in access list. Something like this. /ip proxy access add action=deny dst-host=*.google-analytics.* redirect-to=0.0.0.0 add action=deny dst-host=*.amazonaws.com redirect-to=0.0.0.0 add action=deny dst-host=ads.* redirect-to=0.0.0.0 add action=deny dst-hos...
by kivimart
Thu Mar 19, 2015 10:46 pm
Forum: Beginner Basics
Topic: Using RouterOS to prioritize (Qos) traffic for a Class C net
Replies: 111
Views: 184617

Re: Using RouterOS to prioritize (Qos) traffic for a Class C net

This is my queue tree, no limits set only trying to learn how to mark packet and queue then then later set limits. I do not use VOIP in my setup... If you post your Mangle rules there will be easier to help you with your problem on local traffic hitting queues. I am no expert on queues but will help...
by kivimart
Thu Mar 12, 2015 1:08 pm
Forum: General
Topic: L7 and youtube
Replies: 17
Views: 22201

Re: L7 and youtube

This is my Layer7-protocol: /ip firewall layer7-protocol add name=Bittorrent regexp="^(\\x13bittorrent protocol|azver\\x01\$|get /scrape\ \\\?info_hash=get /announce\\\?info_hash=|get /client/bitcomet/|GET /data\\\ \?fid=)|d1:ad2:id20:|\\x08'7P\\)[RP]" add name=streaming regexp=videoplayback|video a...
by kivimart
Tue Oct 07, 2014 9:54 am
Forum: RouterBOARD hardware
Topic: RB850Gx2 - Release date?
Replies: 193
Views: 47291

Re: RB850Gx2 - Release date?

I am also intrested in this.
by kivimart
Sun Oct 05, 2014 12:24 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 - Release date?
Replies: 193
Views: 47291

Re: Sv: RB850Gx2 - Release date?

We will start shipping it on Monday.
Any performance figures to share ? Eg. NAT throughput.
+1

Skickat från min unknown via Tapatalk
by kivimart
Fri Sep 19, 2014 6:48 pm
Forum: RouterBOARD hardware
Topic: Home router with 802.11ac
Replies: 3
Views: 1646

Re: Home router with 802.11ac

Would be really nice with a home router that supports ac

Skickat från min unknown via Tapatalk
by kivimart
Thu Sep 18, 2014 7:31 am
Forum: General
Topic: Queue on a bridged interface not working?
Replies: 3
Views: 971

Re: Queue on a bridged interface not working?

Use queue tree instead

Skickat från min unknown via Tapatalk
by kivimart
Thu Sep 11, 2014 9:08 pm
Forum: General
Topic: hotspot and allowed ports
Replies: 2
Views: 564

Re: hotspot and allowed ports

i think u should use input chain
by kivimart
Tue Aug 26, 2014 6:46 pm
Forum: General
Topic: v6.19rc for CCR tests needed!
Replies: 59
Views: 17562

Re: v6.19rc for CCR tests needed!

I Think final 6.19 is near.

Skickat från min HTC One via Tapatalk
by kivimart
Thu Jul 31, 2014 10:10 am
Forum: Beginner Basics
Topic: IP/SEC routing help
Replies: 3
Views: 761

Re: IP/SEC routing help

So am i
/Martin
by kivimart
Fri Jul 25, 2014 9:58 am
Forum: General
Topic: v6.16/v6.17
Replies: 187
Views: 46425

Re: v6.16/v6.17

We already made some IPsec fixes in v6.18rc3 which is available for testing upon request. I am interested, since we have major issues with reproducible issues and what seems to be random issues with IPsec. We have now added it to the regular download page: http://www.mikrotik.com/download the link ...
by kivimart
Sun Feb 16, 2014 8:50 am
Forum: Beginner Basics
Topic: Graphing question
Replies: 8
Views: 1235

Re: Graphing question

http://forum.mikrotik.com/viewtopic.php?t=77193

Skickat från min HTC One via Tapatalk