MikroTik

kivimart

This is just perfect and very nicely done, is there a possibility to show a final export?

I agree i must open my eyes on this Monday morning

kivimart

Did you find a solution.?

kivimart

Thanks testing
Update.

Tested ok, on CCR routers i changed

:local myserver "\E2\84\B9 MikroTik $[/system identity get name] $[/system resource get board-name]"

To

:local myserver "\E2\84\B9 MikroTik-$[/system identity get name] $[/system resource get board-name]"

kivimart

Can we have an updated complete script?

kivimart

For v7.7 beta 9, there is still problem for CAPsMAN. I used beta 9 in CAPsMAN and the other APs used v7.6 I can see SSIDs up and AP all connected to CAPsMAN. However, after sometimes, wifi login failed. Seems authentication parts or others problem. Wired connection is ok. I revert the CAPsMAN back ...

kivimart

And here is a new ip list generator from crowdsec https://docs.crowdsec.net/docs/bouncers ... st-mirror/

kivimart

Hello,

The script works (from katem07), I receive telegram messages immediately. But I receive the same messages again at 00:00 and 02:00 next day. Does anyone experience the same behaviors?
I'm on hAP ac^2, fw 6.49.2

I have the same issue.

kivimart

wusa /uninstall /kb:5009543

Work perfect thanks

kivimart

Capsman Support in wifiwave2?

kivimart

Hi all, I've tried several times following the pihole example but my container doesn't start and there's no logging. I'm using a USB flash drive as the root: /container mounts add dst=/etc/pihole name=pihole src=disk1/containers/pihole add dst=/etc/dnsmasq.d name=dnsmasq.d src=disk1/containers/dnsm...

kivimart

I get this message on a hapac2 and pihole container Fri Sep 10 12:43:36 2021 (826): Fatal Error Unable to allocate shared memory segment of 134217728 bytes: shmget: Function not implemented (38) I have put the mount on disk1 anybody knows this mean Was this with "root-dir=disk1/containers/piho...

kivimart

I get this message on a hapac2 and pihole container

Fri Sep 10 12:43:36 2021 (826): Fatal Error Unable to allocate shared memory segment of 134217728 bytes: shmget: Function not implemented (38)

I have put the mount on disk1
anybody knows this mean

kivimart

remote logging with BSD Syslog flag enabled produces unreadable logs in remote syslog server (full of #000#000#000#000).

Still present i rc2

kivimart

doesn't work on CCR1036 , any new updates for this script. Please?

Same on ccr-1009

kivimart

I have other scripts to downloaded txt files and which leaves "downloaded" in log. How can I ignore "downloaded" but keep "down" in the monitor script?

Find any solution to this .?

kivimart

The same here.

kivimart

No problem here upgraded firmware also. RB1100ahx2, ccr1009-8G-1S-1S+, Runs Capsman RB962UiGS-5HacT2Hnt, RB750gr3, RB750GL, RB912UAG-2HPNnD, CRS12524G-1S. I love the releases on Friday and big weekends so i can play with the new releases on the weekends and then upgrade customers routers later. Merr...

kivimart

HAP ac lite - After update I can't create SMB share on external drive (usb). Can somebody confirm that?
can confirm with hEX and attached 1 TB USB SSD
also the exisiting shares are inaccessible!

please fix it

Same here on HapAC

Sent from my SM-G930F using Tapatalk

kivimart

How did you find the ip addresses.?

kivimart

RB750Gr3

CPU usage in profile >> winbox show 100% unclassified

Same here

Skickat från min Nexus 6P via Tapatalk

kivimart

another example here. /ip firewall layer7-protocol add name=WINUPDATE regexp="^.*(download.*windowsupdate|l.windowsupdate|.*delivery.*mp.*microsoft)" /ip firewall mangle add action=add-dst-to-address-list address-list=A9-WinUpdate address-list-timeout=15m chain=postrouting comment=WinUpdat...

kivimart

Try this Layer7 protocol

/ip firewall layer7-protocol
add name=GOOGLEAPPS regexp="^.*(apqxgv.*gvt)"

kivimart

adblock-dns.rsc
adblock-addrlist.rsc[/quote]

Is this lists updated Daily or how often.?

Skickat från min Nexus 6P via Tapatalk

kivimart

Combination off ip-cloud and script i think.

Skickat från min Nexus 6P via Tapatalk

kivimart

Export command
ip firewall address-list export file=copy

Import command
import file=copy.rsc

kivimart

hi this script is very slow and high cpu usage i had to change it i think this one is quicker :foreach i in=[/ip dns cache all find where (name~"facebook" || name~"fbcdn" || name~"bbc" || name~"akamai" || name~"youtube") && (type="A&quo...

kivimart

You can maybe start to distribute the blacklist via dns records to 6.36. An user can just put one domain name that would load whole list of ip addresses and keep it updating according the ttl. No need for scripts and files further. One vote for dns distribution Skickat från min Nexus 6P via Tapatalk

kivimart

in rc37 snmpwalk dosnt work, no profile, nothing happens.

kivimart

Same problem here the dude crash after 10 to 60 min.

Downgrade to 36rc30 solves the problem.

kivimart

Please post firmware file & instructions.

kivimart

Hi. Is any chance to improve TCP performance on single session over IPSEC on IPIP/GRE tunnel in this version? Now is max 40-80 Mbps per session regardless of device model (tested on CCR 1009 and CCR 1036). What encryption are you running? We see close to 600mbit/s over EoIP/IPSEC with AES256-AES256...

kivimart

Me to would like to see those Mangles and queue three.

kivimart

Yes that problem is solved, but i cant see live trafic in the history tab on static image of bandwith.

kivimart

This is great thanks.

kivimart

+1

Skickat från min HTC One via Tapatalk

kivimart

Hi
Unfortunately, the new version (6.28) web proxy does not work
Please check

i have 2 diffrrent RB that runs web-proxy on 6.28, no problem

kivimart

At least the source ip should be logged, so i can add it to a firewall rule

Could you share how this is done.

Skickat från min HTC One via Tapatalk

kivimart

This is user ohara ip firewall rules poasted in the other thread. These rules block new torrents not the ones u already have started. /ip firewall filter add action=drop chain=forward comment="TORRENT No 1: Classic non security torrent" disabled=no p2p=all-p2p add action=drop chain=forward...

kivimart

Check this tread.
http://forum.mikrotik.com/viewtopic.php?f=2&t=73462

kivimart

What torrent program are you using?

kivimart

I Use this in layer 7 protocol to identify Torrent then block rule in firewall forward chain. /ip firewall layer7-protocol add name=bittorrent regexp="^(\\x13bittorrent protocol|azver\\x01\$|get /scrape\ \\\?info_hash=get /announce\\\?info_hash=|get /client/bitcomet/|GET /data\\\ \?fid=)|d1:ad2...

kivimart

Here you go attached file with about 175 lines. The way i got this 175 lines i have tested about 94000 lines and these were the ones getting hit in deny rule. My router is a RB1100ahx2 and has no problen handling these 175 lines but when i tested with about 30000 the router processor worked hard. At...

kivimart

I put my master interface in a bridge and the problem off cap local traffic went away.

kivimart

Check this out.

http://blog.squidblacklist.org/

kivimart

i think its better to use webproxy and block in access list. Something like this. /ip proxy access add action=deny dst-host=*.google-analytics.* redirect-to=0.0.0.0 add action=deny dst-host=*.amazonaws.com redirect-to=0.0.0.0 add action=deny dst-host=ads.* redirect-to=0.0.0.0 add action=deny dst-hos...

kivimart

This is my queue tree, no limits set only trying to learn how to mark packet and queue then then later set limits. I do not use VOIP in my setup... If you post your Mangle rules there will be easier to help you with your problem on local traffic hitting queues. I am no expert on queues but will help...

kivimart

This is my Layer7-protocol: /ip firewall layer7-protocol add name=Bittorrent regexp="^(\\x13bittorrent protocol|azver\\x01\$|get /scrape\ \\\?info_hash=get /announce\\\?info_hash=|get /client/bitcomet/|GET /data\\\ \?fid=)|d1:ad2:id20:|\\x08'7P\\)[RP]" add name=streaming regexp=videoplayba...

kivimart

I am also intrested in this.

kivimart

We will start shipping it on Monday.
Any performance figures to share ? Eg. NAT throughput.

+1

Skickat från min unknown via Tapatalk

kivimart

Would be really nice with a home router that supports ac

Skickat från min unknown via Tapatalk

kivimart

Use queue tree instead

Skickat från min unknown via Tapatalk

kivimart

i think u should use input chain

kivimart

I Think final 6.19 is near.

Skickat från min HTC One via Tapatalk

kivimart

So am i
/Martin

kivimart

We already made some IPsec fixes in v6.18rc3 which is available for testing upon request. I am interested, since we have major issues with reproducible issues and what seems to be random issues with IPsec. We have now added it to the regular download page: http://www.mikrotik.com/download the link ...

kivimart

http://forum.mikrotik.com/viewtopic.php?t=77193

Skickat från min HTC One via Tapatalk

Search found 56 matches