Community discussions

MikroTik App

Search found 25 matches

by Sl33py
Sat Aug 26, 2017 8:07 pm
Forum: General
Topic: VLAN on CRS125 with a RB951G
Replies: 2
Views: 565

Re: VLAN on CRS125 with a RB951G

"First, are you using the switch cheap feature of the RB951G" I am not sure I will have to check "RouterOS, 6.41rc, the way VLANs are configured has been standardized into a new bridge " I did upgrade to this version before I tried to do the setup so the CRS is on 6.41 but the RB 951 is on 6.3 versi...
by Sl33py
Sat Aug 26, 2017 5:00 pm
Forum: General
Topic: VLAN on CRS125 with a RB951G
Replies: 2
Views: 565

VLAN on CRS125 with a RB951G

Hi I want to create two VLAN's on the switch one for the Office and one for VOIP phones, then both VLAN's should be able to break out to the internet via the RB951G. I have spend hours trying to get the VLAN's to pickup the DHCP from the router, I dont know what is wrong. Both is setup with minimal ...
by Sl33py
Tue Aug 22, 2017 8:42 am
Forum: General
Topic: Need multiple packet marks for mangle and Queue's
Replies: 3
Views: 1367

Re: Need multiple packet marks for mangle and Queue's

Can a packet take a routing mark and a packet mark at the same time? I mark the packet with routing marks so the correct ip range goes out the correct WAN, then I want to shape the traffic for company B VOIP they are the only one with a voip phone This is what I have done 192.168.0.0/25 should go to...
by Sl33py
Sat Aug 19, 2017 12:59 pm
Forum: General
Topic: UDP attack
Replies: 5
Views: 1865

Re: UDP attack

Thanks for your answer, I only saw it now..
I went for a mikrotik course and have since learned how to do it correctly
by Sl33py
Wed Aug 16, 2017 5:11 pm
Forum: General
Topic: Need multiple packet marks for mangle and Queue's
Replies: 3
Views: 1367

Need multiple packet marks for mangle and Queue's

Good day I have 2 companies working from the same office, they share a file server but each has their own Internet. I need to route company A internet to Internet A and Company B to Internet B. Furthermore Company B has a VOIP pabx that I need to do QOS for as well and I also want to limit Company B...
by Sl33py
Tue Mar 07, 2017 9:44 pm
Forum: General
Topic: Open winbox from WAN
Replies: 2
Views: 1593

Re: Open winbox from WAN

Ok that was easy enough, I looked at that 20 times...

I only open it to my ISP ip address once its working and we check the logs for people trying to get in.
by Sl33py
Tue Mar 07, 2017 9:07 pm
Forum: General
Topic: Open winbox from WAN
Replies: 2
Views: 1593

Open winbox from WAN

Hello I am using a new firewall config that should be more secure than my previous setup. I can get winbox to work form the WAN I have manages to get web interface open. What do I need to change? /ip firewall> export # mar/07/2017 21:00:28 by RouterOS 6.38.3 # software id = R1QD-BPJQ # /ip firewall ...
by Sl33py
Wed Dec 07, 2016 3:12 pm
Forum: General
Topic: UDP attack
Replies: 5
Views: 1865

UDP attack

Hello I have all these connections and cant seem to stop them see attached pic my firewall rules /ip firewall address-list add address=196.0.0.0/8 list=SA_Sub add address=41.0.0.0/8 list=SA_Sub add address=165.0.0.0/8 list=SA_Sub add address=197.0.0.0/8 list=SA_Sub add address=129.0.0.0/8 list=SA_Su...
by Sl33py
Sat Jun 18, 2016 2:05 pm
Forum: Beginner Basics
Topic: DynDyns with 2 WAN
Replies: 1
Views: 618

Re: DynDyns with 2 WAN

Can any one assist with this script please. I wan to change it so that it checks that :global theinterface "pppoe-har" is reachable if not then check :global theinterface "pppoe-har2"
by Sl33py
Wed Jun 08, 2016 7:52 am
Forum: Beginner Basics
Topic: Drop all traffic not from address list
Replies: 3
Views: 1551

Re: Drop all traffic not from address list

Thank you that sorted that out It seems that the rule below does the job by itself, am I correct and that they both say the same thing just the other way around? add action=drop chain=forward comment="Block access not from SA_Sub List" in-interface=pppoe-out1 protocol=tcp src-address-list=!SA_Sub Th...
by Sl33py
Tue Jun 07, 2016 10:22 pm
Forum: Beginner Basics
Topic: Drop all traffic not from address list
Replies: 3
Views: 1551

Drop all traffic not from address list

Hello The ports I have open on the router I only want to be accessibly from the address list and the rest it must drop. I have created a Address list to include the most common IP ranges for my country and internal network /ip firewall address-list add address=196.0.0.0/8 disabled=yes list=SA_Sub ad...
by Sl33py
Thu Apr 28, 2016 10:28 pm
Forum: Beginner Basics
Topic: DynDyns with 2 WAN
Replies: 1
Views: 618

DynDyns with 2 WAN

Hello I subnet my network in 2 via ip range and each one goes out its own WAN port with a pppoe connection. They do fail over if one link goes down but my dyndns script only updates on its own pppoe connection I want it to update the fail over wan ip in case it does, I have tried ddclient on two dif...
by Sl33py
Wed Apr 20, 2016 8:59 pm
Forum: General
Topic: Mangle of packets for dual WAN and VOIP
Replies: 0
Views: 695

Mangle of packets for dual WAN and VOIP

Hi I have a network that I subnet into 2 parts A = 1 - 127 and B= 128 - 254 A goes to WAN1 and B goes to WAN2 Network B has a VOIP phone now on IP 192.168.0.160, at my office I use this to shape the traffic so the voip gets preferred traffic with the script config below # Mark all UDP traffic for an...
by Sl33py
Tue Dec 01, 2015 7:19 am
Forum: General
Topic: Dual WAN with policy routing
Replies: 3
Views: 1045

Re: Dual WAN with policy routing

I have seen that one but this is the one I followed

http://wiki.mikrotik.com/wiki/Load_Bala ... e_Gateways

The must not share the WAN unless one route goes down or do I need to add some of that config to the above post?
by Sl33py
Mon Nov 30, 2015 10:49 am
Forum: General
Topic: Dual WAN with policy routing
Replies: 3
Views: 1045

Dual WAN with policy routing

Good day I have 2 companies that share IT infrastructure in one building, they share 2 servers for data and email. The internet is a problem as the 2 companies have different needs and we added a second ADSL line for them so each company can have its own connection. I want to split the traffic with ...
by Sl33py
Tue Oct 20, 2015 10:40 am
Forum: Beginner Basics
Topic: Graphs only show download not upload
Replies: 3
Views: 719

Re: Graphs only show download not upload

There is a bridge but I am not sure if the firewall is on it or not. Under Filter Rules I block port 25 except from the mail server and I drop DNS. Then I have a few NAT rules and the Mangle ones Below is inferface config add ac-name="" add-default-route=no allow=pap,chap,mschap1,mschap2 dial-on-dem...
by Sl33py
Tue Oct 20, 2015 8:40 am
Forum: Beginner Basics
Topic: Graphs only show download not upload
Replies: 3
Views: 719

Re: Graphs only show download not upload

graph.JPG
That is how the graph looks
by Sl33py
Tue Oct 20, 2015 8:37 am
Forum: Beginner Basics
Topic: Graphs only show download not upload
Replies: 3
Views: 719

Graphs only show download not upload

Hello I have created some packet marks for the devices on my network to graph their internet usage. In the mangle part I see both parts working but not when I graph it below is my config /ip firewall mangle add action=mark-packet chain=forward comment=IT disabled=no new-packet-mark=IT passthrough=ye...
by Sl33py
Wed Sep 02, 2015 12:21 pm
Forum: General
Topic: Drop DNS remote requests on WAN
Replies: 3
Views: 1637

Re: Drop DNS remote requests on WAN

Ok thanks its closed now.

"ESTABLISHED/RELATED should be at the beginning of the rules as you prevent each packet of already established connections to go through all the rules"

which rules must be moved where I am not sure which ones refer to established related
by Sl33py
Wed Sep 02, 2015 10:59 am
Forum: General
Topic: Drop DNS remote requests on WAN
Replies: 3
Views: 1637

Drop DNS remote requests on WAN

Hi I am running two mikrotik routers at different sites, on the one I managed to drop the DNS from the WAN side and cant see port 53 if I use a port scanner from the outside. But on my own one the rules don't want to take, I do how ever have a hotspot here and I think I made a mess off the original ...
by Sl33py
Mon Dec 15, 2014 5:07 pm
Forum: Beginner Basics
Topic: Monitor line congestion
Replies: 0
Views: 531

Monitor line congestion

Hello I want to monitor if my pppoe connection gets congested. I was told to use Traffic Monitor I have checked the wiki http://wiki.mikrotik.com/wiki/Manual:Tools/Traffic_Monitor but it makes no sense to me. I have also tried watching you tube vids but most of it is not in English. I really want to...
by Sl33py
Thu Oct 02, 2014 8:26 pm
Forum: General
Topic: Tool: Realtime per IP traffic monitor for home/office
Replies: 291
Views: 327939

Re: Tool: Realtime per IP traffic monitor for home/office

Hello This is a great tool thank you, Can this tool or even another log the line usage, we can see the current up and download speed but I want to see if the line gets congested at time especially the upload. I skimmed through the pages but did not see anything. I have tried cacti but did not come r...
by Sl33py
Thu May 15, 2014 1:33 pm
Forum: Beginner Basics
Topic: PPPOE Setup
Replies: 0
Views: 894

PPPOE Setup

Hello I have setup a hostspot on a RB951G before, but now I would like to use my RB750 to dial a PPPOE connection via my bridged DLINK. I used the default config script and added the PPPOE and I changed the IP Range for the LAN (Port 2) I enabled the DHCP server for the LAN.I can see that the connec...
by Sl33py
Tue Jan 21, 2014 2:44 pm
Forum: Beginner Basics
Topic: Ensuring good quality VOIP Calls
Replies: 1
Views: 603

Ensuring good quality VOIP Calls

Hello My setup is as follows, Netgear 1000mb switch which plugs into my D Link router. The router and the switch is connected via one cable. I have a RB750 that I want to connect between the router and the switch then plug the VOIP phone directly in to the RB750 (On the RB750 port 1 to DLINK router,...