MikroTik

rextended

there should be at least some "Show Password" option

Already exist from 2007.................. on Settings click on "Hide Password" tho show or hide password... on terminal is already showed, but the line on new v7 do not go on history.

rextended

I do not see any HA if you do not have 2 (two) different internet sources from different directions (yes, directions...).

You still have only one breaking point and if the switch breaks everything stops.

rextended

I'm sorry for being vague, I just looked at my IP-letter from the ISP where it says: (IP's changed) IP-addresses: 10.10.10.4-14 Gateway: 10.10.10.1 Netmask: 255.255.255.240 IP-Net: 10.10.10.0/28 and what happened to the .2 and .3???? a typo in the letter for sure??? So I guess I have to pick a port...

rextended

Why are you reading me if you blocked me? You are not consistent with what you write. 2. Testing it immediately requires a reboot, ever consider that the router may be in use and can't be instantly rebooted. As an excuse it's ridiculous, when you reset it you could have FIRST tried to reload the bac...

rextended

A /28 are 16 addresses or 14 if the ISP like wate ip, or 12 if ISP like wate ip and for ptp are used the IPs of the pool, not 10.... You didn't explain well, just gave vague clues. If your provider gives you 198.51.100.y as its IP and assigns you 198.51.100.(usually y +1 or y -1) and also gives you ...

rextended

What would be the request?

Do you expect any correct result by writing random things in the script?

Who is convinced that just using :toarray will convert that file into an array?
Ask whoever made that awful script.

rextended

firmware is firmware,
software is software.

Netinstall the device and see if is any error on formatting NAND/Flash

rextended

I do not have any experience with ups&mikrotik linked directly.

ups topic log all ups related logs, the same you can see on "memory"

rextended

Google "http error 301"...

rextended

"export" is better than backup, and why you set a password for yourself ? You are the first one who made a mistake, you should have tested if the backup you just made would recover , instead of hoping that it would work later. You can also write the password wrong twice in the same way...

rextended

I asked about the importance of that "Optimal nand stability requires a backup-routerboot upgrade" message but never got an answer. To avoid having problems like in other topics, it's better to update while you can... ignoring whether one uses that feature or not. There is more underneath...

rextended

..[CUT]..
Remember when something goes wrong during the upgrade, your device is bricked.
And do not bother trying to upgrade 16MB flash devices ..

And do not bother trying to upgrade unsupported devices ..

viewtopic.php?p=1142236#p1142236

rextended

just simply use url="..." with right parameters without all other useless frills.

rextended

Plus One Here !! :-)
This is NOT the place to ask for RouterOS improvements. It is for WinBox 4.

I think it's about exporting logins saved inside winbox, it has nothing to do with users inside routers.
I hope...

rextended

1) & 2) Yes! 3) I checked the documentation and I don't see what exactly will be written, and when (i.e., on what occurrences). Work exactly as "memory", just is saved on disk and persist after reboot. You can choice what event save on disk. Usually I save on disk only "critical&q...

rextended

(see next post)

rextended

What is the reply from Hikvision?

Hikvision produce the device, not MikroTik.

rextended

is /system, not :system do not use names for variables like what already exist Uusing separators, the English date format or the names of the months has always been a bullshit in computer science when it comes to "indexing" something. For names, use :pick to selectiveli get year, month, da...

rextended

curious what technology @rextended replaced it with I do not advertise for third parties, out of respect for the forum that hosts us. I have used, or rather I still use where I have now mounted it, the shitty products of Cambium Shittium, crappy interface and ridiculous functions. They always make ...

rextended

Their administrators are still convinced that 802.11ac is better than nv2. (yes, ac, is wanted)
From the lab tests this truth is overwhelming.
But they are all office workers, no one has ever gone out to get their hands dirty working with their own products as WISP.

rextended

1- Why is blocking ICMP a bad idea? It is written everywhere, and in any case the Linux kernel already prevents its abuse, therefore, apart from particular cases (which I do not want to talk about so as not to confuse) it should always be allowed for correct MTU negotiation. 2- Is the problem the M...

rextended

On the script the url is right, why on log the url is not the same?...

rextended

Google "http error 301"...

rextended

Contac support, not forum users...

rextended

You are all continuing to write in a circle, but no one has a response from the OP who wanted a solution IMMEDIATELY, instead he was written to 12 days later and the user has already disappeared. You are making empty conjectures, because: 1) You have no responses or confirmations; 2) In the "as...

rextended

For upgrading memory, you must open the lid... So, no warranty... ???

Do you know how to google?
try "open CRS520-4XS-16XQ" in the search...

How many active table you have on the device in production, and from what source?

rextended

If I remember correctly, or if it hasn't changed over time, it's not enough to be multihomed with two links to the same AS, but you need at least two different AS... Unless you need to assign different ways to reach different remote IPs, even if you have two or more providers, the default route will...

rextended

I have been using BGP on v6 for years, with no issues with IPv4 or IPv6. After some forced use of v7 on CCR2004, I removed that router because it works better with CCR1036 on v6. I can't wait for them to fix all the issues on v7. Listing here is pointless, the forum is full of complaints that have r...

rextended

In fact, that's what I wrote before... inside the house the ax products are valid, but outside they are like the ac ones without the nv2.
However many laboratory tests you can do, then in real life, and when it's your job, it's different.

rextended

Nv2 is the only thing that make usable RouterOS devices for WISP. Contrary to anything that someone who does NOT work as a WISP with MikroTik products might write, the NV2 is the only reason why I did not replace the MikroTik devices with others to work with years ago. Now in fact I do not use them ...

rextended

For what?

NV2 no longer exist and QuickSet is not for WISP.

rextended

Units should be consistent.

If calculations are in xiB, the result cannot be in xB

gigabyte => gibibyte

:local gb gib 1073741824

:local gb 1000000000

rextended

It is V i Tal that you ask your provider to protect you from (true) DDoS because you yourself have configured the device so that after a few minutes of DDoS the system crashes due to exhausted memory. The firewall is terrible and the choice to block ICMP is also terrible. Not to mention uselessly pr...

rextended

The logic of anything would be that they should not already be bridged ports before trying to put them in again...

The script assumes to configure a device that has never been configured, not to modify something that already exists...

rextended

hw=yes disabled=no are defaults, so, completely useless. :global GconnEth "ether1" ; # WAN interface :global GmgmtEth "ether5" ; # MGMT interface /int bridge remove [find] add name=bri-lan protocol-mode=none /int bridge port remove [find] :foreach iTest in=[/int ethernet find whe...

rextended

yes, thanks, fixed previous post

:local lrttavg           ($"rtt-avg"      / 1000)

# or with approx fix:
:local lrttavg           ($"rtt-avg"      / 1000)
:if (($"rtt-avg" % 1000) > 0) do={ :set lrttavg ($lrttavg + 1) }

rextended

So, the error message is correct, what do you expect?

rextended

/interface bridge port export

what show?

rextended

Just thinking aloud, but the "risk" [...] right... in pseudocode, just one example if (x % 1000) > 0 then add +1 to the result. on that way 00000 is 0, 100000 is 100 and all numbers between 000001 and 099999 are inside 001..100 but 100001 is 101 And the line " Netwatch had a down eve...

rextended

If you do not notice, the previous post is all what you need for write that line on logs.

rextended

or better for fix all, not only spaces.... /tool netwatch :local thisBox [/system identity get name] :local lhost [:toip $host] :local lstatus $status :local llosspercent ($"loss-percent" / 10) :local lrttavg ($"rtt-avg" / 1000) :local netwatchID ([find where host=$lhost and type...

rextended

easy for some problems:
was $roundrttavg ms
->
was $"roundrttavg"ms

rextended

academically that's one thing,
but in practice, just ignore microseconds and use milliseconds...
so a /1000 suffice...

instead if it were, for example, the voltage "2357",
there is a big difference between writing 23V and 23.57V

rextended

The FACTS are that what you are doing with SUPPORT is completely useless . Use the netinstall 7.12.x that works and forget about them fixing it for old factory-routerboot devices. If then the 7.18.2 factory-firmware update in your model works, MAYBE you have solved the problem. Since netinstall 7.12...

rextended

To avoid having problems like in other topics, it's better to update while you can... ignoring whether one uses that feature or not.
There is more underneath (unsaid, don't ask) that makes it worth updating.

ERRATA CORRIGE: ARM64 / AMPERE 70x0 (Armada) IS SUPPORTED

rextended

MikroTik has released a new update that also includes the ipq8060
It is worth a try...
viewtopic.php?p=1142236#p1142236

rextended

Note that the procedure to update the backup bootloader at https://help.mikrotik.com/docs/spaces/ROS/pages/40992878/RouterBOARD#RouterBOARD-Protectedbootloader has now been updated to support version 7.18.2 (ONLY!) so when you get those warnings about NAND stability after an upgrade, now is the tim...

rextended

That's just text describing what that value is, it's not operations... >< is used to identify where the value should be written, it's just text... :log info "runtime loss-percent is >$($llosspercent/10)< %" :log info "runtime rtt-avg is >$lrttavg< us >$($lrttavg/1000)< ms" It is ...

rextended

different internet connection.

rextended

I suggest you to use on pool IP range x.x.x.101 -> x.x.x.199 (99 dynamic devices on home suffice... or not?...) and when you set static lease change the y.y.y.1xx to y.y.y.201 next device y.y.y.202 next y.y.y.203 and so on till y.y.y.254 for each device (~54 static devices on home suffice... or not?...

rextended

Actualy sometime I get "500" error, but with "F5" all work again until the next time I open the forum next day.

rextended

W10 Pro for Workstations (64 bit) 22H2 19045.5796
F 138.0.1 (64 bit)

rextended

FYI, thr-loss-percent reports a value ten times the actual set value. That is, Netwatch has a value of 80% and the log shows: You do not read??? :log info "runtime loss-percent is >$llosspercent</10 %" $llosspercent /10 % And, the rtt-avg of 24516 actually means 24.516ms. The same: :log i...

rextended

the unique charm of RouterOS scripting isn't lost when someone stumbles upon rextended’s script collection.

Sorry, but in what sense, I don't understand...

rextended

:foreach i in=[/user-manager session find where active=no] do { /user-manager session remove $i; }

This remove only inactive sessions

Necroposting for that????

is better 2+2=4 or 1+2+3+4+5-11=4 ?

/user-manager session remove [find where active=no]

rextended

Necroposting for that????

:foreach i in=[/user-manager session find where active=no] do { /user-manager session remove $i; }

is better 2+2=4 or 1+2+3+4+5-11=4 ?

/user-manager session remove [find where active=no]

rextended

also the name can be omitted (...) or can be duplicated. This is how to read properties and runtime results: /tool netwatch :local lhost [:toip $host] :local lstatus $status :local lsince $since :local ldonetests $"done-tests" :local lfailedtests $"failed-tests" :local lsentcount...

rextended

Please provide an appropriate title, the current one IS WRONG and ONLY creates CONFUSION. First of all it is wrong to refer to netwatch in this way "/tool/netwatch get [find host=8.8.8.8]" because there can be more than 1 netwatch with the same IP 8.8.8.8, second, thr-avg is a property, an...

rextended

rextended

Before judging people [...] I didn't judge what you know, but how you behave. If I do something I don't know, I would never dare to write a title on a forum as if I were a RouterOS expert and there is a problem since 7.18.2. Your attitude is wrong and creates confusion for others. Chatgpt told me [...

rextended

Topic title: Can not create dummy ip pool 0.0.0.0-0.0.0.0 in routeros 7.18.2 ridiculous title Is there any version of RouterOS where such a stupid thing can be done? Chat gpt advises me chapgpt insist Any insight is much appreciated. SOLVED: The problem is not Sh1tGPT, it's you who listens to it.

rextended

I forgot to specify that you can specify BOTH a list AND an interface in the v7 VRF definition. for example: /ip vrf add name=vrfTEST interfaces=listForVRFtest,ether3 and both previous v7 methods are valid. Then I won't investigate further what happens if an interface is both in the list and specifi...

rextended

I add on previous post "example on v7 without list code"

rextended

More easy add/remove compared with v6 if you use interface list: # create vrf and list, or better, first the list, then the vrf... /interface list add name=listForVRFtest /ip vrf add interfaces=listForVRFtest name=vrfTEST # add interface /interface list member add list=listForVRFtest interface=ether...

rextended

Necroposting for nothing. The OP is very poorly written and explained even worse. Here we are, ten years later, and you still cannot add an interface to an existing VRF without replacing the existing ones... Don't write bulls–t. It's you who can't do it, not others. MikroTik can't fix your incompete...

rextended

providing scripts in this way, is really a bad way and should not be trusted (but I don't question the author of the OP) >>> dont-require-permissions=yes [...] policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon assigning ALL permissions to a script, especially if "pasted&qu...

rextended

You "knew about previous problems" with "old factory bootloader" and "why", but you didn't say any of this in your previous replies, and instead kept that knowledge to yourself. We are not mind readers here...we can only go off of what you actually say out loud , not w...

rextended

Sorry you wrote all this for nothing. OP can't read more than 2 lines in a single post that ignores the others, and you wrote a poem... https://forum.mikrotik.com/viewtopic.php?t=216303#p1140488 It has an ipq8060 chipset and the factory-firmware version is not upgradeable Despite what was clearly wr...

rextended

AI, or not AI, that is the question.

The last post.

rextended

<also can be here useless return> Honestly, I'm tired of writing the same thing a hundred times everywhere on the forum. Make do. I'm tired of always having to prove everything and that people constantly try to refute (even writing wrong things before even checking them, like the post before yours)...

rextended

I think you missed the previous pieces, it all started from this post:
viewtopic.php?t=215841#p1135988
and we're talking about how that script was written and why it causes errors when written that way.

rextended

Coming here and writing "there is an alternative solution to your solution, but it is more complex" (and it doesn't work) is not a great solution... A simple check in the function body fixes the problem: :if ([$len $0]!=0) do={ }. and something should be put in there anyway, so why not JUS...

rextended

On the 23rd I asked you to give some commands and write the result on the forum, but you didn't care. https://forum.mikrotik.com/viewtopic.php?t=94303#p580430 I managed to find a RouterBOARD 3011UiAS and checked it out. It has an ipq8060 chipset and the factory-firmware version is not upgradeable al...

rextended

Factory firmware is presently 7.18.2 on both routers. I don't think so, how did you update it? factory-firmware: 3.27 on bad router / 3.41 on good router current-firmware: 7.18.2 upgrade-firmware: 7.18.2 Premise: factory-software and factory-firmware are two completely different things that should ...

rextended

Well, if you simply base it, without reasoning, that someone work with MikroTik products only if and since is registered on the forum... [and aside from the fact that (read carefully again) the WORK/PLAY part wasn't in the least referred to you] I'll avoid answering the "who has the biggest&quo...

rextended

In meantime try to netinstall the device with netinstall64 7.16.2 Did you read it? I wrote it on the 23rd, but like everything else, you didn't care . If you read the post carefully or didn't get distracted by the other roosters, at least for Netinstall you would have solved it immediately. I then ...

rextended

Is a device upgraded from v6, have some leftovers. Remove supout, is only for support@mikrotik.com and not for be shared on user forum because can contain sensitive data. I strongly suggest you change all your RouterBOARD passwords and also your wireguard keys. Consider that everything written insid...

rextended

use netinstall and install again the 6.48.7

rextended

Starting from the fact that requests must be made to support@mikrotik.com and not on the user forum, and that the device-mode is made with the feet because it doesn't take into account the equipment already in production, by those who WORK with it and don't PLAY with it... It makes no sense at all, ...

rextended

Parenti... serpenti!

[Dearest relatives]

rextended

The last available is:
https://upgrade.mikrotik.com/firmware/EG12-EA/EG12EAPAR01A12M4G/image

No matter if is reported the last as EG12EAPAR01A13M4G

rextended

I use S.I.C.E. (Capannori, ~5Km from Lucca) as distributor for the equipments, they have a lot of well trained staff.

I am in the same region, but Lucca is a little far away...

Curious why you asked...

rextended

@jaclaz

on 3rd comment: ether1 is on LAN bridge and also on WAN

rextended

finally made a personal visit on site... a certain 5hitty tplink did the aforementioned filter... no comment...

Thank you all for your time.

rextended

check my post and tellme if it works for you
viewtopic.php?t=216387

the usual bull~it, nothing new

rextended

Blocking YouTube with DNS is something that works only if you have full control of the devices... By default, for example, when some browsers are installed, they use DoH and not the "classic" DNS... Every now and then someone on the forum brings these topics back into fashion with "so...

rextended

you're right, it's an oversight, and the change is bull–it. It says "accept" in the comment and I got confused add action= drop chain=input comment="defconf: accept ICMP" log=yes log-prefix=fw-3-drop-icmp protocol=icmp anyway for this "problem" I think it doesn't count

rextended

That's the right way to crash your router by running out of memory. (and often they do it on purpose, because the intent is not to break into the network, but to crash the router...) Automatic blacklists are for ISPs (neither, really...), not consumers. You don't have enough resources to stop real d...

rextended

Thanks for the tip.

For DNS, it definitely works at the command prompt, and there are no extensions installed on the browser.
(use my DNS and the servers server other 2000 customers that do not have that problem.
When I have physical access to the device then I will investigate further.

rextended

Just press the wrong button, and goodbye everything... /system routerboard reset-button set enabled=yes hold-time=5s..10s on-event=reset-configuration /system script add dont-require-permissions=yes name=reset-configuration owner=admin policy=\ ftp,reboot,read,write,policy,test,password,sniff,sensit...

rextended

I'm not sure why you're accepting "untracked" in the first rule (i.e. connection-state=established,related ,untracked )... that is actually all traffic if it's first rule, I'm not sure why that is there... is the default https://forum.mikrotik.com/viewtopic.php?p=856824#p856824 untracked ...

rextended

I wrote "Maybe", not that you are, you just appeared on the forum.
I have been here longer, and maybe I really am...

...

rextended

do 2 VPN and use the adequate route like internet1/internet2 change...

rextended

... thanks ...

rextended

@eltikpad On the CPE if I connect, for example, with fetch on https://mail.yahoo.com it responds, and the https certificate is correct, once passed their tplink router (I really want to say that I neither sold it to him nor configured it), nothing that contains "mail" anywhere in the domai...

rextended

That's right, I provide the connection and public IPs, but I don't control or manage their internal routers. Yes, I checked my devices and there is no filter (stupid filter I would say) that does this thing, but if someone had already had to deal with something like this... maybe it was enlightening...

rextended

For ALL I mean ALL , not 1,3,4, etc............. sorry, almost all Are exactly 1000 tcp port, less than 2%. For almost , at least I expect 90%... Nmap for default scan exactly 1000 "random" ports? The #9 is still valid, till now... https://forum.mikrotik.com/viewtopic.php?p=1139632#p1139557

rextended

NOT MT related: All domains containing "mail" in any part of the FQDN do not work I have a customer who has this problem on his internal PCs. I can't go there to check it out in person right now, I had to limit myself to doing some quick checks with remote desktop. Anyone have any idea wha...

rextended

As you can see ALL ports are shown as opened.

For ALL I mean ALL, not 1,3,4, etc.............

rextended

The VPN (what is it?) does not pass through Internet1 or Internet2?

Redo the graph and you will understand why when the current Internet(1|2) does not work the VPN anymore

rextended

The more I look for the the WAN IP & router, the more I couldn't find it. Please edit your post and include verbatim copy of config using < / > code tags. Remove serials. No need to use external services. Is a spammer for the classical NameSurname and edit some week later the post for add the s...

rextended

WinBOX: "Couldn 't add New NAT Rule - to-addres or to-ports must be specified (6)" Terminal: "failure: to-addresses or to-ports must be specified" I thought so too, but evidently it is a censorship for the rest of the text of the comment which contained private data that was elid...

rextended

I wonder what the chances are that all ports are actually open, it's unlikely. Probably "tarpit" & co. are used by the ISP to avoid the hassles you generate with port scanners. Even my customers end up in blacklist for 24 hours if they start doing scans. Either they warn me beforehand,...

rextended

I reread everything quite carefully, but perhaps not enough, and nowhere did I read that he netinstalled the two routerboards one after the other instead of one the month before and one today. And I don't even think I read that when it fails with that one, putting another netinstall succeeds, etc. o...

rextended

If I try to netinstall 6.49.11 it says "Installing" for about 5 seconds then switches to "READY" it never formats the drive or installs routeros. Go on control panel/ethernet connections and disable all (included eg. bluetooth, wifi, etc.) devices except the ethernet used. Not m...

rextended

Bad assumptions: RouterOS do not support decimal numbers, only integer, so, only string if dot is present, or convert (using strings splitting at the dot) 1.480000 m to 1480 mm or 1480000 µm Use correct syntax, is full of errors and omissions. :local monGPS [/system gps monitor once as-value] :local...

rextended

Obviously the usual firewall considerations need to be made. Per i 2,5G ti consiglio una RB5009, è perfetta... A casa ho una 100M via CPE wireless RBSXTsqG-5acD... con me stesso... e la hEX-S è perfetta... stando in campagna niente fibra.............. Uh, questo è il post #13000, non me ne ero neanc...

rextended

( On v6 web interface exist "add batch" and you can download the list of generated users. )

rextended

He probably demanded an immediate answer... and he just go away...

However, by not explaining the reason, he doesn't get the right hint.

rextended

The main problem with .backup files is that if there is an error in the various databases where the configuration is, or "surprises" left by the migration from one version to another (you can read hundreds of cases on the forum) they carry the defects of one device to the next , without t...

rextended

He probably demanded an immediate answer... and he just go away...

rextended

It's not a competition . Just curiosity. - You have multiple remote customers Ok, you can (must...) have multiple .rsc for each customer, like you have multiple .backup for each custimer..... - Some of those remote customers may have different parts of the updates already configured. My .rsc script...

rextended

@Paternot Just let us export the backup from (say) RB5009 *DEAD* to *RB5009 NEW* @rextended Great, if you then explain to me how you export the backup from a dead device without extract nand/flash and put elsewhere, etc. And if she's dead, who cares if the new has that old MACs ... (in fact, it coul...

rextended

Maybe the meaning is "you can't use netinstall to install a remote device", if so. Otherwise it seems "You can't use the netinstall remote control "... FALSE: if you have the right devices available and connected properly. It is not the first time I do netinstall remotely from ot...

rextended

Great, if you then explain to me how you export the backup from a dead device without extract nand/flash and put elsewhere, etc. And if she's dead, who cares if the new has that old MACs... (in fact, it could sometimes be an advantage...) But... why? Because it's easier than managing .backup It does...

rextended

/tool user-manager user profile add user=user1

this do not exist and also not work, so, how you do that?

on user section use
/tool user-manager user create-and-activate-profile <username> profile=<profilename> customer=admin

rextended

But I have a total of 10 PPPoE interfaces that need to dial.

What are you waiting for to explain the whole situation, instead of wasting people's time by giving them one crumb at a time???

rextended

It's quicker to do a /export show-sensitive and then delete or reset to default everything that is not needed, it's safer...

If instead it is done to try to clean something "dirty", netinstall should be used...

rextended

[...] As in ISP , we use hundreds/thousands of identically configured Mikrotik routers. [...] [...] When we configure a new Mikrotik CPE [...] [...] the new Mikrotik CPE router is ready to be installed and added to our customer ISP network(s). [...] [..] bulk update newer master configurations to a...

rextended

As usual, no RouterOS version.

rextended

mikrotik default = bridge port 2..5
no default = no birdge...

mikrotik default = firewall OK if pppoe-out1 is added to WAN interface list
no default = NO firewall...

The bridge is internal between ether2...ether5 (+ sfp1)
pppoe-out1 (or ether1) never go on any bridge

rextended

la configurazione è tipo: pppoe 185.21.12.79 185.62.62.104 sprecato mikrotik brdge 185.62.62.105/29 NIC server1 185.62.62.106 / 255.255.255.248 / Gateway 185.62.62.105 NIC server2 185.62.62.107 / 255.255.255.248 / Gateway 185.62.62.105 NIC server3 185.62.62.108 / 255.255.255.248 / Gateway 185.62.62....

rextended

I don't want to sound like @anav with the answer, but you didn't even list a prerequisite or how the IPs are provided. Since NO ONE here in the forum is a fortune teller, but EVERYONE doesn't answer you exactly as you want or expect, BUT first they want to know why they should spend time for you... ...

rextended

Who am I to judge? No one, of course. Delete Facebook and fix the problem. If it's addictive, it will surely ruin your life in one way or another. If you don't have enough willpower, deactivating Facebook on this way (if possible), is like putting the bottle on the high shelf at a certain time for a...

rextended

Useless report without specifing RouterBOARD model (arm/mipsbe, etc.) and RouterOS version , and Useless report on user forum, instead of posting it on relative version topic and report to support@mikrotik.com And please search or read current version topic before post new topic, or at least post i...

rextended

All useless, with MAC randomizer on phone that change every hour...

rextended

I have the VICE of READING documentation, at least the little written, should be read...

At the time of the OP:
https://wiki.mikrotik.com/Manual:SNMP#R ... s_with_GET

Now:
https://help.mikrotik.com/docs/spaces/R ... ptswithGET

rextended

For the OP problem only the solution is simple, add "1" in the right point....

1.2.3.4 1.3.6.1.4.1.14988.1.1.8.1.1.3.3
=>
1.2.3.4 1.3.6.1.4.1.14988.1.1.18.1.1.3.3

rextended

Whatever happens,
RouterOS is still router software, it is certainly not a reliable compilation language for creating reliable programs,
let alone with instructions that are not even documented or whose existence is not even admitted...

rextended

however, as already written, the bug is the same of previous post links, already corrected on v7.something { :local a [:toarray ""] ; # define new empty array :set ($a->"x") "7" ; # on new array set x = 7 :local b $a ; # define a copy of the first array # put both 7 as ...

rextended

{ :local a ({}); :local b $a; :local setx do={ :set $x "X"}; ($setx <%% $b); :put $a} Incorrect: $ in front of an undeclared variable means argument! I know very well what $ is for. And where is the $x argument in all script except on :set ??? You pass only $0 So your error is even worse,...

rextended

The question is vague and there are no valid clues, I would never have used a version higher than 7.16.2 in production in devices that must necessarily have v7 because they are not supported by v6. Given the distance and the same problem, I could forcefully deduce that some configuration, applied on...

rextended

@optio Don't waste your time ("throwing pearls before swine" is rightly a saying that could be misinterpreted by artificial intelligences...) He's focusing on how to leave useless :return instead of understanding that must be removed as he's told from the post #3 (...#2...). Obviously he ...

rextended

Netinstall.

rextended

I have days to get production code running. I wouldn't hire you if you were the last person left. And if I saw any of my employees do something like that, I would have already fired them for incompetence. They both believed ":return" without value was okay. Any intelligent person who read...

rextended

...and without ever once using artificial deficiency to learn it... And of course the author continues to write posts that seem to be written in the same style as ShatGPT... look how conditioned he is... He probably didn't even read my post, let alone understood EVERYTHING that was written... Such a...

rextended

RouterOS Bug - Why Do These Simple Scripts Break? Cause of Mysterious "value:" Prompt? Original title, for future reference Why did you write RouterOS BUG??? Before writing something like that, wouldn't it be better to first ask for advice on the bugs you have ? Do you like large fonts? A...

rextended

The only way to correct inizialize empty array is [:toarray ""] , any other methods do not work as expected and later give only problems. ({}) // ={} // and other frills must not be used. https://forum.mikrotik.com/viewtopic.php?p=973609#p973609 Then inside the function the use of x is not...

rextended

If this is not possible for some reason, please let me know as it takes me some time to save all the scripts posted here...

Thanks.

rextended

It may be a good idea, but... all the content already written on this forum?

rextended

(Not tested on capsman) On interfaces is not needed at all to disable and enable the interface, is automatic when change anything on wifi (also comment...)

rextended

probably you skip "or with a little mod:" on post #9...

rextended

I apologize , not being fully versed in English, I still don't understand the meaning. My concept I think is clear about the MAC address: Anyone, if not directly connected, can't do anything. Then we can talk about compromised ISPs, compromised internal peripherals, etc., but they are already insid...

rextended

Your version have from=num to=hex work only for v7.18 and up. For work also on previous v7.1rc7 and up version using :rndstr is more easy. Do not use for variables names already assigned to something. Ignoring useless logging and useless frills, this suffice: /interface/wifi :foreach item in=[find] ...

rextended

(reply to the first post, before the edit 2025-04-07 11:24:16 and 2nd post) in that case the cycle is done differently, and the variable name should not be the same of one objects (already written)... /certificate :foreach crt in=[find] do={ :local cName [get $crt name ] :local cCommName [get $crt c...

rextended

Even if not exploit it, we are back to the first point: If someone knew my router's WAN port's mac address, and somehow could find it on the Internet, they could simply attack it -- not necessarily 'break in' but certainly bring down the ability of the router to communicate with the Internet. Let's...

rextended

This (previous) example suffice to explain that not always in RouterOS nil = nil, nil = nothing or nothing = nothing...

example nothing is not equal to nothing code

[rex@test-v7.16.2] > :local a ; :put [:typeof $a] ; :put ($a = [:nothing])
nothing
false

rextended

Currently if I am forced to use v7 because the device does not support v6, for me the latest version of RouterOS that works is 7.16.2.

rextended

I see that within your scripts you usually enter the configuration context and handle things there. Example: /log :foreach rlog in=[find where message~"((25[0-5]|(2[0-4]|[01]\?[0-9]\?)[0-9])\\.){3}(25[0-5]|(2[0-4]|[01]\?[0-9]\?)[0-9])"] do={ And I prefer to use the entire path of the comm...

rextended

Hello rextended! I notice you do not use CamelCase ou camelCase in your variable names. To me it is a bit hard to imagine why... Could you elaborate a little on why? Simple: I act according to how I feel like it at that moment. Since these are very simple scripts and not parts of the program that o...

rextended

Is not clear at all on post #2: not mix nil and nothing, because nothing is also different from nothing. I do not have at the moment one precise example, but often nil and nothing are uncomparable. :local a ; :put [:typeof $a] ; :put ($a = [:nothing]) Better check the lenght of returned value. If is...

rextended

Era un tentativo... non capisco perché non dovrebbe funzionare....

rextended

I may make mistakes, but before you write, you better double check what I wrote and what you did... (note: I'm on GMT+02:00) [rex@test-v7.16.2] > :global unixtodatetime do={ {... :local ux [:tonum $1] {... :local Fzerofill do={:return [:pick (100 + $1) 1 3]} {... :local prMntDays [:toarray "0,0...

rextended

@dang21000 please do not write random useless things without any use or any solution. socks: yes what is off is on OP, for example... traffic-gen I'd like to let you know that I'm reporting an issue with the [/flood-ping] tool. I updated to version 7.18.2 and it stopped working. But can I know or n...

rextended

The mistake continues to be the same:
being in such a hurry to connect the device directly to the internet, without caring about protecting it first.

Was there all this urgency?

rextended

Lascia perdere gli script, metti direttamente nello scheduler questo, e guarda se funziona:

:execute "/interface lte at-chat [find where name=\"lte1\"] input=\"at+qnwlock=\\\"common/4g\\\",1,1850,100\""

rextended

Why this "clarification"?
In the previous post the invalid syntax was in the lack of parentheses around true and false...
Obviously it works if the parentheses are used correctly.

rextended

How to fix that? (whitout define global "echo" outside the script) NEVER CALL TWO TIMES THE SAME FUNCTION WITHOUT USE OR ASSIGN THE RETURNED VALUE Simply add void variable for ignore useless return from the function (return everytime something no matter if :return is used [as must be] insi...

rextended

3) do not use " do { } " to completely enclose a script or similar bulls–t. I don't understand how the function, the "do" block, can't be wrapped in curly brackets "{}" Is do { } not do={...} Read better: completely enclose a script do { <all the script here> } ///////...

rextended

As per my previous examples, [ ] is not a condition, it is executed for every single value returned by find/print. > /ip/address/find where [false] > /ip/address/find where [true] > /ip/address/find where [($address~"^192.168.1.1/")] Wrong syntax, do not work, because... is wrong... Correc...

rextended

/ip/arp/find [{ :put $address :put $interface }] Coding style may vary... [rex@test-v7] > /ip arp find [:put "$address\r\n$interface"] 10.11.12.8 ether1 10.11.12.11 ether2 10.11.12.1 ether3 10.11.12.10 ether4 10.11.12.2 ether5 [rex@test-v7] > /ip arp find [:put $address; :put $interface] ...

rextended

I understand that it is not documented, but I have known about it for years. If I had time I should write the manual for "ScriptOS" myself... Then there are other users who by dint of digging also discover new things like >[] , >"" , >{} , <%% etc. even more difficult to discover...

rextended

Other than that, for private DNS I recommend using _____.mqtt.internal instead of _____.local.mqtt
(or intranet, or private, or corp, or home, or lan)
https://www.rfc-editor.org/rfc/rfc6762#appendix-G

rextended

As I already suggested, wouldn't it be enough to use the factory password for security?

rextended

Yes, work as expected. A basic rule is to never use variable names that are the names of <anything> in the system. [rex@test] > /ip/arp/print proplist=address Flags: D - DYNAMIC; C - COMPLETE Columns: ADDRESS # ADDRESS 0 DC 10.10.23.8 1 DC 10.10.23.11 2 DC 10.10.23.1 3 DC 10.10.23.10 4 DC 10.10.23.2...

rextended

mode=https & url="https

rextended

Better the naysayers of those who implicitly suggest deleting the default configuration and therefore the firewall with all that it entails because is more easy,
creating yet another machine that will cause, in one way or another, DDoS...

rextended

:local EMAIL "it@tlpk.com" :local PASSWORD "xxxx" /system clock :local DATE [get date] :local TIME [get time] /system identity :local FILENAME "Backup $[get name]-$DATE.backup" :local MESSAGE "Please see attached file..." /system backup save name=$FILENAME pa...

rextended

You are not telling us the truth. Only that line cannot give that result. I have already seen errors on the second run , they depend on syntax errors made previously, but if you only show that line, no one can help you... or not? [rex@test] > :global testFunc do={ :put "Called with: $1" } ...

rextended

L'apparato è uno switch, non è un router, quindi non ha una configurazione iniziale da router. Penso che la conigurazione è incompleta e che è meglio se ti rivolgi ad un esperto. Attualmente hai configurato lo switch (come se fosse un router) in modo che possa essere sorgente di attacchi DDoS verso ...

rextended

so it's not necessary to set up rules to protect router againt syn flood, ssh brute forcer, port scanner or other? Your ISP should do that job, not your router. And what about bruteforce... bruteforce what? You are the one leaving the door open, by default they are all closed on WAN side... You sho...

rextended

There are dozens of threads on this topic on the forum.
Sorry, but I don't use Telegram and I don't tinker with things I can't test.

rextended

Too many mistakes and too many times to do 2 + 2
do instead (4 / 2) + (((7 + 9) / 2²) * ½)

rextended

And the file content? Perfect, you specified both the RouterOS version and the Router model used. This is how it's done... Have you ever thought of simply opening the plain text file and seeing what's written inside? Nothing to worry about . It's a file that is automatically created when " some...

rextended

There is a detailed explanation written by others on the forum. Aside from that when you notice a problem, it should be minimized to remove as many parameters as possible: { :local y ; # used later :local z 10 :local j 11 :local x (>[:set y 44 ; :local deletek ; :local overwritew 19]) :local k 12 :l...

rextended

(Now I'm not going to go into a line-by-line list of what's wrong or not, but the last rule... better no comment...) Really disgusting, to be thrown in the trash. Put back the default ones that are more than enough for you. https://forum.mikrotik.com/viewtopic.php?f=13&t=175129&p=856824#p856...

rextended

Not at all, in fact you teach badly and they learn worse. It is wrong, you should never use numbers or IDs in the script. I understand that was just an example, but wrong examples are still wrong. Because, for example, in the terminal there is no point in doing all this to get the IP, then, if it wo...

rextended

On dhcp-client script:

/ip firewall connection
:foreach idc in=[find where timeout > 60] do={
    remove [find where .id=$idc]
}

rextended

missing space, is "7.18ab244"

rextended

If is just netinstalled... already the history do not exist...

rextended

All complicated steps useless, isn't it better to use :timestamp and relative functions on RouterOS v7??? For v6 there are still my functions to get the exact date going from unix time. https://forum.mikrotik.com/viewtopic.php?p=977170#p977170 (changed / to - on function) [rex@7.16.2v7] > :global un...

rextended

The bug is the same, well know...
do not use other characters than \r, \n <SPACE>! etc. until the ~ because on RouterOS are unsupported and rended differently on various terminal/winbox/script, etc.

rextended

As you can see here "expanded default rules on forward code": https://forum.mikrotik.com/viewtopic.php?t=215733#p1134906 you need to have an overall vision, you can't consider ONLY that rule to understand it. Some things are implied. For example, it considers only new connection attempts f...

rextended

Right, I never realized that the options were unrelated, even if in the same context, because I never needed it.

**********

And it's a good thing you wrote it because I didn't remember that note... from 2007...

rextended

Already exist from 2007...

rextended

This thing comes up often........ https://forum.mikrotik.com/viewtopic.php?p=1126890#p1126622 https://forum.mikrotik.com/viewtopic.php?p=1126890#p1126789 https://forum.mikrotik.com/viewtopic.php?p=1126890#p1126843 /ip firewall filter add chain=forward action=fasttrack-connection connection-state=est...

rextended

the filename is logs.txt , it is more than obvious that if only logs are written it does not work. (the script has a lot of errors, I only highlight the part about quotes and file name) /log print file= " logs .txt" delay 10 /tool e-mail send from="xxxxx@xxxxxxxx.co.uk" to=xxxxx@...

rextended

/interface ethernet find [:if ($name~"ether") do={/interface list member add interface=$name list="VLAN2"}]

(list must already exist)

rextended

(I'm not saying I don't agree...)

...which will further increase the size of RouterOS...

rextended

Nothing changes after hitting renew

The default 30d / 7d are > of default 3d on server side (not MikroTik problem, are default RFC values...)

So for internal network the IPv6 expires 4 day later of what is already expired...

rextended

They started (and still are) adding scripting commands like the functions I wrote, and others.

rextended

Ok, I'll give up before I answer badly.
Of three questions, you didn't answer one.

rextended

I can't thank you enough.

rextended

The lack of respect is very high, like that ignorant person who tried a 40Gbps test....

rextended

https://help.mikrotik.com/docs/spaces/R ... n+RouterOS

rextended

So the certificate is self-renewing or not?
The new one does not apply to the www-ssl service?

Have you tried with any browser?

rextended

The service on port 80 must be active for automatic renewal, as written in the guide, in 7.18.2. (for 7.17x and 7.19 there is also renewal via DNS verification) There is no practical reason why if you expose port 443 to the world, you cannot also leave 80 open. Absolutely nothing changes from a secu...

rextended

If you have a database and you free only some rows, the database is not compactedd for every delete.
If you delete all database, probably is also "compacted"....

rextended

Probably ISP do not asign static IPv6 etc. etc. etc.

Paste this on terminal and reboot, see if solve on long term.

terminal code

/ipv6 nd
set [ find default=yes ] hop-limit=64
/ipv6 nd prefix default
set preferred-lifetime=45m valid-lifetime=1h30m

rextended

Probably free space more than 134217727 bit cause variable overflow.

On your spare time, can you try again the passage from 7.18 to 7.18.[1|2] leaving on purpose free space less of 134217727???

On that devices are expected only 128MiB........

Just for fun and curiosity...........

Search found 13813 matches

example nothing is not equal to nothing code