Community discussions

MikroTik App

Search found 6031 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 21
by rextended
Fri Oct 15, 2021 6:16 pm
Forum: Wireless Networking
Topic: How many clients on CAP XL AC?
Replies: 5
Views: 285

Re: How many clients on CAP XL AC?

The question is really silly because it does not take into account, for example, that not all devices have 2 or more streams, ac radios, high gain antennas and high efficiency radios. On average they only have 2GHz and they all interfere with each other, plus they hurt if they move away due to the t...
by rextended
Fri Oct 15, 2021 1:38 pm
Forum: Wireless Networking
Topic: How many clients on CAP XL AC?
Replies: 5
Views: 285

Re: How many clients on CAP XL AC?

2007
by rextended
Fri Oct 15, 2021 1:22 pm
Forum: General
Topic: 1:1 NATting of /29 subnet
Replies: 3
Views: 199

Re: 1:1 NATting of /29 subnet

Use netmap on Right Order against other rules
/ip firewall nat
[...]
add action=netmap chain=dstnat dst-address=1.1.1.3 to-addresses=10.0.0.7
add action=netmap chain=srcnat src-address=10.0.0.7 to-addresses=1.1.1.3
[...] 
add chain=srcnat action=masquerade [...]
[...]
by rextended
Fri Oct 15, 2021 1:03 pm
Forum: General
Topic: How can I change the default route for a packet (or put routes into multiple tables)?
Replies: 7
Views: 244

Re: How can I change the default route for a packet (or put routes into multiple tables)?

On future keep one eye on VRF...

Actually with all "manual" only, can be doed by scripting, copyng all, except 0.0.0.0/0 from main to alternate table
by rextended
Fri Oct 15, 2021 12:35 pm
Forum: General
Topic: rancid script stop collecting config after upgrade to 6.49
Replies: 4
Views: 175

Re: rancid script stop collecting config after upgrade to 6.49

Like all software on the world, MikroTik can change something on his product, and are the other software producers than must align his own product. Your post is confusing, and I don't understand anything about it. It assumes someone uses Rancid and knows what you're talking about. You must ask the q...
by rextended
Fri Oct 15, 2021 12:29 pm
Forum: General
Topic: rancid script stop collecting config after upgrade to 6.49
Replies: 4
Views: 175

Re: rancid script stop collecting config after upgrade to 6.49

Rancid is not a MikroTik product.

Ask the authors of Rancid.
by rextended
Fri Oct 15, 2021 11:59 am
Forum: General
Topic: How can I change the default route for a packet (or put routes into multiple tables)?
Replies: 7
Views: 244

Re: How can I change the default route for a packet (or put routes into multiple tables)?

I do not understand how you think, instead of mark all and have the need of duplicate "main" table, Simply mark only, checking source and destination, when the packet must follow another path... Or better do not use firewall for do routing , instead use... Routing for do routing... use Rou...
by rextended
Thu Oct 14, 2021 6:25 pm
Forum: The Dude
Topic: The Dude 6.40.8 - db failure: database disk image is malformed
Replies: 39
Views: 16245

Re: The Dude 6.40.8 - db failure: database disk image is malformed

do not forget VACUUM

type VACUUM;

between recover and quit ( ; must be typed!!! )
by rextended
Thu Oct 14, 2021 4:43 pm
Forum: General
Topic: [SOLVED] IP CLOUD, Google, YouTube ,mikrotik.com, Gmail not working!
Replies: 14
Views: 628

Re: IP CLOUD, Google, YouTube ,mikrotik.com, Gmail not working!

you try this ??? MikroTik standard "ping" packet is usually 50k (NOT the "payload", but the FULL packet), is impossible that is a MTU problem, from "ping" point of view. Try to ping something, if work, ping with on advanced the Dont fragment flag set, starting from 1500...
by rextended
Thu Oct 14, 2021 4:17 pm
Forum: Scripting
Topic: Replace characters in string (url encode)
Replies: 16
Views: 16668

Re: Replace characters in string (url encode)

Yes is a bug, but for circumvent it and produce valid code, for not have error when sometime on the future is fixed: :local arr1 [:toarray ""]; :set ($arr1->"\$") "%24"; :put ($arr1->"\$") Must be also considerered ? and " and \ like $ Added also TAB and ...
by rextended
Thu Oct 14, 2021 3:56 pm
Forum: Scripting
Topic: Send SMS to mobile
Replies: 2
Views: 150

Re: Send SMS to mobile

The correct syntax for MikroTik modules onboard (not USB or others), for example RBwAPR-2nD + R11e-LTE /tool sms send lte1 phone-number=00000000 message="xxxxxxxxxxxxxx" The message must be on General GSM 7 encoding alphabet format, for example "ążźćęłóńÀÁÈÉÌÍÒÓÙÚ" etc. are unsup...
by rextended
Thu Oct 14, 2021 3:44 pm
Forum: General
Topic: [SOLVED] IP CLOUD, Google, YouTube ,mikrotik.com, Gmail not working!
Replies: 14
Views: 628

Re: IP CLOUD, Google, YouTube ,mikrotik.com, Gmail not working!

Paste this on terminal /interface detect-internet set detect-interface-list=none /ip address set [find where address="192.168.1.1/24"] interface=bridge you have pppoe-client or dhcp client? if you have only pppoe-client paste also this: /ip dhcp-client remove [find] on nat you have 3 masqu...
by rextended
Wed Oct 13, 2021 6:55 pm
Forum: Scripting
Topic: How do I remove the space in the output to separate the digits?
Replies: 3
Views: 204

Re: How do I remove the space in the output to separate the digits?

Do not ask help for do things on wrong way...

If you use "print" on scripting, you do something on wrong way...

What you try to achieve?
by rextended
Wed Oct 13, 2021 3:44 am
Forum: Beginner Basics
Topic: VPN to connect home network to cottage
Replies: 27
Views: 1224

Re: VPN to connect home network to cottage

@hahnhell
The export is really Sympatic oh...
you forgot to Hide Something while Export...

Now you understand the first "hint" ??? :lol:
by rextended
Wed Oct 13, 2021 3:43 am
Forum: Beginner Basics
Topic: VPN to connect home network to cottage
Replies: 27
Views: 1224

Re: VPN to connect home network to cottage

ma..... :lol: :lol: :lol:
by rextended
Wed Oct 13, 2021 3:24 am
Forum: Beginner Basics
Topic: VPN to connect home network to cottage
Replies: 27
Views: 1224

Re: VPN to connect home network to cottage

[removed for not provide hint...]
by rextended
Wed Oct 13, 2021 3:13 am
Forum: Beginner Basics
Topic: VPN to connect home network to cottage
Replies: 27
Views: 1224

Re: VPN to connect home network to cottage

Sympatico HSE is Virgin?
by rextended
Wed Oct 13, 2021 2:41 am
Forum: Beginner Basics
Topic: VPN to connect home network to cottage
Replies: 27
Views: 1224

Re: VPN to connect home network to cottage

@hahnhell
The export is really Sympatic oh...
you forgot to Hide Something while Export...
by rextended
Wed Oct 13, 2021 1:52 am
Forum: General
Topic: Problem with failover and second wan connection
Replies: 15
Views: 610

Re: Problem with failover and second wan connection

Remove the export, it says more than you think... 240... with open WinBox and hackable RouterOS version...
by rextended
Tue Oct 12, 2021 8:17 pm
Forum: Scripting
Topic: Script Error
Replies: 23
Views: 1410

Re: Script Error

count=5] >= 5
ehm...
by rextended
Tue Oct 12, 2021 10:01 am
Forum: General
Topic: Best Way of Blocking System In mikrotik
Replies: 2
Views: 233

Re: Best Way of Blocking System In mikrotik

Please cooperate: read all thousand of posts about the same topic, instead to open again another topic for the same reason... On few words: You can not block anything until you do not have full control over devices used. Just blocking the IP is a valid solution, but you must continuosly update the &...
by rextended
Mon Oct 11, 2021 2:22 pm
Forum: Scripting
Topic: Remove Nat Sessions on a specific event
Replies: 18
Views: 2355

Re: Remove Nat Sessions on a specific event

create a netwatch for that IP and put on both on-down and on-up this: /ip fire conn :foreach idc in=[find where (timeout > 60) and (reply-dst-address ~ "10.254.251.254")] do={ remove [find where .id=$idc] } please do not alter the timeout https://forum.mikrotik.com/viewtopic.php?f=13&t...
by rextended
Fri Oct 08, 2021 2:54 pm
Forum: General
Topic: NTP client possible bug?!?!
Replies: 17
Views: 736

Re: NTP client possible bug?!?!

Because this:
I'm using ntp1.neology.co.za everywhere

Both neology servers behave as if they are down.

These work:
ntp.is.co.za (Johannesburg)
ntp2.is.co.za (Cape Town)

Very bad idea "hardcode" DNS or IP not under own control...
by rextended
Fri Oct 08, 2021 2:49 pm
Forum: General
Topic: NTP client possible bug?!?!
Replies: 17
Views: 736

Re: NTP client possible bug?!?!

If status is started the NTP server do not provide sync.
Only when NTP Client is status: synchronized NTP Server provide the right time.
by rextended
Fri Oct 08, 2021 2:42 pm
Forum: Announcements
Topic: v6.48.5 [long-term] is released!
Replies: 71
Views: 12444

Re: v6.48.5 [long-term] is released!

What is the last version where IPv6 on IP Cloud work?
by rextended
Fri Oct 08, 2021 2:39 pm
Forum: General
Topic: NTP client possible bug?!?!
Replies: 17
Views: 736

Re: NTP client possible bug?!?!

Have you read my post?
by rextended
Fri Oct 08, 2021 2:31 pm
Forum: RouterOS v7 BETA
Topic: Can't import config on some routers
Replies: 11
Views: 710

Re: Can't import config on some routers

@Charg /interface bridge # REPLACE add comment=defconf name=bridge1 # WITH add comment=defconf name=bridge1 protocol-mode=none admin-mac=[/int ethernet get ether2 mac-address] auto-mac=no /interface bridge port # REMOVE THIS LINE --->>> add bridge=bridge1 comment=defconf disabled=yes interface=ether...
by rextended
Fri Oct 08, 2021 2:26 pm
Forum: General
Topic: NTP client possible bug?!?!
Replies: 17
Views: 736

Re: NTP client possible bug?!?!

Where you read the clock? On the video?
Some seconds of differencies can be possible, because the image is processed before you can seee it on video...
by rextended
Thu Oct 07, 2021 2:49 pm
Forum: General
Topic: Get version number in variable
Replies: 2
Views: 372

Re: Get version number in variable

Do not use print on scripts, until command already exist for do the same on simpler way.

What exactly you want?

RouterOS version
:global rosver [/system resource get version] 

or RouterBOOT version?
:global rbootver [/system routerboard get current-firmware]
by rextended
Thu Oct 07, 2021 1:59 am
Forum: Scripting
Topic: get within a nested if
Replies: 1
Views: 304

Re: get within a nested if

your script is not indented, and have some syntax errors get [find address="172.16.2.2/32"] enabled this is impossible because "get enabled" do not exist, exist only "get disabled" disabling what already is disabled do nothing, enabling what already is enabled, only on ...
by rextended
Thu Oct 07, 2021 1:44 am
Forum: Scripting
Topic: Scheduler add on-event={multi-line script} ? [SOLVED]
Replies: 1
Views: 356

Re: Scheduler add on-event={multi-line script} ? [SOLVED]

{ } just for test on terminal { :local test 5 /system scheduler add name=Every10s on-event=":log warning \"$test\"" interval=00:00:10 } { :local line1 ":log warning Line1" :local line2 ":log warning Line2" :local line3 ":log warning Line3" /system sc...
by rextended
Wed Oct 06, 2021 7:42 pm
Forum: Scripting
Topic: Script Error
Replies: 23
Views: 1410

Re: Script Error

Too much strict, someting can fill the connection and reboot the device without reason...
by rextended
Wed Oct 06, 2021 7:37 pm
Forum: General
Topic: sysObjectID
Replies: 11
Views: 603

Re: sysObjectID

The OP say that the model are reported on sysObjectID, instead is on sysDescr
by rextended
Wed Oct 06, 2021 7:32 pm
Forum: General
Topic: sysObjectID
Replies: 11
Views: 603

Re: sysObjectID

I see on all device sysObjectID is a pointer to specific vendor system object, and is used sysDescr for model. Something on your assumption is wrong. Ubiquity sysObjectID iso.org.dod.internet.private.enterprises.netSnmp.netSnmpEnumerations.netSnmpAgentOIDs.linux sysDescr Linux ***censored*** AF5XHD ...
by rextended
Wed Oct 06, 2021 7:23 pm
Forum: Scripting
Topic: Script Error
Replies: 23
Views: 1410

Re: Script Error

at least 3 fail?
10 - 3 = 7 (at least 7 good)
< 8 (worst than 8, because 8 are good, only 2 fail)
by rextended
Wed Oct 06, 2021 7:17 pm
Forum: RouterOS v7 BETA
Topic: bug? - graphs 404 error in https mode
Replies: 3
Views: 407

Re: bug? - graphs 404 error in https mode

certificate=none

notice something?
by rextended
Wed Oct 06, 2021 6:46 pm
Forum: Scripting
Topic: Script Error
Replies: 23
Views: 1410

Re: Script Error

Is there a way to alter this script so if the ping response fails three times it will reboot the router rather than disable / enable the LTE interface. Yes... :global ltestatus :if ([:typeof $ltestatus] = "nothing") do={:set ltestatus "offline"} /interface lte :if ([:len [find]]...
by rextended
Wed Oct 06, 2021 6:39 pm
Forum: General
Topic: sysObjectID
Replies: 11
Views: 603

Re: sysObjectID

You must adapt your software, not MikroTik adapt RouterOS to your wish...

sysDescr already exist
by rextended
Wed Oct 06, 2021 11:46 am
Forum: General
Topic: sysObjectID
Replies: 11
Views: 603

Re: sysObjectID

Return everytime the same value because is the same RouterOS for all devices. Use sysDescr instead. iso.org.dod.internet.mgmt.mib-2.system.sysObjectID.0 = iso.org.dod.internet.private.enterprises.mikrotik.mikrotikExperimentalModule iso.org.dod.internet.mgmt.mib-2.system.sysDescr.0 = RouterOS RB SXT ...
by rextended
Wed Oct 06, 2021 11:31 am
Forum: The Dude
Topic: Get current firmware version using SNMP?
Replies: 9
Views: 10309

Re: Get current firmware version using SNMP?

Current BIOS (RouterBOOT / Firmware)
1.3.6.1.4.1.14988.1.1.7.4.0
=
iso.org.dod.internet.private.enterprises.mikrotik.mikrotikExperimentalModule.mtXRouterOs.mtxrSystem.mtxrFirmwareVersion.0
by rextended
Wed Oct 06, 2021 11:21 am
Forum: General
Topic: The Dude
Replies: 4
Views: 358

Re: The Dude

That's not true, there are already too many arguments about it, I don't want to re-explain it all over again. An example over everything, I have a user manager on RB1100AHx2 (not the newest, but the 2009 model) that still works perfectly and probably the user manager writes more data to disk than Th...
by rextended
Wed Oct 06, 2021 10:14 am
Forum: General
Topic: The Dude
Replies: 4
Views: 358

Re: The Dude

Nice and clear title, we quickly understand what the problem is... and put it in the right section of the forum as well.

If you can't figure out how to create a topic on the right way...
do you understand the differences between Memory and "Disk"?
by rextended
Wed Oct 06, 2021 10:09 am
Forum: General
Topic: sysObjectID
Replies: 11
Views: 603

Re: sysObjectID

Is not already on this way?
by rextended
Wed Oct 06, 2021 2:14 am
Forum: Announcements
Topic: MikroTik smartphone app (ex Tik-App)
Replies: 486
Views: 206631

Re: MikroTik smartphone app (ex Tik-App)

Simply: on default settings, RouterOS "phone home"
by rextended
Tue Oct 05, 2021 6:35 pm
Forum: Scripting
Topic: Copy Dynamic ip pptp-out1 to nat address
Replies: 4
Views: 429

Re: Copy Dynamic ip pptp-out1 to nat address

Better on this way: :global status [/interface get pptp-out1 running] :if ($status) do={ :global old [/ip firewall nat get [find where comment="Loopback"] to-addresses] :global new [/ip address get [find where dynamic=yes and interface="pptp-out1"] address] :set new [:pick $new 0...
by rextended
Tue Oct 05, 2021 6:19 pm
Forum: Announcements
Topic: MikroTik smartphone app (ex Tik-App)
Replies: 486
Views: 206631

Re: MikroTik smartphone app (ex Tik-App)

@jbl42 RouterOS "phone home", on default settings, you do not notice that on your tightly monitored network???
by rextended
Tue Oct 05, 2021 4:41 pm
Forum: Announcements
Topic: MikroTik smartphone app (ex Tik-App)
Replies: 486
Views: 206631

Re: MikroTik smartphone app (ex Tik-App)

No, on XNU "Xnu is Not Unix" / Darwin
by rextended
Tue Oct 05, 2021 4:26 pm
Forum: Announcements
Topic: MikroTik smartphone app (ex Tik-App)
Replies: 486
Views: 206631

Re: MikroTik smartphone app (ex Tik-App)

Don't ask me, I didn't say it, and I don't have those conditioning tools.
by rextended
Tue Oct 05, 2021 4:19 pm
Forum: Beginner Basics
Topic: How to properly manage multiple mikrotik routers?
Replies: 4
Views: 433

Re: How to properly manage multiple mikrotik routers?

The Dude work perfectly also on remote devices, also by VPN... If you have at least one public IP, you can make VPN between all remote devices and the Router with public IP. If that link is for administrative purpose only (not for link the shops) you can, with proper config, "see" all remo...
by rextended
Tue Oct 05, 2021 3:28 pm
Forum: General
Topic: winbox can't work correctly if "users" folder moved from disk C:
Replies: 13
Views: 823

Re: winbox can't work correctly if "users" folder moved from disk C:

any existing icon properties
link, not icon???
by rextended
Tue Oct 05, 2021 3:27 pm
Forum: Announcements
Topic: MikroTik smartphone app (ex Tik-App)
Replies: 486
Views: 206631

Re: MikroTik smartphone app (ex Tik-App)

I'm using a lot of scripts on my MT devices, scripts are ran through Terminal which is not available on IOS.
Not sure why IOS bans use of Terminal in MT app.
Because Apple has decided, for you, that you don't need the terminal, Apple informs you that you have to comply.
by rextended
Mon Oct 04, 2021 9:25 pm
Forum: RouterOS v7 BETA
Topic: [Feature Request] openvpn push route
Replies: 5
Views: 3629

Re: [Feature Request] openvpn push route

-1
Wireguard and the others still exist.
by rextended
Mon Oct 04, 2021 9:21 pm
Forum: RouterOS v7 BETA
Topic: Feature Request: Access List SRC List for Users and IP Services
Replies: 2
Views: 355

Re: Feature Request: Access List SRC List for Users and IP Services

What's the problem with adding addresses directly into those fields, instead of using an address list?

Is better not mix users, services and firewall...
by rextended
Mon Oct 04, 2021 9:17 pm
Forum: Wireless Networking
Topic: Missing Country and 5GHz Frequencies on hAP ac lite [Solved]
Replies: 3
Views: 431

Re: Missing Country and 5GHz Frequencies on hAP ac lite

The US models are locked as imposed from FCC if MikroTik want sale his product on USA (like all other vendors).
Are not unlockable.

Complain the FCC.
by rextended
Mon Oct 04, 2021 9:11 pm
Forum: General
Topic: SSTP-Server with LetsEncrypt certificate
Replies: 2
Views: 345

Re: SSTP-Server with LetsEncrypt certificate

Remember: all certificates are registered on public registry , simply searching other certificate fields can be finded the fqdn....
by rextended
Mon Oct 04, 2021 8:59 pm
Forum: Beginner Basics
Topic: gratuitous arp issue
Replies: 15
Views: 1199

Re: gratuitous arp issue

Remove the config, you leave the no-ip script with password...

The points are 3:
1) is extermely hard give help without the config...
2) is extemely easy forget to remove something that must do not go public on the config...
3) do not use same password for no-ip and for winbox...
by rextended
Mon Oct 04, 2021 7:38 pm
Forum: Beginner Basics
Topic: gratuitous arp issue
Replies: 15
Views: 1199

Re: gratuitous arp issue

I see your public IP address correctly, also the username, because you are so kind to censor it within the image, but you forget to censor the title...

You must use a VPN to access your router instead to leave it open to the world with default port...

Mi sa che non sei poi stato così Fortunato...
by rextended
Mon Oct 04, 2021 7:20 pm
Forum: General
Topic: winbox can't work correctly if "users" folder moved from disk C:
Replies: 13
Views: 823

Re: winbox can't work correctly if "users" folder moved from disk C:

@kirost
instead to ask on forum or search one file, you have Simply used the function for do that?

on WinBox / Tools / Move Session Folder...
by rextended
Mon Oct 04, 2021 1:03 am
Forum: Beginner Basics
Topic: Disable all unused interfaces with one command.
Replies: 5
Views: 449

Re: Disable all unused interfaces with one command.

Why all that code for one simple thing? Is better: for each item finded not running on interfaces go on interface ethernet and set on that interface ID the attribute disabled equal to yes ( this give error for each non-ethernet interface finded not running that give a non-ethernet ID to ethernet-set...
by rextended
Mon Oct 04, 2021 12:59 am
Forum: Beginner Basics
Topic: Firewall Rules Factory Setting [SOLVED]
Replies: 7
Views: 821

Re: Firewall Rules Factory Setting [SOLVED]

Another zombie machine is coming out...
by rextended
Sun Oct 03, 2021 9:36 pm
Forum: General
Topic: Blocking Routers
Replies: 11
Views: 654

Re: Blocking Routers

I suggest HotSpot from the start....
by rextended
Sun Oct 03, 2021 5:13 pm
Forum: Beginner Basics
Topic: i need an solution
Replies: 9
Views: 841

Re: i need an solution

I think he mean: I do not have one public IP (only NAT or double-NAT) for use with cloud wher is the camera...
by rextended
Sun Oct 03, 2021 4:31 pm
Forum: Beginner Basics
Topic: i need an solution
Replies: 9
Views: 841

Re: i need an solution

Yes, is perfectly possible, and you have described the soluction for yourself.
by rextended
Sun Oct 03, 2021 4:30 pm
Forum: General
Topic: vlan translation help
Replies: 20
Views: 961

Re: vlan translation help

You have try Google Translation?
by rextended
Sun Oct 03, 2021 4:29 pm
Forum: General
Topic: Blocking Routers
Replies: 11
Views: 654

Re: Blocking Routers

Simply one SSTP VPN, one connection, "infinite" uses.
by rextended
Sun Oct 03, 2021 3:55 pm
Forum: Scripting
Topic: DHCP automatic dynamic to static
Replies: 14
Views: 7942

Re: DHCP automatic dynamic to static

nahradit <dhcp-server-name> název serveru DHCP, ze kterého nechcete, aby byl odstraněn: # Remove all static DHCP and corenspondig DNS leases more than 100 week old :local counter 0 /ip dhcp-server lease :foreach id in=[find where server!="<dhcp-server-name>" and dynamic=no and last-seen~&q...
by rextended
Sun Oct 03, 2021 3:38 pm
Forum: The Dude
Topic: Dude Client unable to connect, stuck on "getting stuff"
Replies: 16
Views: 2592

Re: Dude Client unable to connect, stuck on "getting stuff"

The Dude internal database and the Image and tne MIBs etc. are transferred at ridiculous speed from The Dude to PC before it open. it is probably why you must wait so much time to open The Dude on PC... Is the same on my, if I clean, for test, all the history / log /errors from the database with sql...
by rextended
Sun Oct 03, 2021 3:27 am
Forum: Scripting
Topic: Persistent Environment Variables
Replies: 8
Views: 1530

Re: Persistent Environment Variables

Sorry, but I think this is out of interest from MikroTik until the release of RouterOS 7.7.7 (stable)
by rextended
Sat Oct 02, 2021 5:50 pm
Forum: Beginner Basics
Topic: Firewall question.
Replies: 5
Views: 464

Re: Firewall question.

Let's not waste time with commas,
there can be no destination-free packages.

The very fact that the packet reaches the router means that there was at least one destination for it: the router.
by rextended
Sat Oct 02, 2021 4:20 pm
Forum: General
Topic: [resolved] right led on ether1 is always on
Replies: 2
Views: 266

Re: right led on ether1 is always on

Fastly, return on warranty
by rextended
Sat Oct 02, 2021 4:17 pm
Forum: Beginner Basics
Topic: DHCP / Weird range given?
Replies: 2
Views: 318

Re: DHCP / Weird range given?

export, not novels

and the address on network must be 10.10.10.0/24
by rextended
Sat Oct 02, 2021 4:05 pm
Forum: Scripting
Topic: Useful scripts
Replies: 95
Views: 152218

Re: Useful scripts

Ok, I write "someone reinvented the wheel", but I do not say that your work (among the other dozen of scripts libraries like your) is useless. Remembert than I'm everytime ready to help and learn from others, you included. About: :if ([/system package get [find name=wireless] disabled] = f...
by rextended
Sat Oct 02, 2021 3:52 pm
Forum: Scripting
Topic: Built in function library
Replies: 96
Views: 42332

Re: Built in function library

Miao? (Italian Meow)

P.S.: The forum is continuosly scanned from Google, Bing and others, every link is followed from the spider bots...
Is probable that all latest user (for sure except one) are bots....
Baidu [Spider]
Bing [Bot]
Google [Bot]
Google Feedfetcher
etc.
by rextended
Sat Oct 02, 2021 3:49 pm
Forum: Scripting
Topic: Script MD5 Hash Generator
Replies: 11
Views: 11683

Re: Script MD5 Hash Generator

I must admit than you are really polite, because not often I see someone that ask permission, when the others neither thanks for the use...

Thanks.
by rextended
Sat Oct 02, 2021 3:42 pm
Forum: Scripting
Topic: Useful scripts
Replies: 95
Views: 152218

Re: Useful scripts

If MikroTik make a change, like syntax on v7, you have the probability that all your "system" stop working because interdipendance exist, instead with my methods of scripting, are blocked only the script that have inside the change involved. And are easily debuggable and fixable, because a...
by rextended
Sat Oct 02, 2021 3:16 pm
Forum: Scripting
Topic: Built in function library
Replies: 96
Views: 42332

Re: Built in function library

@SiB is another one that reinvent the wheel... Is an hell to follo all dependencies, also for debug, and if something is changed probably that breake some recurring dependance. Each script must have all the functions writed inside, and all must be clear. I prefer to provide Snippets, like on my sign...
by rextended
Sat Oct 02, 2021 3:01 pm
Forum: Scripting
Topic: Useful scripts
Replies: 95
Views: 152218

Re: Useful scripts

Another one reinvented the wheel...

Is better what I do on my Snippets: one simply clear action without interdipendency than can broke someting (or all) if something is changed on "shared" functions...
by rextended
Sat Oct 02, 2021 1:53 pm
Forum: Scripting
Topic: ✂ Rextended Fragments of Snippets
Replies: 4
Views: 2333

Re: ✂ Rextended Fragments of Snippets

Save and Restore global variables on reboot

viewtopic.php?f=9&t=170591&p=883422#p883422
by rextended
Sat Oct 02, 2021 1:30 pm
Forum: Scripting
Topic: Persistent Environment Variables
Replies: 8
Views: 1530

Re: Persistent Environment Variables

search tag # rextended save and restore global variables on reboot This is for save and restore variables with keeping the right data type on restore : Scheduled script do that every x minutes, on purpose store only variables, but do not store functions because regex values with too many "(&quo...
by rextended
Sat Oct 02, 2021 1:17 pm
Forum: Scripting
Topic: How to use the output of print in scripts?
Replies: 6
Views: 521

Re: How to use the output of print in scripts?

Ok.... if you insist too much, I'm forced to give you the soluction, but I repeat: I hate the use of print commands on script... Do not remove the delays. :execute file=sysroupri.txt script="/system routerboard print" :delay 1s :put [/file get sysroupri.txt contents] :execute file=ipaddrpr...
by rextended
Sat Oct 02, 2021 12:00 pm
Forum: Scripting
Topic: tx-bytes rx-bytes have spaces and are unusable. Please help (edited and added more info)
Replies: 6
Views: 2111

Re: tx-bytes rx-bytes have spaces and are unusable. Please help (edited and added more info)

And... why API? I do not see on any post on this thread something about API...


Simply I see a wrong approach...

This is the solution.....
:put [/interface ethernet get ether1 rx-bytes]
2 778 266 326

:put ([/interface get ether1]->"rx-byte")
2739389845
by rextended
Sat Oct 02, 2021 11:39 am
Forum: Wireless Networking
Topic: LHG 60 does not connect at 2150m with los and perfect weather :(
Replies: 47
Views: 4023

Re: LHG 60 does not connect at 2150m with los and perfect weather :(

I have seen a few reports of the airfiber60lr locking up not sending data at random time, unlike the Nray which just works.
It's true, but after download newest 2.5.0 stop do that.
by rextended
Sat Oct 02, 2021 11:25 am
Forum: Beginner Basics
Topic: Firewall question.
Replies: 5
Views: 464

Re: Firewall question.

Is impossible than a packet do not have any destination. A new connection is not equal as invalid connection. What does not yet exist, cannot be invalid The packets are "invalid" when connection-tracking is broken because, for example, ISP assign another IP on WAN interface, etc. If you d...
by rextended
Sat Oct 02, 2021 11:20 am
Forum: Wireless Networking
Topic: nRAY vs LHG 60G
Replies: 28
Views: 3103

Re: nRAY vs LHG 60G

I got more than what was described.
Something is wrong with the configuration or other non-evaluable things from the forum,
because I'm not there on the field to see.
by rextended
Sat Oct 02, 2021 11:10 am
Forum: Scripting
Topic: How to use the output of print in scripts?
Replies: 6
Views: 521

Re: How to use the output of print in scripts?

Let me explain better, for my point of view: I hate print in a script. MikroTik send e-mail on text format, and for do nice table, is unadequate. On the example is missing to-string, because the as-value return an array, I have fixed the previious post with this: :put "blah blah blah $[:tostr [...
by rextended
Sat Oct 02, 2021 10:54 am
Forum: General
Topic: Blocking Routers
Replies: 11
Views: 654

Re: Blocking Routers

Dear @sysadmbonn , every suggestion you can have on public forum, can be read & circumvented from your user, because have mikrotik device and can search on mikrotik forum... @sindy do a perfect relation about that. And about identify how many user... I can do that but I'm not so stupid to reveal...
by rextended
Sat Oct 02, 2021 10:11 am
Forum: General
Topic: pppoe clients with multiple ISP links
Replies: 7
Views: 642

Re: pppoe clients with multiple ISP links

if it is a 5-port model, its total throughput will most likely be insufficient to handle the full 2 Gbit/s in each direction with PPPoE and bandwidth policing.
Ah... nice observation....
by rextended
Sat Oct 02, 2021 1:24 am
Forum: Scripting
Topic: How to use the output of print in scripts?
Replies: 6
Views: 521

Re: How to use the output of print in scripts?

The "print" should only be used in exceptional cases. Mainly it is to print the text on the terminal, instead of using it on the script. :put "blah blah blah $[:tostr [/system routerboard print as-value]] blah blah blah" :put "blah blah blah $[:tostr [/ip address print as-va...
by rextended
Sat Oct 02, 2021 1:15 am
Forum: General
Topic: pppoe clients with multiple ISP links
Replies: 7
Views: 642

Re: pppoe clients with multiple ISP links

You do not have specified what rules apply to "split" the users on the 3 lines...
by rextended
Sat Oct 02, 2021 12:08 am
Forum: The Dude
Topic: Host Dude RB1100Dx4 for diffrent users
Replies: 4
Views: 1406

Re: Host Dude RB1100Dx4 for diffrent users

Is a fake user, just registered to write that and disappear....

You can not have multiple instances or separate maps for different users.
Use more than one device with the dude or a free CHR instances for each user on virtual machine.
by rextended
Fri Oct 01, 2021 3:09 pm
Forum: Beginner Basics
Topic: NAT rule, parameter: "to-address" in Winbox ... where ?
Replies: 26
Views: 1179

Re: NAT rule, parameter: "to-address" in Winbox ... where ?

Ahhh.. well... then it is also my merit when I make you puzzled to understand when I write and do not explain... :lol:
(because not everytime I have time... :P )
by rextended
Fri Oct 01, 2021 2:54 pm
Forum: General
Topic: WAN Failover questions
Replies: 3
Views: 448

Re: WAN Failover questions

1) are perfectly useless if you want only failover 2) Nevermind 3) Yes 0) @anav has provided the simplest configuration needed But if you use NAT, the "connection-tracked" still valid until not dropped by timeout. Everytime gateway change, if using NAT, the connection-tracking table must b...
by rextended
Fri Oct 01, 2021 2:43 pm
Forum: General
Topic: How to get rid of that "Cancel" button
Replies: 1
Views: 308

Re: How to get rid of that "Cancel" button

Ask Mikhmon, this is not a MikroTik product or problem.
by rextended
Fri Oct 01, 2021 2:36 pm
Forum: Beginner Basics
Topic: NAT rule, parameter: "to-address" in Winbox ... where ?
Replies: 26
Views: 1179

Re: NAT rule, parameter: "to-address" in Winbox ... where ?

my incompetence!!
What do you write... 90% of forum users (or more...) don't even know 1% of what you know...

You have often provided advice and solutions to those who also had a certification ...
by rextended
Fri Oct 01, 2021 2:35 pm
Forum: Beginner Basics
Topic: NAT rule, parameter: "to-address" in Winbox ... where ?
Replies: 26
Views: 1179

Re: NAT rule, parameter: "to-address" in Winbox ... where ?

Okay 3 errors ;-)) But you still know more almost infinity than I do, ref Networking and MT configurations, so not to worry!! Best if we drink some good Italian wine and joke about my incompetence!! I have proved you than the rules suggested to that user drop some DHCP traffic from client, and I pr...
by rextended
Fri Oct 01, 2021 2:31 pm
Forum: Beginner Basics
Topic: NAT rule, parameter: "to-address" in Winbox ... where ?
Replies: 26
Views: 1179

Re: NAT rule, parameter: "to-address" in Winbox ... where ?

No, wait, you are true, I made two mistake: 1) I tried to provide a solution to the OP without first asking to be more specific about what he wanted to do. 2) dangerous self-redirect : do not apply on this case because the output DNS requests from RouterBOARD go directly trought src-nat, do not pass...
by rextended
Fri Oct 01, 2021 2:22 pm
Forum: Beginner Basics
Topic: NAT rule, parameter: "to-address" in Winbox ... where ?
Replies: 26
Views: 1179

Re: NAT rule, parameter: "to-address" in Winbox ... where ?

...thats two errors in a row...
Where are the errors?

The rule redirect without specify dst-address=!192.168.55.1 manage uslessly the packets already directed to 192.168.55.1...
by rextended
Fri Oct 01, 2021 2:13 pm
Forum: Beginner Basics
Topic: NAT rule, parameter: "to-address" in Winbox ... where ?
Replies: 26
Views: 1179

Re: NAT rule, parameter: "to-address" in Winbox ... where ?

@roe1974 "my" rules are more clear what are doing and prevent useless redirect or dangerous self-redirect (see next post) because are checking if the packet is already directed to right destination. But going back to topic : you do not see to-address if is selected one action that not use ...
by rextended
Fri Oct 01, 2021 11:27 am
Forum: Beginner Basics
Topic: NAT rule, parameter: "to-address" in Winbox ... where ?
Replies: 26
Views: 1179

Re: NAT rule, parameter: "to-address" in Winbox ... where ?

"redirect" action do not use to-address, probably you need "dst-nat" instead.... redirect - replaces destination port of an IP packet to one specified by to-ports parameter and destination address to one of the router's local addresses dst-nat - replaces destination address and/o...
by rextended
Fri Oct 01, 2021 10:55 am
Forum: Beginner Basics
Topic: NAT rule, parameter: "to-address" in Winbox ... where ?
Replies: 26
Views: 1179

Re: NAT rule, parameter: "to-address" in Winbox ... where ?

Yes, is displayed on "action" section when you open the rule.
by rextended
Fri Oct 01, 2021 10:27 am
Forum: Beginner Basics
Topic: How to Completely Wipe Compromized Router?
Replies: 5
Views: 1652

Re: How to Completely Wipe Compromized Router?

Yes, is normal to do not have any config after netinstall.

For have the default values after netinstall must be checked "Apply default config"

For keep previous config select "Keep old configuration",
but NO, do not do it, on your case if the router is compromised...
by rextended
Fri Oct 01, 2021 2:36 am
Forum: Beginner Basics
Topic: url filtering on ssl traffic through Web Proxy Configuration
Replies: 15
Views: 1349

Re: url filtering on ssl traffic through Web Proxy Configuration

@rextended There is no way, and the vendor do not have any importance. This is definitely not correct. Or, in your words, "idiotic". You look like an "idiotic" to me. Next time, quote only a word instead of the full post. So maybe you will be right for sure. Full original quote:...
by rextended
Thu Sep 30, 2021 8:35 pm
Forum: Beginner Basics
Topic: url filtering on ssl traffic through Web Proxy Configuration
Replies: 15
Views: 1349

Re: url filtering on ssl traffic through Web Proxy Configuration

@rextended There is no way, and the vendor do not have any importance. You must hack the devices to see inside https url requests. @reinerotto This is not absolutely correct. [...] Ah, no? @reinerotto [....] However, this needs installation of certs on the client devices, which is possible only on ...
by rextended
Wed Sep 29, 2021 11:58 pm
Forum: Beginner Basics
Topic: Create Interface list via WinBox?
Replies: 3
Views: 487

Re: Create Interface list via WinBox?

The button with the text "Lists", on "Interface" / "Interface List", on the right of "filter" button, do not say nothing to you?
by rextended
Wed Sep 29, 2021 11:54 pm
Forum: Scripting
Topic: Help with where statement
Replies: 3
Views: 525

Re: Help with where statement

You sure? Did you notice that I have changed very few things? Your script was almost all written correctly... Often other scripts that I correct are monstrous... You are on your way. I didn't take any courses, I learned easily because I had already programmed in the past on other languages​... Unfor...
by rextended
Wed Sep 29, 2021 11:32 pm
Forum: Beginner Basics
Topic: Block SSH and WINBOX from WAN Only
Replies: 10
Views: 869

Re: Block SSH and WINBOX from WAN Only

My DHCP service for the LANS works great. MY CLIENT DHCP service for the WANS works great. SO I have to ask which DHCP service are you talking about??? I do not think is so hard to explain/understand.... :?: One thing is the DHCP Server service another is DHCP Client service If you block port 67 an...
by rextended
Wed Sep 29, 2021 8:06 pm
Forum: Beginner Basics
Topic: Block SSH and WINBOX from WAN Only
Replies: 10
Views: 869

Re: Block SSH and WINBOX from WAN Only

Not sure what you mean by DHCP, not required on input chain rule?? Otherwise none of my configs would work LOL. I hope to explain better: With the changes you have proposed, the DHCP Server stops working as well, except for the administrative addresses. The DHCP Server is a service inside RouterBOA...
by rextended
Wed Sep 29, 2021 7:55 pm
Forum: Scripting
Topic: Help with where statement
Replies: 3
Views: 525

Re: Help with where statement

I would like to put where statement on this script to not run when it detects the agent-remote-id is not Null -> I would like to put where statement on this script to not run when it detects the agent-remote-id is not Null. /ip dhcp-server lease :foreach dhcplease in=[find] do={ :local dhcpip [get $...
by rextended
Wed Sep 29, 2021 7:30 pm
Forum: Scripting
Topic: Regex for Numeric Range [SOLVED]
Replies: 5
Views: 729

Re: Regex for Numeric Range [SOLVED]

I want to get the addresses between 192.168.0.0 and 192.168.63.0 through the regex. My regex expression is: "192\\.168\\.\b([0-9]|[1-5][0-9]|6[0-3])\b" From what I researched the mikrotik does not support "\b". So how can I apply the regex? MikroTik support POSIX syntax without ...
by rextended
Wed Sep 29, 2021 7:20 pm
Forum: Announcements
Topic: MikroTik smartphone app (ex Tik-App)
Replies: 486
Views: 206631

Re: MikroTik smartphone app (ex Tik-App)

Someone at Apple decided that he no longer need the app...
by rextended
Wed Sep 29, 2021 7:02 pm
Forum: Beginner Basics
Topic: Block SSH and WINBOX from WAN Only
Replies: 10
Views: 869

Re: Block SSH and WINBOX from WAN Only

@anav , if you do that (ignoring forward, address lists etc.) /ip firewall filter add chain=input action=accept connection-state=established,related,untracked comment="defconf: accept established,related,untracked" add chain=input action=drop connection-state=invalid comment="defconf...
by rextended
Wed Sep 29, 2021 6:22 pm
Forum: Beginner Basics
Topic: Block SSH and WINBOX from WAN Only
Replies: 10
Views: 869

Re: Block SSH and WINBOX from WAN Only

Why waste time writing all this? Simply the DEFAULT firewall rules already protect everything from the WAN, not just SSH and WINBOX (e.g. DNS, telnet, NTP server, etc.), and are allowed from LAN what are leaved enabled. But must be the true DEFAULT rules, not something "see on youtube", fo...
by rextended
Wed Sep 29, 2021 6:17 pm
Forum: Beginner Basics
Topic: Block local IP's fails [SOLVED]
Replies: 11
Views: 967

Re: Block local IP's fails [SOLVED]

PS: Basically forbid some ports to talk to other ether ports would be ideal. For be clear, you wanted every device completly isolated from eachother? If you have only one single device per port is doable, but as already wrote from @anav , is impossible to understand how is your network maded, witho...
by rextended
Wed Sep 29, 2021 6:12 pm
Forum: Beginner Basics
Topic: Block local IP's fails [SOLVED]
Replies: 11
Views: 967

Re: Block local IP's fails [SOLVED]

Paste this on terminal for fix some errors: /interface bridge set bridge protocol-mode=none /ip address set [find where address="192.168.88.1/24"] interface=bridge /ip firewall nat set [find where src-port=""] !src-port /interface ethernet switch port set [find] default-vlan-id=a...
by rextended
Wed Sep 29, 2021 5:55 pm
Forum: Scripting
Topic: How to switch command directory dynamically?
Replies: 2
Views: 483

Re: How to switch command directory dynamically?

Some other unsuccessful try: Define a function to call later after changing "directory": NO, the function when created remains on "root" Create a script and call it later after changing "directory": NO, the script everytime start on "root" The "change dir...
by rextended
Wed Sep 29, 2021 5:52 pm
Forum: Beginner Basics
Topic: Block local IP's fails [SOLVED]
Replies: 11
Views: 967

Re: Block local IP's fails [SOLVED]

Go on one of the two device settings and block the other device on firewall, without make all traffic go trough CPU for apply some rules...
by rextended
Wed Sep 29, 2021 11:55 am
Forum: Scripting
Topic: Script to improve netwatch, dynamic variable solution? [SOLVED]
Replies: 7
Views: 905

Re: Script to improve netwatch, dynamic variable solution? [SOLVED]

P.P.S: about the "!=" and ":"... the suggestions are for the syntax, not for fix the broken 7.1rc4 :(


I do not want omit that the "original" question/idea is from @MrBonding
I just added my way to save "declared-later" variables...
by rextended
Wed Sep 29, 2021 11:06 am
Forum: Scripting
Topic: Script to improve netwatch, dynamic variable solution? [SOLVED]
Replies: 7
Views: 905

Re: Script to improve netwatch, dynamic variable solution? [SOLVED]

I accept the hint, RouterOS 7 or not, without move too much things, simply from "] = 0 )" to "] != 1 )" :lol: PS: don't get into the bad habit of omitting ":" before all the items where it should be put... put [typeof [ping 192.168.1.1 count=1]] # --->> :put [:typeof [:...
by rextended
Wed Sep 29, 2021 10:58 am
Forum: General
Topic: No skin selectable in Winbox
Replies: 15
Views: 2134

Re: No skin selectable in Winbox

Use one UPS.
by rextended
Tue Sep 28, 2021 8:36 pm
Forum: General
Topic: Failover Single PPPoE
Replies: 3
Views: 394

Re: Failover Single PPPoE

if the 2nd is only for backup and you use dhcp client for backup,
simply leave/set default route distance to 1 on pppoe-client pppoe-out
and
set default routing distance to 2 on DHCP client
done.
by rextended
Tue Sep 28, 2021 7:56 pm
Forum: Beginner Basics
Topic: url filtering on ssl traffic through Web Proxy Configuration
Replies: 15
Views: 1349

Re: url filtering on ssl traffic through Web Proxy Configuration

There is no way, and the vendor do not have any importance.

You must hack the devices to see inside https url requests.
by rextended
Tue Sep 28, 2021 7:47 pm
Forum: Scripting
Topic: Script to improve netwatch, dynamic variable solution? [SOLVED]
Replies: 7
Views: 905

Re: Script to improve netwatch, dynamic variable solution? [SOLVED]

Just ask on MikroTik Forum... :global arrayofvalues :if ([:typeof $arrayofvalues] = "nothing") do={:set arrayofvalues [:toarray ""]} /ppp secret :foreach item in=[find where profile="SIMRouters"] do={ :local pname [get $item name] :local premip [get $item remote-address...
by rextended
Tue Sep 28, 2021 7:22 pm
Forum: Beginner Basics
Topic: url filtering on ssl traffic through Web Proxy Configuration
Replies: 15
Views: 1349

Re: url filtering on ssl traffic through Web Proxy Configuration

In these cases, a proxy is used that decrypts the SSL traffic and then analyzes it with the url filtering rules set. Where you have read this idiocy? The only way to decrypt "ssl" is to "hack" the web browser and/or the OS... For example, simply add a "proxy" to open h...
by rextended
Tue Sep 28, 2021 6:59 pm
Forum: RouterOS v7 BETA
Topic: v7.1rc4 [development] is released!
Replies: 240
Views: 32977

Re: v7.1rc4 [development] is released!

...or simply the user disable the button on skin?...
by rextended
Tue Sep 28, 2021 3:51 pm
Forum: General
Topic: [Feature Request] DHCP(v4/v6) client: Make arbitrary option codes requestable and provide their values to the script
Replies: 7
Views: 3038

Re: [Feature Request] DHCP(v4/v6) client: Make arbitrary option codes requestable and provide their values to the script

The default options request on 6.47.10 is 0x010306212A2B333536798A corresponding to options: 1,3,6,33,42,43,51,53,54,121,138 Subnet Mask, Gateway, DNS Servers, Static Routes, NTP Servers, Vendor Specific, Lease Time, DHCP Message Type, DHCP Server ID, Classless Static Routes, CAP Access Controller I...
by rextended
Fri Sep 24, 2021 5:47 pm
Forum: RouterOS v7 BETA
Topic: v7.1rc4 [development] is released!
Replies: 240
Views: 32977

Re: v7.1rc4 [development] is released!

and where is the cosmetic bug?
by rextended
Fri Sep 24, 2021 4:16 pm
Forum: Announcements
Topic: v6.49rc [testing] is released!
Replies: 37
Views: 7988

Re: v6.49rc [testing] is released!

I hope you read also my reply than only his post....
by rextended
Fri Sep 24, 2021 3:10 pm
Forum: Scripting
Topic: RegEx help
Replies: 26
Views: 7805

Re: RegEx help

so how you tell reg exp to ignore case sensitive?
RegEx used on RouterOS do not have that flag (ignore case)
by rextended
Fri Sep 24, 2021 2:46 pm
Forum: Announcements
Topic: v6.49rc [testing] is released!
Replies: 37
Views: 7988

Re: v6.49rc [testing] is released!

This is _OT_ and, everytime, the topic go _OT_ because someone instead to try to understand the problem, it suggests other things that have nothing to do with it. Does putting a backup line prevent the RouterBOARD from giving that error and stop working? (Not, obviously) I do not wrote about rings, ...
by rextended
Fri Sep 24, 2021 2:18 pm
Forum: Announcements
Topic: v6.49rc [testing] is released!
Replies: 37
Views: 7988

Re: v6.49rc [testing] is released!

What about connecting to the router with console cable ? Have you tried that ?
Good question, same answer as other identical questions on similar problems:

I can't wait an hour to restore the service, driving 100Km away for test if serial cable work or not...
by rextended
Fri Sep 24, 2021 2:07 pm
Forum: General
Topic: Ip cloud behind "gray" IP
Replies: 3
Views: 449

Re: Ip cloud behind "gray" IP

For sure your customer do not know that all data pass to Hong Kong servers...
This is the "price" for use KeenDNS... alias "Keenetik Cloud Proxy"
by rextended
Fri Sep 24, 2021 1:04 pm
Forum: Beginner Basics
Topic: Super simple Q!, setting up 2x APs
Replies: 5
Views: 572

Re: Super simple Q!, setting up 2x APs

You can use the same SSID for all 4 without the minimal problem...
EXCEPT: must have same security configuration (same wpa2-psk only, aes-ccm only and wpa2 password)!!!
by rextended
Fri Sep 24, 2021 12:58 pm
Forum: Beginner Basics
Topic: cAP AC connects & disconnects continually with CAP
Replies: 12
Views: 905

Re: cAP AC connects & disconnects continually with CAP

Do not make screenshot, are completely useless for read all configuration items

The config is... the config, not one image.

OT: (and now I imagine someone in the forum reading this, out of "spite" takes a screenshot of the terminal or something similar...)
by rextended
Fri Sep 24, 2021 12:56 pm
Forum: Beginner Basics
Topic: cAP AC connects & disconnects continually with CAP
Replies: 12
Views: 905

Re: cAP AC connects & disconnects continually with CAP

Yes, my idea is: you mis/not configure something on some place on some point and on some way...

The riddle game again?

Where are the /export of the configurations of each device?
by rextended
Fri Sep 24, 2021 12:53 pm
Forum: Beginner Basics
Topic: cAP AC connects & disconnects continually with CAP
Replies: 12
Views: 905

Re: cAP AC connects & disconnects continually with CAP

... again youtube ...
by rextended
Fri Sep 24, 2021 12:47 pm
Forum: Beginner Basics
Topic: Super simple Q!, setting up 2x APs
Replies: 5
Views: 572

Re: Super simple Q!, setting up 2x APs

Seeing everything as a single connection is impossible, if the smartphone has dual band working perfectly.

You can not use the same MAC for different interfaces on same LAN or WLAN.

You everytime obtain 4 different network (Identical SSID or not)

At most you can use CAPsMAN on hEX PoE.
by rextended
Fri Sep 24, 2021 12:05 pm
Forum: Announcements
Topic: v6.49rc [testing] is released!
Replies: 37
Views: 7988

Re: v6.49rc [testing] is released!

On heavy load "30%"!!! on CCR1036-12G-4S (r2) (345 PPPoE sessions) again this error snmp,warning timeout while waiting for program 20 ONLY AND EXCLUSIVELY when monitored from The Dude 6.47.10 no other devices allowed to monitor SNMP SNMP version used: 2 (2c) On the dude the only 4 things m...
by rextended
Fri Sep 24, 2021 10:35 am
Forum: General
Topic: cap capsman factory reset
Replies: 4
Views: 442

Re: cap capsman factory reset

What if factory version is newer than 6.42.10?
If you want make this question, is implicit you already know the answer.
Why ask uselessly?
by rextended
Fri Sep 24, 2021 4:09 am
Forum: General
Topic: dst-nat support for shifted portmap ranges?
Replies: 34
Views: 5265

Re: dst-nat support for shifted portmap ranges?

Today I was configuring an ARRIS BGW210-700 at a client and stumbled accross this amazing feature. I really couldn't help but chuckle a bit at the irony of the fact that a simple SOHO router that offers the most "basic" NAT feature set, just so happens to support a simple feature that a c...
by rextended
Thu Sep 23, 2021 7:00 pm
Forum: RouterOS v7 BETA
Topic: ping routing-table=xxxxxx dont work
Replies: 3
Views: 683

Re: ping routing-table=xxxxxx dont work

Probably because the user is impressed from all reported "lost" configuration on reboot / upgrade / etc.
by rextended
Thu Sep 23, 2021 6:57 pm
Forum: Beginner Basics
Topic: Blocking incoming DNS
Replies: 4
Views: 502

Re: Blocking incoming DNS

Ahhh yesss... :lol:
by rextended
Thu Sep 23, 2021 6:51 pm
Forum: General
Topic: cap capsman factory reset
Replies: 4
Views: 442

Re: cap capsman factory reset

No phisical acces, No reset.

Hack:
Force downgrade to 6.42.10
On that version the new user database format are unreadable, you obtain admin with blank password,
then upgrade again to 6.47.10 and set new password.
by rextended
Thu Sep 23, 2021 6:49 pm
Forum: General
Topic: Outbound DDOS firewall rules
Replies: 3
Views: 436

Re: Outbound DDOS firewall rules

First of all place anti-spoofing rules: check if the firewall check that the source IP of incoming packet from your clients are your addresses and not spoofed.
by rextended
Thu Sep 23, 2021 6:39 pm
Forum: Beginner Basics
Topic: Blocking incoming DNS
Replies: 4
Views: 502

Re: Blocking incoming DNS

Your problem is caused by the fact that you have removed all the default firewall rules in your router.

Other users solve it like this: They don't remove the default firewall rules.
by rextended
Thu Sep 23, 2021 6:22 pm
Forum: Wireless Networking
Topic: Client can connect to 5GHz only after disabling 802.11ac
Replies: 8
Views: 827

Re: Client can connect to 5GHz only after disabling 802.11ac

From my point of view: 0: probably @bpwl is right and both SSID are the same 1st error, TP-Link MAC address on both wireless, probably the same: set wlan1 mac-address=EC:88:8F:xx:xx:xx set wlan2 mac-address=EC:88:8F:xx:xx:xx 2nd: enabled "b" set wlan1 band=2ghz-b/g/n 3rd: Random Ce/eC (XX)...
by rextended
Thu Sep 23, 2021 12:09 am
Forum: General
Topic: LoRa question
Replies: 4
Views: 522

Re: LoRa question

Is better you ask those question on Latvia working hours, when MikroTik staff is present, or ask directly to sales@mikrotik.com
by rextended
Thu Sep 23, 2021 12:07 am
Forum: General
Topic: LoRa question
Replies: 4
Views: 522

Re: LoRa question

I hope, I'm one of that buyers...
by rextended
Wed Sep 22, 2021 11:51 pm
Forum: General
Topic: Problems With 5060 Sip Wildixin
Replies: 3
Views: 507

Re: Problems With 5060 Sip Wildixin

@sindy , is like the other topic.. 1) Missing dst-address=<WAN_PUBLIC_IP> on all rules 2) I work with VoIP from 2010 and everytime SIP ALG IS ON, without using stun and proxy, never a problem. /ip firewall service-port set sip disabled=no ports=5060,5061 sip-direct-media=yes sip-timeout=1h 3) Some ...
by rextended
Wed Sep 22, 2021 11:40 pm
Forum: General
Topic: dstnat in conflict with gre over IPsec tunnel [SOLVED]
Replies: 23
Views: 1124

Re: dstnat in conflict with gre over IPsec tunnel [SOLVED]

@sindy, well done, nothing to add :)


@anav
when to use EoIP Ipsec (GRe) vs when to use wireguard??
Actually I do not use v7 :roll:
by rextended
Wed Sep 22, 2021 10:41 pm
Forum: RouterBOARD hardware
Topic: change from cisco to mikrotik
Replies: 11
Views: 1325

Re: change from cisco to mikrotik

i cut off the power from cisco during update process and now it’s not working anymore this way

Have you tried with NetInstall? :lol:


Sorry... :roll:
by rextended
Wed Sep 22, 2021 10:34 pm
Forum: General
Topic: dstnat in conflict with gre over IPsec tunnel [SOLVED]
Replies: 23
Views: 1124

Re: dstnat in conflict with gre over IPsec tunnel [SOLVED]

For VPN between mikrotik device usually I have 1 public IP on both side and I use EoIP with IPsec (GRE) The traffic is already encrypted before entering the MikroTik RouterBOARD. When I can not do directly a link, for example because I do not control the 2nd Router, I'm forced to use the VPN mode pr...
by rextended
Wed Sep 22, 2021 10:25 pm
Forum: General
Topic: dstnat in conflict with gre over IPsec tunnel [SOLVED]
Replies: 23
Views: 1124

Re: dstnat in conflict with gre over IPsec tunnel [SOLVED]

The right question is: why not?
You simply say with that rule "hijacks all traffic directed to any destination, to port 80 and 443, to another IP"...

directed to any destination = not specify dst-nation :lol:
by rextended
Wed Sep 22, 2021 10:18 pm
Forum: General
Topic: dstnat in conflict with gre over IPsec tunnel [SOLVED]
Replies: 23
Views: 1124

Re: dstnat in conflict with gre over IPsec tunnel [SOLVED]

@sindy , not really, yours is better because I didn't notice the detail on the in-interface... @wolfram paste this on terminal (replace the 10.7.125.134 with the correct ether1 IP!!!) and let us know the results, please... /ip firewall nat set [find where comment~"webserver"] dst-address=...
by rextended
Wed Sep 22, 2021 10:15 pm
Forum: General
Topic: dstnat in conflict with gre over IPsec tunnel [SOLVED]
Replies: 23
Views: 1124

Re: dstnat in conflict with gre over IPsec tunnel [SOLVED]

Something like this?
# removed in-interface=ether1 added dst-address=10.7.125.134
add action=dst-nat chain=dstnat dst-port=80 protocol=tcp to-addresses=192.168.121.40 to-ports=80 dst-address=10.7.125.134
by rextended
Wed Sep 22, 2021 10:05 pm
Forum: General
Topic: dstnat in conflict with gre over IPsec tunnel [SOLVED]
Replies: 23
Views: 1124

Re: dstnat in conflict with gre over IPsec tunnel [SOLVED]

I I swear on my honor that what I am about to say is not a joke, nor sarcasm, nor a provocation, but only what I actually think without double entenders, maybe misspelled because I am not a native English speaker. Your configuration per-se is not complicated, but for follow all reasonong cause me a ...
by rextended
Wed Sep 22, 2021 7:47 pm
Forum: General
Topic: dstnat in conflict with gre over IPsec tunnel [SOLVED]
Replies: 23
Views: 1124

Re: dstnat in conflict with gre over IPsec tunnel [SOLVED]

What magic do I need to aply to fix this?
Buy for yourself a Palantír,
you don't want us to use ours?

I can provide /export, but I don´t think its needed
I can provide help, but I do not think it is wanted
by rextended
Wed Sep 22, 2021 7:44 pm
Forum: General
Topic: dstnat in conflict with gre over IPsec tunnel [SOLVED]
Replies: 23
Views: 1124

Re: dstnat in conflict with gre over IPsec tunnel [SOLVED]

I can provide /export help, but I don´t think its needed wanted
by rextended
Wed Sep 22, 2021 6:28 pm
Forum: RouterOS v7 BETA
Topic: v7.1rc4 [development] is released!
Replies: 240
Views: 32977

Re: v7.1rc4 [development] is released!

dst-len in 24-24 can be simply written as dst-len == 24

Please ignore @vaka wrong example, consider this:

@eworm
dst-len in 20-22
by rextended
Wed Sep 22, 2021 6:26 pm
Forum: RouterOS v7 BETA
Topic: v7.1rc4 [development] is released!
Replies: 240
Views: 32977

Re: v7.1rc4 [development] is released!

Please at this point put "all" not under or lower part [num prop readable] dst-len [prfx prop readable] dst [num prop readable] in {int..int}|{int-int} ==|!=|<=|>=|<|> {int} [num prop readable] [prfx prop readable] !=|==|in {address 46/}
by rextended
Wed Sep 22, 2021 6:22 pm
Forum: RouterOS v7 BETA
Topic: v7.1rc4 [development] is released!
Replies: 240
Views: 32977

Re: v7.1rc4 [development] is released!

Your example is covered by prefix property. Have another look at the documentation, my example is covered by num property.
what I copy & paste from help is the fact that the "in" can be applied only to prefix...
by rextended
Wed Sep 22, 2021 6:18 pm
Forum: General
Topic: Winbox2 and Winbox3 Differences pertinent to Windows10
Replies: 7
Views: 1128

Re: Winbox2 and Winbox3 Differences pertinent to Windows10

I have Windows 10 and (ignoring that version 2 is more than outdated) on my pc WinBox 2.2.18 work flawlessly on both IP or MAC mode...
by rextended
Wed Sep 22, 2021 6:02 pm
Forum: General
Topic: Has the DoH memory leak been fixed?
Replies: 4
Views: 433

Re: Has the DoH memory leak been fixed?

Synthesys: 6.47/48/49 have been (temporarly?) abandoned in favor of increasing the "rc" number of 7.1
by rextended
Wed Sep 22, 2021 5:48 pm
Forum: RouterOS v7 BETA
Topic: v7.1rc4 [development] is released!
Replies: 240
Views: 32977

Re: v7.1rc4 [development] is released!

Because "in" work for check if an IP are inside one range, not for check if a number is inside an interval... [prfx prop readable] !=|==| in {address 46/} like 1.1.1.1/32 in 1.0.0.0/8 probably this is the right way /routing filter rule add chain=ospf_out disabled=yes \ rule="if ( (dst...
by rextended
Wed Sep 22, 2021 5:44 pm
Forum: Wireless Networking
Topic: BaseBox 2 vs OmniTik 5
Replies: 4
Views: 494

Re: BaseBox 2 vs OmniTik 5

1) Like TV, fridge, etc. if the tenant broken something, then he repay that, and MikroTik device is not resettable like almost all other vendors... 2) Yes, but if one apartment are not serviced, the other 2 still active, just if omnitik 5 or your ISP router is broken stop all 3 apartments, and if wo...
by rextended
Wed Sep 22, 2021 5:36 pm
Forum: General
Topic: Has the DoH memory leak been fixed?
Replies: 4
Views: 433

Re: Has the DoH memory leak been fixed?

Try yourself and report on forum.
by rextended
Wed Sep 22, 2021 2:25 pm
Forum: RouterBOARD hardware
Topic: NetPower 16p.... Rubbish PoE design. Workarounds?
Replies: 9
Views: 1326

Re: NetPower 16p.... Rubbish PoE design. Workarounds?

70% of what @olivier2831 have wroted is logically uncomphrensible...
by rextended
Wed Sep 22, 2021 1:47 pm
Forum: Wireless Networking
Topic: BaseBox 2 vs OmniTik 5
Replies: 4
Views: 494

Re: BaseBox 2 vs OmniTik 5

Use external omni 5 and 3 hapac^3, one for each apartment, using the 3rd 5GHz to connect to the omnitik 5. Done.
by rextended
Wed Sep 22, 2021 1:42 pm
Forum: RouterBOARD hardware
Topic: NetPower 16p.... Rubbish PoE design. Workarounds?
Replies: 9
Views: 1326

Re: NetPower 16p.... Rubbish PoE design. Workarounds?

Simply read specification on the product page???
https://mikrotik.com/product/netpower_16p

4th phrase:
Device itself does not have an onboard voltage converter. You need 24V PSU to have 24V PoE out and/or 48V PSU to have 48V PoE out (IEEE 802.3 at/af).
by rextended
Wed Sep 22, 2021 1:38 pm
Forum: Announcements
Topic: WinBox v3.31 released!
Replies: 40
Views: 12517

Re: WinBox v3.31 released!

Stop quoting on useless way.
Why you not try yourself... Inverted already on 3.30
by rextended
Wed Sep 22, 2021 1:29 am
Forum: General
Topic: unknown RouterBOOT option on RB4011
Replies: 8
Views: 557

Re: unknown RouterBOOT option on RB4011

But going back to "ethernet", only the latest RouterBOOT 6.45.x and up on selected device models can have the possibility to select ethernet,
instead RouterOS really do not count, just must have the internal support to set that option.
by rextended
Wed Sep 22, 2021 1:25 am
Forum: General
Topic: unknown RouterBOOT option on RB4011
Replies: 8
Views: 557

Re: unknown RouterBOOT option on RB4011

HIding the MAC address it's useless, it's silly, just a machine directly connected to the router "might" be a problem, but with serial number can be deducible the address of the cloud lowercaseserialnumber.sn.mynetname.net and if the routeros use the cloud, everyone in the world can have y...
by rextended
Wed Sep 22, 2021 1:22 am
Forum: General
Topic: unknown RouterBOOT option on RB4011
Replies: 8
Views: 557

Re: unknown RouterBOOT option on RB4011

edited above picture...off topic but why is it necessary to hide the serial?
You do not read completly my previous post????
by rextended
Wed Sep 22, 2021 1:17 am
Forum: General
Topic: unknown RouterBOOT option on RB4011
Replies: 8
Views: 557

Re: unknown RouterBOOT option on RB4011

Remove the picture with serial number...
I hope you do not use the cloud serialnumber.sn.mynetname.net

Once the device is "remotely" booted, you can change without problem also the BIOS settings...
by rextended
Wed Sep 22, 2021 1:05 am
Forum: Wireless Networking
Topic: Client can connect to 5GHz only after disabling 802.11ac
Replies: 8
Views: 827

Re: Client can connect to 5GHz only after disabling 802.11ac

Stop writing novels and post the config.
/export hide-sensitive file=hapac3
censore sensible part inside (true public IP, email, etc.) before put on forum.
do not delete anything, only censore when needed.
by rextended
Wed Sep 22, 2021 1:03 am
Forum: General
Topic: unknown RouterBOOT option on RB4011
Replies: 8
Views: 557

Re: unknown RouterBOOT option on RB4011

some users ask this feature for remote netinstall, if the normal nand boot fail (try continuosly instead "only once")
by rextended
Tue Sep 21, 2021 10:13 pm
Forum: Virtualization
Topic: CHR Total Memory
Replies: 4
Views: 1133

Re: CHR Total Memory

On download page are present 4 version of CHR OVA... Is nice than the OP have not specified what version have used for test... If you want 128MB of virtual memory, set the total memory to 132MB On VMware you can set the memory with 4MB step, but on that MikroTik Linux Kernel (3.x) the memory must be...
by rextended
Tue Sep 21, 2021 10:04 pm
Forum: General
Topic: Tiktok Live Problems
Replies: 24
Views: 1656

Re: Tiktok Live Problems

This reply, and also prevous post of this user... SPAM BOT...
by rextended
Tue Sep 21, 2021 9:59 pm
Forum: General
Topic: someone hack my routrs - can someone help?
Replies: 16
Views: 3626

Re: someone hack my routrs - can someone help?

The Italian Mafia... Pay who can make disaster for do not make disaster....
by rextended
Tue Sep 21, 2021 9:16 pm
Forum: General
Topic: Anonymous user tried to log in
Replies: 7
Views: 763

Re: Anonymous user tried to log in

It is a product that is sold only in Yemen,
also the "QuestionPro for Dummies" guide, but he hasn't read it yet ...

Image
by rextended
Tue Sep 21, 2021 7:26 pm
Forum: General
Topic: Route date/timestamps
Replies: 1
Views: 276

Re: Route date/timestamps

you can not have more detail than
/ip route print detail terse
by rextended
Tue Sep 21, 2021 7:15 pm
Forum: Scripting
Topic: Remove Nat Sessions on a specific event
Replies: 18
Views: 2355

Re: Remove Nat Sessions on a specific event



...NO COMMENT...
Like you have never done that... ^^' :D
Oh... how long, last time you were writing and driving at the same time... Did you just get out of the hospital? :lol: :lol: :lol:
by rextended
Tue Sep 21, 2021 6:36 pm
Forum: General
Topic: How to determine the real (actual) MTU of the L2TP+IPsec tunnel?
Replies: 12
Views: 656

Re: How to determine the real (actual) MTU of the L2TP+IPsec tunnel?

From @ZeroByte post_id 542346 This is because the packet is below the inner MTU, thus it is neither discarded nor dropped. The resulting encrypted tunnel packet may exceed the physical interface's MTU, and since the IPSec session is technically not the inner traffic, it is eligible for fragmentation...
by rextended
Tue Sep 21, 2021 6:35 pm
Forum: General
Topic: How to determine the real (actual) MTU of the L2TP+IPsec tunnel?
Replies: 12
Views: 656

Re: How to determine the real (actual) MTU of the L2TP+IPsec tunnel?

rextender
Noob, don't mess up my threads with your bullshit. First, learn how mturoute works.
really rude and with little memory, you don't even remember that you already asked
by rextended
Tue Sep 21, 2021 4:28 pm
Forum: General
Topic: Magic troubles button "Reset all counters" from MikroTik [SOLVED]
Replies: 8
Views: 877

Re: Magic troubles button "Reset all counters" from MikroTik [SOLVED]

home: power outages = UPS, no more worries.
Business: power outages = better UPS no more worries.
Business: Longer term power outages = better UPS + generator
Long term Business: avoid to have all on unique place, and have backup data lines and servers... :lol:
by rextended
Tue Sep 21, 2021 4:24 pm
Forum: General
Topic: Magic troubles button "Reset all counters" from MikroTik [SOLVED]
Replies: 8
Views: 877

Re: Magic troubles button "Reset all counters" from MikroTik [SOLVED]

User Manager problem is database corruption all the time,
From 2007 till now, no one user-manager on production corrupted (and all under UPS)...
Ah... and if you do not know, you can backup, on other machine, the database...
by rextended
Tue Sep 21, 2021 2:43 pm
Forum: General
Topic: How to determine the real (actual) MTU of the L2TP+IPsec tunnel?
Replies: 12
Views: 656

Re: How to determine the real (actual) MTU of the L2TP+IPsec tunnel?

L2TP add 40Bytes to the standard 1500 and MTU must be reduced to 1460 to avoid fragmentation, but adding also IPsec add more Bytes to the packet, and depend by what encryption method are used, but for be sure, 60Bytes and the final MTU of 1400 can be a reasonable value to set. But obviously anything...
by rextended
Tue Sep 21, 2021 2:29 pm
Forum: General
Topic: How to determine the real (actual) MTU of the L2TP+IPsec tunnel?
Replies: 12
Views: 656

Re: How to determine the real (actual) MTU of the L2TP+IPsec tunnel?

Another valid program I use on Windows is this, work for both IPv4 and IPv6 addresses
https://www.iea-software.com/products/mtupath/
by rextended
Tue Sep 21, 2021 2:24 pm
Forum: General
Topic: How to determine the real (actual) MTU of the L2TP+IPsec tunnel?
Replies: 12
Views: 656

Re: How to determine the real (actual) MTU of the L2TP+IPsec tunnel?

rextender
Noob, don't mess up my threads with your bullshit. First, learn how mturoute works.
From the question you ask, I think you are the first who does not know how it works,
and then you are a great rude, no doubt, just the vulgar answers that express how much you do not understand anything.
by rextended
Tue Sep 21, 2021 2:12 pm
Forum: General
Topic: How to determine the real (actual) MTU of the L2TP+IPsec tunnel?
Replies: 12
Views: 656

Re: How to determine the real (actual) MTU of the L2TP+IPsec tunnel?

just use ping with the non-fragment flag set and the size 1500, then decrease the size by one until the ping passes
by rextended
Tue Sep 21, 2021 1:58 pm
Forum: Scripting
Topic: The Routerboards Test Results
Replies: 2
Views: 412

Re: The Routerboards Test Results

Why you post this on scripting section?

Already exist one topic about how the routerboard are tested, search it.
by rextended
Tue Sep 21, 2021 10:37 am
Forum: General
Topic: Mikrotik Rack-mounted Devices Visio Stencils
Replies: 47
Views: 48756

Re: Mikrotik Rack-mounted Devices Visio Stencils

The user has disappeared and the github isn't updated from 2 years...
I hope he is alive...
by rextended
Tue Sep 21, 2021 10:33 am
Forum: RouterOS v7 BETA
Topic: Feature Request: Logging Action to run a script
Replies: 2
Views: 555

Re: Feature Request: Logging Action to run a script

ahh I love when they suggest ways to block the router even more in the event of a DDoS attack... and even if it is misconfigured...
by rextended
Tue Sep 21, 2021 10:27 am
Forum: General
Topic: resetall counters [SOLVED]
Replies: 1
Views: 326

Re: resetall counters [SOLVED]

You have the same problems of other uninstructed managers: You do not use a necessary RADIUS server, instead you use the poor hotspot / users database, that are used only when 2-3 users are pressent. It will be a good step for administrators who control the hotspot network to use, for example, the u...
by rextended
Tue Sep 21, 2021 10:23 am
Forum: General
Topic: Magic troubles button "Reset all counters" from MikroTik [SOLVED]
Replies: 8
Views: 877

Re: Magic troubles button "Reset all counters" from MikroTik [SOLVED]

The problem is not the button, (or the position of the button) the problem is the use:
use user-manager or other RADIUS service, and this can't happen.

Use the hotspot / users only if the users are really a few...
by rextended
Tue Sep 21, 2021 10:19 am
Forum: General
Topic: Problem with delivery / looking for alternative [SOLVED]
Replies: 9
Views: 679

Re: Problem with delivery / looking for alternative [SOLVED]

My advice: do not use only "one" PoE switch, but distribute the load over several points, and not in the same "room".
by rextended
Mon Sep 20, 2021 8:50 pm
Forum: Scripting
Topic: Fetch json
Replies: 7
Views: 783

Re: Fetch json

I know that the command in terminal should produce output. You do not have understand, do not use output=something for now... The Router what IP have? Is in the same lan? have more than one ip? get the ip from dhcp server on the DSL router or have fixed IP? the DSL router reply only to device that ...
by rextended
Mon Sep 20, 2021 8:38 pm
Forum: Scripting
Topic: Packet loss Script to GRE Tunnels
Replies: 1
Views: 401

Re: Packet loss Script to GRE Tunnels

Not tested, only fixed syntax and logic errors # VARIABLES :local interface <interface-name> :local interface2 <interface2-name> :local totalpings 25 :local ipdest [/interface pptp-client get $interface connect-to] # IF GRE TUNNEL 2 IS WORKING - RUN SCRIPT :if ([/interface pptp-client get $interface...
by rextended
Mon Sep 20, 2021 8:27 pm
Forum: Scripting
Topic: Fetch json
Replies: 7
Views: 783

Re: Fetch json

But you must be authenticated on browser to read that file??? Is strange the router leak something without access... and try the command without "output...." etc. Simply this: /tool fetch url="http://192.168.0.1/data/Status.json" When this work on routeros you can proceed with th...
by rextended
Mon Sep 20, 2021 6:38 pm
Forum: RouterOS v7 BETA
Topic: v7.1rc4 [development] is released!
Replies: 240
Views: 32977

Re: v7.1rc4 [development] is released!

export not work

routing-mark=*4000 instead of mytable
/routing table
add disabled=no name=mytable

/ip firewall nat
add action=log chain=srcnat routing-mark=*4000
by rextended
Mon Sep 20, 2021 6:28 pm
Forum: Scripting
Topic: 7.1rc3, set $variable or set variable in system/script
Replies: 7
Views: 632

Re: 7.1rc3, set $variable or set variable in system/script

No problem, but in my post I also put in the explanations :-P About @eworm soluction: is pretty the same: I check if is it a number, because MUST be a number, if is it I add one, else I set to 1 the variable instead @eworm check if is "nothing", and if is it set to 1 the variable, else add...
by rextended
Mon Sep 20, 2021 6:19 pm
Forum: Scripting
Topic: 7.1rc3, set $variable or set variable in system/script
Replies: 7
Views: 632

Re: 7.1rc3, set $variable or set variable in system/script

Ok, little "tutorial" 1) please proper indent, and use the : and / everityme! :if ([:len [/system/script/environment/find where name=WAN1DownCounter]] = 0) do={ :global WAN1DownCounter 1 } else={ :set WAN1DownCounter ([/system/script/environment/get WAN1DownCounter value] + 1) } 2) the rig...
by rextended
Mon Sep 20, 2021 6:05 pm
Forum: Scripting
Topic: 7.1rc3, set $variable or set variable in system/script
Replies: 7
Views: 632

Re: 7.1rc3, set $variable or set variable in system/script

@rextended Please help :)
Ohhh... call me on topic where already I have wroted :)

NOw I read and reply to your post
by rextended
Mon Sep 20, 2021 5:49 pm
Forum: Scripting
Topic: Changed scripting coding between V6 and v7
Replies: 2
Views: 585

Re: Changed scripting coding between V6 and v7

What changes between 6.47.10 and 7.1rc4: On 6.x we can define "routing-mark" at any point where it can be set, as well as NAT. On 7.1rc4 first of all the routing table must be defined before it can be used on other sections, such as NAT. Synthesis # 6.47.10 :put [:len [/ip firewall nat fin...
by rextended
Mon Sep 20, 2021 1:36 pm
Forum: General
Topic: HELP! Mikrotik router is accessible from outside
Replies: 4
Views: 398

Re: HELP! Mikrotik router is accessible from outside

You have tested the public IP inside your LAN, or you have used another connection to test it?
by rextended
Mon Sep 20, 2021 10:28 am
Forum: Scripting
Topic: Script fails
Replies: 2
Views: 548

Re: Script fails

If SSEbb interface exist, and have at least one IP: { :local password "thesecretkey1234" :local subdomain "@" :local domainn "mydomain.com" /ip address :local arrayofID [find where interface="SSEbb"] :local firstID [:pick $arrayofID 0] :local fulladdr [get $fi...
by rextended
Mon Sep 20, 2021 10:11 am
Forum: Wireless Networking
Topic: Band steering - "priority" to 5Ghz
Replies: 10
Views: 873

Re: Band steering - "priority" to 5Ghz

If you have already read all other topic, why open anoter one?

Except what you already have read, there is not a solution (for now, until mikrotik does something)
by rextended
Sat Sep 18, 2021 4:07 pm
Forum: General
Topic: Randomly resets and can't open some webpages
Replies: 6
Views: 512

Re: Randomly resets and can't open some webpages

/ip pool
add name=dhcp ranges=192.168.0.12-192.168.0.254
add name=vpn ranges=192.168.89.2-192.168.89.255
by rextended
Sat Sep 18, 2021 2:20 pm
Forum: Announcements
Topic: WinBox v3.31 released!
Replies: 40
Views: 12517

Re: WinBox v3.31 released!

after updating winbox the log does not work on one router
rb750gr3 ros 6.48.4
You have applied to the user profile the default skin from webfig...
by rextended
Sat Sep 18, 2021 4:00 am
Forum: RouterBOARD hardware
Topic: Another Hardware Idea.. [SOLVED]
Replies: 6
Views: 948

Re: Another Hardware Idea.. [SOLVED]

Is possible to install RouterOS x86_64 inside,
netinstall MkroSD with windows / linux and put inside the bay.

Probably also CHR because "probably" support also ESXi or similar...


I hope one day update that with also 5GHz,
Image
by rextended
Sat Sep 18, 2021 2:36 am
Forum: Scripting
Topic: How to get SNMP interface index in a script.
Replies: 6
Views: 2198

Re: How to get SNMP interface index in a script.

The script used as-is do error on ":local intName [get $i name]" because "get from where"? Rewrited Script: /interface :foreach item in=[find] do={ :local intName [get $item name] :local intOID ([print oid as-value where name=$intName]->0->"name") :local intIdx [:pick $...
by rextended
Fri Sep 17, 2021 3:50 pm
Forum: Beginner Basics
Topic: Real DMZ on second IP range
Replies: 15
Views: 1101

Re: Real DMZ on second IP range

Someone needs a script for guessing???
:lol: :lol: :lol:
by rextended
Fri Sep 17, 2021 3:35 pm
Forum: General
Topic: Route ALL NTP traffic over a specific WAN [SOLVED]
Replies: 30
Views: 1410

Re: Route ALL NTP traffic over a specific WAN [SOLVED]

Putting all togheter: Paste this on terminal ( after set the right gateway address ) /ip route add distance=1 gateway=<put-lte-gateway-IP-address-here> routing-mark=ntp /ip firewall raw add action=add-dst-to-address-list address-list=ntp_pool address-list-timeout=none-dynamic chain=prerouting dst-ad...
by rextended
Fri Sep 17, 2021 3:29 pm
Forum: General
Topic: Scheduler stops executing script
Replies: 22
Views: 1446

Re: Scheduler stops executing script

No problem
by rextended
Fri Sep 17, 2021 3:24 pm
Forum: General
Topic: Scheduler stops executing script
Replies: 22
Views: 1446

Re: Scheduler stops executing script

fetch can cause a infinite DELAY, not infinite loop, all is freezed, waiting fetch to finish, is not a cycle than can be autochecked if executed too much time and autoexit... Try my script, if fail we add asyncronous fetch execution Something like that, you can see my Snippets, on my signature the l...
by rextended
Fri Sep 17, 2021 3:19 pm
Forum: General
Topic: Route ALL NTP traffic over a specific WAN [SOLVED]
Replies: 30
Views: 1410

Re: Route ALL NTP traffic over a specific WAN [SOLVED]

for obtain the list of all IPs used as NTP server

(NTP is one of the protocol than for be full compliant want also the src port 123)

added automation method
viewtopic.php?f=2&t=178602&p=880497#p880497
by rextended
Fri Sep 17, 2021 2:55 pm
Forum: General
Topic: Scheduler stops executing script
Replies: 22
Views: 1446

Re: Scheduler stops executing script

Rewrited script, without change logic :log info "Start Sending Report" /ip firewall address-list :foreach tmpAddress in=[find where list="HONEYPOT"] do={ :local attackip [get $tmpAddress address] :log info "BEGIN $attackip Report to AbuseIPDB" :do { /tool fetch keep-res...
by rextended
Fri Sep 17, 2021 2:44 pm
Forum: General
Topic: Scheduler stops executing script
Replies: 22
Views: 1446

Re: Scheduler stops executing script

Sometime "fetch" freeze for answer from remote site and lock the script (and the scheduler) on-error can not catch indefinite waiting.... also ":set $attackip value=" where is defined "attackip"? and :set must be used without the $ only 6 seconds between fetch notificat...
by rextended
Fri Sep 17, 2021 1:13 pm
Forum: General
Topic: Scheduler stops executing script
Replies: 22
Views: 1446

Re: Scheduler stops executing script

@SiB, next time the scheduler start must check if previous is finished, if not warn user on some way. pseudocode scheduler set global varialble randomnameJhdsfg to "endscript" if the variable do not already exist check global variable randomnameJhdsfg if it is set to "endscript",...
by rextended
Fri Sep 17, 2021 12:55 pm
Forum: Announcements
Topic: WinBox v3.31 released!
Replies: 40
Views: 12517

Re: WinBox v3.31 released!

Already replied and is "Check For Updates" not upgrade
by rextended
Fri Sep 17, 2021 12:04 pm
Forum: Scripting
Topic: Script Error
Replies: 23
Views: 1410

Re: Script Error

Di niente :lol:
by rextended
Fri Sep 17, 2021 11:55 am
Forum: General
Topic: Scheduler stops executing script
Replies: 22
Views: 1446

Re: Scheduler stops executing script

@Stril I asked you to post the script here for further analysis,
but your assumption that the executed script is perfect and does not block the scheduler, makes me make this decision:

End of help from my side.
by rextended
Fri Sep 17, 2021 11:50 am
Forum: Scripting
Topic: ✂ Rextended Fragments of Snippets
Replies: 4
Views: 2333

Re: ✂ Rextended Fragments of Snippets

DHCPv6 option 39 fqdn2encdns FQDN to DNS encoding DNS encoder

viewtopic.php?f=1&t=178607&p=880429#p880424
by rextended
Fri Sep 17, 2021 11:48 am
Forum: RouterOS v7 BETA
Topic: Option39 DHCPv6 Client [SOLVED]
Replies: 8
Views: 980

Re: Option39 DHCPv6 Client [SOLVED]

Bugfix:

Wrong
0x010x03'www'0x12'thisismydomainname'0x03'net'0x00

Correct:
0x01''0x03'www'0x12'thisismydomainname'0x03'net'0x00

Script fixed
by rextended
Fri Sep 17, 2021 11:42 am
Forum: RouterOS v7 BETA
Topic: Option39 DHCPv6 Client [SOLVED]
Replies: 8
Views: 980

Re: Option39 DHCPv6 Client [SOLVED]

Yes, I hope you like my script....
by rextended
Fri Sep 17, 2021 11:32 am
Forum: RouterOS v7 BETA
Topic: Option39 DHCPv6 Client [SOLVED]
Replies: 8
Views: 980

Re: Option39 DHCPv6 Client [SOLVED]

search tag # rextended DHCPv6 option 39 fqdn2encdns FQDN to DNS encoding DNS encoder I just finished to write this to directly encode the string: :global tmpChar "\00" :global hexChars "0123456789ABCDEF" :global charsString "" :for x from=0 to=15 step=1 do={ :for y from...
by rextended
Fri Sep 17, 2021 11:30 am
Forum: RouterOS v7 BETA
Topic: Option39 DHCPv6 Client [SOLVED]
Replies: 8
Views: 980

Re: Option39 DHCPv6 Client [SOLVED]

9 or 15, is limited, this not change the point
The max length for label and domain is 63 characters
by rextended
Fri Sep 17, 2021 10:41 am
Forum: General
Topic: Scheduler stops executing script
Replies: 22
Views: 1446

Re: Scheduler stops executing script

This is not diagnosticable, the scheduler is ok,
you must also post the script you try to run...
by rextended
Fri Sep 17, 2021 10:14 am
Forum: RouterOS v7 BETA
Topic: Option39 DHCPv6 Client [SOLVED]
Replies: 8
Views: 980

Re: Option39 DHCPv6 Client [SOLVED]

The script not work if the fqdn have one part with more than 9 characters, like www.thisismydomain.com because the length on encoded dns when is bigger than 9 must be converted to hexadecimal, not "0" + ":len" as string Why not simply: /ipv6 dhcp-client option add code=39 name=op...
by rextended
Fri Sep 17, 2021 2:08 am
Forum: Scripting
Topic: Return IP Octet Function
Replies: 14
Views: 5792

Re: Return IP Octet Function

search tag # rextended ip2array ip split octet Uhm... I forgot that script.... Actualized version, always return one array with: 0: IP passed as parameter 1: 1st octet 2: 2nd octet 3: 3rd octet 4: 4th octet :global ip2array do={ :local ip [:toip $1] :local array [:toarray ""] :if ([:typeof...
by rextended
Thu Sep 16, 2021 11:40 pm
Forum: General
Topic: Route ALL NTP traffic over a specific WAN [SOLVED]
Replies: 30
Views: 1410

Re: Route ALL NTP traffic over a specific WAN [SOLVED]

Ok, now we waiting @ishanjain if this solution is good for him...
by rextended
Thu Sep 16, 2021 11:35 pm
Forum: Announcements
Topic: WinBox v3.31 released!
Replies: 40
Views: 12517

Re: WinBox v3.31 released!

Without open any device from "Tool / Check For Updates" ?
by rextended
Thu Sep 16, 2021 11:25 pm
Forum: General
Topic: Route ALL NTP traffic over a specific WAN [SOLVED]
Replies: 30
Views: 1410

Re: Route ALL NTP traffic over a specific WAN [SOLVED]

Is possible to find updated list for facebook, twitter, etc here: Facebook and Instagram, 3 ASN https://bgp.he.net/AS32934#_prefixes https://bgp.he.net/AS54115#_prefixes https://bgp.he.net/AS63293#_prefixes Blocking Facebook also block part of WhatsApp, but WhatsApp have also his own pool. WhatsApp ...
by rextended
Thu Sep 16, 2021 11:20 pm
Forum: General
Topic: Route ALL NTP traffic over a specific WAN [SOLVED]
Replies: 30
Views: 1410

Re: Route ALL NTP traffic over a specific WAN [SOLVED]

a mere route in routing table main is sufficient
Not...
Sorry, but my rules are structured on that way for change all gateway with one click, just on one position,
instead of open one-by-one single route to change each gateway for each IP...
by rextended
Thu Sep 16, 2021 11:14 pm
Forum: General
Topic: Route ALL NTP traffic over a specific WAN [SOLVED]
Replies: 30
Views: 1410

Re: Route ALL NTP traffic over a specific WAN [SOLVED]

Are not required any rules or setting. simply: FACEBOOK /ip route rule add action=drop dst-address=102.132.112.0/24 add action=drop dst-address=102.132.113.0/24 add action=drop dst-address=102.132.114.0/24 add action=drop dst-address=102.132.115.0/24 add action=drop dst-address=102.132.116.0/24 add ...
by rextended
Thu Sep 16, 2021 11:05 pm
Forum: General
Topic: Route ALL NTP traffic over a specific WAN [SOLVED]
Replies: 30
Views: 1410

Re: Route ALL NTP traffic over a specific WAN [SOLVED]

like this:
/ip route rule
add action=drop dst-address=157.240.210.0/24


Until the service do not use CDN that have same IP for multile services, block ASN IPs drop all.
by rextended
Thu Sep 16, 2021 11:02 pm
Forum: General
Topic: Route ALL NTP traffic over a specific WAN [SOLVED]
Replies: 30
Views: 1410

Re: Route ALL NTP traffic over a specific WAN [SOLVED]

I use at my home the /ip route rule to drop all ASN like Facebook / WhatsApp, Twitter, Instagram and some Google parts like Doubleclick and googleadservices.com
(but do not say that to @msatter :lol: )
by rextended
Thu Sep 16, 2021 10:55 pm
Forum: General
Topic: Route ALL NTP traffic over a specific WAN [SOLVED]
Replies: 30
Views: 1410

Re: Route ALL NTP traffic over a specific WAN [SOLVED]

also him have freetime :lol:
by rextended
Thu Sep 16, 2021 10:50 pm
Forum: General
Topic: Route ALL NTP traffic over a specific WAN [SOLVED]
Replies: 30
Views: 1410

Re: Route ALL NTP traffic over a specific WAN [SOLVED]

The rule I wrote working also for RouterOS itself (if IP set on NTP client are put obviously on route rule dst-address) without change nothing. If the output is generated from RouterOS, still go at the end on routing. My rule are easy because nothing other count. Simply I want that IP reachable by a...
by rextended
Thu Sep 16, 2021 10:39 pm
Forum: General
Topic: Route ALL NTP traffic over a specific WAN [SOLVED]
Replies: 30
Views: 1410

Re: Route ALL NTP traffic over a specific WAN [SOLVED]

The source IP that need the NTP info do not count, if the ISP on WAN1 block NTP,
the NTP servers defined on list (that are the dst-nation of the request started from PCs)
are forced to be reachable from lte-vlan gateway
  • 1
  • 2
  • 3
  • 4
  • 5
  • 21