Community discussions

Search found 1351 matches

  • 1
  • 2
  • 3
  • 4
  • 5
  • 28
by strods
Fri Nov 16, 2018 11:16 am
Forum: General
Topic: TWO CCRs FULLY UPGRADED AND STILL EXPLOITED (ROOTED) [SOLVED]
Replies: 16
Views: 729

Re: TWO CCRs FULLY UPGRADED AND STILL EXPLOITED (ROOTED) [SOLVED]

We have received your complaint and replied to your message. Your router is not hacked. Your router does not have firewall protection. Not only 64312 port is open but also many others. Seems that you have tried to protect your router, however, firewall rule that you added is configured on forward ch...
by strods
Thu Nov 15, 2018 9:48 am
Forum: General
Topic: Hotspot Problem with Apple IoS 11.3.1, is someone having the same problem?
Replies: 8
Views: 1341

Re: Hotspot Problem with Apple IoS 11.3.1, is someone having the same problem?

Due to reports from our clients, we have found out that iOS devices can not open Hotspot pop-up if Hotspot server has domain name which includes "local" in it. This can happen only if Hotspot administrator by himself has configured such name on server.
by strods
Wed Nov 14, 2018 9:13 am
Forum: RouterBOARD hardware
Topic: hAP AC2 availability
Replies: 18
Views: 1505

Re: hAP AC2 availability

Do not worry. Due to a popular demand we have adjusted our production and hAP ac^2 will be available again very soon.
by strods
Mon Nov 12, 2018 1:46 pm
Forum: General
Topic: Hotspot Problem with Apple IoS 11.3.1, is someone having the same problem?
Replies: 8
Views: 1341

Re: Hotspot Problem with Apple IoS 11.3.1, is someone having the same problem?

Underlying implementation of redirect to Hotspot login page is very simple. Most of the commonly used devices (mobile phones, tablets, laptops, etc.) try to open predefined HTTP site in background after you have connected to network. If site can be opened, then nothing happens. If connection is redi...
by strods
Tue Oct 23, 2018 9:31 pm
Forum: Scripting
Topic: [SOLVED] BUG (??) /log print where topics=info && message=$message
Replies: 2
Views: 213

Re: [SOLVED] BUG (??) /log print where topics=info && message=$message

That is correct. You should never use variable names in RouterOS that are equal with some command or parameter name.
by strods
Mon Oct 22, 2018 7:21 am
Forum: Announcements
Topic: v6.43.4 [stable] is released!
Replies: 66
Views: 12249

Re: v6.43.4 [stable] is released!

mducharme - Can you provide more details about the problem that you have? Preferably over e-mail to support@mikrotik.com? Provide supout file from your DHCPv6 server and more details about the problem - which client was trying to connect and did not receive a prefix, was the exact same configuratio...
by strods
Sun Oct 21, 2018 7:15 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Can't update firmware from a script
Replies: 4
Views: 436

Re: Can't update firmware from a script

Most likely you are missing a delay between both functions. See examples here:

https://wiki.mikrotik.com/wiki/Manual:U ... to-upgrade
by strods
Thu Oct 11, 2018 5:55 pm
Forum: Announcements
Topic: v6.43.1 [stable] and v6.43.2 [stable] are released!
Replies: 186
Views: 25594

Re: v6.43.1 [stable] and v6.43.2 [stable] are released!

schadom - Please send supout file and problem description to support@mikrotik.com. Please provide precise command that you use in order to filter print command output.
by strods
Thu Oct 11, 2018 5:52 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Report "Delegated-IPv6-Prefix" attribute for PPPoE
Replies: 151
Views: 23782

Re: Report "Delegated-IPv6-Prefix" attribute for PPPoE

While feature is not implemented, you may use such workaround: 1) Add new pool with prefix that you want to assign to your PPPoE client; 2) Add new PPP profile and select this pool; 3) Send from RADIUS "Mikrotik-Group" parameter which is equal with this profile name. This option is present in Router...
by strods
Thu Oct 11, 2018 11:55 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Report "Delegated-IPv6-Prefix" attribute for PPPoE
Replies: 151
Views: 23782

Re: Report "Delegated-IPv6-Prefix" attribute for PPPoE

I will try to clear things up since sees that there has been a huge misunderstanding about RouterOS v6.43 changelog. RouterOS before v6.43 did not support "Delegated-IPv6-Prefix" in any situations. Then we added this feature in RouterOS: *) dhcpv6-server - added additional RADIUS parameters for Pref...
by strods
Thu Oct 11, 2018 8:51 am
Forum: General
Topic: Which chains do SrcNAT and DstNAT go through?
Replies: 7
Views: 318

Re: Which chains do SrcNAT and DstNAT go through?

You are referring to old Packet Flow diagram. Please use this one instead:

https://wiki.mikrotik.com/wiki/Manual:Packet_Flow_v6
by strods
Thu Oct 11, 2018 8:43 am
Forum: General
Topic: [Feature Request] Winbox username is sent in plain text
Replies: 10
Views: 567

Re: [Feature Request] Winbox username is sent in plain text

Please provide this packet capture to support@mikrotik.com. Make sure that capture is taken while communication is happening between Winbox 3.18 and RouterOS version 6.43 or later.
by strods
Wed Oct 10, 2018 1:59 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Report "Delegated-IPv6-Prefix" attribute for PPPoE
Replies: 151
Views: 23782

Re: Report "Delegated-IPv6-Prefix" attribute for PPPoE

While implementing new features in DHCP RADIUS services we did make some changes in a way how DhCPv6 server works and as a result starting from v6.43 some of the DHCPv6 clients could not get prefix. For example, RouterOS DHCPv6 client did work just fine with our server. Next 6.43 release and 6.44bet...
by strods
Tue Oct 09, 2018 6:46 pm
Forum: RouterBOARD hardware
Topic: CCR1072 watchdog reboot
Replies: 59
Views: 5688

Re: CCR1072 watchdog reboot

If you have CCR device that is crashing, then I recommend that you make sure that latest RouterBOOT version is installed on your router. v6.42 includes latest firmware for TILE devices which could help due to this fix: !) tile - improved system performance and stability ("/system routerboard upgrade...
by strods
Tue Oct 09, 2018 6:40 pm
Forum: RouterBOARD hardware
Topic: CCR1072 watchdog reboot
Replies: 59
Views: 5688

Re: CCR1072 watchdog reboot

There are multiple possible reasons why router is rebooting: 1) Hardware problem; 2) Software issue; 3) Overloaded device. All of these three possible issues can be masked under log messages "rebooted due to Kernel Failure" , "rebooted due to Watchdog timeout", etc. There is no reason to believe tha...
by strods
Mon Oct 01, 2018 2:50 pm
Forum: Announcements
Topic: v6.42.9 [long-term] is released!
Replies: 119
Views: 17573

Re: v6.42.9 [long-term] is released!

Yes, that is correct. If you jump between versions older than 6.43 and 6.43 or newer, then you must disable IP/Cloud DDNS feature first and re-enable it back after upgrade/downgrade. !) cloud - reworked "/ip cloud ddns-enabled" implementation (suggested to disable service and re-enable after install...
by strods
Fri Sep 28, 2018 2:27 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Report "Delegated-IPv6-Prefix" attribute for PPPoE
Replies: 151
Views: 23782

Re: Report "Delegated-IPv6-Prefix" attribute for PPPoE

6.43 version introduces this feature for DHCP service. You are trying to use it with PPP service. Currently such feature is not supported.
by strods
Tue Sep 18, 2018 1:49 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 173
Views: 29280

Re: v6.44beta [testing] is released!

Without an example we can not comment why you are not being able to import .rsc file. We recommend that you import file step-by-step if it is failing. Then you will see at which point configuration is not accepted and you can fix it or report a problem to support@mikrotik.com if there is one. Export...
by strods
Tue Sep 18, 2018 10:41 am
Forum: Announcements
Topic: Winbox v3.18 released!
Replies: 31
Views: 5529

Re: Winbox v3.18 released!

denisun - The same rules apply to IPv4 firewall menu. There is no point of having categories "0, 1, 2, ...". Categories group entries by some value. ID always will be unique.
by strods
Mon Sep 17, 2018 9:17 am
Forum: Announcements
Topic: Winbox v3.18 released!
Replies: 31
Views: 5529

Re: Winbox v3.18 released!

denisun - Try to sort columns by, for example, "Action" column; rushlife - All shortcuts that are available are listed under menu that opens up when you press right mouse button under specific menu. We will consider implementing new shortcut related features in upcoming Winbox releases; SiB - Such ...
by strods
Fri Sep 14, 2018 11:06 pm
Forum: Announcements
Topic: Winbox v3.18 released!
Replies: 31
Views: 5529

Re: Winbox v3.18 released!

rushlife - Shortcuts are and have been available all the time. Are you talking about some specific ones? Can you provide an example?
denisun - Can you provide an example? Categories mode work just fine for me also in IPv6 firewall menus.
by strods
Fri Sep 14, 2018 2:37 pm
Forum: Announcements
Topic: Winbox v3.18 released!
Replies: 31
Views: 5529

Re: Winbox v3.18 released!

rushlife - What about them?
by strods
Fri Sep 14, 2018 11:58 am
Forum: Announcements
Topic: Winbox v3.17 released!
Replies: 17
Views: 4149

Re: Winbox v3.17 released!

Winbox v3.18 has been released:
viewtopic.php?f=21&t=139189&p=686182#p686182
by strods
Fri Sep 14, 2018 11:57 am
Forum: Announcements
Topic: Winbox v3.18 released!
Replies: 31
Views: 5529

Winbox v3.18 released!

What's new in v3.18: *) fixed problem where Winbox could not login into RouterOS v6.43 router for some users If you experience version related issues, then please report them to support@mikrotik.com. Winbox is available here: http://www.mikrotik.com/download If you try to upgrade directly from Winbo...
by strods
Mon Sep 10, 2018 2:57 pm
Forum: Announcements
Topic: v6.43 [current] is released!
Replies: 149
Views: 18181

Re: v6.43 [current] is released!

IP/Cloud feature will be added to Winbox interface for CHR in upcoming versions.

DHCPv6 error log message is a cosmetic issue which also will be fixed soon. This error actually tells that there is no error.
by strods
Thu Aug 30, 2018 2:06 pm
Forum: General
Topic: Group rights inconsistancies [SOLVED]
Replies: 11
Views: 455

Re: Group rights inconsistancies [SOLVED]

Please provide output of "/user export" command. There are no hidden permissions that would differ default user and/or group from ones added later on.
by strods
Tue Aug 14, 2018 3:16 pm
Forum: General
Topic: TORCH CONFUSION
Replies: 9
Views: 3630

Re: TORCH CONFUSION

Torch is working on an interface and sees all the packets passing over it. Address matching happens like this: a) If you specify dst-address, then RX packets on interface should have this IP as destination; b) If you specify dst-address, then TX packets on interface should have this IP as source. To...
by strods
Thu Aug 09, 2018 12:32 pm
Forum: Announcements
Topic: WPA2 preshared key brute force attack
Replies: 25
Views: 10216

Re: WPA2 preshared key brute force attack

Next RouterOS v6.43rc release will have an option that will allow to disable usage of PMKID. Setting should be used at your own risk knowing that some clients might not be able to connect. If it will work well, then we will, most likely, backport these changes also to other RouterOS version release ...
by strods
Thu Aug 09, 2018 10:42 am
Forum: General
Topic: Another worrying Wi-Fi exploit could potentially plague your router
Replies: 3
Views: 334

Re: Another worrying Wi-Fi exploit could potentially plague your router

Please see this forum topic regarding discussed WPA2-PSK brute force attack method:

viewtopic.php?f=21&t=137838
by strods
Thu Aug 09, 2018 10:41 am
Forum: Wireless Networking
Topic: PMKID Attack - clientless WPA2/WPA PSK attack
Replies: 6
Views: 1726

Re: PMKID Attack - clientless WPA2/WPA PSK attack

Please see this forum topic regarding discussed WPA2-PSK brute force attack method:

viewtopic.php?f=21&t=137838
by strods
Thu Aug 09, 2018 10:41 am
Forum: General
Topic: New Attack on WPA/WPA2 Discovered, Most Modern Routers Might be at Risk
Replies: 8
Views: 1003

Re: New Attack on WPA/WPA2 Discovered, Most Modern Routers Might be at Risk

Please see this forum topic regarding discussed WPA2-PSK brute force attack method:

viewtopic.php?f=21&t=137838
by strods
Thu Aug 09, 2018 10:37 am
Forum: Announcements
Topic: WPA2 preshared key brute force attack
Replies: 25
Views: 10216

WPA2 preshared key brute force attack

It has come to our attention that a new way of brute force attack based on WPA2 standard using PMKID has come to light. This attack actually is a brute force attack on WPA2 preshared key. The reason this attack is considered effective is because it can be performed offline, without actually attempti...
by strods
Tue Aug 07, 2018 11:39 pm
Forum: Announcements
Topic: Winbox v3.17 released!
Replies: 17
Views: 4149

Re: Winbox v3.17 released!

Muqatil, ujemvi, Chupaka - Problem with changelog has been resolved. joegoldman - We will look into this and see if we can make some improvements. Muqatil - TR069 missing icon is just a cosmetic issue and there have not been icon for this feature so far. If you have feature suggestions, bug reports...
by strods
Tue Aug 07, 2018 9:54 am
Forum: Announcements
Topic: Winbox v3.17 released!
Replies: 17
Views: 4149

Winbox v3.17 released!

What's new in v3.17: *) fixed sudden disconnects from router (introduced in v3.15); If you experience version related issues, then please report them to support@mikrotik.com. Winbox is available here: http://www.mikrotik.com/download If you try to upgrade directly from Winbox loader and version is n...
by strods
Thu Aug 02, 2018 1:59 pm
Forum: General
Topic: Mikrotik in the news..bad news
Replies: 57
Views: 4403

Re: Mikrotik in the news..bad news

There was a bug that allowed to find out passwords configured on the router. After that hacker can use them and log into router as a normal user. Then he can do whatever he wants. Upgrade will close this vulnerability, but if password is not changed, then hacker can still connect. Hacker connects to...
by strods
Thu Aug 02, 2018 11:51 am
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 558
Views: 87131

Re: v6.43rc [release candidate] is released!

Version 6.43rc51 has been released. Before an upgrade: 1) Remember to make backup/export files before an upgrade and save them on another storage device; 2) Make sure the device will not lose power during upgrade process; 3) Device has enough free storage space for all RouterOS packages to be downl...
by strods
Wed Aug 01, 2018 3:59 pm
Forum: Announcements
Topic: Security announcement blog
Replies: 111
Views: 18007

Re: Security announcement blog

Winbox vulnerability was solved so fast and updated version was released on the same day so we did send out e-mails about new, patched versions released and did not have separate Winbox vulnerability e-mail. That was discussed in forum (in future, similar information also will be discussed in the bl...
by strods
Tue Jul 31, 2018 7:15 am
Forum: Beginner Basics
Topic: Fasttrack kills Policy Based Route [SOLVED]
Replies: 2
Views: 296

Re: Fasttrack kills Policy Based Route [SOLVED]

That is the whole point of FastTrack: https://wiki.mikrotik.com/wiki/Manual:IP/Fasttrack "Fasttracked packets bypass firewall , connection tracking, simple queues, queue tree with parent=global, ip traffic-flow(restriction removed in 6.33), IP accounting, IPSec, hotspot universal client, VRF assignm...
by strods
Thu Jul 26, 2018 3:10 pm
Forum: Announcements
Topic: Winbox v3.16 released!
Replies: 63
Views: 13042

Re: Winbox v3.16 released!

It is strongly recommended to read software changelog before an upgrade:

viewtopic.php?t=132974

"abandoned support for connecting to older RouterOS versions (older than v6), no DLLs will ever be downloaded"
by strods
Mon Jul 16, 2018 2:13 pm
Forum: Announcements
Topic: v6.42.6 [current]
Replies: 102
Views: 21548

Re: v6.42.6 [current]

Echinus - Request must match parameters configured on lease. DHCP client sends request with different client-id so lease does not match and dynamic IP is assigned. This is how it is supposed to work and also there are no changes introduced in this version regarding DHCP and client-id parameter: htt...
by strods
Mon Jul 16, 2018 11:17 am
Forum: Announcements
Topic: Winbox v3.16 released!
Replies: 63
Views: 13042

Re: Winbox v3.16 released!

We are aware of problem that Winbox disconnects after a small inactivity period if specific windows are opened. We will try to fix this problem as soon as possible.
by strods
Mon Jul 16, 2018 6:47 am
Forum: Announcements
Topic: v6.42.6 [current]
Replies: 102
Views: 21548

Re: v6.42.6 [current]

WirelessRudy, CZFan - Please contact support@mikrotik.com regarding this problem and provide supout file. akinola1400 - Upgrade will keep your current configuration. However, before an upgrade read all of the changelogs between your current version and one that you want to install on your router. C...
by strods
Fri Jul 13, 2018 1:36 pm
Forum: Announcements
Topic: v6.42.6 [current]
Replies: 102
Views: 21548

Re: v6.42.6 [current]

AlexT - Have you accessed these device by direct IP connection or is it over, for example, RoMON? Can you try to clear cache on Winbox loader and connect again?
by strods
Fri Jul 13, 2018 6:42 am
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 558
Views: 87131

Re: v6.43rc [release candidate] is released!

Cha0s - It is not possible to answer your question without seeing supout file from your router. As you know - if you think that there is a software issue on your router, then contact support@mikrotik.com.
by strods
Thu Jul 12, 2018 10:55 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 558
Views: 87131

Re: v6.43rc [release candidate] is released!

Not all of the problems can be summarized in one sentence. Or the cause of the problem can lead up to different consequences. Sometimes end-user even can not see software issue and that can be seen in supout file only by MikroTik staff. For example, DHCPv6 issue could lead to DHCPv6 service crash (c...
by strods
Thu Jul 12, 2018 10:48 pm
Forum: Announcements
Topic: v6.42.6 [current]
Replies: 102
Views: 21548

Re: v6.42.6 [current]

Fusionyx - Please send supout file from your router to support@mikrotik.com. What do you mean by "no MAC address"? Have you tried to downgrade device to see that it works again and upgrade once more to see that problem appears back again? informant - The underlying issue could lead up to different ...
by strods
Thu Jul 12, 2018 2:08 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 558
Views: 87131

Re: v6.43rc [release candidate] is released!

Version 6.43rc44 has been released. Before an upgrade: 1) Remember to make backup/export files before an upgrade and save them on another storage device; 2) Make sure the device will not lose power during upgrade process; 3) Device has enough free storage space for all RouterOS packages to be downl...
by strods
Thu Jul 12, 2018 12:17 pm
Forum: Announcements
Topic: v6.42.5 [current]
Replies: 124
Views: 15170

Re: v6.42.5 [current]

New version 6.42.6 has been released in current RouterOS channel:

viewtopic.php?f=21&t=136731
by strods
Thu Jul 12, 2018 12:16 pm
Forum: Announcements
Topic: v6.42.6 [current]
Replies: 102
Views: 21548

v6.42.6 [current]

RouterOS version 6.42.6 has been released in public "current" channel! Before an upgrade: 1) Remember to make backup/export files before an upgrade and save them on another storage device; 2) Make sure the device will not lose power during upgrade process; 3) Device has enough free storage space fo...
by strods
Fri Jul 06, 2018 10:12 am
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 558
Views: 87131

Re: v6.43rc [release candidate] is released!

At the moment RouterOS tries to resolve cloud2.mikrotik.com IPv4 and IPv6 addresses. After that tries to reach IPv4 server, if server is reachable over IPv4, then this address will be used. if IPv4 server is not reachable, then try to use IPv6. At the moment IPv6 cloud is used as a fallback.
  • 1
  • 2
  • 3
  • 4
  • 5
  • 28