MikroTik

Taylor

Ah jeez , time to ring customers and tell them to brace for another set of sec patches.

Well at least the ansible script to autpatch everything will now come in handy I wrote a while ago.

mind sharing? been meaning to start one, havent decided how i wanted to do it yet.

Taylor

I would be fine with keeping the service alive. Having a 48u rack for such a piss easy and small script is a bit outrageous. I think you're the delusional one. I"m sure you used that rack for way more than this script. I'm simply saying you can keep the script stuff online for way cheaper if y...

Taylor

I would be fine with keeping the service alive. Having a 48u rack for such a piss easy and small script is a bit outrageous. I think you're the delusional one. I"m sure you used that rack for way more than this script. I'm simply saying you can keep the script stuff online for way cheaper if yo...

Taylor

It's been a nice run. Almost 3 years, and over 2200 active users. But I am shutting down the this service. With the new US tax laws and this new US "sex trafficking law" (which isn't really about sex trafficking) I simply can't afford to keep the service running. Bandwidth and rack space ...

Taylor

Did you make a typo? Its telling me versions below 6.38 are blocked. im on 6.37.5

Taylor

Awesome! Thanks for still doing this. Now that you got more stats, you should create some public pages cause i love me some random statistics!

Taylor

Seems the CHR changes, fixed mine too... fyi the output was

[admin@TaylorMikrotik] >> /system license print     
  software-id: 15LP-6RVD
       nlevel: 4
     features:

Taylor

I am on a RB951Ui-2HnD

Taylor

I'm having issues too, started out with the autoinstaller script in your first post, it always leads with [admin@TaylorMikrotik] >> /import updateBlacklist.rsc; syntax error (line 62 column 11) I edited it and put start-time=startup on the same line as the last add for scheduler. That worked but the...

Taylor

I need more pointers in the right direction, this PDF is great and all. But i cannot apply it to my configuration. Do I create a 3rd SSID for this? I don't get it

Taylor

I was using the new RAW rules and blocking destination etc I'll just use an input/forward rule then

Taylor

Love the work you did on this script. It's fantastic! however I too am finding a few services are blocked. Microsoft for one, Periscope (A Twitter company) is blocked. I'm currently deciding if its worse the hassle

But you did do a fantastic job, great service, I thank you much for it!

Taylor

I got it working! For anyone else very lost, I suggest this video, it uses a setup with a normal and a guest network

https://www.youtube.com/watch?v=Q9h00PYEzQM

Taylor

I can't seem to follow along to any of this, It just doesnt make sense. For instance why am i creating a bridge and new dhcp server on the caps interface? I just want my AP to use the existing DHCP Servers one for main and one for guest, on the current board I have? I don't want to use the boards wi...

Taylor

Hi, I just received my wap ac I purchased. however I am not sure the best way to set it up. I have a 951Ui-2HnD as my main router. It currently has 2 networks, Normal and Guest. I want to setup the same on the new wap ac, however both normal and guest should be on 2.4 and 5ghz. Should I use capsman ...

Taylor

Why would you want to use it instead of fp? Its basically the same but improvements. I've been using it for around a year now.

Taylor

Ok so at the moment of accesing tools-profile my winbox sessions instantly closes.. anyone with the same problem?

Same here

Taylor

I too have noticed, having a proper firewall setup blocking all and allowing certain traffic makes UPnP useless.

Taylor

In your very first post you had it right.

Just make the 192.168.88.1 to 192.168.88.254 (you said thats the ip of the server hosting killing floor)

Taylor

Yes Im using winbox. I haven't got the new routerboard for the office yet, im typing the rules into a file to have it ready to go.

So for every NAT rule I have, I have to make a filter rule for that? :\

Taylor

Sorry but I tried and read, and don't know exactly what you just told me to make. Examples go a far way with me understanding how something works.

Taylor

I did the below, and i tried it on my home router, but now my NAT rules are blocked by this new forward chain /ip firewall filter add chain=input connection-state=established comment="Accept established connections" add chain=input connection-state=related comment="Accept related conn...

Taylor

Ok how would i allow new forward, but only for LAN>WAN? Via interfaces somehow or src-addresses ?

Could I do in bridge-local out ether1-gateway in the FORWARD Chain for NEW connection types?

Taylor

Hows this? /ip firewall filter add chain=input connection-state=established comment="Accept established connections" add chain=input connection-state=related comment="Accept related connections" add chain=input connection-state=invalid action=drop comment="Drop invalid conne...

Taylor

Alright I get that, so If I have a NAT rule for any one public ip that opens it to all? Here is an example of what im doing for my NAT Rules add action=dst-nat chain=dstnat comment="WebSite www.mywebsite.com" \ dst-address=1.1.1.1 dst-port=80 protocol=tcp to-addresses=\ 192.168.2.250 That ...

Taylor

Yes right I understand what you are saying, the part im not i guess, is... What makes it destined for the router and waht makes it not? INPUT it says is for traffic going to the router, which is one of its addresses, how does it know which is its addresses? FORWARD Is passthrough, k great, again wha...

Taylor

Well now I am really confused lol I use the exact same setup on my linux servers and on the mikrotik at my home and it seems to function as I put it. Forward is for LAN>WAN is it not? I dont want to restrict my LAN users going out of the router to the internet! input is anything coming from outside ...

Taylor

We must not be thinking the same thing for sure. My definition of a firewall involves outside traffic coming INTO my network (through the firewall..) So yes I am blocking everything from coming in, but im not blocking everything going out. (as stated before a few times, i may or may not do this) You...

Taylor

Oh yes I understand now. That is if I want to lock down everyone on my LAN, and I don't know if I am going to do that yet. I would hvae to figure out any odd ports anyone is using for whatever reasons, and Right now i'll just leave that alone lol Obviously i blocked smtp port 25, had a rogue virus g...

Taylor

You've lost me on the forward chain putting it first... If you could go into more detail it would make it more clear for me. Yea I'm fine with putting in MikroTik everywhere, it was even discussed as for PCI Compliance for Credit Card Processing at our retail locations. The problem is, we have 87 lo...

Taylor

I ended up buying a RB2011UiAS-2HnD-IN My boss isn't like most bosses, we are pretty much partners, just "technically" he is the boss. He can just use IP's and I think he does that already. He's not your typical boss lol. I talked to him about it and hes fine with switching to it, and he s...

Taylor

Unfortunately the subnets wont be something to change, if either of us were to VPN in from a store location, it would be on this subnet also. Over 87 locations... Nah can't change that, not worth it. It would be nice if you could push routes to the VPN client, such as in OpenVPN. Maybe someday It wi...

Taylor

I have been using MikroTik RouterOS/Routerboard at home for around 6 months and now and have also deployed it into a retail location for the business I work for. Recently at the Corporate Office we have been having issues with our WatchGuard XTM Firewall/Router. I'm looking into replacing it, and us...

Search found 33 matches

Re: v6.40.9 [bugfix] is released!

Re: Blacklist Filter update script

Re: Blacklist Filter update script

Re: Blacklist Filter update script

Re: Blacklist Filter update script

Re: Blacklist Filter update script

Re: Blacklist Filter update script

Re: Blacklist Filter update script

Re: Blacklist Filter update script

Re: Need help setting up wap ac

Re: Blacklist Filter update script

Re: Blacklist Filter update script

Re: Need help setting up wap ac

Re: Need help setting up wap ac

Need help setting up wap ac

Re: 6.30 released

Re: Winbox 3 RC

Re: UPnP does not create dynamic rules in ip firewall filter

Re: Issue with port-forwarding

Re: Researching Potential Office Firewall/Router Solutions

Re: Researching Potential Office Firewall/Router Solutions

Re: Researching Potential Office Firewall/Router Solutions

Re: Researching Potential Office Firewall/Router Solutions

Re: Researching Potential Office Firewall/Router Solutions

Re: Researching Potential Office Firewall/Router Solutions

Re: Researching Potential Office Firewall/Router Solutions

Re: Researching Potential Office Firewall/Router Solutions

Re: Researching Potential Office Firewall/Router Solutions

Re: Researching Potential Office Firewall/Router Solutions

Re: Researching Potential Office Firewall/Router Solutions

Re: Researching Potential Office Firewall/Router Solutions

Re: Researching Potential Office Firewall/Router Solutions

Researching Potential Office Firewall/Router Solutions