MikroTik

kevinds

and the forced settings disables auto-negotiation. But it shouldn't.. The remote end should still autodetect what the local side it forced to. Another Mikrotik switch bug? I thought auto-negotiation issues where left in the 90s.. It has been a very long time since I've had to force both sides of a ...

kevinds

Because autonegotiation defaults to the lowest common denominator when the other end doesn't support it. Speed can be parallel detected, but duplex can't, so it will fall back to half duplex.

Full and half duplex is detected and negotiated..

kevinds

it's just autonegotiation or forced speed/duplex (which needs to be half-duplex if the other side has auto-negotiation and is not forced to full-duplex, otherwise we get a duplex mismatch with high packet loss)

Why?

kevinds

No idea but what did you do to cause that?

kevinds

Would it be possible for MT to handle this case properly in ALL devices with gigabit ethernet ports There is no "proper" way to handle this. Real-world ideal would be to drop down to 100 mbps but that isn't a proper solution, that is a work-around. The proper solution is to fix your local...

kevinds

IMHO CCR1009, 1016, 1036 and 1072 series all share the same board and all have the same problem - bad 680uFx6.3V capacitors, C1442, C143, C1613, C1617. First clue if they are failing is higher CPU temperature and slightly lowered voltage. We are replacing all 4 caps, not only bulged. Got ours back ...

kevinds

Need. 1U 16-port POE switch What is wrong with a 24? HPE for example has many, many nearly identical switches with very small differences between them, what is the point? Could reduce their overwhelming number of models and not lose anything. 16 ports and 24 port switches are both 1U, take/use the ...

kevinds

Any ideas if this can work?

Yes, it can.

kevinds

Greetings kevinds. Unfortunately I've tried that. It starts the download, then script just stops. I'm testing it on its own, the only one in the script & fails.

Have you tried running it from the CLI?

kevinds

I've tried several delimiter settings but it won't download.

This one works for me on the Spamhaus drop list.

 delimiter=("\_")

kevinds

A binary copy can normally only be restored on the exact same device with exact the same version. You can get away with restore on other device but same model, but even then you may run into problems since also all MAC addresses will be taken over from old device. So best not to do that. 250 lines ...

kevinds

Easy, just apply the default "WAN" config only after you set your initial password. Problem solved.

And how would you code such a task to fit with the existing processes?

The default admin password and WiFi password printed on the device is sufficient.

kevinds

Imagine you have to try to find the shipping box a year later for your $25k Cisco-switch to able to set ut up....

Or like all companies do, it is printed on the product, usually near the serial number.

kevinds

The hap lite ac looks like a great little wireless router perfect size and mounting, I'm just a little worried about the wifi signal power due to the PCB antennas which are 1.5/2 dbi (2.4/5). In one of the reviews where they opened it up, there actually were IPEX sockets on the board, so I'm wonder...

kevinds

Why would I? No, seriously, Gen1 that I have in use works. You tell me that list of breaking changes i sa lie? I'm not telling you anything.. I'm asking if you have tried it. You have a very functional Hyper-V environment? It shouldn't be difficult to start a new Gen2 system to see if it works. I h...

kevinds

Too bad it has been discontinued... so those still having it, make sure to keep it safe !

USB-Serial adapter and a null-modem cable works similarly, just isn't wireless.

kevinds

I hope this email finds you well. We are currently exploring ways to automate the process of changing L2TP passwords in our MikroTik routers to enhance our network security measures. Why not setup RADIUS? Multiple accounts can be changed without touching RouterOS. My second choice would be SSH, con...

kevinds

8P 16P 24P 48P Among these 4 types, why is the 16-port product so big and different? Your product designers' concepts are really special. Can you make something acceptable to ordinary users? Or am I not finding the right product? grateful,

What is the problem?

kevinds

Set the Starlink system to bridged with the Starlink Ethernet adapter, use it as the internet connection on the MIkrotik router. set for DHCP. With our Starlink-Mikrotik setup we needed to open a ticket because the DHCP renewal didn't work properly, but that was fixed with the ticket. What voltage a...

kevinds

It is very common on other consumer e.g. wifi access points to print the passphrase of the default pre-configured SSID on a label on the backside of the device. MT did it the other way: print admin password on the sticker -> but create a SSID without passphrase in default configuration script. ROFL...

kevinds

And I mean really force you, not the silly implementation of MikroTik's before the random password stickers, where you can hit cancel (or ctrl+c on CLI) and start using the router with an empty admin password. The password is set to 'Expired' which causes the prompt. I didn't know you could cancel ...

kevinds

Have you tried it?

kevinds

After several incidents (not only for MikroTik but also for other brands), finally the EU introduced the requirement to have these unique passwords, or else you cannot sell the device on the EU market. And it is sensible, so probably other areas will follow and it was easier to change this for ever...

kevinds

The heatsink nearby C10 of PSU are not hot at all, i have my CCR1036 running uncovered for a while, i can touch it 2. C1442/C1443 or C1613/C1617 apparently can be replaced with higher voltage rating and capacitance capacitors to ensure they won't fail in the near future. Running uncovered isn't a v...

kevinds

Nice, after one year all CCR1036 PSU dies? I found not just PSU, please also check System --> Health --> Voltage Just replaced C10 capacitor on PSU, and C1442 / C1443 capacitors on main board. BTW, i doubt the C10 capacitor died because of high temperature. i run my CCR1036 uncovered and check the ...

kevinds

Delta PJT-24V100WBBA ?
The footprint Is the same 2"x4" as the EPS-65-24.

Yes, I saw that one too.

kevinds

What I want is ... no def config but clear router, so you missed the point...

The CCR products have this.

kevinds

As easier alternative to Netinstall, Flashfig can also be used (on first power up)

System-Reset-No Default Config

Still requires an admin password, but many systems do now, law passed somewhere requires them to be set/changed.

kevinds

Besides that PoE adapter is another $50 I shouldn't had to spend if Mikrotik ditched the passive PoE way back when 802.3af was defined (that was over 20 years ago BTW). Passive PoE needs to die. Closer to $25 than to $50 (MSRP of $26 USD).. Mikrotik was less into passive PoE than other vendors have...

kevinds

May i know "Mean Well EPS-65-24" can be fitted into the CCR1036 case?

2" x 4"? No problem.. That is smaller than the original.

kevinds

https://mikrotik.com/product/rbgpoe_con_hp would solve your issue. Personally I prefer Ubiquiti's equivalent a lot more,the INS-3AF-I-G, it is the only Ubnt product I use, I like its form factor a lot more.

kevinds

I am starting to suspect that these specifications are far from accurate. Which? Max power usage? I don't have a reason to doubt it. I know the CPUs are not working very hard in our router, CPU usually shows 4-5%.. When we get the new circuit installed the CPU usage will increase with multiple BGP ...

kevinds

Are you sure that the original power supply Is 4 A? That would make approximately 96-100W, while the CCR1036 is rated 60W: https://mikrotik.com/product/CCR1036-12G-4S-149 Or yours is another model? Mikrotik 24V4APOW is the part number for the power supply. Yes, ours is a different model, The 10 gpb...

kevinds

@kevinds If you search on the board there is a report about using a Mean Well EPS-65-24 as replacement. I saw that, wasn't sure if I should be looking at a larger model.. The original is 4 amps, that one is 2.7. Current usage is only 1.5 amps but after I get this problem fixed will be adding anothe...

kevinds

I checked my faulty replaced PSU with multimeter, it shows 23.6v... Marginal PSUs, which cause issues with connected devices, tend to show acceptable output voltage when idle. However, they tend to drop voltage when they are loaded. And they tend to supply voltage which is not very well regulated a...

kevinds

I read one post about PSU failure also burn the mainboard capacitors, looking for smaller size power supply to fit in the CCR1036 case, however, i don't think i will cut the case to place a fan. What a noisy, ugly looking, home-drill hole for a telecom-grade router... My plan is/was to secure a fan...

kevinds

I have a 1036 r3
I made a post but with no answer. Can someone tell me wich are the differencies ?

r3?

r2 has dual PSU and on-board RAM.

kevinds

That would be nice of you to join the trial run. The original size of the capacitor is 12.5mm in diameter X 20mm in height, electricity characters are 35V, 1000uf. There's heatsink roof stop the capacitor higher than 25mm, that is the replacement must be around 20mm-24mm, or i need to cut a circle ...

kevinds

No space for higher voltage or capacitance capacitor replacement. I'll take that challenge. :) However putting in a better cap, one where the specs sheet isn't just wishful thinking, I expect to make a difference too. What are the dimensions of the original cap? Height and diameter.. I'll be gettin...

kevinds

CCR1036 (the CCR1036-12G-4S variant) has rated max power consumption at 60W. So the reported power consumption indicates that power supply is running at 80%+ capacity and I'd expect it to have a bit higher temperature. So what can you do to extend power supply lifetime? Reduce load on router. Yes, ...

kevinds

Using an SSH agent like putty and using that to paste text in seems to be better but I have still had issues with what seems to be font character differences.

You need to be copy/pasting from a plain text editor..

If you make " marks and it curls them to be pretty, it isn't going to work.

kevinds

Junk grade is 1000 hours @ 85ºC. And yes they really exist even from top-tier name-brand suppliers like Panasonic. I agree and I know. But junk grade from Panasonic is still way better than the brands that have a big X in the middle of their names. Or ones that don't have any brand name on them at ...

kevinds

My latest failed PSU capacitor already the newer capacitor as my vendor replaced the PSU, where you cannot understand i replace the same spec capacitor will quite possibly last the same??

That Rubycon and Panasonic are not the same though.. They are much higher quality caps.

kevinds

Incidentally, 7000 hours @ 105ºC is an uncommonly good cap for an aluminum electrolytic, not junk. There’s better available, but not much better. That is why I suggested it, but I am pretty sure the one I suggested was 10k hours.. ;) I consider the green cap that is in them questionable quality, be...

kevinds

1. I checked the previous failed PSU PCB, the bulge up C10 capacitor (1000UF, 35V, 105 degree Celsius max tolerance), it's already a good spec withstand 105 Celsius, i can only replace it with the same model, i have no idea will it fail again in 1.5 year... Yes, what I sent you before is a higher (...

kevinds

Someone from Mikrotik posted that's because the overheating of the capacitor, the next generation will be better. Heat is the biggest enemy of capacitors. And the later generations have been better. You said you are able to, so I suggest you do, replace with the exact capacitors I gave you earlier....

kevinds

Why doesnt MT have a return policy for such a device, customer pays for shipping back of defective unit and gets a free replacement or something reasonable etc...

They do?

1 year warranty.

kevinds

it's flashing normally but when start it's have same proplem

Then yes, check the power supply for failing capacitors.

kevinds

Exactly.

kevinds

Effective and simple code.
Thank you.

Keep in mind, as I have recently found out, after ~500 days it restarts back to 0d00:00:01.

kevinds

But the site is not far from my actual work office.

Alright then... For some of us it can mean needing to book a flight, so it is important to ask. haha

kevinds

I can't use dynamic IP timeout settings due to power failures.

How are the entries being added? Repopulate the list as part of a Startup script.

kevinds

I have tried deleting the rsc file and the backup file with a script like the following but I want to leave some files that have been saved for more than a month, and delete files that are more than a month old, do you have any suggestions? Do you mean "have been saved for less than a month&qu...

kevinds

But every time i turn on the PC i need to run Winbox, bandwidth test, set IP of device, TCP protocol etc, its waste of time. Is there a way i can automate these with script? Thanks for the help for newbie :roll: Connect with SSH, or if you must, open the 'Terminal' window in Winbox. From your compu...

kevinds

To me, more+better docs would help a lot AVOID needing support. This I agree with.. I've only watched two of the Mikrotik YouTube videos so far, my first thought/question was "Why doesn't the documentation have and explain this?" I cut out close to 100 filters/rules on one router after. B...

kevinds

This option provides an opportunity to strengthen the development / support team, and customers who opt for a paid plan will have better support (e.g., priority resolution of reported bugs instead of waiting "years" for a solution). There would be no promise of that.. Only the promise of ...

kevinds

I guess I'm going to have to test it on site, sadly I don't have OOB connection T_T.

How far is it? Get something to give you OOB management, even temporarily? Cellular data for example?

kevinds

comes back after a few seconds to a couple minutes. I believe the cause is some routes processing the route updates faster than others. An internet router closer to me sees a better route through a different neighbour, but some router(s) along the way are slower to pickup/process the new path. Some...

kevinds

If you do acquire more staff, I vote for coders and testers. I think you already have a great marketing team and from all outward appearances a strong supportive group of colleagues. However charging a group for better tech access could in theory, pay for more/better coders. I still think there are...

kevinds

So i figured out, that the problem is on the route behind our mikrotik and we cant do anything with that

Then why is it pingable?

kevinds

Rebooted router,even tried update to latest beta 7.15, it still runs on its own on times i didint specify: Your screenshots now only show it only running once now though, at 10:00. Are there other log entries that show it running at 8:00? Is the time set correctly? Please post your full config.

kevinds

Do you have any other equipment from Mikrotik (ie, another CCR1036 or something else similar) ? Can you establish a pattern regarding PSUs dropping dead from all CCRs from Mikrotik ? There is another thread here that has become active again where even Mikrotik admitted early power supply failure in...

kevinds

Already available -

That isn't directly from Mikrotik, but yes, that is the solution already in place.

kevinds

My SRX will gain internet access but after a few min the connection drops, then after some time the connection comes back for a few min then drops again. It just keeps repeating this cycle I've had this happen a few times in my learning. It is caused by a routing issue. When this happens to me it i...

kevinds

I've tried it on both routers but on router2(ISP2) once I press enter on the command I lose connection to the router (thank god for safe mode), obviously once all is reverted I gain access again. Mine does sometimes, but usually comes back after a few seconds to a couple minutes. Doesn't seem to al...

kevinds

If i need to replace PSU for every 1.5 year, how about charge me the license fee annually and upgrade the PSU to a more stable one? It's pain to remove all cables and re-plug them to another router, remove CCR1036 and carry it to the vendor for break-fix. You can also install a better power supply,...

kevinds

I make everything but same proplem

I have had the device for 4 years and have not faced any problem. Only when I updated to version 7 did I encounter this problem

What happened when you did the Netinstall procedure?

kevinds

But if there is no interest in fixing bugs, well I'll look elsewhere.

Nobody has said anything like that, other than you.

kevinds

Dont have DHCP clients or any dhcp scripts.

Configured static IP from your ISP then?

kevinds

Not sure what to modify in script to disable this behaviour? It isn't the script.. Your scheduler only has the one entry? Not that it really matters, there are many places that can start a script.. Please post the rest of your logs.. There will be something triggering it, without the rest of your l...

kevinds

Not sure what to modify in script to disable this behaviour?

It isn't the script..

Your scheduler only has the one entry? Not that it really matters, there are many places that can start a script..

If you are seeing it in the logs multiple times, is there a pattern? What times do they show?

kevinds

So sounds like either a memory leak or a design problem whereby something grows without check. Which is still a memory leak.. I have no reason to doubt it.. I don't watch Winbox that closely and my systems have Winbox using a lot of RAM in the first place.. From memory, at least a few of the Winbox...

kevinds

I droped this over my old script which runs on scheduler ONCE A DAY, and noticed it runs multiple times a day instead once as i set in scheduler. How does this script run it self multiple times a day, i dont see it in code? Please run this command and post the output. /system/scheduler export terse...

kevinds

I've tested this list on the following script and it seems to load OK on ROuteOS 7.13.5. Indeed, that script does import properly, I added an update on what I figured out and why it wasn't loading the last few addresses.. Once I figure out the array stuff to update a list without deleting it first,...

kevinds

Promising update.

kevinds

From April 10th, 2024, Spamhaus eDROP (Extended Don’t Route Or Peer) data will be consolidated into the DROP lists, meaning eDROP will no longer be published separately. Read on for a closer look at why these changes are being implemented and what this means for those affected. Yes, those address l...

kevinds

Got a CCR1009 here with these symptoms (temperature reboot, though unit is cold). Replaced bulged caps C1442 and C1443 (680µF/10V) with Panasonic FR and it worked again. System Health showed voltage around 22V. This seemed a bit low. Looks like the power supply caps gave up first and then the high ...

kevinds

I tried assign an IPv6 to a bridge got 800Mbps for few hours then drop to 600Mbps Comments are welcome I suspect that is related to the architecture.. Take a look at the block-diagram and how the ports are shared with each other. I suspect if you use port5 instead of port4 for example, the speeds w...

kevinds

I'm not sure if it better if netinstall version matched the version being installed.... or, if it always best to use current netinstall, even if the version being installed is older. I lean toward just always using latest netinstall. I've found not all versions of the netinstall application work co...

kevinds

Ok... I need help, my address lists are not being imported correctly, they are missing entries.. I think this part is the cause of my issues, # Cut of the end of the chunks by removing the last lines...very dirty but it works :if ([:len $data] < 256) do={:set $data [:toarray ""]} There ar...

kevinds

Yes, it's v3.40 and already up to 74MB after a couple of hours. I connect to my CCR1036 and it is using 30MB of RAM, if I open the address-list page it starts climbing... Gets to 100MB before it has finished loading.. Routes window.. Don't know.. I've never waited long enough for all of them to loa...

kevinds

More I do know the QEMU emulation approach works on RB1100AHx4, I'm curious though.. When was it needed? Surely you are not doing this using your mobile phone to send the commands to the working router? You will need to configure it anyways after Netboot.. If you are using a computer, why not just ...

kevinds

Is this a request? Supouts should go to Mikrotik Support if you think there is a bug.

Not possible. There is no Supout for Winbox.exe

Winbox would be v3.40 or whatever version of Winbox you are using. Maybe add connecting to a v7.14 router.

kevinds

[user=anav]

I'm thinking this thread should just be deleted.. No response from OP since opening the thread.. Oh well..

kevinds

Since pynetinstall reverse-engineered netinstall's protocol, if Mikrotik changes something in netinstall.... pynetinstall have be modified. With QEMU emulation and docker, it just rebuilding the image with new version of netinstall (which theoretically could be automated by GitHub) That would invol...

kevinds

Leave it like it is please.

Wouldn't something pynetinstall work a lot better? No need for x86 emulation

kevinds

Isn't splitting subnet compatible with BGP use? Sometimes.. Depends on a few factors, like who is announcing the /24. Some ISPs can set this up if they are your only ISP. They announce the /24 to the internet, and then you announce to them which locations get which part (usually in a small geograph...

kevinds

P.S. Just checked Rubycon 50ZLJ1000M12.5X25, the lifetime is 2,000 hours at 85 degree, that is 83 days...

Mouser shows 10,000 hours at 105 degrees.

https://www.mouser.ca/datasheet/2/977/e_ZLJ-1601167.pdf

kevinds

What about those users mistakenly buying the CCR1036 R1 ? i experienced 4 times of PSU failure since 2018, average 1.5 years a blow. I would like to know more about that... You took your CCR1036 to the same place each time to get fixed. Did they put a new power supply in each time? Or did they just...

kevinds

Any recommendation on super super high quality replacement so i don't need to worry about the PSU failure each year? Just wondering if R2 version of CCR1036 still get the same issues of PSU? They fixed the issue in the r1 series with better capacitors in the power supplies. The r2 units didn't have...

kevinds

The CCR1036 hardware is cheesy, my LED display breaks and fall, i need to glue it back, and each time PSU failed i need to pay USD 64 (NTD 2,000) for fix. This time is the fourth failure of My CCR1036 PSU, it's really ridiculous. What are they doing to fix it? Do they repair the PSU? Or do they rep...

kevinds

I need block some webpage type because i have a wifi network in a college. Ok.. But why do you need to? If you are the network admin for a college, you are in a losing battle, there are too many ways around it. Also many teachers/instructors assign YouTube videos to watch, so blocking it will preve...

kevinds

How to change it!? help... please)

Choose a previous version FreeBSD template then mount the systemrescue ISO and install according to the instructions.

kevinds

Netinstall it.

If the CCR1036 is an r1 version, could be failing power supply.. Many of the r1 units had poor quality caps in them.

Right now my CCR1036 is showing 23.3v and it is making me nervous because I can't do anything about it (would require a plane ticket to get to) if it fails.

kevinds

Hello, I have set up SSH access on my MikrotikCHR7 router and I can't access it remotely via putty or the terminal. My SSH server is on 192.168.122.59/24. My PC or I test in 192.168.1.33/24. Can you access your CHR router with Winbox? With a console? What do they show? For example, does it have an ...

kevinds

Would be great if you can spot an error in the config or my process. Thanks in advance. If you are changing the IP don't use safe-mode. When you change the IP address it is expected that you may be disconnected, safe-mode then reverts your changes. You are better off connecting via the MAC address ...

kevinds

Question 2. Fan connector in the front of fan... it is weird

That isn't a question..

What is weird about it? Standard 4-pin fan power connection. One pin is ground, one pin is power, one pin controls the speed, and one pin reports the speed.

kevinds

At any rate DO NOT BUY A hAP ac2 !!!

*shrugs* I already have one at a site, I can swap it for my RB750Gr3, just needing to transfer the configuration.

Don't buy because it is previous generation now? Or is there some other major defect with it?

kevinds

Neat.. A 32-bit value seems low, but that explains it.

Thanks

kevinds

Around 500 days maybe?

One of my routers, a RB750Gr3, the up-time counter seem to have reset.. It is now 14 days 13 hours, but the last time I looked it was ~480 days..

The traffic counters haven't been reset, and I would expect them to if it had rebooted..

kevinds

I don't see anything in title bar either, at least in winbox v3.40.

Shit.. Maybe I am seeing the future.. lol

kevinds

I like the idea of showing a "FREE LICENSE - THROUGHPUT LIMITED" or such warning in the titlebar of winbox, better than a pesky popup which will cause more annoyance for most users using CHR for labbing purposes... Anyway, even if this issue does bite and it takes a while to realize what ...

kevinds

Hello, we need suggestions for the best mini PC with 2x SFP+ for Router OS. Currently, we are considering purchasing the MS-01 Work Station. Are there any alternatives with a 13th or 12th generation intel processor? HP's T740? DDR4 but don't know which generation the Ryzen is though, unless it must...

kevinds

This would be so much easier, if on login on console or with winbox, there would be a message “btw, your’e using a free license and bandwidth is limited”. After struggling with this in the past.. The fun part was, the 1 mbps speed is only for outgoing traffic, the bandwidth-test reports 5 gbps inco...

kevinds

The same problem, P1-perpetual license, VPS from the Zomro hoster - the traffic speed on the gigabit ethernet interface is no higher than 1.5 megabits, there are no such problems on version 6.49.13

If you do a bandwidth-test is the received speed 'normal'? Or is it also 1.5 mbps?

kevinds

I connect hex to pc and in "change adapter option" it's showing frequently (unplugged, identifying and unidentified network ) this error. And I'm unable to find my device in winbox and netinstall. Put a switch between the PC and RouterBoard. PC takes too long to 'bring up' the network int...

kevinds

Hap AC2, - CPU quite a bit faster than hex - Only 128M Ram (vs 256M for Hex) - Similar amount of flash to hex, is restrictive when wireless/wifi required, ok when not, and the corresponding package is removed. - Similar form factor to Hex - No VLan filter hardware Offload, (But switch chip is quite...

kevinds

Hello, What does this message mean in the log, my searches don't find it.. Topics: route bgp info Message: BgpOutput { sk: Socket{ 4 a } #buf:1 max: 64 } : Write to bgp failed (32) Searches did show a couple of forum threads about it but never about what it means or how to fix it, just hits that it ...

kevinds

yup .. again same state... need to reboot crs312 to fix all... Might be a silly question, but have you tried updating to the latest version? Nevermind.. It is "Lite" that has 2.18 to keep clients get ip addr with dhcp Curious.. If you give the hosts static IPs, do they keep working? What ...

kevinds

Yeah, my point exactly. Bambenek went paid. I pay for it and its not that expensive. couple hundred a year. we strip RFC1918 addresses from all lists. As well as 0.0.0.0/0 and ::/0 as I've seen those show up before. I don't think I've ever seen a list with 0.0.0.0/0.. That would stand out.. I don't...

kevinds

Ok... I need help, my address lists are not being imported correctly, they are missing entries.. 1085 out of 1100 on my latest creation, and 75 out of 93 on another.. RouterOS v7.12.2 { /ip firewall address-list :local update do={ :put "Starting import of address-list: $listname" :if ($nol...

kevinds

I'm always in search for a good OSINT list or an affordable one and I add it if 1) its maintained regularly and 2) it adds at least a couple hundred new unique entries to the overall set. My downloaded blacklists have +/- 120,000 entries, then my automated defenses add around 100,000 after two week...

kevinds

So tonight I discovered that Spamhaus brought back their ASN-Drop list last year.. Is anybody using it with RouterOS? https://www.spamhaus.org/drop/asndrop.json I'm trying to figure out the best strategy to use to use it with RouterOS, I have no idea how to create dynamic BGP filters (is that even p...

kevinds

Firehol is all public available open source. I'm not trying to make money on the lists. Just cover my costs to bring it all together, clean and format the lists for MT. Alright, but the FireHOL Level 1 page starts out with, "includes: bambenek_c2 dshield feodo fullbogons spamhaus_drop spamhaus...

kevinds

For example, how would you know that a contact attempt from an unknown IP is a phishing or Bot C&C server or a malware distribution server. Takes more sophisticated systems to determine these things. There are hundreds of organizations and company's around the planet that focus on threat intell...

kevinds

I would like to know if there is a way to use the SSD disk capacity as RAM in ROS x86.

So as swap space?

kevinds

But to download a profile to that card I have to place it in a smartphone first or is there a way to use it without a smartphone?

Likely a computer, not a smartphone.

kevinds

a TILE CPU cross-compilation toolchain I have most of what needed to build the toolchain. Most of the big pieces were provided by the company producing the Tile CPUs, as the company has changed hands multiple times though, some pieces went missing so took a bit to track down some of them. https://g...

kevinds

I don't buy that analogy. If that were the case, no one could ever bootstrap a new CPU architecture. I predict that if you take your gadfly routine to the QEMU and Alpine project fora and try to get them to include TILE support, you'll get zero traction, It takes a LONG time for any group to accept...

kevinds

It is possible to build and test all this without any help from MT on your desktop/laptop computer platform of choice. I know.. And going back a few years in the Linux kernel, to when the decision was made to remove it, the kernel supported Tile. 3. somthing. It was pulled because nobody answered t...

kevinds

MikroTik could call your bluff today , right now , and it would still get you nowhere. Maybe.. Being that it would be my end-goal, I wouldn't start unless I knew it would happen. Because I predict it will never happen, there is no reason to start the project. As I said in the beginning.. Chicken-Eg...

kevinds

Why is MT to blame for not providing the last-0.1% bit when none of the rest exists? Without it there is no reason to put in the effort. It is a waste of time knowing the end goal simply isn't possible regardless of the work put in. But yes, they stopped making the CPUs last year, it is now a dead ...

kevinds

They could build container.npk for TILE today, and it would still not get you containers on TILE. Maybe, but without it, it CAN'T happen. "Pulled?" It never existed. It was one of the promised v7 features though, up until v7 was released, then it became just ARM/x86. If that's the case, t...

kevinds

Yes, that's why the RouterOS changelogs are zero in length and infinitely far between. Oh, wait…that's not the case at all, is it? I didn't say there were no feature updates and changes being made, I said *asking* for a feature change, is a waste of time. Mikrotik does what they want feature wise. ...

kevinds

This is all a tremendous amount of work, but if someone were to do it and hand MT a working image — one that instantiated and successfully ran under QEMU — they would have a hard time arguing against producing a container.npk for TILE. So.. Tremendous amount of work, to eventually, maybe, get conta...

kevinds

Have you tried proposing that to MT and have a rejection message in-hand, or are you presuming failure from the start? Have you ever talked to MT support to suggest a feature? How did that turn out for you? Why/what would I need to propose? That if the package was available, that someone would make...

kevinds

It is possible for a third party to do it, but until someone does, there is no point in MT producing a corresponding container.npk package for that platform. The only hope I see stems from the fact that MT clearly has a TILE CPU cross-compilation toolchain internally, for their own uses. While I do...

kevinds

Without TILE CPU support from Docker, there can be no OCI images for RouterOS to consume short of getting someone else (who?) to provide a complete build toolchain. Chicken-Egg... With no Tile systems being able to run docker, there is no reason to create the toolchain. The system has to be able to...

kevinds

m8, Im shutting down my virtual machine in isp manager via "restart" and "stop" buttons without any effect. Is there a third option not in your screenshot? I've had to try them all, one at a time, on various cloud platforms, to get it to work.. Otherwise, extend the timeout way ...

kevinds

If I'm able to build a linux with tile-gx support, will my tile CCR1 be able to run containers? No because Mikrotik never released the Container package for them.. I was not happy about this decision... My CCR1036 and CCR1016 routers with 16GB RAM would have made great hosts.. It seemed to be plann...

kevinds

Is there any easy way to source Mikrotik activities from the LAN interface as opposed to where the default 0.0.0.0/0 points?

It uses the IP of the interface closest to the chosen gateway.

The easiest way would be to remove the 0.0.0.0/0 route.

Use your IPSec tunnel for the default route.

kevinds

Routers with only SFP+ ports are not very practical to use. Optical modules are nice, everything else runs so hot that I would not want to have it I never suggested to use them though. My CCR1032 has two SFP+ ports and 8 twisted-pair 1gbps ports. That meets the suggestion of "at least two 2.5 ...

kevinds

If you have another client on that 192.168.88.0 segment (let's say 192.168.88.2), it will not be reachable from 192.168.77.0-segment unless you make a proper routing rule and provided there is no forward rule blocking it. No.. Unless there is a rule blocking it, it will be reachable. By default, ro...

kevinds

now my question is there a way to connect Cyber+Connect on same port no3 ? because the net provider installed an ONU device in which he said i can connect 4 pppoe account at same time. where both cyber and connect account work on same fiber. they create 4 vlan port in ONU device 2 for 2 cyber accou...

kevinds

If I was to guess, it doesn't work because the "issue" is at the other side, it isn't down long enough for the session to re-establish. Without seeing your configurations, try the "keep-alive" parameter. How do you trigger the script to enable/disable? Is it automated? Do you kno...

kevinds

Why does MikroTik not make more routers with at least two 2.5 ports? My guess is they will come out with 10g ports and not waste time with anything less. They already have... Routers with multiple 10gbps ports are not rare.. Otherwise, 1x10gbps port and 10x1gbps ports could still saturate the 10 gb...

kevinds

,
could you share the whole script pls ?

You quoted a link to it...?

kevinds

Just to update, the solution is working perfectly BUT it is quite CPU intensive Yes it is, checking the log seems to be very inefficient. I have a script that checks the log for activity (thank you rextended), when it is done it reruns the script.. Ties up an entire CPU core, when it is done, it si...

kevinds

Works okay on Android, iOS though. Static is best though.

Because it is getting it from the local cellular tower or GNSS, the phone knows where it is.

Not GeoIP.

kevinds

Useless call home. It should be done once and off the first successfull time you turn on the device on internet, not other times. That is how it updates the serial number DDNS so it does need to be done frequently, and time doesn't advance when a RouterBoard is unplugged, so if that is the configur...

kevinds

Not really, modern carriers and ISPs are rolling out RFC8805, which gives you accurate info upto the zip/pin code, even for individual /32 v4 or /128 IPv6 if you want it to. In MikroTik, even if I use my own commercial ASN/IP address space, the autodetect never worked correctly, even though RFC8805...

kevinds

We're going to be deploying WIFI in a large MDU, approx 300 units. We'll be doing WIFI with a separate VLAN per unit. We'd like to do a CGNAT setup. What are some best practices to make this work as good as possible? We'll have one public IP for the building. I would strongly suggest hiring someone..

kevinds

for troubleshooting reasons, i would like to have the eth5 of my 750G as dhcp client. Then be able from my LAN to access the network on eth5. how could i add eth5 as dhcp client and be able to see whatever network is attached in there, please? Are you able to draw out a diagram for what you are try...

kevinds

Hello, If possible this to be implemented in Mikrotik itself. The task will be: - Make a list with all free Stratum 0/1 servers - From that list pick up the 3 servers with lower ping and show to you. - To show stratum status in column (is it a 0 or 1 or whatever). Kind of but not really, it won't s...

kevinds

My question is what databases are used by MIKROTIK to detect my geo ip or does it "fly in" from NTP server?

NTP doesn't do anything with time zones.

GeoIP is pseudo-science, just guessing..

CGNAT ISPs also makes the guessing hard.. I suggest just setting the timezone.

kevinds

Should I change allow-fast-path to "no" or remove the Fast Forward option in the bridge to be able to filter the traffic with the Router firewall? My transparent firewall, ether6 up-link, ether7 down-link. /interface bridge add name=bridge1 /interface bridge port add bridge=bridge1 ingres...

kevinds

Which script are you have been using?

I'm using a modified version of this one viewtopic.php?p=935938&sid=9a9086e98c87 ... ed#p935938

kevinds

Thank you! How would you do that? Can you point me to some documentation?

Which part? But if it is working for you, great.

kevinds

No builds for MAC and LInux. That will be nice addition.

They test it with wine, it works very well, except one version in the past, and that was quickly corrected.

kevinds

The other, more modern script does not work on me as I get the integer error. I'm skipping v7.13, going see what changes v7.14 and maybe v7.15 bring and then take a look at fixing the script after that, since fetch is mentioned in the beta changelog. v7.12 is fine for my networks, what I needed in ...

kevinds

# remove the current list completely :do { /ip firewall address-list remove [find where comment=$description dynamic]} on-error={}; ### line replaced ### :local data ([:tool fetch url=$url output=user as-value]->"data") I don't like that line.. With the script this thread is focused on, i...

kevinds

I log onto so any different routers for so many different reasons I cant actually conceive of a reason why I would want this feature. BUT to echo what some others have said, if they are using it and find it useful then maybe the issue is just that I have not tried it and I don't know what I am miss...

kevinds

That didn't work for me, so I removed the address list, created a script that opens the port just before the certificate renewal and closes immediately after, and set it to run every 90 days. I setup a second system, either container or VPS, NAT'd behind the router, it does the renewal and with a h...

kevinds

Let's Encrypt and dynamic Address List firewall rules Cool With their insistence on never giving up their list of servers, I'm surprised they made it that easy.. *thinking* Going to investigate this a lot more. I am very curious why their IPs keep ending up on my automated blacklists, should be abl...

kevinds

The www and www-ssl IP services are running and port 80 is open for Let's Encrypt hosts:

How? Let's Encrypt doesn't publish their servers.

kevinds

means that one expecting support to mission critical applications should go with another vendor (with an order of magnitude larger price tags for sure). Support wouldn't be for free, but it would be available this way or another. If this is needed then one is supposed to go to a "Certified Con...

kevinds

Did you try v7.13.2?

kevinds

it would make sense for them to jump on that bandwagon.

Why?

kevinds

1) Have you ever used Sessions? (default ones are <own> and <none> and you can make more) Yes.. All the time. 2) Describe in a few words, what you think they do They save the 'state' of Winbox. Which windows are open, where they are placed, the selected tab in each window, and any filters that might...

kevinds

check this

That isn't OAuth?

kevinds

Seriously? $*%&$(*@(#$!^*#

Time to stop using Google then I suppose.

kevinds

never said anything about v2..

The torrent is for v2 and RC v3

kevinds

I don't I want current versions to auto download .. Ok.. But v2.9 from 2007? You are a trainer, so you are aware that you can't install a version before the 'factory version' it came with. Wanting to install and use it would be similar to wanting to install and use Windows XP.. The question is stil...

kevinds

IPv4 and IPv6 traffic is separated.

IPv6 is not backwards compatible with IPv4 so it has to be separated.

Tunnelbroker is kind of goes against what I said above, but only kind of.

Maybe I don't understand your question.

kevinds

Perhaps but they have to find it first.

I've seen very few attacks on IPv6.

I started using IPv6 in 2008, I've seen maybe 10 in that time, at least 3 of them I suspect they got the IPs from my ISP.

kevinds

Why on Earth, would you need to use /32 on local and /31 on remote? This is a very poor implementation of RFC3021, if you could even call it an attempt. It isn't an attempt, there is no attempt, RFC3021 doesn't work on RouterOS.. That is another user telling you what will work, if you can't use a /...

kevinds

Likely no sources?

The previous post was from ~12 years ago, the OP was from 2007.

What are you doing that you need/want ROS v2.9 or ROS RC v3?

kevinds

I've been seeing that too, two IP addresses, one at time, but different from yours. I was thinking, 'what are they doing'? They are trying to break the encryption password, after that, they need to figure out an account user/pass, maybe a certificate.. I made a post about this on the other forum we ...

kevinds

its even not possible to revert them (because of constant reboot) without netintsall.

Is there an issue with NetInstall?

That is where I would start.. NetInstall v7, start fresh.. Major OS upgrades do not always go as planned, on any system.

kevinds

The way the datacentre is setup, you don't need the router.

Set the Mikrotik up as a transparent firewall.

It would make more sense, especially for a datacentre to route the /28 to a single IP assigned to your router.

kevinds

I hope you updated RouterOS.. Your version really isn't safe to use.. But I checked my notes, I didn't use IPv6 in v6 as I found bugs that made it not work for me (features that were supposed to be available and worked for IPv4 that simply had no effect for IPv6). I suspect your firewall is blocking...

kevinds

I'll check my notes later but 6.42.1 has known, big security issues, please update!

Also check that it hasn't already been compromised.

kevinds

I have not used v7 because it seems to be more problematic based on what I'm reading. But you also said you've found bugs in v7.. Which is it? Based on what you are using it for, problematic in what way? Yes there are bugs in the OS and some features are half-baked.. That is the cost trade-off for ...

kevinds

Yes, I've found bugs in v7 just like everyone else. If you really think v7 is bug free it's quite obvious this is a waste of time because you're wearing blinders. There's clearly a bug in the software. Again, I have provided my evidence. The versions I've tried are 'stable' and 'long-term' as label...

kevinds

How are you able to make that claim?
I can not deploy an unreliable version of RouterOS.

And how can you make that claim? Have you tested/tried it? What is unreliable about it?

Seriously, you saying there is a bug in the software you are using but you won't install the software update.

kevinds

long-term versus stable channel

They used to be different versions.. 6.x vs 6.y, now that is no longer the case. Stable and long-term are the same 6.x version now.

There is not going to be any more changes to v6, just minor patches. It was already said that v6.49 is the final v6 version.

kevinds

It is on the "latest version". According to Mikrotik update server, it is "up to date". https://mikrotik.com/download Shows 6.49.11 and 7.13. I didn't like 7.13 for the changes in fetch, I went back to v7.12.1 for my CCRs. In the drop down, choose Upgrade (?), to get the latest ...

kevinds

Try updating RouterOS The last few versions had updates that specifically dealt with pasting large text with SSH, but I am not sure if the Terminal window is an SSH connection or Telnet. *) ssh - fix error that caused large chunks of text not being pasted in their entirety into console; *) ssh - imp...

kevinds

It isn't though. I provided my evidence in the post you quoted! Where/what? They are not being sold/made anymore. They are still being updated. Latest update was 2023-12-14, latest beta 2023-12-19. v6.49 is 2+ years old now (2021-10-07), the last update to it, v6.49.11, was 2023-12-11, but they hav...

kevinds

It isn't EoL but it is EoS (end of sales). The manufacturer discontinued the Tile CPUs, so no more can be made. will not receive any specific attention/bugfixes to tile. This is unfounded. v7 is the updates and bug fixes, you are not installing them. It is well known v6 is getting security updates o...

kevinds

The fact that this is the only response I get says a lot about Mikrotik.

This is a user forum.. Mostly users here.. There are a few employees here but not many..

Have you tried upgrading firmware? Why are you still using v6?

kevinds

Yes, I do this..

Best setup depends on your wants and needs. There is no 'best'.

kevinds

I've seen a couple of Mikrotik employees look at this post.

How do you know they were employees?

kevinds

And switched L2TP VPN for WireGuard.

This probably made the biggest impact.

kevinds

I'm kinda surprised/annoyed they don't make those a v7.13.1 update.. There is still time, maybe they will.. They kinda broke fetch for many use-cases.

kevinds

did try both the option but the problem is the network is on the same subnet. router == locked
network cannot change subnet yet

Why is that a problem?

You are using PPPoE on both WANs, you don't need DHCP on the physical interfaces, it is causing you issues, so don't use it.

kevinds

in dhcp client added wan1 and wan2 and use peer dns and default route = no

Instead, just remove or disable them.

kevinds

- Currently OLT is accessible by MGMT port via 136.1.1.100. It would be great if somehow I can access the ZTE OLT from Winbox Terminal Please let me know if it make sense and if it can be achieved??? Why 136.1.1.100?? That is Amazon's IP space Otherwise, terminal, system/ssh 136.1.1.100 user=

kevinds

I see what you mean.
From the 7.5 stable release notes. CHR is not mentioned at. All. Only x86.

CHR is x86_64 though.

kevinds

again the device won't boot after upgrading from 7.12 to 7.13 and I'll have to fly halfway around the world again to do the Netinstall in person and who knows if it will reinstall. Time to install out-of-band access? I have one that requires a flight to get to too.. It corrupted during the v6.x to ...

kevinds

Strictly a guess,

Two are likely ground, one RF..

Assuming no other damage, why not solder the port back on instead?

kevinds

I get slow VPN Speeds on VPN at about 100Mbps. I've had this problem for a long time.. My testing, it is very related to the server's processing power. Hardware acceleration needs to be there, after that, the server's CPU has a huge impact.. My CCR1036, the maximum is around 200 mbps. CHR, with 8 c...

kevinds

Any suggestions or experiences with this? Test your boost adapter and see how much power it actually provides, and if the voltage is consistent with different power draws.. At the very least, sometimes the posts specs are just 'wishful thinking'. And yes, the boot cycle may have more draw than runn...

kevinds

Thank you.

kevinds

Export with "show-sensitive" to include users and their hashed passwords. Also the ability to import users and include pre-hashed passwords.

kevinds

script to convert ubuntu 22 to CHR?

Just use dd with the raw image.

But it doesn't always work. Does your VPS provider offer other options than Ubuntu? Personally, I've had the best 'luck' starting with a FreeBSD VPS.

Otherwise, ask your VPS provider for help.

kevinds

https://mikrotik.com/client/transferprepaid

If you haven't already purchased it, you can use a reseller, and provide the reseller the account to apply it to.

kevinds

According to the table, the container feature is not available on CHR. That is not what that table shows. It is absent from the "Not Supported", so it is supposed to work. Tile architecture is missing at least one entry though. It is, and it does work. As OP discovered, try the various sh...

kevinds

For my routers, this stopped working with the v7.13 update.. invalid value of "to", must be integer The very old, original version, that had the maximum 63kb size limit, still works though.. While the script runs, seeing this many times in the log, I believe it is each 'chunk'? Download fr...

kevinds

It states, when the traffic is routed ( by some other function aka routing) through this interface it will be given a source address of this interface.

No. The selection (in my solution, the listed subnet) will be given the source address specified in the 'Action'

Search found 652 matches