Mikrotik made CRS305-1G-5S.. it's positioned as "desktop" switch. Hmm... Most of desktops still are using cooper. Need 5-8 cooper ports May be 1-2 sfp for uplink/alternate link. Good price like "305" Cooper is useful in home and small offices. It will be great to have powerfull 3...

But the intruder can also sit inside your network. What if the intruder connects in with the MAC address/Neighbors service? There is no filtering possible on that. Nope. If in-port is a part of a bridge - You can filter MAC-Winbox and MAC-Telnet pakets using bridge filter chain input. Example drop ...

Possible, problem is in max MTU and MSS. When tunnel is established, all packets betwwen networks are incapsulated into tunnel IP packets. When one tunnel created inside other (Eoip inside PPtP) - encapsulation occurs twice. Try to decelerate MTU and set TCP-MSS to MTU-40 on a border routers firewall.

If web-server is in the LAN (user PC in the same subnet 192.168.88.0/24), traffic between user and server goes directly, and You can't filter it.

May be wrong order of rules.
The rule created by command "/ip firewall filter add action=accept chain=input dst-port=80 protocol=tcp" should be moved up to position before other drop/reject rules.

The easiest way is:
1) create second routing table for routing through WAN2
2) create route rule that uses second routing table for some trafic (see policy-based routing - /ip route rule)

if You need interface NAME for pptp-server, just use construction like this:
([/int pptp-server get ($"interface") name])
For example, this command logs pptp-server interface name into standart error log:
:log error ([/int pptp-server get ($"interface") name])

This topic must be in "scripting" part.
You got the "number"/"index key" (not name) in array. Normal or not it depends from what do You want to get.
Print what do You want to get and command that You use.

Try to use syntax like this: ($"local-address")

I'm trying to setup MAC-based Vlan with CRS125 switch. Default in my conf interface eth7 is slave of eth2 and belongs to default untagged Vlan. Eth2 connected to the bridge with IP 192.168.1.1/24 According to wiki, on eth port properties I set: /interface ethernet switch mac-based-vlan add src-mac=0...

Hello! Problem: We have 2 offices connected via Internet by GRE tunnels. Each office has only one public IP-address. GRE tunnel established between these public IP. Both offices have LAN with different private IP/subnet. NAT is used to access office users to the Internet. Some users from office #1 L...

Hello! We have two offices connected via Internet by GRE tunnels. Each office has only one public IP-address. GRE tunnel established between these public IP. Both offices have LAN with different private IP/subnet. NAT is used to access office users to the Internet. Some users from office #1 LAN, nee...