MikroTik

abab_rafiq

my god ..

Just planned to upgrade to 3.7

Now waiting for your answer ?? Norm or anyone there ??

Rafiq...

abab_rafiq

If I'm not wrong you want to use only 2 IP address for user and a gateway, not more than that or not less than that.

It is not possible to draw a network with 5 IP address. Only 2,4,8,16,32,64,128,256,512,1024,2048.... like these way is possible. As like you count for your RAM memory.

Rafiq...

abab_rafiq

Calculating IP address without calculating binary system, only for SUBNETTING . All you need to calculate from IP addresses is 1. Network Address? 2. Broadcast Address? 3. Subnet Mask? 4. Total Usable Host? 5. First Usable Host? 6. Last Usable Host? First of All just keep in mind /25 for 128 . Now c...

abab_rafiq

Sorry for late reply. Command not found !!!

abab_rafiq

Thank you very much

abab_rafiq

Is it possible to change the MAC address of any NIC on MT ?

if ( Ans. == Y ) how ?

Rafiq...

abab_rafiq

I think these info will help you .

http://www.mikrotik.com/testdocs/ros/2. ... icense.php

http://wiki.mikrotik.com/wiki/All_about_licenses

Rafiq...

abab_rafiq

May it will help you

#ip firewall filter>chain=forward protocol=tcp tcp-flags=syn action=change-mss new-mss=1400

Rafiq...

abab_rafiq

I think it will better for post on wiki. email goes for personal, doesn't it ??

To bpita, wish a good health 4 u and ur wife  :D

abab_rafiq

I think you are right

abab_rafiq

Me answering myself.

v 2.51 < v X ; X is bad.

Rafiq...

abab_rafiq

use a IP pool for specified profile. otherwise you can select the remote-ip as well.

Rafiq...

abab_rafiq

Think it will help you

http://www.mikrotik.com/testdocs/ros/2. ... p#6.38.3.1

Rafiq...

abab_rafiq

What version are u using now ?? Try after upgrade with latest one.

Rafiq...

abab_rafiq

I am running a bridge for shaping my bandwidth from 2.8. Now upgrade this from 2.51 to 3.4. I do not found any traffic, as well I'd tested for limiting the upload n download rate, but it's not working. Is it a fault of version 3.4 ? The question arise to me because things are very good before the up...

abab_rafiq

It is better for you use some open DNS like 4.2.2.1 , 208.67.222.222 or something like those. All the DNS request differ between your local DNS and the OPEN DNS just for some milliseconds. As you providing Internet connection for browsing, i mean pure data connectivity It won't affect much; actually...

abab_rafiq

There are many VSat Provider in the world. I've known with Hawaii-Teleport, HKT(HongKong Tel), SingTel, SpeedCast etc. All of them are VSAT internet link provider.

First try to find out if there any VSAT link reseller in South Africa. Most of the company has such kind of reseller.

Rafiq...

abab_rafiq

We are waiting for LONG time to see it at Dhaka, Bangladesh.

abab_rafiq

I am not 100% sure but somewhere I'd read that mikrotik can support 132 mbps data transfer.
Maybe it causes the problem.

Rafiq...

abab_rafiq

Dangerous situation can happened from 8v8.biz which use ARP spoofing. For all kinds of network engineer, system admin please read out to block 8v8.biz

http://www.aub5thcse.com/forum/viewtopic.php?t=322

Rafiq...

abab_rafiq

As I tested before for pppoe it doesn't allow to add more than 200 pppoe interfaces. So that no dynamic queue is added then.

Rafiq...

abab_rafiq

I'd install Mikrotik 2.9.35 on my 40 GB HDD as well .. and put some service for 6 months also.

Rafiq...

abab_rafiq

Dear,
Just follow http://www.mikrotik.com/testdocs/ros/2.9/ip/filter.php firewall rules and also try to understand it as well.

abab_rafiq

carefully search for block port for Yahoo messenger(5050) or MSN messenger( MSN messenger choose dynamic port for Audio & Video usually 5004 to 65535, application sharing 1503, File Transfer 6891 to 6900).

Also try with changing TCP-MSS from mangle.

Rafiq...

abab_rafiq

you can easily add ip address by putting commands /ip address add address=195.174.206.5/19 interface=ether1 Explanation : If you already know about /19 prefix then its need not to describe here. If not plz search for CIDR or IP addressing and subnet masking. Interface=ether1 : It is that interface o...

abab_rafiq

I've decided to attened at Mumbai, but little bit confused for availability of seats. cuz I am going there from Bangladesh and I've to register on 18th April.

Dear Normis would you plz put a echo reply to remove my confusion rule ?

Rafiq...

abab_rafiq

Do you mean " free version " = level 1 licensed Router OS. By using level 1 license you are limited to put only 1 queue, so that only one PPPoE user, limitation about implementing firewall. Would you please tell what type of service you have? Put both two gateway as default gateway to your...

abab_rafiq

After putting [admin@Wisp-Router.com] system script> edit 0

YOU JUST GOT ""value-name: ""

Put a double TAB, which shows you "" value-name: ""

Rafiq...

abab_rafiq

Post your route list after connected with both PPPoE account.

You can try mangle for the load balancing if you got same IP for each time you logged-in.

Rafiq...

abab_rafiq

oo my god Chupaka from boobs to baby ..

abab_rafiq

Load Balancing is OK

, If I include with it that's great. Where free of INPUT AND FORWARD RULE

and lots of e-BGP.

Anyway, Chupaka still using the photo(Im sorry Chupaka). And I don't get my answer

Rafiq...

abab_rafiq

Dear Chupaka, That is BW limiting. Normally my other 6 network is running well without using mangle. That what happened on the 7th one. And one thing for you .. " would you please change your picture, it looks odd, boobs are good but not that way ". Sorry for comment such way. Rafiq...

abab_rafiq

Thanks , I just configured my router a simple way for providing internet service. ----> public IP ----> ROUTER ----> private IP I just assigned 6 private IP in my LAN interface and it is running well. It is also run very much well for assigning 7 or more IP in that interface. But problem is limiting...

abab_rafiq

Hello All,
How many IP can I assign in an interface ? I mean how many aliasing IP addressing is possible over one Interface ?

Rafiq...

abab_rafiq

Dear sariao,
It is a fully running system and it is not possible to stop the system. Plz any other solutions ??

Thankx for your reply.

Rafiq...

abab_rafiq

Dear sariao,
Those two

0.0.0.0/0 r 2YY.14Y.58.81 Wan
0.0.0.0/0 r 1XX.10X.38.21 Wan

are my network default gateway. By disabling those causes my network down from outside. !!

Any other solutions plz.

Rafiq...

abab_rafiq

Dear sergejs, I just put the following mangle rule, but things remain same. I also used pre routing chain. ip firewall mangle> print Flags: X - disabled, I - invalid, D - dynamic 0 chain=forward src-address=2YY.14Y.58.96/27 dst-address=1XX.10X.38.32/28 action=accept Rafiq...

abab_rafiq

From Network 1XX.10X.38.32/28 tracert 2YY.14Y.58.100 -d Tracing route to 202.148.58.102 over a maximum of 30 1 <1 ms <1 ms <1 ms 1XX.10X.38.33 2 <1 ms <1 ms <1 ms 1XX.10X.38.21 3 1 ms <1 ms <1 ms 1XX.10X.38.1 4 3 ms 2 ms 1 ms 1XX.10X.32.18 And then got IPs from 1XX.10X.38.32/28 block ISP and goes ro...

abab_rafiq

No firewall to drop ICMP of any usefull port, where from each network (2YY.14Y.58.96/27 & 1XX.10X.38.32/28) everything is running well and fine. Both network can out and available from outside. But not accessible with each other. Where they(network) live together and sharing same room(interface ...

abab_rafiq

Mikrotik Wiki and Mikrotik Reference Manual is completely ready for you.

Rafiq...

abab_rafiq

Both are excelent

http://www.mikrotik.com/testdocs/ros/2.9/ip/filter.php
http://wiki.mikrotik.com/wiki/Securing_ ... rOs_Router

Rafiq...

abab_rafiq

googled and find out raspppoe. Install it as a service in the host PC. Run raspppoe.exe then "query available service". It will sort your checking style.

Rafiq...

abab_rafiq

Unfortunately no wiki for vlan yet.

abab_rafiq

For reset you settings use

[admin@DAtaCOm] > /system reset-configuration

It will ask for a reboot and then reset all your current configuration.

Rafiq...

abab_rafiq

Hello, I just configure policy routing for 2 of my uplink from different ISP. Both are running well, but I cannot ping one network from other one. Below is my route list ip route> rule print Flags: X - disabled, I - inactive 0 src-address=1XX.10X.38.32/28 routing-mark=FiberNet action=lookup table=Fi...

abab_rafiq

funny = easy, good and special
Interesting = OS into another OS.

Rafiq...

abab_rafiq

Why don't you use PPPoE server, where only user name and password is all over. You just specify fixed IP address to your user.

http://www.mikrotik.com/testdocs/ros/2. ... /pppoe.php

Rafiq...

abab_rafiq

You can use VmWare on your CentOS then INSTALL mk. That's so funny and interesting.

Rafiq...

abab_rafiq

Before that you should enable your interface with ARP enable.

http://www.mikrotik.com/testdocs/ros/2.9/ip/address.php

For more information.

Rafiq...

abab_rafiq

Color GREEN represent data IN to your router.
AND
Color BLUE represent data OUT from your router.

Rafiq...

abab_rafiq

1. Check out after connecting with your Wan link you can go outside from you MK box.
2. If you can .. check out your route.
3. Check out your firewall, if you are using PRIVATE IP in LAN you need to nat those with your WAN pppoe link.

plz more specific where you stuck.

Rafiq...

abab_rafiq

Try out with this way. It is easy to use winbox instead of putting command.

[admin@Mikrotik] queue simple> add name="A client" target-addresses=x.x.x.x limit-at=256000/256000 max-limit=256000/256000

Rafiq...

abab_rafiq

Use this for prioritize ICMP. ip firewall mangle>chain=prerouting protocol=icmp action=mark-packet new-packet-mark=ICMP passthrough=yes queue simple>add name="ICMP" dst-address=0.0.0.0/0 interface=all parent=none packet-marks=ICMP direction=both priority=1 queue=default-small/default-small...

abab_rafiq

I think every answer that you are looking for is already written on domain mikrotik.com. So keep posting on new topic plz.

Rafiq...

abab_rafiq

If your p2p-all is not work here then port blocking doesn't make any sense.. I think.

Test with kazza of port 1214.

Rafiq...

abab_rafiq

It is better to use x/y or something like variable instead of your public IP address.

Rafiq...

abab_rafiq

Use proxy to drop or down priority of downloading from rapidshare.com

Actually for stop or make priority for file transferring on port 80 it is the way to use layer 7 classifier.
Regular expression, good knowledge in C and some other types of packet marking is needed to do the better.

Rafiq...

abab_rafiq

" What is the difference between bridge and router" A bridge is work like a bridge just connecting two roads then it seems it is one. And a router keeps two roads separate but make some logical sense to connect those two roads. So when you running on a bridge there are two roads (interface...

abab_rafiq

Just enable those 3 gateway as your default gateway.

Hope it will work .

Rafiq...

abab_rafiq

use torch .. to find out.

Rafiq...

abab_rafiq

I got a another strange problem.. channingzou

I drop everything but cannot login with MAC.

Rafiq...

abab_rafiq

Dear hsx_ws,
Do you want to say two different gateway on same network ?

Rafiq...

abab_rafiq

Use PPTP server on main MT. Make ppp user, connect as PPTP user using PPTP dailer.

Rafiq...

abab_rafiq

Here is the export file ... Rafiq... #################################################################### # aug/07/2007 17:50:24 by RouterOS 2.9.27 # software id = 9EK0-FJT # / interface ethernet set Lan name="Lan" mtu=1500 mac-address=00:08:54:34:6A:96 arp=enabled \ disable-running-check=...

abab_rafiq

Dear channingzou,
I used a p-III with 3 lan card.

Please discurd IP address 192.168.2.10.. and replace all other IP address as you need.
I am not experience with HOTSPOT. Already a copy of this backup is sent to your ftp. This is for others.

I think It will help you.

Rafiq...

abab_rafiq

You can also post what type of router or service you want to provide? Just put the configuration of you router H/W, ( must after install the MK and if you don't want to setup a hotspot or wireless service) and send me a SMS to my cell phone at +8801716488912. I will make myself in my virtual server ...

abab_rafiq

Which FTP are you running there ??

abab_rafiq

Also allow those IP in INPUT rule from where you want to access the graphs.

Rafiq...

abab_rafiq

Try with denying 67-68 port on TCP and UDP both chain.

Rafiq...

abab_rafiq

You can add a firewall mangle here with TCP-MSS of 1400, I got good result with it.
add chain=forward p2p=all-p2p action=jump jump-target=p2p

Rafiq...

abab_rafiq

You can also add another chain for p2p as
add chain=forward p2p=all-p2p action=jump jump-target=p2p

Then you can add any p2p rule there.

It will seperate your p2p rule from others.

Rafiq...

abab_rafiq

I wrote several times but didn't get reply .. though I still hope that a MUM arranged in Bangladesh and I would be glad if MK give me permission to arrange it in BD.

abab_rafiq

Yes that's all as I found ...

Rafiq...

abab_rafiq

For instance to remember OSI 7 layers,
“ All People Seems To Need Data Processing "

I knew there are others

Application
Presentation
Session
Transport
Network
Data Link
Physical

Easy to rembere... huh ??

Rafiq...

abab_rafiq

From your interface check that your Local Interface has ARP enable.

Rafiq...

abab_rafiq

Try with change TCP MSS from #ip firewall filter>chain=forward protocol=tcp tcp-flags=syn action=change-mss new-mss=1400

Now try with IT ...
Rafiq...

abab_rafiq

I am using MK for last 2 years and very much satisfy with it for TCP packet over 10 Mbps. But when it goes for UDP performance goes down. I don't know why, so I wanna change my server with XEON + Intel Server Board + Intel Giga Bit Port Lan Card. Is above configuration give me satisfactory performan...

abab_rafiq

By using a P -IV and 256 MB RAM, with gig bit ethernet card, How much bandwidth can I control with license level4.

Rafiq...

abab_rafiq

Hope it will work

http://forum.mikrotik.com/viewtopic.php ... highlight=

abab_rafiq

No I just enable the forward chain only for my lan IP. I need a solutions badly about this matter. Before I was think mikrotik was easy to handle, but I found many wrong with it especially PPPoE. And what happened on mikrotik,, I don't know they are totally fall with hotspot. Every recent upgrade on...

abab_rafiq

In my PPPoE network when some one run his DHCP server with is running on mshome domain/workgroup, all other users who are not currently logged in PPPoE server can browse though that IP and gateway. Is there any way to stop DHCP traffic to my network or drop all packets coming from others vai that DH...

abab_rafiq

Also you can change all packets tcp-mss as required.

[....] ip firewall mangle> chain=forward protocol=tcp tcp-flags=syn action=change-mss new-mss=XXXX

Replace the XXXX with your desired mss.

Rafiq...

abab_rafiq

I just assigned my simple queue as name="SHARED REAL IP" target-addresses=X.X.X.X/29,Y.Y.Y.Y/29,Z.Z.Z.Z/29, M.M.M.M/29 dst-address=0.0.0.0/0 interface=all parent=none direction=both priority=8 queue=default-small/default-small limit-at=64000/256000 max-limit=64000/256000 total-queue=defaul...

abab_rafiq

thanks for ur prompt reply. have added that queue. but can't access net. Some firewal settings hv to be done I suppose. May be at your forward chain that IP is blocked allow that IP as [admin@server] >ip firewall filter> add chain=forward src-address=X.X.X.X action=accept BEFORE YOU DROP RULE !!! R...

abab_rafiq

RPPPPOE can act as PPPoE server http://www.roaringpenguin.com/en/pengui ... ts/rpPppoe
but mikrotik makes it easer and more flexible with QoS and others.

Rafiq...

abab_rafiq

Try using the Public IP on a PC for those websites. If problem remain then those IPs has problem, contact with your up-stream.

Rafiq..

abab_rafiq

How do I keep log in a remote server which is running on Fedora Core4.

Rafiq...

abab_rafiq

I am using Mikrotik Router OS for PPPoE. Recently sometimes all of my PPPoE user disconnected suddenly. Like if I disable the PPPoE server things are happen such that way. LOG shows the user disconnected .. terminating. Then If I take only one connection to a client and "Query Available Service...

abab_rafiq

From the simple queue section add a queue rule indicating INTERFACE (which will found in advance tab) and set your required bandwidth. FOR EXAMPLE name="LAN" dst-address=0.0.0.0/0 interface=LAN parent=none direction=both priority=1 queue=default-small/default-small limit-at=3584000/3584000...

abab_rafiq

Dear please post your query at forumDOTlinuxDOTorgDOTbd

abab_rafiq

I blocked P2P connection from my router. But some of my user want p2p service, and I also want to favor them. I add my firewall rule as follows, chain=forward src-address=172.16.103.4 p2p=all-p2p action=accept chain=forward src-address=172.16.102.74 p2p=all-p2p action=accept chain=forward p2p=all-p2...

abab_rafiq

I think it is not possible. Cuz for communication between two different network you mast have to go through a layer 3 device.

That's the basic theory..

Rafiq...
http://forum.linux.org.bd
http://forum.linux.org.bd

abab_rafiq

As Example Let you have a router with 2 Ethernet. One is for WAN connectivity and other is for LAN. You just put your WAN address in your WAN interface and make the pppoe server in LAN. You need not to configure any manual IP address in your LAN interface. Then make profile where local address work ...

abab_rafiq

As I understood this means to add rule: "add chain=forward src-address=192.168.0.0/24 action=accept" before the last "Drop everything" rule. This allows clients from inner protected network to access Internet and be safe? Exactly... You can also add your INPUT chain for proctact...

abab_rafiq

Also you can add the MAC address in your IP > Firewall > Filter rule
From the advance tab paste the MAC address of the user where action is for allow his connection or drop this connection.

Rafiq...
http://forum.linux.org.bd

abab_rafiq

Try with manually change the IRQ of your Ethernet card from BIOS.

Rafiq...

abab_rafiq

As far as I know the basic rule to catch P2P packet is using layer 7 classifier. You can classify your packets for different ways like regular expression check, packet header check, and etc etc. So when a new P2P application came in world first you have to figureout that's packet marks then the bloc...

abab_rafiq

newtonek, set Change TCP MSS to no to reduce CPU utilization
I don't understand ;p
Change TCP MSS is set to yes

Set your TCP MSS from ip > firewall > mangle.

choose forward chain
protocol = tcp(6)
tcp flags = syn
action = change MSS
new TCP MSS = 1400

Rafiq...
http://forum.linux.org.bd

abab_rafiq

Try this way by downloading mail from gmail ( If you have a gmail ID). I choose gmail cuz it has facility to download your inbox to your local machine. When you are trying to download winbox may be that's goes fine for coming locally. But if gamil goes right then things are going so well. Rafiq... h...

abab_rafiq

You may set those IP's CIR to 1 bps/s. This type of queuing will keep some bandwidth free

Rafiq...
http://forum.linux.org.bd

abab_rafiq

Put a firewall like
add chain=forward dst-port=80 action=drop
Then sequence those of your IP under the rule and before the rule.
Under the rule block 80 port connectivity to those IP which are under the firewall rule. And before the firewall rule are open.

Rafiq...
http://forum.linux.org.bd

abab_rafiq

Is your DNS in your LAN or from your service provider?
Try using nslookup for test your DNS query speed.
You can also use MK as slave DNS. And also putting the Local IP in PPPoE DNS field.

Rafiq...
http://www.linux.org.bd

abab_rafiq

Much complex as I understand, but possible.
First Distinguish your task in small parts. Hope things done easily.

rafiq...
http://www.linux.org.bd

abab_rafiq

Try using this
http://forum.linux.org.bd/viewtopic.php ... 22ab36283a

rafiq...
http://www.linux.org.bd

abab_rafiq

Dear hci,
If you increasing queue size then it can queued more than 50 packets for passing to your wan interface, but it will increase latency. If you are keep the media server in your own LAN then preformance might be better.

rafiq...
http://www.linux.org.bd

abab_rafiq

Try with drop only [135,136,137,138,139,140,445,67,18142] tcp ports.
And allow others.

Things will goes so easy way.

Rafiq...

abab_rafiq

I am successful by using following way to passing PPPoE connection and public IP with same MK.

Hope this will help you.

http://forum.mikrotik.com/viewtopic.php?t=12959

Rafiq...

abab_rafiq

OK I found it the whole script is for making user for 12 hrs [from 9 PM to 9 PM like this way]. add name=rafiq source={/ppp secret set[find name=rafiqtest] disable=yes {... /interface pppoe-server remove[find user=rafiqtest]} Then make a schedule for user rafiqtest. add name=rafiq on-event=rafiq sta...

abab_rafiq

Try with abills.

http://abills.asmodeus.com.ua/wiki/doku ... install:en

rafiq...

abab_rafiq

Dear kazanova,
In Berif Plz....

Rafiq...

abab_rafiq

I wrote this script myself. But just forgot how do I gather all together in one line.
Dear changeip your suggestion is not working now, and I tried this and otherway for several time.

Please help me.

Rafiq...

abab_rafiq

Dear, Im shy to ask u this question, where I put two command myself but forget HOW do I did it. 15 name="link21_stop" owner="admin" policy=ftp,reboot,read,write,policy,test,winbox,password last-started=jan/16/2007 09:00:00 run-count=2 source= /ppp secret set [find name=link21] di...

abab_rafiq

Add IP pool of you public IPs. Make profile with a public IP in the local address field. Add a route of the whole network [that you added in IP pool]. For example IP ADDRESS GATEWAY INTERFACE X.X.X.X/X X.X.X.X Wan Gateway will be the next hope of your current pppoe server Now add another route at yo...

abab_rafiq

assigne dst-nat and got ping to profile local address. But can't ping to beyond Mikrotik.
There is a default route for ordinary PPPoE user.

Rafiq....

abab_rafiq

I am running PPPoE server in my network with private IP. I wanna pass public IP through it. What will be configuration for passing public IP thorough that server? Like I got 202.148.56.XX/25 from my ISP and want to assign public IP to some of my client using that PPPoE server. Please give me detaile...

abab_rafiq

Dear What will be the local address of my profile? And according to local address what will be the route for public IP? As example I assigned local address 192.168.100.15 and remote address comes from the pool [where pool defined from 192.168.100.16-192.168.100.30. And the default gateway is 192.168...

abab_rafiq

I wanna pass PUBLIC IP through PPPoE.
Where after login user get an PUBLIC IP and connect to INTERNET through that IP address.

Rafiq...

abab_rafiq

I need a such user group where a user can only see the pppoe active user list nothing else. Does winbox could modifiable such way?
Can I take scripting solution for this?

thx

Search found 118 matches