Community discussions

MikroTik App

Search found 119 matches

by nxs02
Fri May 06, 2016 3:48 pm
Forum: Beginner Basics
Topic: forward chain rules not being implied [SOLVED]
Replies: 4
Views: 1139

Re: forward chain rules not being implied [SOLVED]

device that connected to the same switch can communicate each other, nothing u can do about that
by nxs02
Fri May 06, 2016 3:21 pm
Forum: Announcements
Topic: v6.35.2 [current] is released!
Replies: 64
Views: 28482

Re: v6.35.2 [current] is released!

keep up the good work guys :D
by nxs02
Tue May 03, 2016 6:10 am
Forum: General
Topic: How can drop netcut
Replies: 4
Views: 1874

Re: How can drop netcut

and also u need forwarding option to disable in wireless interface
by nxs02
Tue May 03, 2016 5:33 am
Forum: General
Topic: Winbox Safe mode
Replies: 26
Views: 49090

Re: Winbox Safe mode

i am connecting via wireless to my CRS (RoS 6.35), open winbox and click Safe Mode. than i do disable the interface wlan1 and surely i got disconnected with my CRS. after long waiting (about 15 minutes), the wlan1 stay disable and i have to connect with cable to enable it again. Q: how actually the...
by nxs02
Sun May 01, 2016 9:12 pm
Forum: Beginner Basics
Topic: Wap problem
Replies: 6
Views: 1234

Re: Wap problem

reset it?
by nxs02
Sun May 01, 2016 8:06 am
Forum: General
Topic: IPV6: can't ping external hosts from internal network
Replies: 13
Views: 3732

Re: IPV6: can't ping external hosts from internal network

check ur forward chain in firewall rules?
by nxs02
Sun May 01, 2016 8:04 am
Forum: Beginner Basics
Topic: Wap problem
Replies: 6
Views: 1234

Re: Wap problem

try to connect to it with ip address
doesnt matter if its not shown in neigbourhood list, u still can connect to it with ip address
by nxs02
Sun May 01, 2016 8:01 am
Forum: Beginner Basics
Topic: First to own mikrotik hap lite but i encounter a problem
Replies: 5
Views: 1166

Re: First to own mikrotik hap lite but i encounter a problem

press the reset button before turn it on, after u press it then turn it on and after 20s release the reset button
by nxs02
Wed Apr 27, 2016 2:52 am
Forum: Announcements
Topic: v6.35.1 [current] is released!
Replies: 84
Views: 25559

Re: v6.35.1 [current] is released!

Just upgraded my RB951 to this version... looks good...

Edited:
System >> Health in RB951 looks weird http://www.tiikoni.com/tis/view/?id=7143c0b
by nxs02
Mon Apr 25, 2016 2:24 pm
Forum: Beginner Basics
Topic: how to detect and block access via one port
Replies: 23
Views: 4596

Re: how to detect and block access via one port

what u need is blocking with address list and yes u can block it until 14 days
by nxs02
Mon Apr 25, 2016 2:21 pm
Forum: Beginner Basics
Topic: login problem
Replies: 3
Views: 872

Re: login problem

back it up first then reset it
by nxs02
Mon Apr 25, 2016 2:19 pm
Forum: Beginner Basics
Topic: Need Help
Replies: 9
Views: 1324

Re: Need Help

u need to accept in forward chain communication between that 2 subnet
by nxs02
Sun Apr 24, 2016 3:12 am
Forum: General
Topic: ICMP Block on Network (LAN)
Replies: 7
Views: 2572

Re: ICMP Block on Network (LAN)

Two things jump out at me reading your rule- actually three: 1: you used the input chain. Input only refers to traffic to the Mikrotik itself. FORWARD blocks traffic going THROUGH the router. 2: if you reject ICMP with an ICMP message - what's the point? ;) Probably you mean drop... And most import...
by nxs02
Sun Apr 24, 2016 2:59 am
Forum: General
Topic: Winbox Safe Mode warning
Replies: 2
Views: 1154

Re: Winbox Safe Mode warning

hi guys i have a problem i cant do any changes in mikrotik because idid my user "admin" with limited power :( please help me
reset ur mikrotik?
by nxs02
Sat Apr 23, 2016 5:43 am
Forum: General
Topic: High traffic in the ethernet port protocol 814
Replies: 14
Views: 1507

Re: High traffic in the ethernet port protocol 814

as i was said its very difficult to trace who sending it and what add they aiming for
by nxs02
Thu Apr 21, 2016 4:50 am
Forum: General
Topic: mikrotik help with my router RB450g
Replies: 2
Views: 734

Re: mikrotik help with my router RB450g

after u click upgrade, u need to reboot the router
by nxs02
Thu Apr 21, 2016 4:45 am
Forum: Beginner Basics
Topic: Which Router do i need.
Replies: 1
Views: 512

Re: Which Router do i need.

to simplify what u need to choose from is MT that can handle bandwidth u will use
by nxs02
Thu Apr 21, 2016 4:42 am
Forum: Beginner Basics
Topic: pppoe dialer
Replies: 2
Views: 710

Re: pppoe dialer

ppp -> pppoe client is place to make pppoe dialer
by nxs02
Thu Apr 21, 2016 4:40 am
Forum: Beginner Basics
Topic: webserver isolation on local network
Replies: 17
Views: 1887

Re: webserver isolation on local network

simple use different network on ether5, then drop communication between server and local network in firewall forward chain. first check is ether5 not to slave - in default config ether2 is master on ether3-5 yup im agree with him, use different network, then use forward chain drop in firewall rules
by nxs02
Wed Apr 20, 2016 4:26 pm
Forum: General
Topic: High CPU Usage on PPPoE user Terminination...
Replies: 2
Views: 916

Re: High CPU Usage on PPPoE user Terminination...

fasttrack?
by nxs02
Wed Apr 20, 2016 4:17 pm
Forum: Beginner Basics
Topic: Extending wifi using two RB951
Replies: 3
Views: 851

Re: Extending wifi using two RB951

1. wireless repeater
2. u can set ur password in wireless security profile
by nxs02
Wed Apr 20, 2016 4:13 pm
Forum: Beginner Basics
Topic: Maximum speed internet link /Velocidade maxima de link de internet
Replies: 6
Views: 1098

Re: Re:

Table shows the throughput through the router. Not output /input traffic from the routers point of view.
Exactly , is there any way to calculate what maximum link one RB can handle
afaik it depend on RB's processor and RAM and i dont know if there is a way to calculate it
by nxs02
Wed Apr 20, 2016 4:05 pm
Forum: General
Topic: RB951ui-2hnd as multiple load balancer?
Replies: 14
Views: 2539

Re: RB951ui-2hnd as multiple load balancer?

bridge?
by nxs02
Tue Apr 19, 2016 5:57 pm
Forum: General
Topic: fasttrack not working and mikrotik make my network slowwwww
Replies: 12
Views: 2618

Re: fasttrack not working and mikrotik make my network slowwwww

wondering why u not adding default drop in last line
Of course then it will no longer work!
It needs at least a rule to match new traffic in that case.
yeah, im forgot it.
he need accept traffic from LAN and forward it to GW and drop the rest
by nxs02
Tue Apr 19, 2016 5:23 pm
Forum: General
Topic: fasttrack not working and mikrotik make my network slowwwww
Replies: 12
Views: 2618

Re: fasttrack not working and mikrotik make my network slowwwww

wondering why u not adding default drop in last line
by nxs02
Tue Apr 19, 2016 5:16 pm
Forum: General
Topic: winbox 2.2.14
Replies: 6
Views: 124767

Re: winbox 2.2.14

hhhmmm... someone bump an old topic :D :D
by nxs02
Tue Apr 19, 2016 5:12 pm
Forum: Beginner Basics
Topic: Bridge Filter
Replies: 5
Views: 1087

Re: Bridge Filter

accept each interface to IpPublic and drop the rest? or u can use horizon bridge
by nxs02
Tue Apr 19, 2016 4:00 pm
Forum: General
Topic: RB951ui-2hnd as multiple load balancer?
Replies: 14
Views: 2539

Re: RB951ui-2hnd as multiple load balancer?

imo using RB951ui-2hnd with having total bandwidth more than 5Mbps will slow down ur router
by nxs02
Tue Apr 19, 2016 6:40 am
Forum: General
Topic: Block access from IP range (10.10.10.4-10.10.10.254) to an IP (10.10.10.3) or how to isolate clients in LAN subnet
Replies: 3
Views: 1016

Re: Block access from IP range (10.10.10.4-10.10.10.254) to an IP (10.10.10.3) or how to isolate clients in LAN subnet

Bridge horizon, bridge firewall, and other layer2 (ethernet in this case) technologies are required to do what you want because inside of a given subnet, the hosts can just talk directly to each other without using the router. That being the case, an IP firewall cannot stop hosts in the subnet from...
by nxs02
Tue Apr 19, 2016 6:38 am
Forum: General
Topic: How can share equal bandwith
Replies: 6
Views: 1172

Re: How can share equal bandwith

why not using simple queue with pcq?
by nxs02
Tue Apr 19, 2016 6:35 am
Forum: General
Topic: tcp syn-flood
Replies: 9
Views: 2615

Re: tcp syn-flood

im curious if u need that firewall filter, imo as long as u have default forward drop and client isolation than u are fine
by nxs02
Mon Apr 18, 2016 3:39 pm
Forum: Beginner Basics
Topic: port list
Replies: 6
Views: 1941

Re: port list

interesting....
by nxs02
Mon Apr 18, 2016 3:36 pm
Forum: General
Topic: Limit speed for incoming connection per IP
Replies: 4
Views: 1347

Re: Limit speed for incoming connection per IP

afaik u can do that in firewall rules
by nxs02
Mon Apr 18, 2016 9:02 am
Forum: General
Topic: Mikrotik as source of DNS Amplification attacks
Replies: 31
Views: 13064

Re: Mikrotik as source of DNS Amplification attacks

understand now the need of default drop
by nxs02
Mon Apr 18, 2016 8:20 am
Forum: General
Topic: I want to know my router manufacture date.
Replies: 6
Views: 1591

Re: Ping is not possible from Dude to google.

Hello Guys 1- I install Dude 3.6 on my Windows 8.1 2- I add my 8 port Huawei switch, Local host, and Google(8.8.8.8) Question- I did not ping any devices, trace root not shown, I join all the devices viva Ethernet link, Ping not shown, Telnet is not working etc. Can anyone please help me out that w...
by nxs02
Mon Apr 18, 2016 8:18 am
Forum: Beginner Basics
Topic: What is fasttrack ?
Replies: 12
Views: 11357

Re: What is fasttrack ?

the interesting was before 6.35 version come out in my router fasttrack is sometimes work and sometimes not (most the time is not workin) but after i update it to 6.35 the fastrack feature is always work :D :D
by nxs02
Mon Apr 18, 2016 8:10 am
Forum: General
Topic: I want to know my router manufacture date.
Replies: 6
Views: 1591

Re: I want to know my router manufacture date.

afaik in serial no format is represent the manufacture date but only mikrotik the one who know how to read it
by nxs02
Sun Apr 17, 2016 2:26 pm
Forum: General
Topic: Mikrotik as source of DNS Amplification attacks
Replies: 31
Views: 13064

Re: Mikrotik as source of DNS Amplification attacks

yup most people not aware that even with default drop in input chan, if they check allow remote dns request then port 53 will opening its door from outside DNS access and they need to close it from wan side access to secure it.
by nxs02
Sat Apr 16, 2016 6:32 pm
Forum: Beginner Basics
Topic: Adding ether1-gateway to bridge
Replies: 5
Views: 3449

Re: Adding ether1-gateway to bridge

its supposed ether1 isnt in the bridge and also u can access the modem with Firewall (if u are using default forward drop) and NAT rules
by nxs02
Sat Apr 16, 2016 4:49 am
Forum: General
Topic: v6.35 [current] is released!
Replies: 103
Views: 28966

Re: v6.35 [current] is released!

keep up the good work guys :D
by nxs02
Thu Apr 14, 2016 2:52 pm
Forum: General
Topic: Block ip addresses
Replies: 5
Views: 982

Re:

First of all you need to distinguish what are the good and what are the bad senders. What idea do you have? If you believe the list of the bad addresses is finite, then you can easily drop all traffic from them by one rule in forward chain. But I am sure there will be new and new abusing ip address...
by nxs02
Thu Apr 14, 2016 3:43 am
Forum: General
Topic: Block ip addresses
Replies: 5
Views: 982

Re: Block ip addresses

what about only accept certain ip in port 25 and drop the rest
by nxs02
Thu Apr 14, 2016 3:39 am
Forum: Wireless Networking
Topic: Radius + UserManager + Wifi
Replies: 3
Views: 1170

Re: Radius + UserManager + Wifi

anyone know what need to be set in wireless security profile in general tab and radius tab? topic of interest to me. As far as I could understand usermanager not support eap . Will it be supported? Unclear. Workaround to install openwrt+freeradius -> metarouter how about wap2 for Radius + UserManag...
by nxs02
Wed Apr 13, 2016 2:30 am
Forum: Beginner Basics
Topic: Firewall rule? Only MAC.. HELP
Replies: 3
Views: 773

Re: Firewall rule? Only MAC.. HELP

yes u can do that in firewall rules
by nxs02
Tue Apr 12, 2016 3:37 pm
Forum: Beginner Basics
Topic: internet for a restaurant or cafe shop
Replies: 13
Views: 3253

Re: internet for a restaurant or cafe shop

they key is radius + hotspot + usermanager
by nxs02
Sun Apr 10, 2016 2:27 am
Forum: Beginner Basics
Topic: Firmware for Cloud Core Router
Replies: 3
Views: 1330

Re: Firmware for Cloud Core Router

Thanks for the reply, I have updated the Router OS to 6.34.4 but in the /system/routerboard the factory firmware, current firmware and upgrade firmware are all showing 3.27
then it means at the moment there is no new update for firmware
by nxs02
Fri Apr 08, 2016 3:53 pm
Forum: General
Topic: High traffic in the ethernet port protocol 814
Replies: 14
Views: 1507

Re: High traffic in the ethernet port protocol 814

based on my experience, its very difficult to trace who sending it and what add they aiming for
by nxs02
Fri Apr 08, 2016 3:35 pm
Forum: General
Topic: High ARP Incoming
Replies: 12
Views: 1657

Re: High ARP Incoming

so ether2 is ur inbound traffic from ur ISP to ur router? but why not using ur ether1 interface?
im curious too what packet is that. based on my experience, its very difficult to trace who sending it and what add they arping it.
by nxs02
Thu Apr 07, 2016 6:18 pm
Forum: Wireless Networking
Topic: Radius + UserManager + Wifi
Replies: 3
Views: 1170

Re: Radius + UserManager + Wifi

anyone know what need to be set in wireless security profile in general tab and radius tab?
by nxs02
Tue Apr 05, 2016 4:33 pm
Forum: Wireless Networking
Topic: Radius + UserManager + Wifi
Replies: 3
Views: 1170

Radius + UserManager + Wifi

Anyone know detail tutorial article about integration and configuration Radius + User Manager for authentication wireless client (just for Home use)?

thanks before.
by nxs02
Tue Apr 05, 2016 5:07 am
Forum: Beginner Basics
Topic: hidden Harbour
Replies: 12
Views: 1521

Re: hidden Harbour

default drop in input and forward chain?
by nxs02
Tue Apr 05, 2016 5:02 am
Forum: Beginner Basics
Topic: DHCP offering lease [ip] for [mac] without success
Replies: 22
Views: 8364

Re: DHCP offering lease [ip] for [mac] without success

or use the bridge horizon feature...
I like this feature quite a bit myself - for a simple client isolation configuration, it's very useful.
simple, useful, and very powerful :D :D
by nxs02
Mon Apr 04, 2016 9:39 am
Forum: General
Topic: bridge filters for prevent clients from seeing ip and mac ?
Replies: 12
Views: 1960

Re:

What about using the bridge horizon to disable the communication between selected bridge ports in the similar way like disabled default forward does it for wifi clients?
yes its work...
by nxs02
Mon Apr 04, 2016 5:48 am
Forum: Beginner Basics
Topic: DHCP offering lease [ip] for [mac] without success
Replies: 22
Views: 8364

Re: DHCP offering lease [ip] for [mac] without success

or use the bridge horizon feature...
by nxs02
Mon Apr 04, 2016 5:29 am
Forum: General
Topic: bridge filters for prevent clients from seeing ip and mac ?
Replies: 12
Views: 1960

Re: bridge filters for prevent clients from seeing ip and mac ?

Assume your hotspot gateway is 192.168.88.1 you should allow your clients to communicate with their gateway with this 2 rules : add chain=forward dst-address=192.168.88.1 src-address=192.168.88.0/24 add chain=forward dst-address=192.168.88.0/24 src-address=192.168.88.1 then drop every packets in sa...
by nxs02
Sun Apr 03, 2016 9:52 am
Forum: General
Topic: bridge filters for prevent clients from seeing ip and mac ?
Replies: 12
Views: 1960

Re: bridge filters for prevent clients from seeing ip and mac ?

bridge horizon also usefull for ports and client isolation
by nxs02
Sun Apr 03, 2016 8:14 am
Forum: General
Topic: bridge filters for prevent clients from seeing ip and mac ?
Replies: 12
Views: 1960

Re: bridge filters for prevent clients from seeing ip and mac ?

what he mean is forward chain drop src 192.168.88.0/24 dst 192.168.88.0/24
by nxs02
Fri Apr 01, 2016 3:29 pm
Forum: General
Topic: is it possible to turn "excessive broadcasts/multicasts, probably a loop" warning off?
Replies: 2
Views: 1311

Re: is it possible to turn "excessive broadcasts/multicasts, probably a loop" warning off?

afaik u can limit the rate of packet type (broadcast, multicast, and etc) in bridge filter
by nxs02
Fri Apr 01, 2016 3:23 pm
Forum: General
Topic: Hello Is there a solution to protect against intrusion cain and abel
Replies: 3
Views: 711

Re: Hello Is there a solution to protect against intrusion cain and abel

what u mean cain and abel?
im confused in here...
by nxs02
Fri Apr 01, 2016 3:12 pm
Forum: Announcements
Topic: v6.34.4 [current] is released!
Replies: 30
Views: 17032

Re: v6.34.4 [current] is released!

What's new in firmware v3.32 ?
Changelog is now to v3.31:
http://wiki.mikrotik.com/wiki/RouterBOOT_changelog
yes finally... :) :)
keep up the good work guys...
by nxs02
Thu Mar 31, 2016 4:50 am
Forum: General
Topic: x86 and ethernet/port isolation
Replies: 3
Views: 638

Re: x86 and ethernet/port isolation

maybe u should run the torch on ether1 when ether2 network is busy
by nxs02
Thu Mar 31, 2016 4:32 am
Forum: General
Topic: NOT TO DO. Weird instalations?
Replies: 386
Views: 247509

Re: NOT TO DO. Weird instalations?

Creativity at its finest :lol: :lol:
by nxs02
Wed Mar 30, 2016 7:10 pm
Forum: Beginner Basics
Topic: Rb941-2nd delete startup script
Replies: 3
Views: 768

Re: Rb941-2nd delete startup script

connect to router via mac add isnt the safe way right from security pov?
by nxs02
Wed Mar 30, 2016 9:53 am
Forum: General
Topic: Mikrotik RB112 not have licence???
Replies: 14
Views: 1927

Re: Mikrotik RB112 not have licence???

Well NAND is not completely failed it just have some bad blocks (which are marked after reinstallation with netinstall). It is important that ROS 5.26 does behave normally now. The main problem is coming from fact that this procedure with netinstall, in order to be successful, made me to format NAN...
by nxs02
Wed Mar 30, 2016 9:20 am
Forum: General
Topic: Routing Youtube Traffic Doesnt Work
Replies: 10
Views: 2693

Re: Routing Youtube Traffic Doesnt Work

Youtube have all changed to https making it impossible to do this today. The proponents of https like what they have accomplished: impossible for men-in-the-middle to influence the handling of their traffic. Of course it is shortsighted, because this now causes operational problems in the networks t...
by nxs02
Wed Mar 30, 2016 3:00 am
Forum: Announcements
Topic: v6.34.4 [current] is released!
Replies: 30
Views: 17032

Re: v6.34.4 [current] is released!

firmware release notes is in http://wiki.mikrotik.com/wiki/RouterBOOT_changelog
but they not update it yet...
by nxs02
Tue Mar 29, 2016 4:29 pm
Forum: General
Topic: hAP lite 3.29 firmware upgrade?
Replies: 5
Views: 2199

Re: hAP lite 3.29 firmware upgrade?

Are there release notes for Firmware 3.32 ?
by nxs02
Tue Mar 29, 2016 4:22 pm
Forum: Announcements
Topic: v6.34.4 [current] is released!
Replies: 30
Views: 17032

Re: v6.34.4 [current] is released!

nice...
keep the good work...
by nxs02
Tue Mar 29, 2016 5:21 am
Forum: Beginner Basics
Topic: HOW TO SEE BOTH DEVICE ROUTEROS CONFIGURATION
Replies: 4
Views: 777

Re: HOW TO SEE BOTH DEVICE ROUTEROS CONFIGURATION

export ur router conf
by nxs02
Mon Mar 28, 2016 3:57 pm
Forum: General
Topic: Burst
Replies: 2
Views: 696

Burst

What is Burst mean in Limit Bridge Filter Rule?
and is it true set 'Burst' value at least as high as 'Rate' value?
by nxs02
Mon Mar 28, 2016 2:42 pm
Forum: General
Topic: RB750 Gr2 to a Act as DSL PPPoE client
Replies: 2
Views: 673

Re: RB750 Gr2 to a Act as DSL PPPoE client

1. give each interface ip add or bridge them, depend on what u want
2. on dhcp client
3. layer7 protocols?
by nxs02
Mon Mar 28, 2016 2:39 pm
Forum: General
Topic: [Ask] How to Block connective WiFi user from mikrotik
Replies: 2
Views: 939

Re: [Ask] How to Block connective WiFi user from mikrotik

u need to know how that software connecting to wifi.
exp they use specify port or not, if yes u can block that port
other than that is difficult to block software
by nxs02
Mon Mar 28, 2016 2:28 pm
Forum: General
Topic: RB751U upgrade system,but can't boot normal
Replies: 1
Views: 401

Re: RB751U upgrade system,but can't boot normal

first try to reset it, if that not successful then try netinstall
by nxs02
Mon Mar 28, 2016 2:25 pm
Forum: General
Topic: How to monitor WAN link
Replies: 1
Views: 564

Re: How to monitor WAN link

IMO u need make scheduler script for that purpose.
by nxs02
Mon Mar 28, 2016 2:18 pm
Forum: Beginner Basics
Topic: Slave interfaces vs Bridge
Replies: 5
Views: 1435

Re: Slave interfaces vs Bridge

so which is better for peformance? router cpu or switch cpu.
by nxs02
Sat Mar 26, 2016 2:22 pm
Forum: Beginner Basics
Topic: Reflash gone wrong
Replies: 4
Views: 805

Re: Reflash gone wrong

u need install the right wireless package?
and wondering why u not prefer to upgrade it through winbox interface than netinstall it
by nxs02
Sat Mar 26, 2016 9:49 am
Forum: General
Topic: PPPoE DC
Replies: 2
Views: 514

Re: PPPoE DC

apparently changed modulation not solving the problem
the only way i solved this problem is with ping script :D :D
by nxs02
Fri Mar 25, 2016 3:50 am
Forum: General
Topic: PPPoE DC
Replies: 2
Views: 514

Re: PPPoE DC

problem solved when i change the adsl modulation :D :D
by nxs02
Thu Mar 24, 2016 1:47 pm
Forum: General
Topic: PPPoE DC
Replies: 2
Views: 514

PPPoE DC

Anyone know why when im not using internet then PPPoE connection in my Mikrotik RB951Ui-2nd will be disconnected
Capture.JPG
but when im back using the internet again then PPPoE connection will be stay stable.
by nxs02
Thu Mar 24, 2016 9:27 am
Forum: General
Topic: No login - All services disabled
Replies: 2
Views: 602

Re: No login - All services disabled

lesson to be learned, next time dont forget click that safe mode button :D :D
by nxs02
Thu Mar 24, 2016 9:17 am
Forum: General
Topic: Firewall - PPS Limit
Replies: 6
Views: 2005

Re: Firewall - PPS Limit

Noone aware if Mikrotik/RouterOS is able to limit packets per second (pps) per IP ?
yes ur right, it can...
usually im doin it in bridge firewall filter...
btw anyone know how many packets per second (pps) for counter measure DDoS?
by nxs02
Thu Mar 24, 2016 9:09 am
Forum: General
Topic: DNSsec/DNScrypt plan?
Replies: 5
Views: 2925

Re: DNSsec/DNScrypt plan?

interesting :D :D
by nxs02
Thu Mar 24, 2016 9:03 am
Forum: Beginner Basics
Topic: IP and MAC Address Validation before pass through the routeros
Replies: 7
Views: 1677

Re: IP and MAC Address Validation before pass through the routeros


If you want to go even further you can even set /32 mask for every client.
how u set /32 mask for every client in mt?
by nxs02
Wed Mar 23, 2016 6:13 am
Forum: Beginner Basics
Topic: New to MikroTik
Replies: 15
Views: 1707

Re: New to MikroTik

add chain=input comment="Allow LAN access to router and Internet" connection-state=new in-interface=bridge-LAN u dont need anyone in LAN have access to router. add chain=forward comment="Allow LAN access to router and Internet" connection-state=new in-interface=bridge-LAN is it really need to speci...
by nxs02
Mon Mar 21, 2016 2:06 am
Forum: General
Topic: Winbox - MAC connection with multiple interfaces
Replies: 3
Views: 971

Re: Winbox - MAC connection with multiple interfaces

afaik use discovery interfaces.
by nxs02
Mon Mar 21, 2016 2:00 am
Forum: Beginner Basics
Topic: Do disabled firewall / NAT rules affect performance?
Replies: 2
Views: 716

Re: Do disabled firewall / NAT rules affect performance?

afaik having too many firewall rules and queues will slow down mt peformances
by nxs02
Sat Mar 19, 2016 4:03 am
Forum: Wireless Networking
Topic: RB951Ui-2HnD Wireless log
Replies: 1
Views: 664

Re: RB951Ui-2HnD Wireless log

"disconnected, extensive data loss" because the device is too far from MT AP or device battery is too low
for deauth i dont know yet....
by nxs02
Fri Mar 18, 2016 2:34 pm
Forum: General
Topic: how do I block upload to IP
Replies: 13
Views: 2712

Re: how do I block upload to IP

If input chain says: Allow established,related Allow ICMP Drop in-interface=pppoe1-out (3 rules in that exact order) Then you'll be safely blocking everything from the Internet - including DNS queries- but allowing anything that's a reply for something the Mikrotik requested. Nice and easy. agree w...
by nxs02
Fri Mar 18, 2016 2:25 pm
Forum: General
Topic: ip block communication within a network .
Replies: 6
Views: 934

Re: ip block communication within a network .

or u can use horizon bridge feature :D
by nxs02
Fri Mar 18, 2016 2:13 pm
Forum: General
Topic: some help with filter rules needed
Replies: 16
Views: 2978

Re: some help with filter rules needed

The same behaviour can be achieved (isolating bridge members from each other) on a bridge by setting horizon values, check that if you are using bridges for your (v)lans.
agree with this...
this is the best way isolating bridge port mebers from each other :D :D
by nxs02
Fri Mar 18, 2016 2:35 am
Forum: General
Topic: how do I block upload to IP
Replies: 13
Views: 2712

Re: how do I block upload to IP

well im usually looking at log (log for rule that important)
by nxs02
Fri Mar 18, 2016 2:25 am
Forum: General
Topic: some help with filter rules needed
Replies: 16
Views: 2978

Re: some help with filter rules needed

default-forwarding=off -> wireless clients cannot communicate with each other

default-forwarding=on -> they can.
by nxs02
Fri Mar 18, 2016 2:06 am
Forum: General
Topic: signal jammer
Replies: 7
Views: 1176

Re: signal jammer

interesting... :D :D
by nxs02
Fri Mar 18, 2016 2:05 am
Forum: General
Topic: dynamic bandwidth limit base on active user?
Replies: 4
Views: 2131

Re: dynamic bandwidth limit base on active user?

google it dude simple queue with pcq
by nxs02
Fri Mar 18, 2016 2:02 am
Forum: General
Topic: ip block communication within a network .
Replies: 6
Views: 934

Re: ip block communication within a network .

u can do that with forward chain in firewall rule
by nxs02
Fri Mar 18, 2016 1:56 am
Forum: Beginner Basics
Topic: RB951Ui-2Hnd - Wireless configuration - best practices
Replies: 6
Views: 4970

Re: RB951Ui-2Hnd - Wireless configuration - best practices

but be careful, AFAIK setting up TX power to big will damaging the mikrotik wireless chip
by nxs02
Fri Mar 18, 2016 1:53 am
Forum: Beginner Basics
Topic: First time setup firewall
Replies: 23
Views: 8127

Re: First time setup firewall

IMO dont need drop invalid packet rule because without that rule, in the end invalid packet will get drop by drop/reject the rest rule.
by nxs02
Mon Mar 14, 2016 8:37 pm
Forum: General
Topic: Please add HTTPS support on mikrotik.com
Replies: 39
Views: 4631

Re: Please add HTTPS support on mikrotik.com

agree with this... 8)
by nxs02
Mon Mar 14, 2016 4:42 pm
Forum: Announcements
Topic: Winbox3.3 released!
Replies: 37
Views: 12879

Re: Winbox3.3 released!

nice... keep the good work :D
by nxs02
Mon Mar 14, 2016 4:40 pm
Forum: General
Topic: eth protocol 806(arp)
Replies: 9
Views: 3644

Re: eth protocol 806(arp)

IMO its normal ARP packet but that make weird is it has consumed alot of yours bandwidth
by nxs02
Mon Mar 14, 2016 4:40 am
Forum: General
Topic: eth protocol 806(arp)
Replies: 9
Views: 3644

Re: eth protocol 806(arp)

can u show me image capture the eth proto when u torch it?
by nxs02
Mon Feb 22, 2016 2:30 pm
Forum: General
Topic: Ask about DNS
Replies: 3
Views: 519

Re: Ask about DNS

how about maybe arp poisoning or arp spoofing
by nxs02
Mon Feb 22, 2016 10:12 am
Forum: General
Topic: Ask about DNS
Replies: 3
Views: 519

Ask about DNS

what is this mean http://www.tiikoni.com/tis/view/?id=a57b49a
its in IP >> DNS
am i get dns hijacking or maybe some DNS attack?
by nxs02
Sun Feb 21, 2016 1:33 am
Forum: Wireless Networking
Topic: Management Protection Key
Replies: 0
Views: 1418

Management Protection Key

How to use Management Protection key in Access List and Security Profile? and What Management protection use for?

thanks before.
by nxs02
Tue Dec 22, 2015 2:12 am
Forum: Wireless Networking
Topic: broadcasting an unwanted wifi network
Replies: 6
Views: 1178

Re: broadcasting an unwanted wifi network

already did it (reset wireless config) but not working...
IMO maybe this is happen when wifi client device is too far from MT so client wifi device is trying connect with wifi signal strength that too weak
by nxs02
Mon Dec 21, 2015 1:35 pm
Forum: Wireless Networking
Topic: Boost wifi signal strength
Replies: 4
Views: 2830

Re: Boost wifi signal strength

what i mean was signal strength...
i changed it to chan 11 and it solved my problem
so its solved :D
by nxs02
Fri Dec 18, 2015 3:05 am
Forum: Wireless Networking
Topic: Boost wifi signal strength
Replies: 4
Views: 2830

Boost wifi signal strength

anyone know how to boost wifi signal strength on RB951Ui-2nd?
by nxs02
Fri Dec 18, 2015 2:47 am
Forum: Wireless Networking
Topic: broadcasting an unwanted wifi network
Replies: 6
Views: 1178

Re: broadcasting an unwanted wifi network

no it didnt have vlan on it
Capture.PNG
by nxs02
Fri Dec 18, 2015 2:16 am
Forum: Wireless Networking
Topic: broadcasting an unwanted wifi network
Replies: 6
Views: 1178

Re: broadcasting an unwanted wifi network

i check in interfaces >> vlan and there is no vlan
by nxs02
Tue Dec 15, 2015 8:20 pm
Forum: Wireless Networking
Topic: broadcasting an unwanted wifi network
Replies: 6
Views: 1178

broadcasting an unwanted wifi network

here is example that i took from internet (not mine) http://imgur.com/zGAjnuJ that same happened with my RB951Ui-2nd
so there is ssid name "Home-2892" and the other ssid "?" with same mac and etc
if i change channel and the other ssid "?" will follow
what the hell is going on here? any ideas?
by nxs02
Tue Dec 15, 2015 2:35 am
Forum: Wireless Networking
Topic: No internet connection through wifi
Replies: 1
Views: 1316

Re: No internet connection through wifi

SOLVED

im accidentally block port 53 in firewall rules :D
thats why internet access in wifi wasnt working as usual :D
by nxs02
Mon Dec 14, 2015 5:33 am
Forum: Wireless Networking
Topic: No internet connection through wifi
Replies: 1
Views: 1316

No internet connection through wifi

my laptop and mobile can connected to wifi RB 951Ui-2nd but the problem is no internet access but when i connect my laptop to mikrotik using LAN cable, i got internet access.
before this problem started, everything is working fine, i can connect through wifi and internet access working fine.
by nxs02
Fri Dec 11, 2015 1:24 am
Forum: General
Topic: [ASK] Firewall Filter Rules
Replies: 5
Views: 663

[ASK] Firewall Filter Rules

i use 104 firewall filter rules in my mikrotik RB951Ui-2nd
its to many or just fine?
by nxs02
Sat Nov 14, 2015 9:24 pm
Forum: General
Topic: [Ask] load image in whatsapp become slow
Replies: 1
Views: 929

[Ask] load image in whatsapp become slow

Im using RB951Ui-2nD and when im using whatsapp in my mobile phone through wifi to mikrotik and its become slow when loading image in group chat or private chat in whatsapp
Anyone had same experience? and how to fix this issue?
by nxs02
Thu Nov 12, 2015 2:40 am
Forum: Beginner Basics
Topic: [SOLVED] IP Output from Mikrotik
Replies: 1
Views: 1655

Re: [ASK] IP Output from Mikrotik

SOLVED Everyone who is noticing unusual traffic on your router - we have managed to reproduce this issue and we will fix it as soon as possible. The router is checking the ssh key for amazon cloud installation environments, a feature coming later. As a temporary workaround you can use this solution:...
by nxs02
Thu Nov 12, 2015 2:39 am
Forum: General
Topic: [SOLVED] IP Output from Mikrotik
Replies: 1
Views: 504

Re: [ASK] IP Output from Mikrotik

SOLVED Everyone who is noticing unusual traffic on your router - we have managed to reproduce this issue and we will fix it as soon as possible. The router is checking the ssh key for amazon cloud installation environments, a feature coming later. As a temporary workaround you can use this solution:...
by nxs02
Sat Nov 07, 2015 5:57 pm
Forum: Beginner Basics
Topic: [SOLVED] IP Output from Mikrotik
Replies: 1
Views: 1655

[SOLVED] IP Output from Mikrotik

after i was upgraded my mikrotik to 6.33, there is output connection from my public ip add to 169.254.169.254:80
but when i was downgraded my mikrotik to 6.32.3 then that connection is doesnt show up.
even that my internet connection is running like as usual
im just corious what ip address is that?
by nxs02
Sat Nov 07, 2015 1:34 pm
Forum: General
Topic: [SOLVED] IP Output from Mikrotik
Replies: 1
Views: 504

[SOLVED] IP Output from Mikrotik

after i upgraded my mikrotik to 6.33 and then in output connection show up a connection IP Add 169.254.169.254:80 from my IP Public Add but if im downgrade my Mikrotik to 6.32.3 then that output connection doesnt show up again even that, my internet connection is worked as usual. im just corious wha...