Community discussions

MikroTik App

Search found 13 matches

by cthil
Wed Jan 16, 2019 10:49 am
Forum: General
Topic: [Feature Request] :resolve DNS Client Improvements
Replies: 8
Views: 2884

Re: [Feature Request] :resolve DNS Client Improvements

I fully support your proposals to enhance the DNS resolver. At current, I use an external resolver via HTTP/CGI interface to circumvent the limitations of the internal one and would be VERY happy to abandon that path. Resolving arbitrary types also gives the ability for predictable IPv4 A/IPv6 AAAA ...
by cthil
Wed Aug 29, 2018 5:36 pm
Forum: Announcements
Topic: v6.42.7 [current] is released!
Replies: 159
Views: 39442

Re: v6.42.7 [current] is released!

HTTP interface (with SSL) is also broken on RB3011. After rebooting, the interface dies again after a few minutes. Sometimes it causes high CPU load.
by cthil
Thu Dec 15, 2016 7:04 pm
Forum: General
Topic: IPv6 firewall and prefix delegation
Replies: 8
Views: 2411

Re: IPv6 firewall and prefix delegation

Ask your ISP to assign static ipv6 binding. Maybe you should ask this multi-billion € company for me… kidding :) To my knowledge all residential DSL/Cable providers in Germany do assign random prefixes and there is no way to change this. Static IPv4 address(es) and IPv6 prefixes are, if possible at...
by cthil
Thu Dec 15, 2016 6:28 pm
Forum: General
Topic: IPv6 firewall and prefix delegation
Replies: 8
Views: 2411

Re: IPv6 firewall and prefix delegation

Well, some time ago I asked the same question: http://forum.mikrotik.com/viewtopic.php?f=2&t=114060&p=565539#p565539 At least for residential DSL over here in Germany it's a pretty common use case as the #1 provider (Deutsche Telekom) delegates a dynamic prefixes on every reconnect. Cheap DSL router...
by cthil
Thu Nov 17, 2016 9:48 pm
Forum: General
Topic: DNS fails after addition and reorder of static entry
Replies: 2
Views: 527

Re: DNS fails after addition and reorder of static entry

Thanks for the hint. I forwarded the issue by Email.
by cthil
Thu Nov 17, 2016 8:46 pm
Forum: General
Topic: DNS fails after addition and reorder of static entry
Replies: 2
Views: 527

DNS fails after addition and reorder of static entry

Hi, it seems there is a bug in the v6.37.1 RouterOS. I'm using the DNS on an RouterBOARD 3011UiAS to act both as cache and name server for local entries. If I - add a new static entry via WebFig (IP->DNS->Static->Add New) - then reorder this list via drag-and-drop to move the new entry to another po...
by cthil
Sat Oct 29, 2016 11:54 pm
Forum: General
Topic: IPv6 firewalling with dynamic prefix
Replies: 1
Views: 763

IPv6 firewalling with dynamic prefix

Hello,

how do I apply firewall rules to IPv6 traffic with dynamic prefix and SLAAC? Upon dial-in with PPPoE, the prefix changes so I cannot write the full address to the firewall rules.

For ipv6tables, there is already an undocumented solution:
http://blog.dupondje.be/?p=17

Thanks!
Christophe
by cthil
Thu Apr 21, 2016 11:10 am
Forum: General
Topic: How to build L2TP/IPSec server for multiple incoming connections with static interface/rules
Replies: 1
Views: 459

How to build L2TP/IPSec server for multiple incoming connections with static interface/rules

Hi, I have set up an L2TP/IPSec VPN server according to the 'road warrior' setup in the Wiki: http://wiki.mikrotik.com/wiki/Manual:Interface/L2TP#L2TP.2FIpSec_setup This works so far, but as the interface for each incoming connection is dynamically created, I cannot define firewall rules to filter o...
by cthil
Sat Apr 16, 2016 9:15 pm
Forum: General
Topic: L2TP/IPSec VPN server config for clients behind NAT
Replies: 8
Views: 10929

Re: L2TP/IPSec VPN server config for clients behind NAT

I did not change any IPSec related configuration, as this seems to be dynamically generated by the L2TP server. Searching for NAT-T only reveals one setting in [admin@x] /ip ipsec peer> print Flags: X - disabled, D - dynamic 0 D address=::/0 local-address=:: passive=yes port=500 auth-method=pre-shar...
by cthil
Sat Apr 16, 2016 8:42 pm
Forum: General
Topic: L2TP/IPSec VPN server config for clients behind NAT
Replies: 8
Views: 10929

L2TP/IPSec VPN server config for clients behind NAT

Hi, it was pretty easy to setup an L2TP/IPSec VPN server with ros (v.6.34 and .35). In contradiction to all the tutorials I've found, this doesn't work if the client is behind a NAT gateway. The VPN related configuration is /ip pool add name=vpn-pool ranges=192.168.200.100-192.168.200.149 /ppp profi...
by cthil
Tue Mar 15, 2016 10:09 pm
Forum: RouterBOARD hardware
Topic: RB3011: System clock looses seconds and NTP not working
Replies: 11
Views: 3615

Re: RB3011: System clock looses seconds and NTP not working

Thanks! That was fast :)
If you define "fast" as "less than three months", yes. Actually I'm a bit worried about software QA at Mikrotik…
by cthil
Mon Jan 11, 2016 3:33 pm
Forum: RouterBOARD hardware
Topic: RB3011 Block diagram?
Replies: 230
Views: 56001

Re: RB3011 Block diagram?

I have one RB3011UiAS-RM
Could you please do me a favour and check if your RB3011 clock is working fine? Mine looses about 80 seconds per hour and NTP syncing is not working (with ntp package).
by cthil
Sun Jan 10, 2016 7:39 pm
Forum: RouterBOARD hardware
Topic: RB3011: System clock looses seconds and NTP not working
Replies: 11
Views: 3615

RB3011: System clock looses seconds and NTP not working

Hi, I'm using a brand-new RB3011 with ROS 6.33.3 with the additional ntp package. I have enabled both ntp client and server, hence devices on the LAN get their time via the RB as 'proxy'. Unfortunate, the RB clock is slow by about 80s per hour. Initially, it gets the right time via ntp client (not s...