I fully support your proposals to enhance the DNS resolver. At current, I use an external resolver via HTTP/CGI interface to circumvent the limitations of the internal one and would be VERY happy to abandon that path. Resolving arbitrary types also gives the ability for predictable IPv4 A/IPv6 AAAA ...

HTTP interface (with SSL) is also broken on RB3011. After rebooting, the interface dies again after a few minutes. Sometimes it causes high CPU load.

Ask your ISP to assign static ipv6 binding. Maybe you should ask this multi-billion € company for me… kidding :) To my knowledge all residential DSL/Cable providers in Germany do assign random prefixes and there is no way to change this. Static IPv4 address(es) and IPv6 prefixes are, if possible at...

Well, some time ago I asked the same question: http://forum.mikrotik.com/viewtopic.php?f=2&t=114060&p=565539#p565539 At least for residential DSL over here in Germany it's a pretty common use case as the #1 provider (Deutsche Telekom) delegates a dynamic prefixes on every reconnect. Cheap DS...

Thanks for the hint. I forwarded the issue by Email.

Hi, it seems there is a bug in the v6.37.1 RouterOS. I'm using the DNS on an RouterBOARD 3011UiAS to act both as cache and name server for local entries. If I - add a new static entry via WebFig (IP->DNS->Static->Add New) - then reorder this list via drag-and-drop to move the new entry to another po...

Hello,

how do I apply firewall rules to IPv6 traffic with dynamic prefix and SLAAC? Upon dial-in with PPPoE, the prefix changes so I cannot write the full address to the firewall rules.

For ipv6tables, there is already an undocumented solution:
http://blog.dupondje.be/?p=17

Thanks!
Christophe

Hi, I have set up an L2TP/IPSec VPN server according to the 'road warrior' setup in the Wiki: http://wiki.mikrotik.com/wiki/Manual:Interface/L2TP#L2TP.2FIpSec_setup This works so far, but as the interface for each incoming connection is dynamically created, I cannot define firewall rules to filter o...

I did not change any IPSec related configuration, as this seems to be dynamically generated by the L2TP server. Searching for NAT-T only reveals one setting in [admin@x] /ip ipsec peer> print Flags: X - disabled, D - dynamic 0 D address=::/0 local-address=:: passive=yes port=500 auth-method=pre-shar...

Hi, it was pretty easy to setup an L2TP/IPSec VPN server with ros (v.6.34 and .35). In contradiction to all the tutorials I've found, this doesn't work if the client is behind a NAT gateway. The VPN related configuration is /ip pool add name=vpn-pool ranges=192.168.200.100-192.168.200.149 /ppp profi...

Thanks! That was fast

If you define "fast" as "less than three months", yes. Actually I'm a bit worried about software QA at Mikrotik…

I have one RB3011UiAS-RM

Could you please do me a favour and check if your RB3011 clock is working fine? Mine looses about 80 seconds per hour and NTP syncing is not working (with ntp package).

Hi, I'm using a brand-new RB3011 with ROS 6.33.3 with the additional ntp package. I have enabled both ntp client and server, hence devices on the LAN get their time via the RB as 'proxy'. Unfortunate, the RB clock is slow by about 80s per hour. Initially, it gets the right time via ntp client (not s...