MikroTik

Saleh9416

The problem also exists with v6 after Apple & Co. updated the random MAC policy and the browsers the cookie policy...

Yeah, I know. but when you set the device mac address to private, it works fine in v6.

Saleh9416

I will check why nobody has responded, but the ticket does not include much information. Please add what devices you tested, do the same devices fail all the time, or it's random, etc. Hi @normis, support finally responded via email. The cookie login works fine after the first successful login, but...

Saleh9416

Amazing

Saleh9416

Hello, I opened ticket #[SUP-131614] on Oct/19 but no response so far via email. Then I saw in the automatic response that "For a faster communication, write to us in the support portal. Portal tickets have higher priority in the ticketing system". and I did on 25/Oct but also no response ...

Saleh9416

I solved the problem.

The problem was with hotspot dynamic rules! I added accept rules between the two networks and moved them on top.

Saleh9416

Your firewall rules are not even close to the default, which I recommend you reinstall to replace the crap in there now. If not at least move to something resembling clear and efficient. /ip firewall filter add action=accept chain=input comment="Accept established and related" \ connectio...

Saleh9416

According to your firewall nothing blocks any LAN communication. You should be able to do what you want (L3 communication between devices). Except if you have some hotspot isolation feature (which I am not familiar with). But as I said, your choice of IP is buggy. And you have no protection/seperat...

Saleh9416

Hello If there are no firewall rules, then by default router will route between networks. if there are rules, then without seeing them, its hard to suggest a solution. Egert /ip firewall filter add action=reject chain=input comment="Drop WAN DNS requests" dst-port=\ 53,5353,64872 in-inter...

Saleh9416

Hello

I'm running 2 local networks on the same Router and I want to be able to access my PRTG server and my Access Points WebUI configured on the 1st network from the 2nd network.
1st Network= 40.40.0.0/21
2nd Network= 50.50.0.0/24

Any help would be appreciated.

Saleh9416

Newer WinBox versions shouldn't break client's routers running stable, older ROS versions, disconnecting CAPs or whatever else the current version is able to kill or mess up with. Or atleast there should be some warning regarding this, when it encounters unsupported (anymore) ROS versions instead o...

Saleh9416

When I update to Winbox v3.25, on the Hotspot>Active tab, everything is ok, the connection is ok. But in the event when turn to Hotspot>Host tab, everything is gone wrong, everybody in the hotspot has been disconnected, then when I back to the Hotspot>Active tab, all the active has been disconnecte...

Saleh9416

It'd be great if you support Arabic characters in the next version like on Winbox Android App.

Saleh9416

Hello! I recently enabled DHCP snooping and I noticed that fast path has been automatically disabled! I'm not sure if it's a bug or not, because I checked the wiki for bridge fast path conditions and I didn't find anything regarding DHCP snooping. https://wiki.mikrotik.com/wiki/Manual:Fast_Path Vers...

Saleh9416

Bump!

Saleh9416

Hello! I have several simple queues with different priorities and I'm not sure if it's working properly! For priority to work, should the queue have a parent queue? or a strict order? /queue simple add limit-at=512k/512k max-limit=1M/10M name=PS4 priority=1/1 target=\ 10.10.3.231/32 add limit-at=512...

Saleh9416

I used torch tool and didn't notice anything suspicious!

I don't know what's causing the problem and I guess MT support don't know either because they haven't replied yet and it's been a week!

Saleh9416

Shadeofspirit - the rules are on top of the filter list! and I also used this site http://openresolver.com to make sure it works.

And I'm running an open hotspot service, so it won't be an easy task to check for viruses!

Saleh9416

/ip dns
set allow-remote-requests=yes cache-size=20480KiB max-concurrent-queries=300 \
    max-concurrent-tcp-sessions=80 servers=8.8.8.8,8.8.4.4

Saleh9416

mistry7 - I mentioned that I already have the rules to drop requests from WAN!

Saleh9416

Hello! I'm noticing a high CPU usage at different times of the day and after using the profile tool, it appeared DNS was the culprit! I checked DNS and noticed the cache is increasing rapidly and filled with weird entries. I'm allowing remote requests and I already have a firewall rule to drop DNS r...

Saleh9416

I don't know about anybody else, but I found that all windows updates were consistently coming from a particular IP address, 13.107.4.50 I was able to treat all packets from that IP as updates, and it seems to work for me to throttle them, without needing Layer 7. Hi! /queue simple add dst=13.107.4...

Saleh9416

same here.

I solved the problem by isolating the ports.

Saleh9416

Hello! I have RB110AHx2 with hotspot server configuration and several local interfaces (master port)! and sometimes the latency randomly increases (1200ms-1500ms) with dropped packets When the problem happens, I notice unknown load on RX on only 2 local interfaces (2 outdoor access points), And as s...

Saleh9416

Hello!

I've been facing a problem for a while with adding a batch of users in UM! for instance after adding a batch of 800 users, I receive a message in red "783 out of 800 completed".

And then I'd have to reselect the 800 users after adding 17 users.

Is it a bug?

Saleh9416

I wonder if there's a way to exclude hotspot authentications from the connections limit rule? or add the IP address to the list after 5 seconds from exceeding the limited connections, so that clients could log in to the hotspot before adding their IP addresses to the list!

Saleh9416

So, It definitely was an SYN flooding attack! And I solved the problem by limiting connections! /ip firewall filter add action=add-src-to-address-list address-list="Input Syn_Flooder" \ address-list-timeout=5s chain=input comment=\ "Add Syn Flood IP to the list" connection-limit=...

Saleh9416

Did you increase the cache size for your DNS resolver to a value that is more than the RAM you can spare for this? (depending on the router model) Or is there something else that consumes a lot of memory, e.g. the firewall connection table? What does "free memory" say in System->Resources...

Saleh9416

So you can easily find which device at which access point the traffic comes from...

Yes

Saleh9416

If this is your local network, can't you go and find the owner of that IP ?

No I can't, I have more than 90 clients via several access points!

I need to know what's causing the problem! is it a DDoS attack? And do I need a firewall rule to protect the router from whatever causing it?

Saleh9416

Hello! My router rebooted twice so far today, and after rebooting I found this message: "system,error,critical System rebooted because of kernel failure system,error,critical Out of memory condition was detected system,error,critical router was rebooted without proper shutdown" after the r...

Saleh9416

I finally found a workaround! /ip route add dst-address=HostA gateway=GW1 scope=10 add dst-address=HostB gateway=GW2 scope=10 add distance=1 gateway=HostA routing-mark=to_WAN1 check-gateway=ping add distance=2 gateway=HostB routing-mark=to_WAN2 check-gateway=ping add dst-address=10.0.0.1 gateway=Hos...

Saleh9416

*) hotspot - improved user statistics collection process

Does that mean it will display the statistics in real time?

Saleh9416

Hello guys! I've 2 satellite modems and I'm using PCC method and it works like a charm, but sometimes when there's a problem in one of the modems-WAN1 the internet disconnects and clients can't resolve DNS until I shut down the modem or unplug it from the MT router! then everything works normally vi...

Saleh9416

Hello!

I was wondering about the correct order of masquerade rules in the nat tab! I have dual wan with hotspot configuration and I'm not sure about the order of the last three rules.

Saleh9416

pcc will dispatch connections between wans but will Not combine the speeds in 15mbps thats another story

إمنوّر

Saleh9416

PCC loadbalance
Per Connection
more connection = better balance[/quote]

Does that mean what's happening in my case is normal?!

Saleh9416

add action=mark-connection chain=prerouting dst-address-type=!local hotspot=auth in-interface=LAN new-connection-mark=WAN1_con per-connection-classifier=both-addresses-and-ports:2/2 when we are dividing the numbers into 2 the Divide remaining are just 0 and 1 in your case u must Use 3/0 3/1 3/2 Hel...

Saleh9416

Hello! I have 2 satellite modems with different static IP addresses and different gateways! and I'm using PCC method for unequal 2 Wan load balancing (Wan1= 10Mbit | Wan2= 5Mbit). At first, I've noticed that it works but not stable! When it's working most of the time I don't get full speed. And whil...

Saleh9416

Hello! I have a network of 50+ clients and I noticed that while transferring files latency becomes high until the transfer process finishes! I want to completely prevent users from using the network to transfer files. I disabled FTP service, but nothing changed! Any help would be appreciated! Thank ...

Saleh9416

Hello

Does anyone know why COA doesn't work?

I want to change bandwidth limitation on-the-fly on Hotspot with uptime limit+transfer limit, but it doesn't work!

regards

Saleh9416

Update: (non-hotspot Accept rules) conflict with hotspot rules!

Saleh9416

Hello, move all non hotspot rules at top there will be no conflict with hotspot rules .

Gesendet von iPhone mit Tapatalk

Thanks for replying! I have moved the non hotspot rules to the top then rebooted the router! after reboot, I've noticed that most hotspot rules counters are 0!

Is that normal?

Saleh9416

Hello! I have several filter rules on my RB1100 and after configuring hotspot, several hotspot rules were added dynamically on top of the list! Would the other filter rules still work properly after hotspot rules? If I move them back on top of the list, there would be no confliction with hostpot rul...

Saleh9416

Wow! Mikrotik forum is really dead.

Saleh9416

check the Queue tree and Queue types.
if you use Queue tree and mangle, try to disabled them.

Both Queue tree and mangle are empty!

Saleh9416

Hello I'm trying to set a rate limit for a few users. it seems to work, but not properly! for example: I set 700K/4000K for a rate limit, but the user gets an unstable & slow speed, and rarely reaches the max limit! I used hotspot/user profile rate limit, DHCP static IP rate limit, User manager ...

Saleh9416

RouterOS does not have real DNS resolver, only simple proxy. You still need to point it to proper external resolver (e.g. Google's) and thus depend on it. By using RB as DNS resolver for clients, you can shave off few milliseconds from repeated queries, because RB will cache them. But it won't help...

Saleh9416

Hello guys!

I was wondering which is better between using Google public DNS server, or check "Allow Remote Requests" option and use my RB1100AHx2 as a DNS server (Gateway IP=DNS IP)?

I have +50 clients.

Saleh9416

Thanks for your reply!

I was confused because I have RB2011 and it's not like RB1100!

Thanks again.

Saleh9416

Hello guys!

I've recently bought RB110AHx2, and I noticed that (ether1 to ether5) switch is (switch2) when it supposed to be (Switch1) .. and (ether6 to ether10) switch is (switch1) when it supposed to be (Switch2).

Is that normal?!

Saleh9416

Saleh9416

Hello..

I have 2 satellite modems each 1 is with a 10Mbit connection and a static IP from the same provider, and I want to bond them on my RB2011UiAS!

I hope that you could help me with the configuration!

Saleh9416

Hello..

I currently have RB951Ui-2HnD with configured hotspot and usermanager, and I want to buy RB2011UiAS-2HnD-IN! Is there a way to transfer the configuration and usermanager database to the new Router?

And both will be on the same RouterOS '6.36.4 (Bugfix only)'.

Saleh9416

Hello!

I hope that you'd add a new column to show (Total transfer left) for each user on users page!

Thank you.

Saleh9416

Do you have graphs active? What's the size of the user-manager database? Have you checked it isn't a problem of lack of disk space?

Graphing isn't active .. and the user-manager database is quite small!

Free HDD space : 110.0 MiB

Saleh9416

I meant netinstalling it again and see if it fixes the issue. Netinstall actually re-formats the NAND and re-installs ROS from scratch. Sometimes NAND gets corrupted, specially if the router experiences blackouts, or you use the NAND intensively: to store logs on disk, have graphs active, user-mana...

Saleh9416

Check RB firmware on System > Routerboard Save an export of your configuration, and do a netinstall: http://wiki.mikrotik.com/wiki/Manual:Netinstall Current firmware: 3.24 Upgrade firmware: 3.24 And i installed the current firmware (6.32.4) using netinstall. If you have a free time maybe you could ...

Saleh9416

It looks like am gonna have to buy a new one!

Saleh9416

Yours is not the same problem, the post you link to mentioned disable the "drop invalid" filter rule that is part of the default configuration, which you don't have. Have you noticed if CPU goes to 100% when service is interrupted? Is there traffic on the WAN interface? Nope i haven't not...

Saleh9416

Hello... I'm facing a very annoying issue with hotspot! While everything seems good it suddenly stops working with some users! they can't access internet and status page don't open to log out...and when i log in to winbox i find them in the active tab and data is being consumed like crazy, but as i ...

Saleh9416

Hello, maybe you are using Tooway or Hylas. Both are UK based companies, they have many reseller in Europe. Tooway assign Ip from few countries. They bought some IP from some countries and assign to everyone. I am in Spain but my IP is from UK (I am happy, I can watch UK programs ans subscribe to U...

Saleh9416

You are not right. You can change the mac by cli.

How?

Saleh9416

Google and similar apps will use your public IP to determine your location, and it's not an exact science. Your basic routers are probably obtaining a different IP than the Mikrotik, so Google and the sorts will again try and determine your location. This means that the router, whether Mikrotik or ...

Saleh9416

Hello

I'm based in Libya and my real ip is from Germany (Satellite Internet), but apps (mainly google) show that i'm from Iraq!

when i connect satellite modem to any basic router it shows the location of my real ip in most apps.

is there a way to make it so on MikroTik?

Saleh9416

I have the same problem as well! also mac address takes too long to appear on winbox

Saleh9416

You could program some sort of QoS to ensure gaming traffic is prioritized, but I'm afraid that won't lower the satellite latency, in an ideal world it will keep it to the minimum (550ms). So the answer is no... if 550ms is the best latency you get with no traffic, that's the minimum you are going ...

Saleh9416

Hello

Is there any possible way to lower ping via MT? i'm on satellite internet and the ping is between 550ms to 700ms!

with that high ping online gaming is impossible.

Saleh9416

i'm having the same issue and i tried everything but nothing!

i tried netinstall and it says installing then ready several times!!

HELP

Edit: Never mind! solved by simply exiting netinstall and start it again

Saleh9416

Nothing??

Saleh9416

Hello

Statistics tab for each user isn't updating unless i reboot the MT! and even that doesn't work sometimes.

Is that how it actually works? or is it a bug or something?!

V6.32.4

Saleh9416

Depends on how you setup your proxy and what the app is "talking" to. If the app is simply "calling" a web page, then yes it should work. If the app is accessing other data, then you will have to ensure that the traffic for the app goes through the proxy. Is there a way to ensur...

Saleh9416

A web proxy can speed up your connection and reduce the amount of data being pulled down off of the internet. There are some caveats... First off space is a limiting factor, the Mikrotik can only store so much before it starts getting overwritten. Second proxies will only cache data after the initi...

Saleh9416

Hello everyone I'm still new to the world of MikroTik and of course that means i'm gonna need the help of the experts from time to time! I read somewhere that activating ip>web-proxy (cache) will speed up browsing and reduce data usage! is that true?! If yes, i hope that you'll guide me on how to ac...

Search found 73 matches