Community discussions

MUM Europe 2020

Search found 19 matches

by tfj88
Tue Jan 16, 2018 10:35 am
Forum: General
Topic: Layer 7 & white name list
Replies: 0
Views: 556

Layer 7 & white name list

If I want to add white name list for domain name. *.mytimezero.com *.maxsea.fr *.mapmedia.com *.nobeltec.com Now, i am using ================= /ip firewall layer7-protocol add name=maxsea1 regexp="^.+(maxsea.fr).*\$" add name=maxsea2 regexp="^.+(mytimezero.com).*\$" add name=maxsea3 regexp="^.+(mapm...
by tfj88
Tue Jan 24, 2017 10:26 am
Forum: General
Topic: How to setuo RB750 Hotspot , RADIUS, User manager limit
Replies: 0
Views: 295

How to setuo RB750 Hotspot , RADIUS, User manager limit

hotspot.png My system design like this. I have active RB750 hotspot and link to RADIUS and add A & B in user-manager. RB750 ether 1 connect to internet. RB750 ether 5 connect to ASUS wifi. and ether 5 do not set master port. My question is : why A use name and password to access internet than B no ...
by tfj88
Tue Nov 29, 2016 6:43 am
Forum: General
Topic: SIP Firewall Rules
Replies: 6
Views: 2620

Re: SIP Firewall Rules

Hi, Did you know how to made a layer 7 ? Now, I want to control LINE app via layer 7. http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/L7 Couple of things to keep in mind. 1.) Layer7 is VERY CPU hungry, use it sparingly and only on specific traffic that you know you want to watch. 2.) Layer7 only se...
by tfj88
Thu Sep 01, 2016 3:04 am
Forum: General
Topic: MikroTik Graphing Reset
Replies: 3
Views: 620

MikroTik Graphing Reset

Hello.,

Does anyone know how to reset traffic graphing every first day of the month ??
by tfj88
Mon Aug 01, 2016 12:46 pm
Forum: General
Topic: How to allow a website in RB750
Replies: 24
Views: 2438

Re: How to allow a website in RB750

Because you entered "www" and "/" 
only 6.36 can accept this domain name rule, 6.30 still ip address
by tfj88
Mon Aug 01, 2016 10:41 am
Forum: General
Topic: How to allow a website in RB750
Replies: 24
Views: 2438

Re: How to allow a website in RB750

That is not a domain name, but a URL. 

Domain name is something like "cnn.com" or "toyota.co.uk"

Example of the rule attached
screen.jpg
what version are you used ? Why I cannot do like you?
by tfj88
Mon Aug 01, 2016 10:19 am
Forum: General
Topic: How to allow a website in RB750
Replies: 24
Views: 2438

Re: How to allow a website in RB750

*) firewall - allow to add domain name to address-lists (dynamic entries for resolved addresses will be added to specified list);
web.jpg
You mean this address list ? it only accept IP address not domain name.
by tfj88
Mon Aug 01, 2016 6:53 am
Forum: General
Topic: How to allow a website in RB750
Replies: 24
Views: 2438

Re: How to allow a website in RB750

if you update your router board to routeros 6.36 then you can do it. I am using 6.30 now. If I upgrade to 6.36, how to setup ? you can add website name in firewall rule then accept it. Hi, Could you teach me how to add "website" in firewall rule ? I have add www.jma.go.jp in Dst address but system ...
by tfj88
Fri Jul 29, 2016 2:14 am
Forum: General
Topic: How to allow a website in RB750
Replies: 24
Views: 2438

Re: How to allow a website in RB750

if you update your router board to routeros 6.36 then you can do it.
I am using 6.30 now.
If I upgrade to 6.36, how to setup ?
by tfj88
Thu Jul 28, 2016 3:19 am
Forum: General
Topic: How to allow a website in RB750
Replies: 24
Views: 2438

Re: How to allow a website in RB750

So, Still cannot access the website via ROS.
Because no real IP.
by tfj88
Wed Jul 27, 2016 6:17 am
Forum: General
Topic: How to allow a website in RB750
Replies: 24
Views: 2438

Re: How to allow a website in RB750

Because I have setup firewall rule to block FB & IM & only company mail to access internet.
But now I need also this website to access.
And I cannot find the IP address to put into firewall rule.
I have ping the website but I cannot use that IP go back into website.
I don't know why???
by tfj88
Wed Jul 27, 2016 3:16 am
Forum: General
Topic: How to allow a website in RB750
Replies: 24
Views: 2438

How to allow a website in RB750

Hi.
How can I add http://www.jma.go.jp/jmh/umiinfo.html this website in firewall rule ?
by tfj88
Thu Jun 30, 2016 5:35 pm
Forum: Beginner Basics
Topic: How to allow Line App
Replies: 1
Views: 782

How to allow Line App

Hello , In this forum. A lot of people discuss "How to block something",  But now I need to allow Line app. And now I found a lot of address but still cannot suit for anytime or everywhere. /ip firewall filter add chain=forward comment="LINE TXT" dst-address=23.212.52.0/24 add chain=forward dst-addr...
by tfj88
Mon May 30, 2016 3:19 am
Forum: Beginner Basics
Topic: Forbid / block SNMP
Replies: 4
Views: 833

Forbid / block SNMP

Hi,
Can someone help me how to block SNMP function ?
I do not want this data stream.
SNMP.PNG
Even I have drop all SNMP , I can see traffic in connection.
161.PNG
How can I block or Forbid SNMP ??
by tfj88
Mon May 02, 2016 2:52 am
Forum: Beginner Basics
Topic: Drop DNS server or request
Replies: 7
Views: 1400

Re: Drop DNS server or request

OK, I will try change my setting. Although DNS is small stream, I still do not want to see it. About chains, forward = packets going through your Mikrotik, so if your DNS server is on a server behind your router then use forward input = packets destined to your Mikrotik and don't match a forwarding ...
by tfj88
Mon May 02, 2016 2:48 am
Forum: Beginner Basics
Topic: Drop DNS server or request
Replies: 7
Views: 1400

Re: Drop DNS server or request

Yes, I do not want anything about the dns request. And also forbid DNS-Amplification DDoS attack. 53 rules and counting.... (ironic number, since we're talking about DNS heheh) Your firewall could probably be simplified quite a bit. The first thing that's obvious to me is all of the separate rules t...
by tfj88
Thu Apr 28, 2016 10:56 am
Forum: Beginner Basics
Topic: Drop DNS server or request
Replies: 7
Views: 1400

Re: Drop DNS server or request

How about the chain ?
You are dropping source-port not dst-port. Also, make sure you are not using fasttrack. This may ignore your drop rules.
by tfj88
Thu Apr 28, 2016 4:16 am
Forum: Beginner Basics
Topic: Drop DNS server or request
Replies: 7
Views: 1400

Drop DNS server or request

Hello..

I have setup a firewall rule to drop dns request "81.198.87.240" "91.188.51.139".....
But it seems not working
Should I change forwaord to input or something ???
dns.jpg
DNS.PNG
by tfj88
Tue Apr 26, 2016 9:33 am
Forum: Beginner Basics
Topic: Block Whatsapp
Replies: 60
Views: 55147

Re: Block Whatsapp

How to setup a script to add all list in firewall filter ?? Hi, you only need to make a address-list containing the folowing addresses: (taken from http://www.whatsapp.com/cidr.txt) 31.13.69.240/32 31.13.70.49/32 31.13.71.49/32 31.13.73.49/32 31.13.74.49/32 31.13.76.81/32 31.13.77.49/32 50.22.75.192...