Step 1: Create a local resolver Get some kind of DNS resolver in your network that is not the router. This is a big step and it's kinda beyond the scope of what I'm writing here. I am a big fan of the pi-hole because I like blocking ads. It also gives you a nice GUI interface for managing DNS block...

I need to block YouTube as much as possible to minimize access to the platform. Could you please share the most effective method to achieve this? Currently, I'm using Layer 7 filtering to block YouTube's DNS, but I'm looking for additional measures to reinforce this blockage and prevent users from f...

Please, how can I upgrade container, more specific pihole. I'm used to SSH, but I have no idea how to do it in RouterOS and I cannot find anything relevant to this topic. Thanks.

If it allows then backup your pihole settings, remove container & pull again then restore settings.

(sorry for my bad english) WA5110G and PicoStation M2HP have little gain antenna, and WA7210N have directional antenna. I sell those products, the picostation are so much fragile, I stoped sell the picostation because too much time the power transistor for tx is broken after some week or month. WA7...

Conclusion: finding comment & editing only required fields is way better than yours. Here is my script Whatever dude.... it is not a competition. Relax. Some stuff works better for some than others. Yup :) Surely we all are here to share our knowledge & experience for better routing for eve...

What if using mtu 1500 ??

Also check out para 9. d and para 10 - viewtopic.php?t=182340

Wow, that is very comprehensive guide covering almost every aspect of WG.
Good Work

I note the terms >5min or >3min, seems like running the script every 10 minutes makes sense..................... I prefer not to run scripts frequently if avoidable...........aka 1minute for example Dear I am not asking you to use 1 minute That depends on how crucial your wireguard connectivity is....

most of the traffic packets are dropped due to overhead caused by wireguard headers. here is the solution, assuming you are using default 1420 mtu for wireguard interface. make sure to select your wireguard interface in out-interface /ip firewall mangle add action=change-mss chain=forward new-mss=13...

Here is another one for you. It is a bit more brutal, but it is versatile as it does not rely on finding any comments, and you can put it on a router with a number of peers and it will just pick out the ones that need killing and restarting without affecting the ones that are OK. It checks if hands...

So it works like this 1.it detects a peer that is not working 2.it disables the peer 3. delays for 2 seconds (you can probably remove this) 4.then cycles through the "if" with if peer is disabled find which peer it is and set the $wgpeer variable use $wgpeer to find the port of that peer ...

Can you share with me where you got the AR9300? I have been using the mikrotik branded R11e-5HacT which is still not working Model: AW-NB097H I bought it from Aliexpress using it in HP T610 Plus Thin Client which comes with mini pcie slot, along with PCIE slot for extending LAN interfaces https://w...

Is this a script you run on a schedule? Yes i run it after 1 minute interval here is the export /system script add dont-require-permissions=no name=wg owner=zone policy=\ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":lo\ cal ddnshost \"host.mywire.org\"\r\...

hostname issue is still not resolved so i have created my own script which resolves the host name & puts the latest ip in peer's endpoint-address :local ddnshost "host.mywire.org" :local peerip [/interface wireguard peers get [find comment="home"] endpoint-address ]; :local h...

Hello, Im playing around with containers inside the mikrotik. Im running a openwrt container with 1 veth so i have one eth in the openwrt container. Is it possible to add more veth to the same container so i can have more ethernets inside the container. If so how? Best regards. Tansu Can you please...

how to solove authentication failed radius timeout in mikrotik:
1- change a radius shared secret
2-set ip to 127.0.0.1
make filter dule chain input and put sur.add 127.0.0.1 and move to first

check this out
viewtopic.php?p=962134#p962134

Thanks All
the problem was the masquarade nat rule on the top
i dont know why but by disabling the na trule ar make a srcnat instead the problem solved

for solution check this out
viewtopic.php?p=962134#p962134

Radius client can not communicate with radius server aka (Userman) when general masquarading rule is applied. exclude 127.0.0.1 from masquerading & use 127.0.0.1 as Radius client & User manager IP. Use this code instead /ip/firewall/nat/add chain=srcnat action=masquerade src-address=!127.0.0...

:local ddnsuser "username" :local ddnspass "password" :local ddnshost "host.mywire.org" :local currentIP ([/tool fetch url="http://api.ipify.org" as-value output=user]->"data") :local dnsIP [:resolve $ddnshost] :if ($currentIP != $dnsIP) do={ :local...

@Shahid

Do use global variable in the script only if you intend to use the variable in other script or for use at a later time. Use local variable instead.

Sure. Thanks for suggestions.

Better do some cleaning up on that mess, including removing the useless logging...
viewtopic.php?p=961067#p961068

Logging is very helpful for newbies. It helps a lot to understand what is going on.

Latest Updated Script Working on Mikrotik v 7.5 /tool fetch mode=http url="http://api.ipify.org" src-path="" dst-path=/dyn.html :local currentIP [/file get dyn.html contents] :log warning "Public IP Detected $currentIP" ##################################################...

Latest Code Working /tool fetch mode=http url="http://api.ipify.org" src-path="" dst-path=/dyn.html :local currentIP [/file get dyn.html contents] :log warning "Public IP Detected $currentIP" ###################################################### :global ddnsuser "...

1+ for Openwrt as a container Guest in Mikrotik, with lot of possibilities regarding routing, very light weight & best for OpenVPN Configurations. I think Mikrotik doesn't like "opensource of things" much because of complicated implementation of OVPN in Mikrotik. Now that Wireguard is...

May I know if V7 has x86 wifi driver included?

Yup
i am using latest stable version 7.5 with Atheros AR9300 on x86 working excellent.
All the bugs are removed.

1+ for Openwrt as a container Guest in Mikrotik, with lot of possibilities regarding routing, very light weight & best for OpenVPN Configurations.
I think Mikrotik doesn't like "opensource of things" much because of complicated implementation of OVPN in Mikrotik.

Same Problem with me, After update from 6.48.6 wifi is not working on x86 level 4 licence with extra channels
Using Atheros AR9300
Errors
--No Supported Channel
--Scan list does not contain valid channels
--Empty scanlist


On 6.48.6 everything is working fine