To make sure that the forum and friendly resident guru pe1chl doesn't look unfriendly, when someone else reads this topic, I'll add few details. What you're doing is looking for "facebook<any character>com" in every single tcp connection to any port. It will match hostname in plain unencr...

This method will not effect any other website That is of course very far from the truth... but when you are satisfied, we are all happy! I am absolutely satisfied with this method :) And i would like to tell everybody that if website use both tcp and udp protocol then you should add another mangle ...

Today i am sharing my little experience with beginner like me, you can understand my post from title so no other words and lets start. This method will not effect any other website, i would like to block Facebook in my example. 1: Add website in Layer7 Protocol. /ip firewall layer7-protocol add name...

Hello to all, I have mikrotik routeros x86, i want block mp3, ios and exe setup for my clients, then i create rules like this: /ip firewall layer7-protocol add name=downloading regexp=".exe | .iso | .mp3" /ip firewall filter add src-address=192.168.88.0/24 action=drop chain=forward disable...

I just want to 2 gateway network faillover configuration, but my problem is ADSL modems, my currently configuration is: /ip route add gateway=192.168.20.1 check-gateway=ping /ip route add gateway=192.193.0.1 distance=2 but when internet is down from ISP gateway is still getting ping from ADSL modem...

I just want to 2 gateway network faillover configuration, but my problem is ADSL modems, my currently configuration is: /ip route add gateway=192.168.20.1 check-gateway=ping /ip route add gateway=192.193.0.1 distance=2 but when internet is down from ISP gateway is still getting ping from ADSL modem ...

Hello everyone, i have mikrotik routerOS 5.26 x86, 1 LAN and 2 WAN setup. i have a problem with gateway failover setup like as wiki.mikrotik.com says: But what if your modem is up, and telephone line is down? Or one of your ISP has a problem inside it. My problem is same but Advanced Routing Failove...

Hi, try this: /ip firewall addresss-list add list=WAN1 address=192.168.88.100 add list=WAN1 address=192.168.88.184 add list=WAN2 address=192.168.88.2-192.168.88.99 add list=WAN2 address=192.168.88.101-192.168.88.183 add list=WAN2 address=192.168.88.185-192.168.88.254 /ip firewall mangle add chain=p...

Hi, i have 2 WAN and 1 LAN on mikrotik x86 WAN1 ip is: 192.168.0.2 - and gateway is: 192.168.0.1 WAN2 ip is: 192.168.2.2 - and gateway is: 192.168.1.1 and LAN ip: is 192.168.88.0/24 and nat rule in firewall is: /ip firewall nat add action=masquerade chain=srcnat now i want a user with an ip 192.168....

Is anyone here for help me???

Hi All, I previously use tp-link router, i have pptp/russia pptp settings with static IP and user name from ISP for WAN connection, how can i configure it to my new mikrotik routeros? Connection detail is: username: ******** password: ******** Server IP Address/Name: 192.xxx.xx.xxx IP Address: 192.x...

Hello everyone, i want to block proxy extension and vpn for users from my mikrotik network, for this purpose i use OpenDNS but it don't block "Betternet Unlimited Free VPN Proxy" and something like that. When i block social media and streaming from mikrotik users bypass all rules using pro...

Run CHR virtually or install x86 version directly. Read the manual first.

OK, but my real problem is dual LAN in laptop, can i configure usb dual LAN card in laptop and its work with mikrotik? and i want to install x86 version directly.

Hello every body, I would like some help on how to install mikrotik router OS on a Laptop. I am very well aware of the only slot available for LAN. Could I get some insight on how to make this happen for 2 LAN system? Your help will be highly appreciated.

Hi, in this case queue tree and mark is not needed. Keep things simple, use queue simple with target=192.168.68.0/24 and pcq. Specify what exactly you want. what speed download/upload for all users, what for each one? Bro i have to use queue tree and mark because i have some user who want to full b...

Hello everyone, i create pcq and queue tree for user bandwidth limit using this method: /ip firewall mangle add chain=prerouting src-address=192.168.68.0/24 action=mark-connection \ new-connection-mark=All_Users /ip firewall mangle add chain=prerouting in-interface=WAN connection-mark=All_Users acti...

Hello everyone, sorry for my poor English, i want to know just why i see my internet public ip in src address in mikrotik firewall connections?

OK, thank you

proxy does not support encrypted https traffic

Then what should i do for restrict 443 protocol? i want to block facebook on my network and also block vpn and proxy extension from pc and web browsers.

Hi, i am beginner on mikrotik, i want to use mikrotik web proxy https 443. please help me to know how can i configure and redirect all internet protocol via mikrotik web proxy.

can you help me?i was trying block keyword in layer7 protocol but only keyword in http site can blocked. https not block dont use L7 for blocking, use these rules and filter keywords and urls. step-1 - Go to IP => Firewall on the Mangle Tab, add new Mangle Rule +Chain =forword +Action=make connecti...

Yes, this is why L7 rules are not meant for webpage blocking.

so... how can i block https?

Hi, i block facebook on firewall layer7 protocol "^.+(facebook.com).*$"; but firewall block "facebook.com" from my personal domain page, even i cant send mail to abc.user@facebook.com from my webmail. please help...

Hi, i just installed mikrotik a few days ago. Today i see following error in log using winbox: mar/01/2017 21:44:55 system,error,critical login failure for user 666666 from 187.58.107.207 via telnet mar/01/2017 21:44:57 system,error,critical login failure for user administrator from 187.58.107.207 v...

Hello everyone, i have 10 users on routeros v5.20 on x86, i want to restrict only 2 users ip for access only 5 website on internet, is this possible on mikrotik? how can i manage restriction filter?

OK, Thank you.

Hi, i use routeros v5.20 on x86, i have an issue with client pc, routeros is blocking "sellercentral.amazon.com" and "outlook.live.com/owa" only on windows 10, i can't troubleshoot this issue kindly help me out.