Community discussions

Search found 503 matches

  • 1
  • 2
by NAB
Thu Oct 15, 2009 4:05 pm
Forum: General
Topic: filter HTTP Download
Replies: 4
Views: 827

Re: filter HTTP Download

how can i deny HTTP download while allowing simpler HTTP 80 (only web browsing) They are both the same thing. There is ***absolutely no difference*** between downloading .EXE, .JPG,.HTML,.PHP,.CSS or any other kind of file. None at all. Zilch. Zero. Diddly squat. There are, however, two options ava...
by NAB
Thu Oct 15, 2009 3:49 pm
Forum: General
Topic: Interface bug with RB493 and ROS v4
Replies: 1
Views: 398

Interface bug with RB493 and ROS v4

Having had a whole load of problems with my RB493 after the upgrade to ROS v4, I have found another bug... After a system reset, the ethernet interfaces are renumbered from ether2-ether9 to ether10-ether17: interfaces.gif Obviously this makes importing a previous configuration difficult!! Note that ...
by NAB
Thu Oct 15, 2009 3:24 pm
Forum: General
Topic: Licence updating failed after upgrade to ROS v4
Replies: 16
Views: 1856

Re: Licence updating failed after upgrade to ROS v4

Hi Normis, Replied via e-mail to support as well as here. you definitely have a different 8 char SoftID now. It's exactly the same SoftID I had prior to upgrading to v4. What did you do to make it change? Nothing. It hasn't changed. I see in our DB that you first clicked "update key", got a key, the...
by NAB
Thu Oct 15, 2009 2:28 pm
Forum: General
Topic: Licence updating failed after upgrade to ROS v4
Replies: 16
Views: 1856

Re: Licence updating failed after upgrade to ROS v4

I think I've found a different bug. If I create the supout.rif file as soon as the box is booted, the whole box becomes unresponsive and pegs the CPU at 100%. It stays like this even after the supout.rif file has been created. If I do nothing after a reboot, wait for 5 minutes or so, the CPU climbs ...
by NAB
Thu Oct 15, 2009 2:19 pm
Forum: General
Topic: Licence updating failed after upgrade to ROS v4
Replies: 16
Views: 1856

Re: Licence updating failed after upgrade to ROS v4

Tried a backup/reset/restore and it's still just as sluggish as before - CPU at 100% and a "/export file=exp.rsc" took 31 minutes to run.
by NAB
Thu Oct 15, 2009 11:52 am
Forum: General
Topic: Licence updating failed after upgrade to ROS v4
Replies: 16
Views: 1856

Re: Licence updating failed after upgrade to ROS v4

Woohoo. After a few reboots and attempts to create the supout.rif file, it's finally done it.

CPU pegged at 100% and with very sluggish response still though.
by NAB
Thu Oct 15, 2009 11:43 am
Forum: General
Topic: Licence updating failed after upgrade to ROS v4
Replies: 16
Views: 1856

Re: Licence updating failed after upgrade to ROS v4

Interesting... As soon as I try to create a supout.rif file, CPU usage jumps to 100% and the box stops responds in jitters to command line/winbox commands in periods of about 6 seconds. The supout.rif file is never created and the only way of bringing CPU usage and responsivness back is to reboot th...
by NAB
Thu Oct 15, 2009 10:33 am
Forum: General
Topic: Licence updating failed after upgrade to ROS v4
Replies: 16
Views: 1856

Re: Licence updating failed after upgrade to ROS v4

have you checked your 8-digit SoftwareID before and after upgrade? It had a 7 character software ID, I did the upgrade and it now has an 8 character software ID. I upgraded it to v4.0 and it still has the same software ID. When I telnet in I get the following message: ROUTER NEEDS A NEW LICENSE ---...
by NAB
Wed Oct 14, 2009 11:06 pm
Forum: General
Topic: Licence updating failed after upgrade to ROS v4
Replies: 16
Views: 1856

Licence updating failed after upgrade to ROS v4

So, one of our RB493s running 3.30 was all set to be upgraded to v4. Licence in new format? Check. Bootloader uploaded? Check. After upgrade we get a message saying "Licence valid for 72 hours, please upgrade" and when we click on the 'upgrade licence' button, we get: Licence updating: failed: this ...
by NAB
Tue Oct 13, 2009 4:44 pm
Forum: General
Topic: RouterOS v4 released
Replies: 38
Views: 3524

Re: RouterOS v4 released

I'll go one better.....
temp.gif
Wow, magic!!
by NAB
Sun Oct 04, 2009 11:34 pm
Forum: General
Topic: Configuring OpenVPN
Replies: 44
Views: 69509

Re: Configuring OpenVPN

Anyhow, I've updated the Wiki article at http://wiki.mikrotik.com/wiki/OpenVPN, so it should cover all angles and hopefully also the potholes now. These updates are now out of date and I have corrected one obvious mistake I found. However... The command '/interface ovpn-server server [name] cipher=...
by NAB
Tue Sep 29, 2009 10:23 am
Forum: General
Topic: First "ROUTEROS" Book Published
Replies: 47
Views: 14334

Re: First "ROUTEROS" Book Published

...I think this is a great effort on Dennis's part Absolutely. I have had a few e-mails which have chastised me for my comments above (Dennis, you have a fan club!!) and I would like to point out that a) I am in agreement with everybody else in this thread when I say that Dennis has put a lot of ef...
by NAB
Mon Sep 28, 2009 3:48 pm
Forum: General
Topic: First "ROUTEROS" Book Published
Replies: 47
Views: 14334

Re: First "ROUTEROS" Book Published

I personally think that _a_ book is better than _no_ book :) I know what you mean, but I think I disagree - in this instance, the book is clearly (to me) very amateurish and as such makes ROS look amateurish..... Let's hope all this get's improved in the next edition. Absolutely. In the meantime, a...
by NAB
Mon Sep 28, 2009 3:35 pm
Forum: General
Topic: First "ROUTEROS" Book Published
Replies: 47
Views: 14334

Re: First "ROUTEROS" Book Published

There is no "This is what RouterOS does and these are the concepts behind it" Well, there is (kind of). Pages 18-20 Well, two thirds of page 18! expect that there is an entry for 'interface' in the index. index really doesn't have Inteface, but it's there in the TOC. maybe a mistake Yes. Perhaps a ...
by NAB
Mon Sep 28, 2009 3:02 pm
Forum: General
Topic: First "ROUTEROS" Book Published
Replies: 47
Views: 14334

Re: First "ROUTEROS" Book Published

I think it's a good reference for a beginner. I disagree. There is no "This is what RouterOS does and these are the concepts behind it" chapter which is pretty fundamental in a book for beginners. Of course it doesn't cover everything, but no book does (plus this is the only RouterOS book). As far ...
by NAB
Mon Sep 28, 2009 10:29 am
Forum: General
Topic: First "ROUTEROS" Book Published
Replies: 47
Views: 14334

Re: First "ROUTEROS" Book Published

I would like to know if this book is actually informative and well written
In my opinion it is neither.
by NAB
Mon Sep 28, 2009 10:17 am
Forum: General
Topic: Is Mikrotik already support HAIER-EVDO-CE100 ?
Replies: 6
Views: 1010

Re: Is Mikrotik already support HAIER-EVDO-CE100 ?

You ask the question in a public forum on a Sunday evening and wonder why it hasn't been answered 6 hours later?

You are joking, aren't you?
by NAB
Mon Sep 28, 2009 10:14 am
Forum: General
Topic: First "ROUTEROS" Book Published
Replies: 47
Views: 14334

Re: First "ROUTEROS" Book Published

I have bought the book. Sadly, I would not recommend it to anybody. To give you an idea, the table of contents at the front runs to ten pages (with no logical sections, this makes the ToC worse than useless), the word 'interface' doesn't appear in the index (this is a book on RouterOS and there's no...
by NAB
Thu Sep 24, 2009 5:46 pm
Forum: General
Topic: Need to make bootable USB key to install ROS on a server.
Replies: 11
Views: 6800

Re: Need to make bootable USB key to install ROS on a server.

then you install VMware Server (free) and install RouterOS on a virtual platform. Yes. The weird thing is that I did try this, except something very strange happened... Let's say that the VM Host had IP address 1.1.1.1 and the ROS virtual machine had 1.1.1.2. With ROS down, the IP 1.1.1.2 was dead ...
by NAB
Wed Sep 23, 2009 11:52 am
Forum: General
Topic: Need to make bootable USB key to install ROS on a server.
Replies: 11
Views: 6800

Re: Need to make bootable USB key to install ROS on a server.

Interesting. I have had a play with netinstall and a USB key now. The first time I did it, the PC booted off the key, did some sort of install on the key and then rebooted into ROS. The second time I did it, the PC refuses to boot off the key - it tries to boot and then resets itself ad-infinitum. I...
by NAB
Wed Sep 23, 2009 10:37 am
Forum: General
Topic: Need to make bootable USB key to install ROS on a server.
Replies: 11
Views: 6800

Re: Need to make bootable USB key to install ROS on a server.

Sadly, there is no CDROM drive in these hosted boxes :-( I could just buy a large USB drive, but that seems like a bit of a waste of money when there's a 160GB disk in the box. Of course, the controller may not be supported by ROS anyway, so maybe USB is the only option. I had used netinstall to pro...
by NAB
Wed Sep 23, 2009 2:04 am
Forum: General
Topic: Need to make bootable USB key to install ROS on a server.
Replies: 11
Views: 6800

Re: Need to make bootable USB key to install ROS on a server.

I've hunted for documentation re Netinstall, but I can't find anything which explains how a flash drive install works... Does it just set up a bootable flash drive which runs ROS (and if so, how do I then get the installation onto the hard drive?) or does it boot and then install a bootable ROS some...
by NAB
Tue Sep 22, 2009 8:33 pm
Forum: General
Topic: Need to make bootable USB key to install ROS on a server.
Replies: 11
Views: 6800

Need to make bootable USB key to install ROS on a server.

I have a project which involves installing ROS on a dedicated server hosted somewhere on the Internet. Our preferred provider will allow custom OS install, but only by way of a bootable USB drive (that is a USB key/stick, not a USB CD-ROM drive). So, ideally, I'd like to take the x86 ISO and put it ...
by NAB
Wed Sep 16, 2009 4:50 pm
Forum: Scripting
Topic: Is there somewhere to post scripts?
Replies: 8
Views: 1027

Re: Is there somewhere to post scripts?

Ah. Sorry. Mea Culpa.

Is it possible to put a link on the two pages we can't edit pointing to the page we can?

Thanks.
by NAB
Wed Sep 16, 2009 4:15 pm
Forum: Scripting
Topic: Is there somewhere to post scripts?
Replies: 8
Views: 1027

Re: Is there somewhere to post scripts?

OK, I may be being stupid, but I'm logged in and I can't see any way of adding a link from the scripting page: http://wiki.mikrotik.com/wiki/Scripting - can somebody give me an idiot's guide?

Cheers
by NAB
Wed Sep 16, 2009 1:32 pm
Forum: Scripting
Topic: Is there somewhere to post scripts?
Replies: 8
Views: 1027

Re: Is there somewhere to post scripts?

I have edit rights on some pages, but not the http://wiki.mikrotik.com/wiki/Scripting-examples page. I did have (as I added the NTP pool script a few months ago), but MT pulled access as they didn't want people editing that page.

Can you edit that page? If so, maybe it's just me they don't like!!
by NAB
Wed Sep 16, 2009 1:13 pm
Forum: Scripting
Topic: Is there somewhere to post scripts?
Replies: 8
Views: 1027

Is there somewhere to post scripts?

Hi,

I used to have edit rights to the page http://wiki.mikrotik.com/wiki/Scripting-examples, but this has now gone.

Is there somewhere on the wiki we can post scripts we use and which other people may find useful?
by NAB
Wed Sep 16, 2009 1:05 pm
Forum: Scripting
Topic: Update to scripting page on wiki please
Replies: 2
Views: 598

Re: Update to scripting page on wiki please

Cheers.
by NAB
Wed Sep 16, 2009 10:50 am
Forum: Scripting
Topic: Update to scripting page on wiki please
Replies: 2
Views: 598

Update to scripting page on wiki please

Hi, I would have done this myself, but I don't appear to have edit rights to the wiki page http://wiki.mikrotik.com/wiki/Scripting . Please could somebody change the description of the global command 'error' from generate console error to Generate console error and stop executing the script. Thank y...
by NAB
Tue Sep 15, 2009 1:03 pm
Forum: General
Topic: Availability of 3.29 firmware so I can NetInstall on a RB750
Replies: 6
Views: 4566

Re: Availability of 3.29 firmware so I can NetInstall on a RB750

Sorry for that
No problem. Thanks for your speedy response.
by NAB
Tue Sep 15, 2009 11:51 am
Forum: General
Topic: Availability of 3.29 firmware so I can NetInstall on a RB750
Replies: 6
Views: 4566

Re: Availability of 3.29 firmware so I can NetInstall on a RB750

Also, I'd like to be able to add the NTP package...
by NAB
Tue Sep 15, 2009 11:35 am
Forum: General
Topic: Availability of 3.29 firmware so I can NetInstall on a RB750
Replies: 6
Views: 4566

Availability of 3.29 firmware so I can NetInstall on a RB750

Hi, Just a quickie. I have a RB750 and want to do a NetInstall. It came with ROS 3.29 and (following on from the advice from the MT guys), I don't really want to downgrade it. So, the question is, where can I get the 3.29 firmware so I can NetInstall and keep the RB750 at the same firmware version i...
by NAB
Fri Sep 11, 2009 11:43 am
Forum: RouterBOARD hardware
Topic: Can I unlock a Crossroads locked to a regulatory domain?
Replies: 10
Views: 1915

Re: Can I unlock a Crossroads locked to a regulatory domain?

Using netinstall you can apply a script that will be installed on the router and it will be there till the next netinstall even if you do a system reset. Ah. Brilliant. I did search for this, but the netinstall help didn't mention that it would stay there. Is there any way I can lock things down so...
by NAB
Thu Sep 10, 2009 8:06 pm
Forum: RouterBOARD hardware
Topic: Can I unlock a Crossroads locked to a regulatory domain?
Replies: 10
Views: 1915

Re: Can I unlock a Crossroads locked to a regulatory domain?

The next question is... once I've used netinstall, is there any way I can lock a RouterBoard down to a certain configuration (until it's netinstalled again)?

Ideally, I suppose, I would like to say "run script X on boot and don't give the user the ability to delete script X".
by NAB
Thu Sep 10, 2009 5:32 pm
Forum: RouterBOARD hardware
Topic: Can I unlock a Crossroads locked to a regulatory domain?
Replies: 10
Views: 1915

Re: Can I unlock a Crossroads locked to a regulatory domain?

Use netinstall.
Ah, OK. Thanks.
by NAB
Thu Sep 10, 2009 4:50 pm
Forum: RouterBOARD hardware
Topic: Can I unlock a Crossroads locked to a regulatory domain?
Replies: 10
Views: 1915

Can I unlock a Crossroads locked to a regulatory domain?

I have a Crossroads here, sold by a UK company. The wireless settings appear to be locked to the US regulatory domain.

Is there any way I can unlock it?

Thanks in advance.
by NAB
Tue Sep 08, 2009 8:17 pm
Forum: General
Topic: help me normis
Replies: 4
Views: 627

Re: help me normis

I want to solve the problem
What is the problem?
by NAB
Tue Sep 08, 2009 4:05 pm
Forum: General
Topic: IPv6 over PPPoE
Replies: 140
Views: 26297

Re: IPv6 over PPPoE

Bump.
by NAB
Sun Aug 30, 2009 6:28 pm
Forum: General
Topic: ROS version for RB450 & IPv6
Replies: 11
Views: 2006

Re: ROS version for RB450 & IPv6

What is the proper ROS version for RB450 ? Go to http://www.mikrotik.com/download.html and enter the 'Select system type:' as "RB400 series" and the 'Select software type:'as "Stable". You will be offered downloads of the latest mipsbe packages. 3.28 is the 'correct' version to run. Note that later...
by NAB
Fri Aug 28, 2009 4:39 pm
Forum: General
Topic: 411a do not boot and no eth link
Replies: 3
Views: 717

Re: 411a do not boot and no eth link

kernel not found
Sounds to me like the on-board flash is faulty/dead/dying. Personally, for the cost of the board, I'd just bin it and buy another - there's every probability that even if you re-install and get it working it will die again.
by NAB
Fri Aug 28, 2009 4:02 pm
Forum: General
Topic: which voip hardware do i need, for mikrotik rb433?
Replies: 6
Views: 1607

Re: which voip hardware do i need, for mikrotik rb433?

ok, but how do i attach the phone to routerboard? An analogue or USB phone? You can't. IP phones, you simply plug the RJ45 cable into one of the sockets on the board (and configure the phone to talk to whichever SIP/H.323/IAX server you want). It's a bit like saying "I want to use this car for flyi...
by NAB
Fri Aug 28, 2009 3:54 pm
Forum: General
Topic: Mikrotik on x86 reboots without warning
Replies: 2
Views: 718

Re: Mikrotik on x86 reboots without warning

It is connected in the same energy system as all other servers in this rack and it is restarting. What version of ROS are you running? Have you tested the RAM (memtest?)? Does it run other apps properly (e.g. can you boot off a live CD and does it stay running)? How often does it reboot? What is th...
by NAB
Thu Aug 06, 2009 1:14 pm
Forum: General
Topic: Configure router to accept SNMP request
Replies: 4
Views: 603

Re: Configure router to accept SNMP request

And don't forget:
/ip firewall filter add action=accept chain=input comment="SNMP" disabled=no dst-port=161 protocol=udp src-address=xxx.xxx.xxx.xxx
by NAB
Tue Aug 04, 2009 10:06 pm
Forum: General
Topic: IPv6 over PPPoE
Replies: 140
Views: 26297

Re: IPv6 over PPPoE

Bump.
by NAB
Tue Aug 04, 2009 9:54 pm
Forum: General
Topic: v3.27 bug: ssh port forwarding is not working
Replies: 76
Views: 13380

Re: v3.27 bug: ssh port forwarding is not working

again - just so everyone knows, ipv6 over pppoe was NOT a feature. It just so happened it worked. Understood, but given that other products support IPv6/PPPoE, that there is at least one RFC stating how it should work and that it did work (your point on encryption is also understood), I think it is...
by NAB
Tue Aug 04, 2009 4:17 pm
Forum: General
Topic: v3.27 bug: ssh port forwarding is not working
Replies: 76
Views: 13380

Re: v3.27 bug: ssh port forwarding is not working

Nick, over 50% of all technical support email question are fixed by simple upgrade. If people would just use the latest version, we would solve a lot of delays in email responses. That may well be the case, but it wasn't the point I was making. I am surprised at your response though - I was trying ...
by NAB
Mon Aug 03, 2009 2:20 pm
Forum: General
Topic: v3.27 bug: ssh port forwarding is not working
Replies: 76
Views: 13380

Re: v3.27 bug: ssh port forwarding is not working

...because you bastards won't give it to us! From personal experience (IPv6 over PPPoE), I know how frustrating it is when features you rely on are removed with no notice and no apology, however, there is no justification for abuse at all - it doesn't help things, it just upsets the people who you ...
by NAB
Wed Jul 29, 2009 8:31 pm
Forum: General
Topic: how to find downloaded byte?
Replies: 6
Views: 754

Re: how to find downloaded byte?

I cant find access to counters from command promt.. (/queue simple get or set) Just tried: [admin@VitellOffice] > /queue simple [admin@VitellOffice] > add burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s comment="" direction=both disabled=no dst-address=0.0.0.0/0 interface=ether1 limit-at=512k/...
by NAB
Tue Jul 21, 2009 11:27 pm
Forum: General
Topic: milw0rm posts instructions on circumventing MT Hotspot.
Replies: 12
Views: 2420

Re: milw0rm posts instructions on circumventing MT Hotspot.

As an aside, the user in the video is using a tool called 'NetCut'. Looks interesting (in an "I'd like to play with this to see how people cause havoc with it" way), but I can't seem to find a download source. Any ideas?
by NAB
Tue Jul 21, 2009 11:24 pm
Forum: General
Topic: milw0rm posts instructions on circumventing MT Hotspot.
Replies: 12
Views: 2420

Re: milw0rm posts instructions on circumventing MT Hotspot.

What I'd like to see is the "Cookie" tied to the user's identity along with MAC address and IP address. But doesn't this assume that all net access will be through the browser. When I use a hotspot, I use the browser to open the session and then everything else I do is done over SSH or PPTP. In thi...
by NAB
Tue Jul 21, 2009 4:22 pm
Forum: General
Topic: milw0rm posts instructions on circumventing MT Hotspot.
Replies: 12
Views: 2420

milw0rm posts instructions on circumventing MT Hotspot.

http://www.milw0rm.com/video/watch.php?id=102

Basically, it's a 'find logged in users and then clone their IP/MAC' hack.
by NAB
Sun Jul 19, 2009 6:28 pm
Forum: General
Topic: Bandwidth test in 3.27
Replies: 6
Views: 1139

Re: Bandwidth test in 3.27

SET tcp connections to only 1 to start with... Yes, did that - same result. And limit the local tx value. Again, tried that, but the problem appears to occur during setup and this makes no difference. If you set direction to "both" on the router that you will also test the process can't handle it a...
by NAB
Sun Jul 19, 2009 6:25 pm
Forum: General
Topic: Bandwidth test in 3.27
Replies: 6
Views: 1139

Re: Bandwidth test in 3.27

I was talking about wireless too....you did not tell us your setup so no answers for you
If I was asking about link speed, you may have a point, however I was not and so the link method, the antenna used or the colour of my underwear are wholly irrelevant and therefore not mentioned.
by NAB
Sun Jul 19, 2009 12:32 am
Forum: General
Topic: Bandwidth test in 3.27
Replies: 6
Views: 1139

Re: Bandwidth test in 3.27

11.1Mbps it's not fine...30-70mbps it's fine
Given that they're connected by a wireless link, 11.1Mps is fine, thank you!
by NAB
Sat Jul 18, 2009 12:50 am
Forum: General
Topic: 3.27 changelog
Replies: 7
Views: 956

Re: 3.7 changelog

http://www.mikrotik.com/download/CHANGELOG_3

If you meant 3.7, it's a way down the page. If you meant 3.27, it's at the top.
by NAB
Fri Jul 17, 2009 5:27 pm
Forum: General
Topic: Bandwidth test in 3.27
Replies: 6
Views: 1139

Bandwidth test in 3.27

Hi, I have a RB411 and a RB411A. If I run a UDP based bandwidth test between them, it works fine... > /tool bandwidth-test 192.168.42.91 protocol=udp direction=both status: running duration: 10s tx-current: 11.9Mbps tx-10-second-average: 11.1Mbps tx-total-average: 11.1Mbps rx-current: 11.9Mbps rx-10...
by NAB
Tue Jul 14, 2009 8:35 pm
Forum: General
Topic: New IP scheme, now I cannot ping Mikrotik box
Replies: 4
Views: 521

Re: New IP scheme, now I cannot ping Mikrotik box

Trying to get Winbox working again, too.
Connect by MAC instead of IP address. If the Winbox loader cannot see the MAC on the network, then you really are in trouble :-(
by NAB
Tue Jul 14, 2009 8:33 pm
Forum: General
Topic: How to check if a ppp user is online
Replies: 2
Views: 456

Re: How to check if a ppp user is online

I need a method to check from a terminal window if a ppp user is online.
/ppp active print
by NAB
Tue Jul 14, 2009 5:58 pm
Forum: General
Topic: 3.25 + GPS = no longitude but valid fix anyway?
Replies: 3
Views: 480

Re: 3.25 + GPS = no longitude but valid fix anyway?

I see this in 3.26 too.
by NAB
Tue Jul 14, 2009 5:42 pm
Forum: General
Topic: Block forwarding between vlans
Replies: 2
Views: 466

Re: Block forwarding between vlans

How I can block forwarding between vlans 500-4000 ?
Do you mean that you have 3501 VLAN interfaces defined on your box, or that you have two VLAN interfaces defined (500 and 4000)? Can you give us some more information about your configuration?
by NAB
Tue Jul 14, 2009 5:38 pm
Forum: General
Topic: HotSpot Concentrator
Replies: 7
Views: 2003

Re: HotSpot Concentrator

Hello, can you go into more detail about this topology? And can I ask you to confirm that you had to revert to an older version of ROS? I am getting slightly concerned that if we want features working (in your case, complex bridged interfaces, in mine, IPv6 over PPPoE) we have to use an old and uns...
by NAB
Tue Jul 14, 2009 5:34 pm
Forum: General
Topic: v3.26 Released
Replies: 44
Views: 4754

Re: v3.26 Released

First attempt at an upgrade to 3.26 from 3.25 on a x86 box did not succeed.
Mine worked OK, but it took about five minutes before the internal interfaces started working (despite the fact that the CLI showed them to be up and running.
by NAB
Tue Jul 14, 2009 5:33 pm
Forum: General
Topic: v3.26 Released
Replies: 44
Views: 4754

Re: v3.26 Released

Would someone please fix the web interface for x86 in the next release?
Mine lets me type user/password (and if I get them wrong, it tells me), but if I get them right, I get a 'failed to connect' error.
by NAB
Tue Jul 14, 2009 4:38 pm
Forum: General
Topic: 3.25 + GPS = no longitude but valid fix anyway?
Replies: 3
Views: 480

3.25 + GPS = no longitude but valid fix anyway?

Hi all, Can anybody else test/confirm this for me. I have GPS set up as follows: /system gps set enabled=yes port=serial0 set-system-time=yes /port set 0 baud-rate=4800 data-bits=8 flow-control=none name=serial1 parity=none stop-bits=1 And '/system gps monitor' shows: date-and-time: jul/14/2009 13:3...
by NAB
Wed Jul 08, 2009 6:33 pm
Forum: General
Topic: Lost graphs - issue
Replies: 5
Views: 1041

Re: Lost graphs - issue

Really need to keep history. Any suggestions.
Depending on what you're graphing, it may be better to consider an independent solution - have you seen the http://forum.mikrotik.com/viewtopic.php?f=2&t=28947 thread?
by NAB
Wed Jul 08, 2009 6:18 pm
Forum: General
Topic: 3.25 problem
Replies: 96
Views: 19497

Re: 3.25 problem

the problem only happens during the upgrade
Or some time after the upgrade depending on when it's power-cycled.
by NAB
Wed Jul 08, 2009 6:07 pm
Forum: General
Topic: i don't know what subject to put to this thread.
Replies: 2
Views: 444

Re: i don't know what subject to put to this thread.

I can connect 172.16.0.2 directly to internet too. No you can't. the 172.16.0.0/12 network is not routable, therefore you must be connecting to another gateway before you're NATted for connection to the Internet. i have a gateway 172.16.0.1 and a traffic shapper 172.16.0.2. I want to route some mar...
by NAB
Wed Jul 08, 2009 12:42 am
Forum: General
Topic: The Ethernet interface is not running
Replies: 2
Views: 436

Re: The Ethernet interface is not running

Have you any idea of what could I do?
Buy a new one. Yours is toast. :-(
by NAB
Wed Jul 08, 2009 12:41 am
Forum: General
Topic: 3.25 problem
Replies: 96
Views: 19497

Re: 3.25 problem

warn about what exactly? this is not normal and doesn't happen. Woah there. Given the number of people experiencing this problem, that comment is way out of order. I can confirm that with a RB450 I have exactly the same problem - I configured it up, put it in the post to a customer and when it got ...
by NAB
Mon Jul 06, 2009 2:47 pm
Forum: General
Topic: VLAN not working as expected - sanity check please!
Replies: 5
Views: 776

Re: VLAN not working as expected - sanity check please!

So it appears that vlan1 and ether1 are bridged. Clearly this is not a good thing. I have tried exactly the same configuration on other hardware and it works fine, so it seems to be hardware related. I am unable to reproduce on any available hardware (the PC I found the fault on has been recycled a...
by NAB
Thu Jul 02, 2009 4:09 pm
Forum: General
Topic: Simple Walled Garden Setup
Replies: 4
Views: 2695

Re: Simple Walled Garden Setup

Is my question too hard or too simple? Anyone?
I can't see a question there.
by NAB
Thu Jul 02, 2009 11:49 am
Forum: General
Topic: Power monitoring!
Replies: 54
Views: 22978

Re: Power monitoring!

Which scenario has multiple network admins that continuosly add/remove firewall filter rules?
Sadly, in my experience, any number of small-ish companies who don't want to employ one person to look after their infrastructure and who shares the work out amongst a team of people.
by NAB
Wed Jul 01, 2009 4:33 pm
Forum: General
Topic: Power monitoring!
Replies: 54
Views: 22978

Re: Power monitoring!

That's not the monitoring i was pointing out: Ah sorry. Mea Culpa. Well, the theory was that individual people could contribute firewall rules to various chains and that it may be useful to see when changes have been made. It's also handy to see when dynamic rules have been added/removed. Again, no...
by NAB
Wed Jul 01, 2009 12:43 pm
Forum: General
Topic: Power monitoring!
Replies: 54
Views: 22978

Re: Power monitoring!

(except the firewallrule count that can't imagine an use...) Heh. I know what you mean. I just wrote it as an exercise to see what could be monitored and for no other reason. However, I found a use for it pretty much straight after I wrote it - I use ROS at home and share my Internet connection wit...
by NAB
Tue Jun 30, 2009 2:51 pm
Forum: General
Topic: Power monitoring!
Replies: 54
Views: 22978

Re: Power monitoring!

That'd be a 'no' then. Shame. At least I find it useful.
by NAB
Mon Jun 29, 2009 10:54 am
Forum: General
Topic: VLAN not working as expected - sanity check please!
Replies: 5
Views: 776

Re: VLAN not working as expected - sanity check please!

I said, I said!
Phew, it's good it's not my fault! I did search the forum, but I must have missed your post - sorry for that. I'll e-mail support now.

Thanks,
by NAB
Sun Jun 28, 2009 11:52 pm
Forum: General
Topic: VLAN not working as expected - sanity check please!
Replies: 5
Views: 776

VLAN not working as expected - sanity check please!

Hi, I have been trying to get VLANs working and have partially succeded, however I have found a pretty major shortcoming and I wanted to check whether it is my fault and I completely misunderstand how VLANs are implemented or whether there is a bug in ROS. Consider the following configuration: /inte...
by NAB
Fri Jun 26, 2009 6:55 pm
Forum: General
Topic: Power monitoring!
Replies: 54
Views: 22978

Re: Power monitoring!

Right, I've updated the wiki with the graphs the three new plugins (the three at the bottom of the page): http://wiki.mikrotik.com/wiki/Munin_Monitoring I've spent a fair bit of time with this and it's certainly useful to me - is it useful to anybody else? Does anybody else have some ideas on what o...
by NAB
Fri Jun 26, 2009 6:21 pm
Forum: General
Topic: http and download with 2 Queues
Replies: 10
Views: 2260

Re: http and download with 2 Queues

macgaiver did not say that they are different things . he said : browsing usually is a small connection, downloading is longer. I don't want to get involved in an argument of semantics, but you cannot possibly argue that he didn't say they were different when he specifically said how he thought the...
by NAB
Fri Jun 26, 2009 3:03 pm
Forum: General
Topic: http and download with 2 Queues
Replies: 10
Views: 2260

Re: http and download with 2 Queues

browsing usually is a small connection, downloading is longer.
No. Browsing and downloading are the same thing.
Use "connection-bytes" option in mangle and prioritize first 1Mbps (or more) of every HTTP connection.
Which is what I have already said.
by NAB
Fri Jun 26, 2009 12:30 pm
Forum: General
Topic: http and download with 2 Queues
Replies: 10
Views: 2260

Re: http and download with 2 Queues

But I think download means save exe,zip,.. files and when we browse web, we download html,jpg,gif,..
It doesn't matter what you call it, downloading a .exe is **exactly** the same as downloading a .JPG. There is no difference.
by NAB
Fri Jun 26, 2009 12:14 pm
Forum: General
Topic: http and download with 2 Queues
Replies: 10
Views: 2260

Re: http and download with 2 Queues

Can we have 2 Queues for open http page and downloading files. For example our PPPOE user after connecting, be able to browse web with 1mb/s and download only with 512kb/s speed. Browsing is **exactly the same** as downloading. When you browse you are downloading HTML/JPG/GIF/SWF/whatever files. Th...
by NAB
Fri Jun 26, 2009 9:51 am
Forum: General
Topic: Configuration optimization
Replies: 15
Views: 4143

Re: Configuration optimization

I'm just unsure of your task... there could be many algorithms =)
Indeed. Like I said, it's more a reflection on my lack of programming prowess than anything else!
by NAB
Thu Jun 25, 2009 9:44 pm
Forum: General
Topic: Configuration optimization
Replies: 15
Views: 4143

Re: Configuration optimization

?.. Well, it was for a different application, but I'll try to explain using ROS's address lists: /ip firewall address-list add list=testlist address=192.168.0.1 /ip firewall address-list add list=testlist address=192.168.1.0/24 /ip firewall address-list add list=testlist address=192.168.1.2-192.168...
by NAB
Thu Jun 25, 2009 4:39 pm
Forum: General
Topic: Configuration optimization
Replies: 15
Views: 4143

Re: Configuration optimization

well, binary trees make things smarter =) Indeed, if that is how it's implemented. I did try to do the same thing for something else and it worked perfectly for single IP addresses, but when I came to how to deal with network blocks (e.g. 192.168.0.0/24), it got overly complicated. That, however, i...
by NAB
Thu Jun 25, 2009 11:27 am
Forum: General
Topic: Configuration optimization
Replies: 15
Views: 4143

Re: Configuration optimization

There is about 60 address lists. since they are dynamic address list i can not average but minimum 10 and maximum 400 entries per address list . So if we assume an average of 200 addresses per list, that's 12,000 addresses. Assuming an IP address is in the list and that the order of the rules is no...
by NAB
Wed Jun 24, 2009 11:34 am
Forum: General
Topic: IPv6 over PPPoE
Replies: 140
Views: 26297

Re: IPv6 over PPPoE

I need that feature in about 2 months, i am preparing a project that will need that feature, if that will not work, i will buy other equipment than Mikrotik I rather suspect that you'll have to go elsewhere. The Mikrotik guys are being very evasive about the problem. Until I get an answer like "Yes...
by NAB
Wed Jun 24, 2009 10:53 am
Forum: General
Topic: Configuration optimization
Replies: 15
Views: 4143

Re: Configuration optimization

Not so useful . here in forum is full of gurus Indeed, but to demand free help when you have already been told to speak to a consultant is more than a little impertinent and i think there is enough information in my question Which is probably part of the problem. just suggest a tip or trick to comb...
by NAB
Tue Jun 23, 2009 9:44 pm
Forum: General
Topic: What is the policy on changes to the API?
Replies: 1
Views: 328

What is the policy on changes to the API?

As you may have seen, I have done some work in writing code to allow Munin to graph some stats from various ROS boxes. I have noticed that between ROS 3.22 and 3.25, some changes have been made to the API and I can't find any reference to these changes in the release notes or anywhere else. The two ...
by NAB
Tue Jun 23, 2009 9:38 pm
Forum: General
Topic: Power monitoring!
Replies: 54
Views: 22978

Munin (was: Re: Power monitoring!)

And another one - last one of the day!! I have just added the code to allow graphing of packet volume matching certain firewall rules. If you want to graph the number of packets matching a rule, add a comment to the rule in the form "GRAPH - xxxxx" (where "xxxxx" is the label you want to give the da...
by NAB
Tue Jun 23, 2009 7:47 pm
Forum: General
Topic: Power monitoring!
Replies: 54
Views: 22978

Re: Power monitoring!

I've added another piece of code which allows the number of firewall rules in each chain to be graphed.
by NAB
Tue Jun 23, 2009 6:42 pm
Forum: General
Topic: Power monitoring!
Replies: 54
Views: 22978

Re: Power monitoring!

Currently it looks great! http://wiki.mikrotik.com/wiki/Munin_Monitoring

Can't wait for the rest :)
I have added another piece of code (using the PHP API) to the wiki which allows the active DHCP leases to be graphed.
by NAB
Tue Jun 23, 2009 4:21 pm
Forum: General
Topic: Configuration optimization
Replies: 15
Views: 4143

Re: Configuration optimization

Please help me to optimize the following config.
You haven't given enough information to allow us to do that.

I would echo the advice you received from Mikrotik - "you need to hire a consultant to do some optimizations".
by NAB
Tue Jun 23, 2009 12:28 pm
Forum: General
Topic: restrict internet access via router
Replies: 1
Views: 641

Re: restrict internet access via router

http://wiki.mikrotik.com/wiki/Main_Page
http://www.mikrotik.com/testdocs/ros/2.9/
Or there are many people using this forum who would be able to provide consultancy services.
by NAB
Mon Jun 22, 2009 1:35 pm
Forum: General
Topic: Latest Winbox hangs when accessing older firmware RBs.
Replies: 2
Views: 646

Re: Latest Winbox hangs when accessing older firmware RBs.

Try latest winbox loader.
Am trying it now. Will let you know....
by NAB
Mon Jun 22, 2009 1:18 pm
Forum: General
Topic: Latest Winbox hangs when accessing older firmware RBs.
Replies: 2
Views: 646

Latest Winbox hangs when accessing older firmware RBs.

I've got a strange problem which I can't seem to track down... I upgraded one RB493 to 3.25 and accessed it with Winbox. Winbox downloaded whatever updates it needed and I could access the RB493 no problem at all. I then used the same Winbox to access a RB450 running 3.22 and I am experiencing hangs...
by NAB
Mon Jun 22, 2009 11:58 am
Forum: General
Topic: What is the specification for the RB433UAH enclosure?
Replies: 0
Views: 356

What is the specification for the RB433UAH enclosure?

Just about to buy a RB433UAH to have a play with, but I'm lacking some information on the enclosure. The pictures at http://www.routerboard.com/popup.php?kods=121&sess=c80383b2bf048efefd275cc7b221a233 seem to show it as a long case, but with cutouts for the USB sockets. The questions are therefore: ...
by NAB
Wed Jun 17, 2009 6:58 pm
Forum: General
Topic: need advice or help to get OSX VPN to mikrotik working/setup
Replies: 7
Views: 1571

Re: need advice or help to get OSX VPN to mikrotik working/setup

sorry, but I was under the impression that PPTP isn't secure
I guess that depends on your definition of 'secure'.
by NAB
Wed Jun 17, 2009 2:30 pm
Forum: General
Topic: RouterOS V3.25 released
Replies: 34
Views: 3818

Re: RouterOS V3.25 released

Only an idiot would start to roll out a new OS barely minutes old on 20 live and critical routers. Agreed, but... If 3.25 is marked as 'release' rather than 'beta' or 'release candidate', I think it is reasonable that the user should assume that it has been tested and found working. If a firmware v...
by NAB
Wed Jun 17, 2009 2:21 pm
Forum: General
Topic: RB 500r5 Series Reset Defualt setting.
Replies: 4
Views: 3215

Re: RB 500r5 Series Reset Defualt setting.

can you please give me detail on how to do the shorten. there are two Jumpers on the board (JP3 & JP4) Assuming that the boards are all broadly similar, looking at the picture http://www.routerboard.com/img/rb532r5_s.jpg , I would expect the jumper to be the connection that looks like "()" turned 9...
by NAB
Wed Jun 17, 2009 12:01 am
Forum: General
Topic: Catch Gateway IP Theif?
Replies: 4
Views: 1080

Re: Catch Gateway IP Theif?

MIKROTIK SUPPORT, I need your help... this might force us to drop Mikrotik if we can't find a solution.
Have you e-mailed support@mikrotik.com?
by NAB
Tue Jun 16, 2009 6:04 pm
Forum: General
Topic: aggregate links, how?
Replies: 4
Views: 830

Re: aggregate links, how?

It doesn't work correctly
Is this for NAT/masquerading only, or does it apply to direct connections too?
by NAB
Tue Jun 16, 2009 5:06 pm
Forum: General
Topic: MikroTik User Meeting in USA
Replies: 39
Views: 7037

Re: MikroTik User Meeting in USA

i should start checking with the US embassy to see if i could get the visa
Wow. Coming from Iraq, you're a very brave man to want to go to the US. You have my utmost admiration!
by NAB
Tue Jun 16, 2009 5:03 pm
Forum: General
Topic: IPv6 over PPPoE
Replies: 140
Views: 26297

Re: IPv6 over PPPoE

Bump
by NAB
Tue Jun 16, 2009 4:21 pm
Forum: General
Topic: Intel Atom vs RB1000
Replies: 12
Views: 5848

Re: Intel Atom vs RB1000

not to speak about general purpose CPU vs network optimised CPU
That was the original question. Are you saying that the Atom based unit would not perform equably or better than a RB1000?
by NAB
Tue Jun 16, 2009 3:42 pm
Forum: General
Topic: firewall rule to dst host
Replies: 10
Views: 1836

Re: firewall rule to dst host

by NAB
Tue Jun 16, 2009 1:11 pm
Forum: General
Topic: Recommended GPS receiver for RB4xx series?
Replies: 0
Views: 376

Recommended GPS receiver for RB4xx series?

Hi,

Just a quickie to ask if anybody has any recommendations on which GPSs units work well with RBs for setting the time. Preferably ones which are a) cheap (!) and b) available in the UK.

Cheers
by NAB
Thu Jun 11, 2009 6:30 pm
Forum: General
Topic: firewall rule to dst host
Replies: 10
Views: 1836

Re: firewall rule to dst host

...periodically check for IP address changes for selected DNS names and correct firewall rules accordingly Thinking about this, this could be quite easy to implement from our side rather than on the MT side. If we create an address list entry for every host we want to query in this way and refer to...
by NAB
Thu Jun 11, 2009 12:52 am
Forum: General
Topic: Power monitoring!
Replies: 54
Views: 22978

Re: Power monitoring!

please could you post here you munin.conf and munin-node.conf Sure. munin.conf: dbdir /var/lib/munin htmldir /var/www/munin logdir /var/log/munin rundir /var/run/munin tmpldir /etc/munin/templates [localhost] address 127.0.0.1 use_node_name yes [xxxx.vitell.co.uk] address 1.2.3.4 use_node_name no [...
by NAB
Wed Jun 10, 2009 7:02 pm
Forum: General
Topic: Power monitoring!
Replies: 54
Views: 22978

Re: Power monitoring!

Try setting the upper limit to 1
Nope. Although the graph now has the correct scale, nothing's being plotted on it (I suspect that what's there is still positive and out of range of the graph.

Strange.
by NAB
Wed Jun 10, 2009 6:44 pm
Forum: General
Topic: Power monitoring!
Replies: 54
Views: 22978

Re: Power monitoring!

Can you post what the output of mikrotikwirelessregistrations_181.87.78.85 config returns? host_name 181.87.78.85 graph_args -l 0 --lower-limit -100 --upper-limit 0 graph_title Wireless Interface Registrations (Signal Strength) graph_vlabel dBm Signal graph_category network graph_info This graph sh...
by NAB
Wed Jun 10, 2009 6:06 pm
Forum: General
Topic: Power monitoring!
Replies: 54
Views: 22978

Re: Power monitoring!

More from me, I'm afraid... I tried to get the 'mikrotikwirelessregistrations' code working and found that the comments preceding it were correct (it doesn't work!!), so I decided to write my own in PHP using the PHP API - http://wiki.mikrotik.com/wiki/API_PHP_class . The code is below and I'll tidy...
by NAB
Wed Jun 10, 2009 3:50 pm
Forum: General
Topic: Power monitoring!
Replies: 54
Views: 22978

Re: Power monitoring!

Oh, and here's a piccy of the PPP graph
ppp.png
just to show it working.
by NAB
Wed Jun 10, 2009 3:47 pm
Forum: General
Topic: Power monitoring!
Replies: 54
Views: 22978

Re: Power monitoring!

With the mikrotikppp_HOST script: Use of /g modifier is meaningless in split at /usr/lib/perl5/vendor_perl/5.8.8/Net/Telnet/Cisco.pm line 756 (#1) (W regexp) You used the /g modifier on the pattern for a split operator. Since split always tries to match the pattern repeatedly, the /g has no effect. ...
by NAB
Wed Jun 10, 2009 2:23 pm
Forum: General
Topic: Power monitoring!
Replies: 54
Views: 22978

Re: Power monitoring!

Fantastic. I've got all three of the SNMP scripts set up and working like a charm: cpu.png diskspace.png memory.png The only thing I can't get my head around is how munin-node knows which plugins to run against which node. For example, I have the following: # telnet 127.0.0.1 4949 Trying 127.0.0.1.....
by NAB
Wed Jun 10, 2009 1:43 pm
Forum: General
Topic: Multiple outgoing routes
Replies: 5
Views: 862

Re: Multiple outgoing routes

Very easy. Have to set up schedule to run a scrip at the times you want. Or set up routing marks in firewall/mangle and time-profile them such that packets get whichever routing mark is applicable for the time the packet passes through. It's a little more complex to set up, but it's significantly e...
by NAB
Wed Jun 10, 2009 1:32 pm
Forum: General
Topic: firewall rule to dst host
Replies: 10
Views: 1836

Re: firewall rule to dst host

...this is unnecessarily complicated
On the contrary, this is necessarily complicated. How do you think it should be done (bearing in mind changeip's comments about resolving the hostname for every packet)?
by NAB
Tue Jun 09, 2009 5:59 pm
Forum: General
Topic: firewall rule to dst host
Replies: 10
Views: 1836

Re: firewall rule to dst host

is there any chance to add firewall rule to DST host not to DST IP
Yes, but not directly. You'll have to write a script which resolves the hostname and updates the firewall rule accordingly. You'll then have to schedule the script to run regularly.
by NAB
Tue Jun 09, 2009 4:38 pm
Forum: General
Topic: Slow Speeds through mikrotik PPPOE!!
Replies: 1
Views: 1196

Re: Slow Speeds through mikrotik PPPOE!!

Please explain what can be the issue
MTU/MSS?
by NAB
Tue Jun 09, 2009 11:29 am
Forum: General
Topic: RANT - Configuration management: .backup is a joke
Replies: 34
Views: 6992

Re: RANT - Configuration management: .backup is a joke

It is of course possible even now. You can simply change password and forget it
Except that resetting the box will reset the password anyway.
by NAB
Mon Jun 08, 2009 5:10 pm
Forum: General
Topic: RANT - Configuration management: .backup is a joke
Replies: 34
Views: 6992

Re: RANT - Configuration management: .backup is a joke

Files in /file print menu are not deleted while doing /system reset-configuration Yes, I understand that (the posts above make this point very clear). My question was that if you have a value stored which dictates what file should be run on reset, why (and how) won't that value itself be reset? If ...
by NAB
Mon Jun 08, 2009 4:11 pm
Forum: General
Topic: RANT - Configuration management: .backup is a joke
Replies: 34
Views: 6992

Re: RANT - Configuration management: .backup is a joke

auto-after-reset-configuration.rsc
Silly question, but wouldn't this value be reset along with the rest of the unit? If not, how does one make sure it is reset if one so desires?
by NAB
Fri May 22, 2009 4:42 pm
Forum: General
Topic: I really need HELP!!!
Replies: 14
Views: 2074

Re: I really need HELP!!!

Someone please! /interface pppoe-client add \ ac-name="" \ add-default-route=yes \ allow=pap,chap,mschap1,mschap2 \ comment="" \ dial-on-demand=no \ disabled=no \ max-mru=1480 \ max-mtu=1492 \ mrru=disabled \ profile=default \ service-name="" \ use-peer-dns=yes \ name=WHATEVERYOUWANT \ interface=TH...
by NAB
Fri May 15, 2009 5:01 pm
Forum: General
Topic: Hot to allow access some ip ,but drop other ip ?
Replies: 7
Views: 822

Re: Hot to allow access some ip ,but drop other ip ?

Sorry, I thought that's what I said.
by NAB
Wed May 13, 2009 7:24 pm
Forum: General
Topic: Hot to allow access some ip ,but drop other ip ?
Replies: 7
Views: 822

Re: Hot to allow access some ip ,but drop other ip ?

Please tell me how to setup /ip firewall filter add action=accept chain=forward comment="" connection-state=established disabled=no add action=accept chain=forward comment="" connection-state=related disabled=no add action=accept chain=forward comment="" disabled=no dst-address=222.222.222.222 add ...
by NAB
Wed May 13, 2009 6:49 pm
Forum: General
Topic: [Help]How to do QoS for DNS ??
Replies: 11
Views: 4247

Re: [Help]How to do QoS for DNS ??

Point us to some GOOD easy documentation for queue trees...
Get yourself to the next MUM that you can - The bits on QoS were worth the airfare and hotel alone.

Nick.
by NAB
Tue May 12, 2009 11:11 pm
Forum: General
Topic: Winbox window won't scale for small (netbook) displays
Replies: 14
Views: 15184

Winbox window won't scale for small (netbook) displays

Hi all, Just a quickie. I had occasion to use Winbox on my eeePC and came across a problem. Because the display is small and Winbox is big, I couldn't get to the 'tools' menu down the left hand side. The Winbox window doesn't have any scrolly-bars, so it simply wasn't possible to do what I wanted to...
by NAB
Tue May 12, 2009 11:05 pm
Forum: General
Topic: Service Tag...
Replies: 10
Views: 37636

Re: Service Tag...

i wanna know wath Service tAg is in new Ros3.23 (Vlan -check box) Interestingly, Winbox shows it as "User service tag", whilst the command line is "/interface vlan add use-service-tag=[yes | no]". Perhaps one of them is a typo. I have Googled about, but basic searches for "vlan 'service tag'" come ...
by NAB
Tue May 12, 2009 10:49 pm
Forum: General
Topic: [Help]How to do QoS for DNS ??
Replies: 11
Views: 4247

Re: [Help]How to do QoS for DNS ??

cause I know nothing about tree queues!
Learn?

Nick.
by NAB
Tue May 12, 2009 10:48 pm
Forum: General
Topic: email from server to me ( watch dog )) please help
Replies: 9
Views: 1783

Re: email from server to me ( watch dog )) please help

what can i put here please help
You need to specify a SMTP server which will accept e-mails from ROS for onward delivery to yahoo.

Or are you having a different problem?

Nick.
by NAB
Mon May 11, 2009 2:44 pm
Forum: General
Topic: PPPoE Server Assigns 3 IP-Pools Randomly
Replies: 17
Views: 1807

Re: PPPoE Server Assigns 3 IP-Pools Randomly

Hi,

There are a number of people on this forum (including myself) who would be willing to do this work for a fee.

Cheers,

Nick.
by NAB
Thu May 07, 2009 12:14 am
Forum: The Dude
Topic: Details lost when dynamic interfaces drops/reappears
Replies: 5
Views: 984

Re: Details lost when dynamic interfaces drops/reappears

Have you emailed support?
No, I wanted to check I wasn't doing anything silly first!
As far as my case goes I don't mind since I build every map by hand and I have no dynamic links.
I'm building mine by hand too, I just want to monitor some dynamic PPP interfaces, that's all!

Nick.
by NAB
Wed May 06, 2009 8:37 pm
Forum: General
Topic: MikroTik User Meeting in USA
Replies: 39
Views: 7037

Re: MikroTik User Meeting in USA

how much does flight from Europe to USA cost? =)
GBP400 flight plus GBP200 for accommodation, so I won't be going! Sad, but times are tough and I've already been to Dallas.

Nick.
by NAB
Wed May 06, 2009 8:28 pm
Forum: General
Topic: User Access Control
Replies: 1
Views: 784

Re: User Access Control

From what I can see the access controls we can grant read and/or write privileges on the config as a whole, but we can't seem to deny access to specific configuration areas (or even if it's the other way round, we're willing to grant access to specific bits that makes sense). That's pretty much rig...
by NAB
Wed May 06, 2009 6:55 pm
Forum: General
Topic: Confusing documentation for '/ip firewall filter add limit='
Replies: 0
Views: 391

Confusing documentation for '/ip firewall filter add limit='

Hi, Following on from the advice given here to go an consult the documentation, I have just told a user to do the same with a question they had regarding the 'limit' parameter of '/ip firewall filter add'. They came back to me and said that the documentation was useless and made no sense. After havi...
by NAB
Wed May 06, 2009 5:55 pm
Forum: General
Topic: Notice of Internet Protocol version 4 (IPv4) Depletion
Replies: 2
Views: 475

Re: Notice of Internet Protocol version 4 (IPv4) Depletion

Anyone rolling out IPv6? We have an ISP who can provide IPv6 addresses, internal technology which supports IPv6 and everything else we need. The only break in the chain is that we can't get IPv6 from our DSL modems to RouterOS because IPv6 over PPPoE isn't supported. See http://forum.mikrotik.com/v...
by NAB
Wed May 06, 2009 5:44 pm
Forum: General
Topic: Update docs for "reset-html", pls (ROS 3.23)
Replies: 4
Views: 853

Re: Update docs for "reset-html", pls (ROS 3.23)

Besides that, in "Current html pages will be lost! Reset anyway? [y/N]:
looks a bit strange: to enter "y" or "N" (smalll, capital letter ?)
Presumably, 'n' is the default.

Nick.
by NAB
Wed May 06, 2009 5:39 pm
Forum: General
Topic: IP Conflicts - but nobody using the IP
Replies: 17
Views: 1725

Re: IP Conflicts - but nobody using the IP

Perhaps you could provide your configuration - I don't understand how what you're saying can be happening and I think that RouterOS would be a laughing stock if you couldn't assign a static IP to any device connected. The only thing I can think of is if you're trying to assign a static IP to a devic...
by NAB
Wed May 06, 2009 12:13 pm
Forum: The Dude
Topic: Details lost when dynamic interfaces drops/reappears
Replies: 5
Views: 984

Re: Details lost when dynamic interfaces drops/reappears

I have seen when I replace a piece of equipment the dude will just start monitoring what ever port on the new device that has the same index. Hmmm. That's not useful - if you have to check that everything's set up properly before you can trust the results, you may as well do all the checks manually...
by NAB
Tue May 05, 2009 9:33 pm
Forum: The Dude
Topic: Details lost when dynamic interfaces drops/reappears
Replies: 5
Views: 984

Re: Details lost when dynamic interfaces drops/reappears

Has anybody else seen this behaviour? Am I trying to do something The Dude wasn't designed for?

Cheers,

Nick.
by NAB
Sat May 02, 2009 1:44 am
Forum: General
Topic: I really need HELP!!!
Replies: 14
Views: 2074

Re: I really need HELP!!!

You have shown a subnet mask of 255.255.255.248 which means you have 8 addresses available. You don't seem to have taken the network and broadcast addresses into account. a.b.c.40 - Network . . a.b.c.47 - Broadcast So you only have 6 usable addresses, of which one will be the RB, so in reality, you ...
by NAB
Sat May 02, 2009 1:07 am
Forum: General
Topic: PPPoE Server Assigns 3 IP-Pools Randomly
Replies: 17
Views: 1807

Re: PPPoE Server Assigns 3 IP-Pools Randomly

The following assumes that three pools are available - dhcp_pool1...3. Tested and works fine. Script: /system script add name=changepool policy=\ ftp,reboot,read,write,policy,test,winbox,password,sniff source="# 'testpro\ file' is the name of the profile which contains the remote-address\r\ \n# we w...
by NAB
Fri May 01, 2009 10:40 pm
Forum: General
Topic: PPPoE Server Assigns 3 IP-Pools Randomly
Replies: 17
Views: 1807

Re: PPPoE Server Assigns 3 IP-Pools Randomly

can you please tell me witch Scheduler srcipt you think good for this?
There isn't one - you'll have to write it yourself.

I have a bit of time spare this evening, so I'll see if I can cobble together an example for you.

Nick.
by NAB
Fri May 01, 2009 6:27 pm
Forum: General
Topic: PPPoE Server Assigns 3 IP-Pools Randomly
Replies: 17
Views: 1807

Re: PPPoE Server Assigns 3 IP-Pools Randomly

if i use Scheduler to change IP Pool in PPP profile, then 33% of each pool is not possible Why not? If the number of clients is small, then I may agree, but I can't see why you'd want to implement something like this for a small number of clients. With a large number of clients and three pools, on ...
by NAB
Wed Apr 29, 2009 1:31 pm
Forum: The Dude
Topic: Details lost when dynamic interfaces drops/reappears
Replies: 5
Views: 984

Details lost when dynamic interfaces drops/reappears

I've had a Dude implementation up for a couple of months, and have found a problem which has rendered it almost completely useless. I want to monitor the state of remote sites which are semi-permanently connected by a PPTP link. The interfaces to use are therefore signified by <pptp-X> (where X is t...
by NAB
Wed Apr 22, 2009 6:01 pm
Forum: General
Topic: Different Gateways depending on username...
Replies: 5
Views: 629

Re: Different Gateways depending on username...

I don't know if you can do this with the user manager, but RADIUS authentication allows you to set a packet mark rule specific to each user or user group. You can then use this to decide which gateway to use.

Nick.
by NAB
Wed Apr 22, 2009 2:11 pm
Forum: General
Topic: DNS Names for PPTP
Replies: 8
Views: 1072

Re: DNS Names for PPTP

Not got as far as using Regexes, but I've put the NTP pool script up on http://wiki.mikrotik.com/wiki/Scripting-examples

Nick.
by NAB
Wed Apr 22, 2009 12:49 am
Forum: General
Topic: The Next MUM
Replies: 11
Views: 1106

Re: The Next MUM

Being entirely selfish (and with tongue planted firmly in cheek) - the second or third weekend of October in Phoenix would be good for me. That way I can do Astricon and MUM all on one trip.

Nick.
by NAB
Mon Apr 20, 2009 6:08 pm
Forum: General
Topic: DNS Names for PPTP
Replies: 8
Views: 1072

Re: DNS Names for PPTP

Since I've just got the e-mail to say 3.23 is available, I'd better try it!
by NAB
Mon Apr 20, 2009 3:43 pm
Forum: General
Topic: DNS Names for PPTP
Replies: 8
Views: 1072

Re: DNS Names for PPTP

OK. First time at a script more than one line long! Seems to work, but can somebody sanity check this? :local ntpaip [:resolve "0.uk.pool.ntp.org"]; :local ntpbip [:resolve "1.uk.pool.ntp.org"]; :local ntpcura [/system ntp client get primary-ntp]; :local ntpcurb [/system ntp client get secondary-ntp...
by NAB
Mon Apr 20, 2009 2:20 pm
Forum: General
Topic: DNS Names for PPTP
Replies: 8
Views: 1072

Re: DNS Names for PPTP

I'll second that request - I have exactly the same problem with NTP.

We use the ntp.org pool service, so I'd like to set primary and secondary NTP to:

0.uk.pool.ntp.org
1.uk.pool.ntp.org

However, I can't!

Nick.
by NAB
Mon Apr 20, 2009 2:11 pm
Forum: General
Topic: IPv6 over PPPoE
Replies: 140
Views: 26297

Re: IPv6 over PPPoE

Bump
by NAB
Thu Apr 16, 2009 5:30 pm
Forum: General
Topic: Winbox suggestion
Replies: 43
Views: 3313

Re: Winbox suggestion

IMHO winbox is screwdriver while DUDE is kitted out robotic arm. That path leads to bloat. Sometimes it is better/easier/faster to have the screwdriver. Correct me if I'm wrong, but doesn't The Dude just start up winbox for you anyway? If so, then what you're proposing is an additional layer which ...
by NAB
Thu Apr 16, 2009 3:25 pm
Forum: General
Topic: Winbox suggestion
Replies: 43
Views: 3313

Re: Winbox suggestion

isn't it possible to obtain command line parameters of any user's process in system? =)
Yup. I was hoping that Winbox would do something sensible in this regard (spawn child, kill parent?), but I haven't tested it and I suspect that my optimism is unplaced!

Nick.
by NAB
Thu Apr 16, 2009 1:27 pm
Forum: General
Topic: Winbox suggestion
Replies: 43
Views: 3313

Re: Winbox suggestion

winbox.exe takes three optional parameters/arguments: winbox [location [username [password]]] e.g. winbox firewall.business.com admin mysecret So you could get around both of the problems mentioned here (security - lack of encryption of winbox.cfg file and structure - folders per site/user/whatever)...
by NAB
Tue Mar 17, 2009 11:47 am
Forum: General
Topic: Help Please
Replies: 3
Views: 779

Re: Help Please

I want that all of my clients see as Real IP, only the IP from the 1st ISP. Unless the ISPs have some control over routing, this is impossible. We have several sites with two Internet connections, but they both connect back to the same ISP (eventually) which can route IPs to/from any/all of the con...
by NAB
Fri Mar 06, 2009 3:53 pm
Forum: General
Topic: IPv6 over PPPoE
Replies: 140
Views: 26297

Re: IPv6 over PPPoE

Bump
by NAB
Thu Mar 05, 2009 5:58 pm
Forum: General
Topic: Two Gateways One Interface
Replies: 9
Views: 4856

Re: Two Gateways One Interface

Ideas? The only problem I've ever seen with a similar configuration to yours was when the client used Zyxel ADSL modems. With one turned off, the other worked fine and vice-versa. Try running two on the same Ethernet port and the whole thing ground to a halt. It turned out that the Zyxels have some...
by NAB
Thu Mar 05, 2009 3:14 pm
Forum: The Dude
Topic: Perform telnet notification on event - nasty!
Replies: 1
Views: 558

Perform telnet notification on event - nasty!

I have a remote site with a DSL modem. For no apparent reason, the router kills the PPPoE session from the RB450 but still remains synced to the local exchange. ROS keeps trying to bring up the PPPoE session, but the modem ignores it. The only way around this is to log into the modem from the LAN si...
by NAB
Thu Mar 05, 2009 2:27 pm
Forum: The Dude
Topic: Problems remote acces
Replies: 1
Views: 471

Re: Problems remote acces

Can someone please explain me step by step how to config a dude server and client app so i can see from home how some network at work is doing ?
The document linked from http://www.mikrotik.com/thedude.php was enough for me to get a simple configuration set up.

Nick.
by NAB
Wed Mar 04, 2009 3:58 pm
Forum: The Dude
Topic: RouterOS + Dude Web Interface problems...
Replies: 33
Views: 23924

Re: RouterOS + Dude Web Interface problems...

i'm using RouterOS 3.20. dude-3-1.npk installed ok and can navigate do http://(mikrotikip)/dude but freezes at login
Yes, I'm seeing this too.

Nick.
by NAB
Tue Mar 03, 2009 11:54 pm
Forum: General
Topic: how to limit download file .exe .mp3 etc wtih MT
Replies: 1
Views: 915

Re: how to limit download file .exe .mp3 etc wtih MT

i wanna know how to limit user download file such as .exe .mp3 .rar .pdf etc in routerOS ver.2.9.X and 3.x
By which protocol - HTTP, FTP, scp, SMB, NFS, Kermit or another?

Limit, how? Stop completely, traffic shape, limit maximum download size?

Nick.
by NAB
Tue Mar 03, 2009 11:47 pm
Forum: General
Topic: unlimit the ICMP traffic to the MikroTik
Replies: 4
Views: 2717

Re: unlimit the ICMP traffic to the MikroTik

didn't get answer how can i unlimit ICMP packet .. should i add a rule in simple queue to ICMP packet and what is !! You can't unlimit anything. You can only limit things. The key, therefore, is to limit everything except ICMP. Remember, from the queue documentation, that if traffic matches a simpl...
by NAB
Tue Mar 03, 2009 5:42 pm
Forum: General
Topic: Prague Mum PICS :)
Replies: 7
Views: 1082

Re: Prague Mum PICS :)

Always neat to see some of the kewl stuff there.
Unless you have a fetish for wifi antennae, you'd probably not like the pics anyway - that's pretty much all there was.

Nick.
by NAB
Tue Mar 03, 2009 1:26 am
Forum: General
Topic: Prague Mum PICS :)
Replies: 7
Views: 1082

Re: Prague Mum PICS :)

I figured that there would be enough people taking pics of the conference itself (and there I am looking really pensive in them!), so my pics are of Prague itself - no people, no Mikrotik, just Prague!....

http://picasaweb.google.co.uk/vitellcon ... directlink

Nick.
by NAB
Mon Mar 02, 2009 1:42 pm
Forum: General
Topic: MUM News ??
Replies: 9
Views: 2278

Re: MUM News ??

Any details on BoF sessions - some new ideas/solution? I can only speak for the QoS/Priorities/Shaping BoF which was the one I went to. The one thing which came out of it (apart from the fact that it is possible to share 1Mbit/s between 200 users - you had to be there) was that it is impossible to ...
by NAB
Mon Mar 02, 2009 1:35 pm
Forum: General
Topic: Kick user without admin permission
Replies: 1
Views: 511

Re: Kick user without admin permission

sometime my technicians must kick some PPPOE users on my mikrotik , how can i manage it without admin permission? It is my understanding that permissions are not granular enough to allow kicking users without allowing full access to everything else. However, using the API, it is possible (and reaso...
by NAB
Mon Mar 02, 2009 12:24 pm
Forum: General
Topic: Queues. Reach limits and router slows down...
Replies: 10
Views: 2246

Re: Queues. Reach limits and router slows down...

The pings were very slow - 1000+ms. The CPU usage was not very high, between 0-10%. I then saw that when I disconnected one of the local users on my lan, the problem went away and the pings stabilized on +-4ms. I contacted the user and asked what he's busy doing. Said he's sending out a large email...
by NAB
Mon Mar 02, 2009 12:08 pm
Forum: General
Topic: IPv6 over PPPoE
Replies: 140
Views: 26297

Re: IPv6 over PPPoE

To update: perhaps this is something we could discuss face to face in Prague over the next couple of days? Well, I did try, but sadly this didn't happen. I have received the following response from Mikrotik: that is by design that IPV6 is not working over PPPoE tunnel. That was securyty bug, that in...
by NAB
Sun Mar 01, 2009 2:29 pm
Forum: General
Topic: MUM News ??
Replies: 9
Views: 2278

Re: MUM News ??

so 700 people are too tired to report any cool new thing they heard or saw? There wasn't much in the way of new things - just an announcement that USB on RBs will be more prevalent and that the new model (plastic cased RB450 look-a-like) will be about USD50. IMHO, the highlight of the conference wa...
by NAB
Wed Feb 25, 2009 7:22 pm
Forum: General
Topic: Problem with large number of DNS queries, can you test?
Replies: 32
Views: 5003

Re: Problem with large number of DNS queries, can you test?

Are you sure those packets were sent from the Windows built in resolver, or was it from a specifically crafted Windows program that sends them? Ah, now there's the question. The short answer is "I am not sure"! However, if it's from a specially crafted resolver, then it may be that it's a standard ...
by NAB
Wed Feb 25, 2009 4:51 pm
Forum: General
Topic: IPv6 over PPPoE
Replies: 140
Views: 26297

Re: IPv6 over PPPoE

IPv6 can't be transported over ppp Are you stating that your implementation of PPP is broken/buggy and that you are not prepared to investigate/fix? If so, this has very serious implications for our use of ROS/RBs in future. I appreciate that electronic communications are sometimes unintentionally ...
by NAB
Wed Feb 25, 2009 4:36 pm
Forum: Scripting
Topic: PHP API bug - read() fails on large replies - this fix OK?
Replies: 22
Views: 6586

Re: PHP API bug - read() fails on large replies - this fix OK?

this works well but there is another problem with this implementation.
You are quite right - as it exists at the moment, the class expects an immediate response to a command and doesn't work at all well when the response may never come or may come at some point in the future.

Nick.
by NAB
Wed Feb 25, 2009 3:50 pm
Forum: General
Topic: IPv6 over PPPoE
Replies: 140
Views: 26297

Re: IPv6 over PPPoE

If you want to transport IPv6 traffic over a tunnel, then the only option is 6to4 tunnels That's not a particularly helpful answer - especially since it used to work and appears to have been deliberately broken. It's also not helpful if one's Internet connection is delivered over a PPPoE connection...
by NAB
Wed Feb 25, 2009 2:09 pm
Forum: General
Topic: IPv6 over PPPoE
Replies: 140
Views: 26297

Re: IPv6 over PPPoE

I'll second that question - I raised a bug report yesterday when a perfectly working IPv6/PPPoE configuration failed to operate at all after an upgrade to 3.20.

Nick.
by NAB
Wed Feb 25, 2009 11:45 am
Forum: General
Topic: how can i config many router board at same time?
Replies: 13
Views: 2035

Re: how can i config many router board at same time?

so make a file with your commands, name it 'update.auto.rsc' and upload by ftp ftp upload is easily scriptable, you may mass-upload this file to many routes with one shell script either on Windows or Linux Doesn't appear to work under 3.20 - After I upload, say, 'abc.auto.rsc', a file 'abc.auto.log...
by NAB
Wed Feb 25, 2009 11:15 am
Forum: General
Topic: Problem with large number of DNS queries, can you test?
Replies: 32
Views: 5003

Re: Problem with large number of DNS queries, can you test?

You must be kidding me. No. check what happens if you do that against BIND server on your windows box. That's exactly what the Windows program I mentioned above does - it sends the same requests to two different DNS servers (in my case, one is the ROS box and one is an external third party server)....
by NAB
Tue Feb 24, 2009 7:05 pm
Forum: General
Topic: Problem with large number of DNS queries, can you test?
Replies: 32
Views: 5003

Re: Problem with large number of DNS queries, can you test?

Running a request from Windows (using the program I mentioned above) whilst doing packet sniffing does show that requests are definitely being made - a look at the dump does show all the domain names there.

Unfortunately, further analysis of the dump is well beyond my area of expertise.

Nick.
by NAB
Tue Feb 24, 2009 6:56 pm
Forum: General
Topic: Problem with large number of DNS queries, can you test?
Replies: 32
Views: 5003

Re: Problem with large number of DNS queries, can you test?

Interesting.

I tested with the script at http://pastebin.com/m6b053b8 (valid for a month and too long to post here!!).

And from Linux, it worked perfectly.

The problem seems to be when Windows clients make the requests.

Nick.
by NAB
Tue Feb 24, 2009 6:38 pm
Forum: General
Topic: Problem with large number of DNS queries, can you test?
Replies: 32
Views: 5003

Re: Problem with large number of DNS queries, can you test?

how many users you have to have to get 60 simultaneous requests?
Only 40 or so, the problem is when one or more of them are running a P2P or shoutcast clients which launch a large number of simultaneous connect requests.

Nick.
by NAB
Tue Feb 24, 2009 3:06 pm
Forum: General
Topic: Problem with large number of DNS queries, can you test?
Replies: 32
Views: 5003

Re: Problem with large number of DNS queries, can you test?

Confirmed this bug exists in 3.16 also, so it must have been around for a while.
by NAB
Tue Feb 24, 2009 1:34 pm
Forum: General
Topic: Problem with large number of DNS queries, can you test?
Replies: 32
Views: 5003

Re: Problem with large number of DNS queries, can you test?

I have confirmed that this bug also exists in the x86 code of version 3.20, so I am surprised more people aren't seeing it.

Nick.
by NAB
Mon Feb 23, 2009 11:04 pm
Forum: General
Topic: Problem with large number of DNS queries, can you test?
Replies: 32
Views: 5003

Re: Problem with large number of DNS queries, can you test?

Has anybody tested this yet?

Nick.
by NAB
Sat Feb 21, 2009 12:08 am
Forum: Scripting
Topic: PHP API bug - expects '!done' as last data - this fix OK?
Replies: 3
Views: 768

Re: PHP API bug - expects '!done' as last data - this fix OK?

NAB would be nice if you could add these to the wiki article
I have edited the original article - without the changes the PHP class simply doesn't work, so it makes no sense to keep the incorrect version listed.

Cheers,

Nick.
by NAB
Fri Feb 20, 2009 11:57 pm
Forum: General
Topic: Problem with large number of DNS queries, can you test?
Replies: 32
Views: 5003

Re: Problem with large number of DNS queries, can you test?

So, before I report this as a bug, I'd appreciate some feedback from other users - what boards and ROS versions have this problem. I've done some more testing and, assuming that 60 queries are made in a very short space of time, all 60 can be seen coming in to the router, but only 1 query is made b...
by NAB
Fri Feb 20, 2009 11:41 pm
Forum: General
Topic: Problem with large number of DNS queries, can you test?
Replies: 32
Views: 5003

Problem with large number of DNS queries, can you test?

Hi all, I installed a RB450 on a client's site today. It serves about 40 users and was working absolutely fine for a few of them, but when all 40 started using it, everything went to pot - the router stopped responding, latency shot up (ping times went from 13ms to 900ms, for example) and it basical...
by NAB
Wed Feb 18, 2009 6:09 pm
Forum: Scripting
Topic: Free Hotspot user time limitation
Replies: 26
Views: 45888

Re: Free Hotspot user time limitation

We're revisiting this. I assume that everybody is trying to access the same payment method and so everybody is having the same problem. Am I right in understanding that there are some sites that cannot be accessed because they are not added to the walled garden? If so, am I correct in understanding...
by NAB
Wed Feb 18, 2009 10:28 am
Forum: Scripting
Topic: API bug - commas not escaped.
Replies: 7
Views: 1044

Re: API bug - commas not escaped.

the result <<< /ip/address/get <<< =.id=*A <<< >>> !done >>> =ret=.id=*a,address=192.168.1.1/24,network=192.168.1.0,netmask=255.255.255.0,broadcast=192.168.1.255,interface=ether1,actual-interface=bridge1,comment=,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,disabled=false >>> That is precisely ...
by NAB
Tue Feb 17, 2009 4:34 pm
Forum: Scripting
Topic: API bug - commas not escaped.
Replies: 7
Views: 1044

API bug - commas not escaped.

When using the API to read values, any commas encoded within values (e.g. in the comments field) are not escaped. This makes it practically impossible to parse returned output and could lead to denial of service or injection type attacks. For example... Put a couple of commas inside a comment: [admi...
by NAB
Tue Feb 17, 2009 4:25 pm
Forum: Scripting
Topic: PHP API bug - read() fails on large replies - this fix OK?
Replies: 22
Views: 6586

PHP API bug - read() fails on large replies - this fix OK?

I have been using the PHP API and found an interesting problem. When the read() function is called and the response is greater than 127 characters, it all goes horribly wrong. This is because the original coder failed to take into account the reply length criteria as defined on http://wiki.mikrotik....
by NAB
Tue Feb 17, 2009 11:52 am
Forum: Scripting
Topic: PHP API bug - expects '!done' as last data - this fix OK?
Replies: 3
Views: 768

PHP API bug - expects '!done' as last data - this fix OK?

When using the following code: <?php require('routeros_api.class.php'); $API = new routeros_api(); $API->debug = false; if ($API->connect('1.2.3.4', 'apiuser', 'apipassword')) { $API->write('/tool/user-manager/user/add',false); $API->write('=name=fred',false); $API->write('=password=abc',false); $AP...
by NAB
Tue Feb 17, 2009 10:33 am
Forum: General
Topic: Firewall chains - default policy action?
Replies: 12
Views: 14783

Re: Firewall chains - default policy action?

/ip firewall filter add chain=<chain> action=drop
Sadly this doesn't work when the chain has dynamically added rules - as the dynamic rules are added and removed, the 'action=drop' rule moves towards the top of the chain and the following rules are therefore ignored.

Nick.
by NAB
Mon Feb 16, 2009 10:03 pm
Forum: General
Topic: Block Unwanted Mac
Replies: 4
Views: 3602

Re: Block Unwanted Mac

Try:
ip firewall filter add action=drop chain=forward comment="" disabled=no src-mac-address=00:00:00:00:00:00
Where 00:00:00:00:00:00 is the MAC address you want to block.

Nick.
by NAB
Mon Feb 16, 2009 6:16 pm
Forum: General
Topic: Firewall chains - default policy action?
Replies: 12
Views: 14783

Re: Firewall chains - default policy action?

I've been searching for this as well. I'd like to be able to change the default policy. The page I linked above says "You can change the chain policies by using the /ip firewall set command.", but this appears to have been deprecated - I certainly can't do that under 3v20. I too would like to be ab...
by NAB
Mon Feb 16, 2009 6:08 pm
Forum: General
Topic: Rate limiting hotspot users **and** total hotspot limit
Replies: 1
Views: 570

Re: Rate limiting hotspot users **and** total hotspot limit

Just tried this by manually creating the queues and setting the IP address queue to be a child of the hotspot interface queue and it works perfectly.

Is this a bug? Should the user queues be created as children of the hotspot queue?

Nick.
by NAB
Mon Feb 16, 2009 6:03 pm
Forum: General
Topic: Rate limiting hotspot users **and** total hotspot limit
Replies: 1
Views: 570

Rate limiting hotspot users **and** total hotspot limit

Using '/ip hotspot profile' command, I can set a rate limit for a hotspot - e.g. say 2M/2M to be shared between all users. That sets up a queue on the hotspot interface and works perfectly. Using '/ip hotspot user profile' command, I can set a rate limit for each user using that profile - e.g. say 2...
by NAB
Mon Feb 16, 2009 2:14 pm
Forum: General
Topic: Firewall chains - default policy action?
Replies: 12
Views: 14783

Firewall chains - default policy action?

The documentation at http://www.mikrotik.com/documentation/manual_2.5/IP/Firewall.html#ip_firewall_flow states that If the packet has not matched any rule within the chain, then the default policy action of the chain is performed. I have searched through the configuration and cannot find any referen...
by NAB
Fri Feb 13, 2009 6:50 pm
Forum: General
Topic: API inefficiencies or do I misunderstand how it works?
Replies: 0
Views: 399

API inefficiencies or do I misunderstand how it works?

I am trying to use the API to update user-manager user details. From what has been posted elsewhere on this forum, my understanding is that in order to read the contents or update the record for one user I have to: issue a "/tool/user-manager/user/find" command Parse the returned data and then for e...
by NAB
Fri Feb 13, 2009 6:21 pm
Forum: General
Topic: Editing user-manager users from terminal or API - possible?
Replies: 2
Views: 1335

Re: Editing user-manager users from terminal or API - possible?

Ah. OK. Thank you.

Is there a wiki page which describes all the commands and options - this must have been the only thing I didn't try!!!

Thanks,

Nick.
by NAB
Fri Feb 13, 2009 12:15 pm
Forum: General
Topic: Editing user-manager users from terminal or API - possible?
Replies: 2
Views: 1335

Editing user-manager users from terminal or API - possible?

When I type: > /tool user-manager user print where name=fred I get: 0 subscriber=TestSub name="fred" password="fred" group-name="1M" uptime-used=1h9m23s download-used=11733964 upload-used=1827814 last-seen=feb/12/2009 16:39:18 credit-count=1 credit-left=1m credit-duration=1m credit-price=20 credit-t...
by NAB
Fri Feb 13, 2009 11:06 am
Forum: General
Topic: Set b/w rates - dynamically created (PayPal) hotspot users?
Replies: 1
Views: 443

Re: Set b/w rates - dynamically created (PayPal) hotspot users?

I've had a bit of a think about this and had a good poke around with the way things work and I don't think this is possible - when topping up an account, the new time allowance is added onto the existing time balance to give a new time balance. If the bandwidth allocation were to change, then this w...
by NAB
Thu Feb 12, 2009 5:30 pm
Forum: General
Topic: Set b/w rates - dynamically created (PayPal) hotspot users?
Replies: 1
Views: 443

Set b/w rates - dynamically created (PayPal) hotspot users?

I have successfully configured 3.20 as a hotspot and have integrated PayPal payments as well. We would like to offer the user daily, weekly or monthly access with download limits of 200K, 1M and 2M (i.e. there are 9 price points in total). By assigning users to groups and then using the Hotspot User...
  • 1
  • 2