Community discussions

MikroTik App

Search found 557 matches

  • 1
  • 2
by c0d3rSh3ll
Tue Mar 25, 2014 6:26 pm
Forum: General
Topic: L2tP with IPSec don't works on v6.11 (Solved!)
Replies: 4
Views: 1725

Re: L2tP with IPSec don't works on v6.11

Replicate the problem and send a support.rif to support@mikrotik.com

sent from my mobile phone using tapatalk
by c0d3rSh3ll
Tue Mar 25, 2014 6:01 pm
Forum: Beginner Basics
Topic: Noob question about Dual WAN
Replies: 2
Views: 2028

Re: Noob question about Dual WAN

Something like this:

/ip firewall mangle add chain=prerouting scr-address=ip_raspi action=mark-routing new-routing-mark=raspi

/ip route add gateway=gateway2 routing-mark=raspi distance=1

/ip route add gateway=gateway1 routing-mark=raspi distance=2



sent from my mobile phone using tapatalk
by c0d3rSh3ll
Tue Mar 25, 2014 4:27 pm
Forum: General
Topic: big problem
Replies: 4
Views: 1753

Re: big problem

This is the solution

http://wiki.mikrotik.com/wiki/Load_Bala ... e_Gateways


sent from my mobile phone using tapatalk
by c0d3rSh3ll
Tue Mar 25, 2014 4:24 pm
Forum: General
Topic: How to leave a free subnet in hotspot
Replies: 5
Views: 2300

Re: How to leave a free subnet in hotspot

You can bypass the pc and another devices from hotspot with ip binding option.

sent from my mobile phone using tapatalk
by c0d3rSh3ll
Mon Mar 24, 2014 7:50 am
Forum: General
Topic: Web Proxy disable scripting
Replies: 5
Views: 2078

Re: Web Proxy disable scripting

what is your proxy OS?, I am thinking to make a script for chech the squid status and add a rule for block ping if is not running. Through this method routerOS can not ping to proxy and disable the nat rule, then if squid status is running disable this rule and routerOS can enable the nat rule again.
by c0d3rSh3ll
Mon Mar 24, 2014 2:24 am
Forum: General
Topic: Best equipment for 200 users on hotspot
Replies: 3
Views: 2452

Re: Best equipment for 200 users on hotspot

The best solution and "low cost" is a rb1100ahx2 or you can buy a CCR but is more expensive.


sent from my mobile phone with tapatalk
by c0d3rSh3ll
Mon Mar 24, 2014 2:02 am
Forum: General
Topic: Web Proxy disable scripting
Replies: 5
Views: 2078

Re: Web Proxy disable scripting

With ping is not a secure method because if squid fail the proxy reply your ping packet. If you need the easy way is: Add a netwach rule with host=ip_proxy In the down tab add this : /ip firewall nat disable [find comment=squid] In the up tab add: /ip firewall nat enable [find comment=squid] Add the...
by c0d3rSh3ll
Sat Mar 22, 2014 6:05 am
Forum: Beginner Basics
Topic: how to merge 4 internet connections on RB951Ui-2HnD
Replies: 3
Views: 2228

Re: how to merge 4 internet connections on RB951Ui-2HnD

You can balance connection from your network with PCC method. Is a load balance and work fine for me.

sent from my mobile phone with tapatalk
by c0d3rSh3ll
Thu Mar 20, 2014 9:00 pm
Forum: General
Topic: IPSec Tunneling - Help needed - part 2 - Static Routes
Replies: 5
Views: 1629

Re: IPSec Tunneling - Help needed - part 2 - Static Routes

Try this:
Add a static route like this
/ip route add dst-address=remote_network gateway=ip_peerIPsec


sent from my mobile phone with tapatalk
by c0d3rSh3ll
Thu Mar 20, 2014 6:05 am
Forum: General
Topic: Feature request: OpenVPN compression LZO and UDP
Replies: 200
Views: 125860

Re: Feature request: OpenVPN compression LZO and UDP

+1 for udp protocol. I need to run a pfsense machine for openvpn over udp connected to my mikrotik core router


sent from my mobile phone with tapatalk
by c0d3rSh3ll
Wed Mar 19, 2014 7:17 pm
Forum: General
Topic: Hotspot users can browse by IP but no DNS
Replies: 2
Views: 1109

Re: Hotspot users can browse by IP but no DNS

You have "allow remote request=yes" in dns menu?

Post an export from your router

sent from my mobile phone with tapatalk
by c0d3rSh3ll
Tue Mar 18, 2014 7:19 pm
Forum: Beginner Basics
Topic: webproxy with hotspot
Replies: 3
Views: 1322

Re: webproxy with hotspot

Post your nat rule of transparent proxy.

sent from my mobile phone with tapatalk
by c0d3rSh3ll
Sat Mar 15, 2014 5:32 am
Forum: General
Topic: New RB2011 hotspot page not working [FIXED]
Replies: 5
Views: 3646

Re: New RB2011 hotspot page not working

select birdge-local instead of ether2.
by c0d3rSh3ll
Fri Mar 14, 2014 11:33 pm
Forum: Wireless Networking
Topic: Traffic not passing from wan to lan
Replies: 3
Views: 2542

Re: Traffic not passing from wan to lan

Check the masquerade rule if your cpe is nated

sent from my mobile phone with tapatalk
by c0d3rSh3ll
Fri Mar 14, 2014 9:30 pm
Forum: Scripting
Topic: reditrect log output in script
Replies: 3
Views: 3203

Re: reditrect log output in script

you can do with action remote in system-->loggin menu for info topic.

http://wiki.mikrotik.com/wiki/Manual:System/Log


the problem is that all loging info topic are send to remote syslog.
by c0d3rSh3ll
Thu Mar 13, 2014 4:47 am
Forum: Beginner Basics
Topic: Firewall config only allow certain ports from VPN connection
Replies: 3
Views: 2172

Re: Firewall config only allow certain ports from VPN connec

When a client is connected i do see the interface "l2tp-user", and i can configure it like this: Chain:forward protocol:TCP destination port:portnr In Interface :l2tp-user Action: Accept Chain:dstnat protocol:TCP destination port:portnr In Interface :l2tp-user Action: dst-nat to adress: s...
by c0d3rSh3ll
Thu Mar 13, 2014 3:51 am
Forum: Scripting
Topic: Ip hotspot active user = simple Queue
Replies: 1
Views: 1494

Re: Ip hotspot active user = simple Queue

Something like this?

http://forum.mikrotik.com/viewtopic.php ... 63#p299563


sent from my mobile phone with tapatalk
by c0d3rSh3ll
Tue Mar 11, 2014 10:31 pm
Forum: Scripting
Topic: Edit values with a script
Replies: 4
Views: 6659

Re: Edit values with a script

You can set (edit) a firewall rule like this:

/ip firewall filter set action=accept number=6

sent from my mobile phone with tapatalk
Thank you c0d3rs
You understand what I mean, it works!
I edit the post for more info. Check again

sent from my mobile phone with tapatalk
by c0d3rSh3ll
Tue Mar 11, 2014 10:22 pm
Forum: Scripting
Topic: Edit values with a script
Replies: 4
Views: 6659

Re: Edit values with a script

You can set (edit) a firewall rule like this: /ip firewall filter set action=accept number=6 The same way for drop /ip firewall filter set action=drop number=6 I prefer to use find option for set a firewall rule because maybe the orden of the rules is changed so you set another rule. For this is: /i...
by c0d3rSh3ll
Tue Mar 11, 2014 9:46 am
Forum: Wireless Networking
Topic: Load Balancing 4WAN connection Turned into 1 solid link
Replies: 2
Views: 1198

Re: Load Balancing 4WAN connection Turned into 1 solid link

Is this possible i have multiple connections bringing internet can i use a mikrotik router board to give out 1 sold link of the 4 internet links example each link brings 1mb of internet connectivity if i combine them i should get 1 solid output of 4mb internet link? Please advise if any one can ass...
by c0d3rSh3ll
Sun Mar 09, 2014 7:08 pm
Forum: General
Topic: redirect without loop?
Replies: 4
Views: 1864

Re: redirect without loop?

You need to add a accept rule for the website in the top of your rules and then the redirect rule

Sent from my mobile phone with Tapatalk
by c0d3rSh3ll
Sat Mar 08, 2014 9:08 pm
Forum: General
Topic: SKYPE Queue Priority
Replies: 3
Views: 2985

Re: SKYPE Queue Priority

Maybe layer 7 regex can help you. I tried it with 5.x and work fine.

Sent from my mobile phone with Tapatalk
by c0d3rSh3ll
Thu Mar 06, 2014 8:31 pm
Forum: General
Topic: Strnge DNS Cache entries from China
Replies: 5
Views: 2171

Re: Strnge DNS Cache entries from China

Protect your mikrotik dns from internet acces allowing only request from your lan

Sent from my mobile phone with Tapatalk
by c0d3rSh3ll
Tue Mar 04, 2014 3:51 am
Forum: General
Topic: mikrotik central pppoe server
Replies: 2
Views: 1018

Re: mikrotik central pppoe server

What is your problem?

Sent from my mobile phone with Tapatalk
by c0d3rSh3ll
Mon Mar 03, 2014 10:01 pm
Forum: Scripting
Topic: Mikrotik and Squid(Ubuntu based)
Replies: 1
Views: 1354

Re: Mikrotik and Squid(Ubuntu based)

in your nat rule you can set !scr-address=ip_mediaserver

so any ip except ip of mediaserver is redirected to squid box.
by c0d3rSh3ll
Fri Feb 21, 2014 4:41 am
Forum: General
Topic: Hotspot trial user uptime problem
Replies: 2
Views: 1804

Re: Hotspot trial user uptime problem

Set "trial uptime reset" in server profile to for example "30d 00:00:00" so they can no log in again for 30 days

Sent from my mobile phone with Tapatalk
by c0d3rSh3ll
Fri Feb 21, 2014 4:28 am
Forum: General
Topic: pptp client not work with Load Balancing pcc
Replies: 4
Views: 4866

Re: pptp client not work with Load Balancing pcc

You have a default gateway in the router? Post your export config

Sent from my mobile phone with Tapatalk
by c0d3rSh3ll
Fri Feb 21, 2014 2:34 am
Forum: General
Topic: Trouble with balanced gateways and speedtest.net
Replies: 4
Views: 2017

Re: Trouble with balanced gateways and speedtest.net

http://forum.mikrotik.com/viewtopic.php?f=2&t=81311

In this post you can add the address of speedtest in an address list and then mark routing

Sent from my mobile phone with Tapatalk
by c0d3rSh3ll
Thu Feb 20, 2014 6:42 am
Forum: General
Topic: Trouble with balanced gateways and speedtest.net
Replies: 4
Views: 2017

Re: Trouble with balanced gateways and speedtest.net

Mark route with dst-address of speedtest server like this: /ip firewall mangle add chain=prerouting dst-address-list=speedtest action=mark-routing new-routing-mark=speedtest Add all ip address of speedtes in the address list calle speddtest Then select the gateway of your wan Sent from my mobile pho...
by c0d3rSh3ll
Wed Feb 12, 2014 8:33 pm
Forum: Beginner Basics
Topic: 2 PPPoE PCC + failover, RouterOS 6.9
Replies: 4
Views: 6106

Re: 2 PPPoE PCC + failover, RouterOS 6.9

Hi.
Please contact me on my signature with your post atacched for more detail.

Regards

Sent from my mobile phone using Tapatalk.
by c0d3rSh3ll
Tue Feb 11, 2014 3:50 am
Forum: Beginner Basics
Topic: simple 2 WAN failover
Replies: 16
Views: 73417

Re: simple 2 WAN failover

If you have setup mangle correctly Never heard of it. I just wanted a router for failoever. I was choosing between tp link470+ and some used linksys with tomato firmware from ebay, but they both were 100mbps, so I went for this. Sorry. I thought you need a load balance through pcc method. "bin...
by c0d3rSh3ll
Tue Feb 11, 2014 12:26 am
Forum: Beginner Basics
Topic: simple 2 WAN failover
Replies: 16
Views: 73417

Re: simple 2 WAN failover

If you have setup mangle correctly in the routes select pppoe interface instead of ip addres.
In the pppoe client interface unchek use-default-route.


Sent from my mobile phone using Tapatalk.
by c0d3rSh3ll
Mon Feb 10, 2014 10:23 pm
Forum: General
Topic: free dynamic dns ?
Replies: 19
Views: 5863

Re: free dynamic dns ?

I use freedns. Is good and free until to 5 host.

Sent from my mobile phone using Tapatalk.
by c0d3rSh3ll
Mon Feb 10, 2014 8:50 am
Forum: Scripting
Topic: Script to autochange SSID when not internet
Replies: 6
Views: 5519

Re: Script to autochange SSID when not internet

You can do with netwatch tool also.
When the host is up execute the script like this:
/interface wireless set 0 ssid=Is-Up

When the host is down execute this:

/interface wireless set 0 ssid=Is-Down

Sent from my mobile phone using Tapatalk.
by c0d3rSh3ll
Mon Feb 10, 2014 8:08 am
Forum: General
Topic: mkbrutus, mikrotik access brute force to api
Replies: 1
Views: 2138

mkbrutus, mikrotik access brute force to api

are you ready for this?

http://mkbrutusproject.github.io/MKBRUTUS/


security:

1. set a strong password for api user
2. add a few filter rules for protect brute force service
3. disable api service
4. etc...
by c0d3rSh3ll
Fri Feb 07, 2014 7:21 am
Forum: Scripting
Topic: [SOLVED] Need Help Scritpting of DHCP-Client
Replies: 5
Views: 1821

Re: Need Help Scritpting of DHCP-Client

try this... { local ip [ip dhcp-client get value-name=address 0] local count [len $ip] local count1 [($count - 3)] local address [pick $ip 0 $count1] ip firewall mangle set [find comment=update] dst-address=$address } you need to have a netmask in dhcp-client of 2 digits like /24, if you have 1 digi...
by c0d3rSh3ll
Fri Feb 07, 2014 3:09 am
Forum: Scripting
Topic: [SOLVED] Need Help Scritpting of DHCP-Client
Replies: 5
Views: 1821

Re: Need Help Scritpting of DHCP-Client

You can use other method like in-interface=wan with the same result.

Sent from my mobile phone using Tapatalk.
by c0d3rSh3ll
Thu Feb 06, 2014 11:31 pm
Forum: Scripting
Topic: Need script that will pull information from simple queue
Replies: 2
Views: 1417

Re: Need script that will pull information from simple queue

maybe this is a start point for you

ros code

foreach i in=[queue simple find] do={
local ip [queue simple get value-name=target $i]
local byte [queue simple get value-name=bytes $i]
put "$ip has $byte"
}
then you can save to a file.
by c0d3rSh3ll
Thu Feb 06, 2014 7:33 pm
Forum: Beginner Basics
Topic: Problem with RB450G
Replies: 6
Views: 2114

Re: Problem with RB450G

I have upgraded this to RouterOS v6.7 & reset this many time but result is same.
May be is a hardware problem. RMA to your distributor.

Sent from my mobile phone using Tapatalk.
by c0d3rSh3ll
Tue Feb 04, 2014 7:25 pm
Forum: General
Topic: Need Help Load Balancing 1100 AHX2
Replies: 12
Views: 3967

Re: Need Help Load Balancing 1100 AHX2

Load balance with PCC. In the wiki you have an example.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Tue Feb 04, 2014 4:08 am
Forum: Scripting
Topic: Mikrotik time to seconds - Tiempo Mikrotik a segundos
Replies: 4
Views: 4269

Re: Mikrotik time to seconds - Tiempo Mikrotik a segundos

Thank.. your script have some error, here is ok. Is working un 5.26 but not in 6.9. el script tiene algunos errores, aca esta corregido. Lo probe en la version 5.26 y esta funcionando pero en la 6.9 no, cuando tenga tiempo lo revizare... :local uptime [/system resource get uptime]; :local weekend 0;...
by c0d3rSh3ll
Mon Feb 03, 2014 11:19 pm
Forum: Scripting
Topic: Disable IP address script
Replies: 2
Views: 1861

Re: Disable IP address script

try this, is working for me tested in 6.9 version.

ros code

ip address remove [find address="10.0.0.1/8"]
by c0d3rSh3ll
Thu Jan 30, 2014 10:53 pm
Forum: General
Topic: Disconnect automatically after 15 minutes
Replies: 1
Views: 1449

Re: Disconnect automatically after 15 minutes

May be is overloaded. Check your rules and optimize it. What is your routerOS version and firmware?

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Thu Jan 30, 2014 1:38 am
Forum: General
Topic: Limit bandwidth by mac address on RB750
Replies: 4
Views: 3191

Re: Limit bandwidth by mac address on RB750

Mikrotik routerOS can limit traffic through queue simple by ip only.


Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Thu Jan 30, 2014 1:32 am
Forum: Scripting
Topic: Interface traffic hard LIMIT monthly
Replies: 2
Views: 1495

Re: Interface traffic hard LIMIT monthly

You can do a script for get traffic counter and if the limit is reached then you can block the traffic or disable 3g interface like netgeard vendor.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Tue Jan 28, 2014 2:12 am
Forum: Scripting
Topic: Processing delimiter in RouterOS
Replies: 2
Views: 1527

Re: Processing delimiter in RouterOS

Use Pick command

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Mon Jan 27, 2014 1:35 am
Forum: General
Topic: how to avoid hotspot users to use connectify apps to share?
Replies: 7
Views: 5624

Re: how to avoid hotspot users to use connectify apps to sha

Only one rule with change ttl action to 1 in forward chain.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Mon Jan 27, 2014 1:12 am
Forum: Scripting
Topic: Facebook Images Missing
Replies: 5
Views: 2768

Re: Facebook Images Missing

check in the user profile if you have enabled "transparent proxy" option
by c0d3rSh3ll
Fri Jan 24, 2014 5:49 am
Forum: General
Topic: domain name to my mikrotik router
Replies: 4
Views: 9130

Re: domain name to my mikrotik router

Yes, you can do. In wiki.mikrotik.com you have some examples like no-ip, dyndns, changeip, etc.


Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Fri Jan 24, 2014 5:22 am
Forum: General
Topic: how to avoid hotspot users to use connectify apps to share?
Replies: 7
Views: 5624

Re: how to avoid hotspot users to use connectify apps to sha

Change ttl in mangle rule to 1

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Fri Jan 24, 2014 4:09 am
Forum: Scripting
Topic: Facebook Images Missing
Replies: 5
Views: 2768

Re: Facebook Images Missing

Check your dns server. Change for googleDNS or openDNS and try.
You have web proxy feature? Hotspot?

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Fri Jan 24, 2014 4:04 am
Forum: General
Topic: Can HotSpot User speedlimit be changed in realtime?
Replies: 1
Views: 1218

Re: Can HotSpot User speedlimit be changed in realtime?

You can use PCQ and address-list for dynamically change the limit for your user.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Fri Jan 24, 2014 3:58 am
Forum: RouterBOARD hardware
Topic: Why not make access points already assembled?
Replies: 2
Views: 1935

Re: Why not make access points already assembled?

But you have latest routerboard like basebox2 or basebox5 for antenna sectorial dual chain ready to use.
Grove and metal is ready to use also.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Fri Jan 24, 2014 3:50 am
Forum: General
Topic: Set custom DL-UL bandwith rates
Replies: 3
Views: 1438

Re: Set custom DL-UL bandwith rates

You can setup your custom limit with any number with "k" leter like this 756k, 300k etc. For megabits is "M" like this 11M, 7M etc

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Wed Jan 22, 2014 4:32 am
Forum: Scripting
Topic: Afraid.org dns script using specific wan port
Replies: 12
Views: 4340

Re: Afraid.org dns script using specific wan port

Freedns.afraid.org now for me is 178.33.33.231

So you can do this:
/ip route add dst-address=178.33.33.231 gateway=1.1.1.1

Change 1.1.1.1 for your wan3 gateway

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sun Jan 19, 2014 3:46 pm
Forum: General
Topic: Domains whitelist few - blacklist the rest
Replies: 1
Views: 1966

Re: Domains whitelist few - blacklist the rest

You can do with transparent proxy and access list.
Firt create proxy transparent in nat firewall and then add to rule for accept your whitelist web site and other for block anything


Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sat Jan 18, 2014 6:13 am
Forum: The User Manager
Topic: pppoe client dialing log
Replies: 2
Views: 8001

Re: pppoe client dialing log

Try with a log rule with pppoe and debug topic but I think is encripted or the routerOS can not show you.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Fri Jan 17, 2014 10:51 pm
Forum: General
Topic: Qos Lan
Replies: 1
Views: 1329

Re: Qos Lan

You can use input chain for the router and add a simple queue for this packet or prerouting for packet to the router and other network. Remember put this rule in the top of you rules.


Queue tree are before of simple queue in 6.x version.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Fri Jan 17, 2014 9:16 pm
Forum: Scripting
Topic: Hotspot Help!!!
Replies: 1
Views: 1088

Re: Hotspot Help!!!

Try with other web browser. Some browser not work with hotspot.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Thu Jan 16, 2014 9:09 pm
Forum: Beginner Basics
Topic: Hotel in the desert needs some help
Replies: 3
Views: 1381

Re: Hotel in the desert needs some help

Hi guys, I have started a job at a hotel in the desert, (think 4 staff and 1 customer per day), and the hotel is using a MikroTik solution to allow customers to logon to the internet via a 'hotspot' login. The hotel managers, (way into their 60's) use the same login system as a customer to access t...
by c0d3rSh3ll
Tue Jan 14, 2014 8:56 pm
Forum: General
Topic: Block UDP traffic
Replies: 7
Views: 9819

Re: Block UDP traffic

/ip firewall filter add src-address=!192.168.1.0/24  protocol=udp action=drop
I not need to set chain?
Yes. You need chain forward

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Tue Jan 14, 2014 3:49 pm
Forum: Beginner Basics
Topic: gateway mac address
Replies: 1
Views: 1844

Re: gateway mac address

I am preconfiguring a Mikrotik and my ISP requires me to register my router's Mac address and will not pass traffic if they detect something else. If I set the gateway's (ether1) mac to match old router's mac they should accept this right? I have the following export under /interface ethernet: set ...
by c0d3rSh3ll
Tue Jan 14, 2014 3:45 pm
Forum: General
Topic: Problem with PCC Load Balancing !!!
Replies: 4
Views: 2001

Re: Problem with PCC Load Balancing !!!

Hi. For routing a ip through a specific wan first you need mark route from this ip in mangle and then set the gateway in routes. For the ftp is the same but with tcp protocol and dst port 20,21 and in the route set the gateway wan2 with distance 1 and other route with wan3 but with distance 2 Both m...
by c0d3rSh3ll
Mon Jan 13, 2014 8:44 pm
Forum: Beginner Basics
Topic: Limit webfig access to a single network / port on device?
Replies: 4
Views: 3370

Re: Limit webfig access to a single network / port on device

For this goal you have some way. The simple way is with firewall like this: /ip firewall filter add chain=input src-address=192.168.2.0/24 action=drop This rule block all conection to your device from network 192.168.2.0/24 If you need block only http access /ip firewall filter add chain=input src-a...
by c0d3rSh3ll
Mon Jan 13, 2014 3:55 pm
Forum: RouterBOARD hardware
Topic: concurrent hotspot users on RB433AH ?
Replies: 1
Views: 1151

Re: concurrent hotspot users on RB433AH ?

Rb433ah has a level 5 licence so usermanager is limited to 50 user simultainusly. If you use hotspot database is limited to 500


Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Mon Jan 13, 2014 3:44 pm
Forum: General
Topic: RouterOS upgrade fail - no connection
Replies: 6
Views: 1874

Re: RouterOS upgrade fail - no connection

Please help, anyone...

Also "The device is dead" would be possible answer, but I need to be sure before buying a new one.
It is not nessesary. Reinstall routerOS with netinstall I think is a kernel error and can not start.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Mon Jan 13, 2014 3:41 pm
Forum: General
Topic: re: How to monitor the Upload/download rate of clients?
Replies: 7
Views: 15605

Re: re: How to monitor the Upload/download rate of clients?

What i need is real time monitor of clients, which shows realtime uplaod/download rate of clients per IP address. I found a great tool to do it here: http://forum.mikrotik.com/viewtopic.php?f=2&t=77193 (big thanks to the tool maker, its really great!!) Still i wanted to know if there is an opti...
by c0d3rSh3ll
Mon Jan 13, 2014 3:37 pm
Forum: General
Topic: Web site allow issue
Replies: 2
Views: 1062

Re: Web site allow issue

You can create 2 filter rules: /ip firewall filter chain=forward protocol=tcp dst-port=80 scr-address-list=privateip dst-address-list=jobsite action=accept And the other for block /ip firewall filter chain=forward protocol=tcp dst-port=80 scr-address-list=privateip action=drop Add the private ip of ...
by c0d3rSh3ll
Mon Jan 13, 2014 3:16 pm
Forum: Beginner Basics
Topic: Looking for a consultant.
Replies: 5
Views: 2284

Re: Looking for a consultant.

Hello Mikrotikkers. I am looking for a person willing to take a look at a RB450G configuration and help out with fixing a few things. I have been volunteering in India and Nepal several times, and during my last 6 month stay in Kathmandu, i took on the volunteer job as remote IT guy for a group of ...
by c0d3rSh3ll
Mon Jan 13, 2014 3:28 am
Forum: General
Topic: Load balancing multiple same subnet links with daily limits
Replies: 4
Views: 1872

Re: Load balancing multiple same subnet links with daily lim

For each link you can do static routes with 1.1.1.1%wan1 like this 192.168.0.1%wan1 routing-mark=towan1 192.168.0.1%wan2 routing-mark=towan2 192.168.0.1%wan3 routing-mark=towan3 With a script you can read the traffic of each wan and disable the route for this wan. Send from my mobile phone using Tap...
by c0d3rSh3ll
Sun Jan 12, 2014 7:13 pm
Forum: Beginner Basics
Topic: freeradius & access user to change own password
Replies: 2
Views: 2793

Re: freeradius & access user to change own password

Daloradius has a user portal for this purpose.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sun Jan 12, 2014 5:50 pm
Forum: Scripting
Topic: Special Website Open Speed
Replies: 1
Views: 1453

Re: Special Website Open Speed

What is the routerOS version?

For this you can do with firewall mangle and packet mark option. Then you csn limit this packet in simple queue o queue tree.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sun Jan 12, 2014 5:47 pm
Forum: Beginner Basics
Topic: how to route specific traffic directly to the WAN bypass VPN
Replies: 3
Views: 2201

Re: how to route specific traffic directly to the WAN bypass

Thank you it worked, is there a way I can do it by hostname instead of by IP Address? thank you for your help by the way!.

Ivan.
Is not possible but with script you can use hostname

http://wiki.mikrotik.com/wiki/Use_host_ ... wall_rules

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sun Jan 12, 2014 5:42 pm
Forum: Scripting
Topic: how i block web site
Replies: 2
Views: 1292

Re: how i block web site

You can do with simple web proxy feature for block web sites.
First configure transparent proxy and then block with access list

For block the rest with firewall and for accept skype you can do with layer7 regex

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sun Jan 12, 2014 5:38 am
Forum: Beginner Basics
Topic: how to route specific traffic directly to the WAN bypass VPN
Replies: 3
Views: 2201

Re: how to route specific traffic directly to the WAN bypass

First add a mangle rule in the top of your rules like this

/ip firewall mangle add chain=prerouting dst-address-list=bypassed action=accept

Then add the ip of the server in the bypassed address list in the address list tab.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sun Jan 12, 2014 5:33 am
Forum: General
Topic: How can I block ping in my local network
Replies: 9
Views: 7080

Re: How can I block ping in my local network

Try this

/ip firewall filter add chain=input scr-address=yourNetwork protocol=icmp action=drop

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Thu Jan 02, 2014 7:19 am
Forum: The User Manager
Topic: Features needed
Replies: 1
Views: 1433

Re: Features needed

For the item 1 is possible with dns option in hotspot profile like this http://www.hotspot.com/logout instead ip-router/logout

For the 2 maybe with a script.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Wed Jan 01, 2014 11:23 pm
Forum: Beginner Basics
Topic: RB2011UAS-2HnD Configuration Project - Consulting $$
Replies: 3
Views: 1646

Re: RB2011UAS-2HnD Configuration Project - Consulting $$

You can contact me in my signature.

Regards

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Mon Dec 30, 2013 10:23 am
Forum: General
Topic: Best load balancing method for 4 WAN links
Replies: 19
Views: 18000

Re: Best load balancing method for 4 WAN links

The best method is pcc. In the mangle pcc section use "both addres and port" or "dst address"

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sun Dec 29, 2013 10:11 pm
Forum: Beginner Basics
Topic: Down connection and backup problem
Replies: 1
Views: 905

Re: Down connection and backup problem

You need reinstall routerOS with netinstall. This is a problem reading internal file.



Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sun Dec 29, 2013 9:12 pm
Forum: Scripting
Topic: Help needed - Routing to connected networks doesn't work!
Replies: 6
Views: 2115

Re: Help needed - Routing to connected networks doesn't work

Add a mangle rule for all your internal network with accept action like this

add chain=prerouting dst-addres=yourNetwork action=accept

Put it in the top of your rules.


Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sat Dec 28, 2013 10:58 pm
Forum: General
Topic: MikroTik blocks iTunes device's restore
Replies: 6
Views: 3177

Re: MikroTik blocks iTunes device's restore

Post the output of this command:
ip firewall export

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sat Dec 28, 2013 10:54 pm
Forum: General
Topic: How direct all traffic through a PPTP interface
Replies: 2
Views: 1988

Re: How direct all traffic through a PPTP interface

First add a new mark-routing rule in the mangle firewall for the trafficc from your lan network.
Add a default gateway for this mark in ip routes tab with gateway=pptp-interface.

Remember add a masquerade rule with out-interface=pptp-interface

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sat Dec 28, 2013 10:28 pm
Forum: General
Topic: support ppp users
Replies: 2
Views: 1287

Re: support ppp users

You can read this table about licenses level

http://wiki.mikrotik.com/wiki/Manual:License

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sat Dec 28, 2013 7:53 pm
Forum: RouterBOARD hardware
Topic: Routerboard Recommendation ?
Replies: 5
Views: 1734

Re: Routerboard Recommendation ?

A rb1100 serie is better. It have a level 6 for usermanager unlimited feature.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sat Dec 28, 2013 7:43 pm
Forum: General
Topic: How to route LAN devices via an established VPN connection ?
Replies: 4
Views: 5709

Re: How to route LAN devices via an established VPN connecti

with policy routing you can do this. first add a mangle rule like this change your interface lan /ip fi man add action=mark-routing chain=prerouting disabled=no in-interface=lan new-routing-mark=traf passthrough=yes and then add the gateway for this. change your pptp interface /ip route add disable...
by c0d3rSh3ll
Sat Dec 28, 2013 6:25 pm
Forum: The User Manager
Topic: Help Radius server not responding....
Replies: 10
Views: 14070

Re: Help Radius server not responding....

Execute this code in your routerboard

radius print.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sat Dec 28, 2013 1:56 am
Forum: General
Topic: Incompatibility with ps4?
Replies: 24
Views: 20211

Re: Incompatibility with ps4?

Enable upnp and try.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Fri Dec 27, 2013 5:30 pm
Forum: General
Topic: user with read permissions can shut down the router
Replies: 7
Views: 3568

Re: user with read permissions can shut down the router

reboot apply to shutdown too.
by c0d3rSh3ll
Fri Dec 27, 2013 5:49 am
Forum: General
Topic: Load balancing not working for bypass users
Replies: 5
Views: 2422

Re: Load balancing not working for bypass users

bypassed user not use hotspot=auth
by c0d3rSh3ll
Fri Dec 27, 2013 5:11 am
Forum: Scripting
Topic: sending mail when ever a new file ariive in ftp
Replies: 2
Views: 1348

Re: sending mail when ever a new file ariive in ftp

I am thinking in a script for check how many files you have in the server, and if a new file is arrived execute the email script. { global files local file [len [file find ]] if ($files!=file) do={ global files $file log error "new file uploaded" system script run "emailscript" }...
by c0d3rSh3ll
Fri Dec 27, 2013 4:57 am
Forum: General
Topic: Block Facebook & Youtube on Certain Ips - and it works
Replies: 5
Views: 12500

Re: Block Facebook & Youtube on Certain Ips - and it works

thank for the regexp, it work ¡¡
by c0d3rSh3ll
Fri Dec 27, 2013 4:49 am
Forum: General
Topic: user with read permissions can shut down the router
Replies: 7
Views: 3568

Re: user with read permissions can shut down the router

in the group permissions set reboot=no

other way if you need webfig access for this user you can setup a webfig skin
by c0d3rSh3ll
Fri Dec 27, 2013 4:39 am
Forum: Beginner Basics
Topic: nat with two proxy?
Replies: 2
Views: 1516

Re: nat with two proxy?

you can redirect http traffic transparently to the mikrotik proxy and setup the parent and parent port in webproxy setting, so you need 1 dst rule. /ip firewall nat add in-interface=ether1 dst-port=80 protocol=tcp action=redirect to-ports=8080 chain=dstnat /ip proxy set enabled=yes port=8080 and the...
by c0d3rSh3ll
Fri Dec 27, 2013 12:30 am
Forum: General
Topic: 2 ISP lines -> 2 networks -> 1 RB750
Replies: 2
Views: 2250

Re: 2 ISP lines -> 2 networks -> 1 RB750

Check this wiki page.

http://wiki.mikrotik.com/wiki/Load_Bala ... e_Gateways


Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Thu Dec 26, 2013 6:02 pm
Forum: General
Topic: Block HTTPS Traffic - URGENT
Replies: 3
Views: 2602

Re: Block HTTPS Traffic - URGENT

You can not block https traffic because many website work throught this port like facebook, google, mail, bank websites.

You can do a white list for your know websites and block everything else.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Wed Dec 25, 2013 8:47 pm
Forum: Beginner Basics
Topic: Mikrotik Queue on a Bridge.
Replies: 2
Views: 1883

Re: Mikrotik Queue on a Bridge.

First add a bridge interface and put 2 interfaces (cisco router and switch) in bridge. Then set use ip firewall yes in bridge menu.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Wed Dec 25, 2013 1:10 am
Forum: General
Topic: Why the ROS backup file so big?
Replies: 4
Views: 1844

Re: Why the ROS backup file so big?

Contact to mikrotik support, maybe is a bug because backup is not a big file.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Tue Dec 24, 2013 8:08 pm
Forum: General
Topic: Happy X-mas
Replies: 4
Views: 1467

Re: Happy X-mas

Nice...
What is that? A lab setup?

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Mon Dec 23, 2013 6:20 pm
Forum: General
Topic: how to create web proxy on routeros 6.7
Replies: 6
Views: 3250

Re: how to create web proxy on routeros 6.7

RouterOS is not good idea for cache feature, try other alternative like squid or payment solution like thundercache, cachevideo etc

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Mon Dec 23, 2013 4:32 pm
Forum: General
Topic: Disable communication between subnets but allow net access
Replies: 4
Views: 3727

Re: Disable communication between subnets but allow net acce

Your nat rule (masquerade) set as follow:
Ip firewall nat add chain=scr-nat out-interface=wan action=masquerade

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Mon Dec 23, 2013 4:27 pm
Forum: The User Manager
Topic: Help Radius server not responding....
Replies: 10
Views: 14070

Re: Help Radius server not responding....

Add a logging radius item in the mikrotik for see what happend. Maybe you not have the mikrotik router as a nas in the freeradius.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sat Dec 21, 2013 8:21 pm
Forum: General
Topic: need good algoritm
Replies: 4
Views: 1406

Re: need good algoritm

With pcc load balance you can asding 30% and 70% to the other connection.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sat Dec 21, 2013 3:19 pm
Forum: General
Topic: Load balancing not working for bypass users
Replies: 5
Views: 2422

Re: Load balancing not working for bypass users

What you have in mangle load balancr rule?

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sat Dec 21, 2013 3:17 pm
Forum: Beginner Basics
Topic: Load Balancing on Static IPs
Replies: 11
Views: 4150

Re: Load Balancing on Static IPs

Try with pcc "both address and port".



Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Fri Dec 20, 2013 11:30 pm
Forum: General
Topic: limit bandwidth on the RB750 WAN
Replies: 5
Views: 2575

Re: limit bandwidth on the RB750 WAN

Add a simple queue with download/upload rate and select interface=wan.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Fri Dec 20, 2013 11:24 pm
Forum: Beginner Basics
Topic: Script to change disconnect Eth interface to connected one
Replies: 6
Views: 1827

Re: Script to change disconnect Eth interface to connected o

Add 2 default routes, the first with distance 1 and other with distance 2.

When the route with distance 1 is not reachable the router use the second route with distance 2.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Fri Dec 20, 2013 11:13 pm
Forum: General
Topic: Userman userman cannot be remove?
Replies: 1
Views: 877

Re: Userman userman cannot be remove?

What is your command line you are trying?

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Fri Dec 20, 2013 11:08 pm
Forum: General
Topic: Mikrotik Firewall issue
Replies: 2
Views: 977

Re: Mikrotik Firewall issue

From your lan or wan? You can add a filter rule like this for block this connection ip firewall filter add chain=forward scr-address=1.1.1.1 action=drop Also you can add other rule for input chain (to the router) from this ip addres Remeber change the ip address. Send from my mobile phone using Tapa...
by c0d3rSh3ll
Fri Dec 20, 2013 11:07 pm
Forum: General
Topic: Many connections to port 80 from LAN
Replies: 1
Views: 954

Re: Many connections to port 80 from LAN

Add a filter firewall rule like this

Ip firewall filter add chain=forward scr-address=1.1.1.1 action=drop

Or
Io firewall filter add chain=forward dst-address=1.1.1.1 action=drop

Change 1.1.1.1

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Fri Dec 20, 2013 11:02 pm
Forum: General
Topic: CCR1036-12G-4S as PPTP NAS
Replies: 3
Views: 1693

Re: CCR1036-12G-4S as PPTP NAS

Report to mikrotik support this error. They need to know it.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Fri Dec 20, 2013 10:59 pm
Forum: General
Topic: how to create web proxy on routeros 6.7
Replies: 6
Views: 3250

Re: how to create web proxy on routeros 6.7

This routerboard and other also can not save cache in the flash. For webproxy and cache you need other solution like squid in linux machine.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Fri Dec 20, 2013 6:29 am
Forum: Beginner Basics
Topic: helpful about RB1100ahx2 about 6wan
Replies: 1
Views: 1133

Re: helpful about RB1100ahx2 about 6wan

post your pcc rules.
by c0d3rSh3ll
Wed Dec 18, 2013 8:44 am
Forum: General
Topic: 2 LAN 2 gateways
Replies: 6
Views: 3418

Re: 2 LAN 2 gateways

http://wiki.mikrotik.com/wiki/Load_Bala ... e_Gateways

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Fri Dec 13, 2013 5:34 pm
Forum: General
Topic: Migration from RB450G to RB2011
Replies: 1
Views: 1178

Re: Migration from RB450G to RB2011

You can use "export compact" command. And edit for import in the other rb.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Tue Dec 10, 2013 8:25 pm
Forum: General
Topic: Bandwidth limit on Ethernet port
Replies: 5
Views: 34464

Re: Bandwidth limit on Ethernet port

For use queue feature in a bridge first you need setup enabled use-firewall- bridge in bridge menu.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Mon Nov 25, 2013 9:36 pm
Forum: General
Topic: Feature request: Timeout and Uptime columns in Address-Lists
Replies: 5
Views: 2645

Re: Feature request: Timeout and Uptime columns in Address-L

+1
Also add a same feature like this

ip firewall adress-list add list=list time-out=00:00:01


thank for heard me support team, in 6.7v we have this feature

ros code

ip fi address-list add 
address  comment  copy-from  disabled  timeout  lis
by c0d3rSh3ll
Mon Nov 25, 2013 3:45 pm
Forum: Wireless Networking
Topic: Simple and low cost pingable device
Replies: 3
Views: 2045

Re: Simple and low cost pingable device

A low cost router like d-link or tp-link or any-think

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sun Nov 24, 2013 1:06 am
Forum: General
Topic: How to block some websites (e.g. facebook,google,msn, ect..)
Replies: 7
Views: 4311

Re: How to block some websites (e.g. facebook,google,msn, ec

Use openDNS. Is more better for web filter.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sat Nov 23, 2013 11:23 pm
Forum: General
Topic: Load Balancing Wan with dynamic IP Adress
Replies: 3
Views: 2695

Re: Load Balancing Wan with dynamic IP Adress

I already have 2 Routerboards running with load balancing enabled. Now I have a new Project at a different location, but one of there Wan Providers only offers dynamic Ip Adresses. Is it possible to have routeros to loadbalance with a wan connection only offering dynamic IP? You can do with a scrip...
by c0d3rSh3ll
Sat Nov 23, 2013 11:00 pm
Forum: Forwarding Protocols
Topic: Specific routes using BGP with default route
Replies: 4
Views: 2302

Re: Specific routes using BGP with default route

Hi mrz,
Should I use content youtube or an address-list?

Thanks,
With address-list.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sat Nov 23, 2013 10:46 pm
Forum: General
Topic: DHCP Error
Replies: 5
Views: 3807

Re: DHCP Error

I keep getting this error: nov/22/2013 01:29:20 dhcp,critical,error dhcp-client on ether1-gateway lost IP add ress 172.251.52.151 - received NAK from dhcp server 192.168.100.1 Does anyone know what this means? Could this have anything to do with Safari not loading pages and having errors? Thanks. I...
by c0d3rSh3ll
Sat Nov 23, 2013 10:43 pm
Forum: General
Topic: Overriding simple queues applied to interfaces?
Replies: 4
Views: 1928

Re: Overriding simple queues applied to interfaces?

yes you can...

mark what you need in mangle, create a simple queue for it and put it in the top
Yes or you can use dst option too.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sat Nov 23, 2013 3:49 pm
Forum: General
Topic: ROUTERBOARD 750GL 4-WAN
Replies: 2
Views: 2196

Re: ROUTERBOARD 750GL 4-WAN

Export your mangle rules. You can see load balancing when you have more connection.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sat Nov 23, 2013 3:39 pm
Forum: General
Topic: ECMP (Equal Cost Multi-Path) question
Replies: 2
Views: 1167

Re: ECMP (Equal Cost Multi-Path) question

In the wiki you have a example.

http://wiki.mikrotik.com/wiki/Load_Bala ... e_Gateways


Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sat Nov 23, 2013 4:30 am
Forum: General
Topic: HotSpot and VPN Question
Replies: 1
Views: 1044

Re: HotSpot and VPN Question

You can add dinamic address-list for your hotspot client and add a few firewall rules for block the traffic from user to vpn.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Fri Nov 22, 2013 11:30 pm
Forum: Scripting
Topic: copy and paste: difference between ssh and winbox terminal
Replies: 2
Views: 2366

Re: copy and paste: difference between ssh and winbox termin

I not have problem with putty ssh client. I copy and paste your script.
by c0d3rSh3ll
Thu Nov 21, 2013 11:50 pm
Forum: General
Topic: Watchdog issue with mobile broadband
Replies: 2
Views: 1246

Re: Watchdog issue with mobile broadband

With a script you can do, like this ( sorry I not have a routerOS)

If [ ( ping 8.8.8.8 count=3) = 0 ] do={system reboot}

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Thu Nov 21, 2013 11:41 pm
Forum: General
Topic: Address list to redirect slow payers
Replies: 2
Views: 1398

Re: Address list to redirect slow payers

This error is because the connection still is saved in the connection tracking, so you need remove this connection.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Wed Nov 20, 2013 5:50 pm
Forum: General
Topic: RouterOS Amazon Web Services
Replies: 4
Views: 1850

Re: RouterOS Amazon Web Services

RouterOS on AWS for what ?

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Tue Nov 19, 2013 11:20 pm
Forum: Beginner Basics
Topic: How to bypass skype from limition ??
Replies: 6
Views: 2716

Re: How to bypass skype from limition ??

First mark skype in the mangle and add a simple queue in the top with these mark with ilimit BW or in the queue tree.

Send from my mobile phone using Tapatalk.
As far as I know, skype can't be marked.
I can mark with layer 7 regex.
Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Thu Nov 14, 2013 7:20 pm
Forum: Beginner Basics
Topic: How to bypass skype from limition ??
Replies: 6
Views: 2716

Re: How to bypass skype from limition ??

First mark skype in the mangle and add a simple queue in the top with these mark with ilimit BW or in the queue tree.

Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Thu Nov 14, 2013 7:18 pm
Forum: Beginner Basics
Topic: 3 WAN Setup. 2 to load Balance, 3 for failover
Replies: 3
Views: 6848

Re: 3 WAN Setup. 2 to load Balance, 3 for failover

Hi. You can do this in the same mikrotik harware. For the load balancing you can do by pcc and the fiber connection with distance like 3 and you have for backup this.


Send from my mobile phone using Tapatalk.
by c0d3rSh3ll
Sat Nov 09, 2013 2:18 am
Forum: General
Topic: OpenWRT for Webserver functionality on Mikrotik
Replies: 1
Views: 1330

Re: OpenWRT for Webserver functionality on Mikrotik

rb7xx and 411 they have a low memory (ram) so you need a rb450G or 2011 series for metarouter.

in the virtualization section you have some post from the user @NathanA. He have a repository for openWRT.
by c0d3rSh3ll
Sat Nov 09, 2013 1:32 am
Forum: General
Topic: How to block android phone by hostame
Replies: 6
Views: 9433

Re: How to block android phone by hostame

you can create a script for get the MAC address from the leases and add it to the access list and block those mac address
by c0d3rSh3ll
Fri Nov 08, 2013 8:21 pm
Forum: Scripting
Topic: renaming backups
Replies: 9
Views: 2524

Re: renaming backups

like this?

ros code

{
local id [sys identity get name]
local date [sys clock get date ]
local time [sys clock get time]
sys backup save name="$id;$date;$time"
}
by c0d3rSh3ll
Thu Nov 07, 2013 7:56 pm
Forum: Beginner Basics
Topic: Load Balancing on Static IPs
Replies: 11
Views: 4150

Re: Load Balancing on Static IPs

Check load balancer by PCC. In the wiki you have a example with 2 isp.
by c0d3rSh3ll
Thu Nov 07, 2013 3:59 pm
Forum: Scripting
Topic: Routerboard simple que priority
Replies: 2
Views: 1239

Re: Routerboard simple que priority

Hi.
in 5.x version you have only one priority, in 6.x you have one for download and one for upload


for change priority to 7 for all queue simple in 5.x:

ros code

queue simple set priority=7 [find ]
by c0d3rSh3ll
Mon Nov 04, 2013 11:58 pm
Forum: Beginner Basics
Topic: One RB for Load balancing, LAN router and Hotspot
Replies: 1
Views: 1102

Re: One RB for Load balancing, LAN router and Hotspot

Hi.
You can do load balance and hotspot in the same routerboard.
by c0d3rSh3ll
Thu Oct 31, 2013 6:57 am
Forum: Scripting
Topic: Script to Exclude some sites from Web proxy
Replies: 9
Views: 3617

Re: Script to Exclude some sites from Web proxy

hello.
please contact me, I can help you.

see my signature...
by c0d3rSh3ll
Thu Oct 24, 2013 7:49 pm
Forum: Beginner Basics
Topic: what are the best proxys can integrate with Mikrotik router
Replies: 4
Views: 2670

Re: what are the best proxys can integrate with Mikrotik rou

You can connect to a vpn like strongvpn
by c0d3rSh3ll
Wed Oct 23, 2013 6:51 pm
Forum: Beginner Basics
Topic: Ping outside LAN not working with Mikrotik router
Replies: 8
Views: 4009

Re: Ping outside LAN not working with Mikrotik router

Check your filter rules and if you have a default gateway for the router
by c0d3rSh3ll
Sat Oct 12, 2013 6:37 am
Forum: General
Topic: 3x dsl in PCC working, but 4th line in parallel does not
Replies: 1
Views: 909

Re: 3x dsl in PCC working, but 4th line in parallel does not

Post your mangle rules and routes
by c0d3rSh3ll
Wed Oct 09, 2013 12:18 am
Forum: Beginner Basics
Topic: Freelance Mikrotik RB1200 Programmer Needed
Replies: 2
Views: 1405

Re: Freelance Mikrotik RB1200 Programmer Needed

Check my signature and send me and email

Regards
by c0d3rSh3ll
Tue Oct 01, 2013 4:48 pm
Forum: Scripting
Topic: Mikrotik Custom OS !
Replies: 6
Views: 3200

Re: Mikrotik Custom OS !

But you have a other board low cost like alix or any other thin client like neoware.
by c0d3rSh3ll
Sun Sep 29, 2013 9:31 am
Forum: RouterBOARD hardware
Topic: RB951Ui-2HnD with external antennas
Replies: 18
Views: 41560

Re: RB951Ui-2HnD with external antennas

see us photo from inside :) thanks
+1

I have a rb751U-2hnd and I want add a external antenna for more gain.
by c0d3rSh3ll
Fri Sep 27, 2013 10:00 am
Forum: General
Topic: Site to Site tunnel... how ?
Replies: 7
Views: 2690

Re: Site to Site tunnel... how ?

in the vpn server you hace a pptp-user, and in the client is pptp-out.
by c0d3rSh3ll
Fri Sep 27, 2013 6:21 am
Forum: Beginner Basics
Topic: IP Firewall Mangle, how to correctly mark.
Replies: 3
Views: 1548

Re: IP Firewall Mangle, how to correctly mark.

In the routing rule set in-bridge port=ether5

First set the bridge for use ip firewall
by c0d3rSh3ll
Fri Sep 27, 2013 2:09 am
Forum: General
Topic: Site to Site tunnel... how ?
Replies: 7
Views: 2690

Re: Site to Site tunnel... how ?

You can does with a tunnel like pptp.

In routerA add a static route
Dst-adderess 192.168.60.0/24 gateway pptp-out

In routerB add a static route
Dst-address 192.168.50.0/24 gatewat ppptp-out
by c0d3rSh3ll
Thu Sep 26, 2013 9:08 pm
Forum: Forwarding Protocols
Topic: any way to emulate Peplink efficient load balancing?
Replies: 10
Views: 4449

Re: any way to emulate Peplink efficient load balancing?

You can does with dst-address-list for all ip of youtube
by c0d3rSh3ll
Fri Sep 13, 2013 9:52 am
Forum: Wireless Networking
Topic: camaras de seguridad
Replies: 1
Views: 1053

Re: camaras de seguridad

Te envie un correo.
Saludos

I send to you an email.
Regards
by c0d3rSh3ll
Fri Sep 13, 2013 9:18 am
Forum: General
Topic: 4 WAN Load balancing + Hotspot server in one CCR..PM me
Replies: 3
Views: 1492

Re: 4 WAN Load balancing + Hotspot server in one CCR..PM me

I send to you and email. Check my signature.
by c0d3rSh3ll
Tue Sep 10, 2013 10:39 pm
Forum: General
Topic: Load Balancing over Multiple Gateways Issue
Replies: 5
Views: 1729

Re: Load Balancing over Multiple Gateways Issue

In the profile hotspot for user set "transparent proxy" no
by c0d3rSh3ll
Tue Sep 10, 2013 4:58 am
Forum: General
Topic: Load Balancing over Multiple Gateways Issue
Replies: 5
Views: 1729

Re: Load Balancing over Multiple Gateways Issue

Set the routing mark with hotspot=auth and try...
by c0d3rSh3ll
Sat Sep 07, 2013 9:46 am
Forum: Scripting
Topic: Create Profile from Mikrotik V6.3
Replies: 4
Views: 1586

Re: Create Profile from Mikrotik V6.3

profile for what?
hotspot, pppoe?
by c0d3rSh3ll
Sat Sep 07, 2013 4:50 am
Forum: General
Topic: Multiply WAN routing problem.
Replies: 1
Views: 863

Re: Multiply WAN routing problem.

In the mangle add a rule for mark routing for this traffic and then add a static route for this mark with gateway ip from isp2
by c0d3rSh3ll
Sat Sep 07, 2013 3:19 am
Forum: General
Topic: how to block skype...
Replies: 4
Views: 4333

Re: how to block skype...

I block skype by layer 7. Download the regex for skype patern and try.

It is more advanced because skype may be can connect over port 80 or 443 like teamviewer.
by c0d3rSh3ll
Fri Sep 06, 2013 11:05 am
Forum: Scripting
Topic: Script proxy
Replies: 2
Views: 1171

Re: Script proxy

with netwach tool you can does this.

in up, you can disable the rule
in down you can enable the rule

for enable/disable you can use find like this

ip firewall nat enable [find comment=webserver]

ip firewall nat disable [find comment=webserver]
by c0d3rSh3ll
Wed Sep 04, 2013 11:01 am
Forum: Beginner Basics
Topic: New in Mikrotik Router Boards
Replies: 2
Views: 1148

Re: New in Mikrotik Router Boards

Hi. I can help you. Please see my signature.
by c0d3rSh3ll
Wed Aug 28, 2013 4:04 am
Forum: Scripting
Topic: How to execute a cmd command with a script?
Replies: 5
Views: 2088

Re: How to execute a cmd command with a script?

try this

ros code

/tool fetch mode=http url=192.168.0.5/form/reboot user=admin password=password
by c0d3rSh3ll
Tue Aug 27, 2013 9:17 pm
Forum: General
Topic: The quickest Support reaction I've ever seen
Replies: 7
Views: 2061

Re: The quickest Support reaction I've ever seen

Chupaka what is the feature added?
by c0d3rSh3ll
Mon Aug 26, 2013 5:11 am
Forum: General
Topic: 100% CPU load -- need your help
Replies: 2
Views: 821

Re: 100% CPU load -- need your help

Upgrade your routerOS version to 5.25
by c0d3rSh3ll
Sun Aug 25, 2013 12:59 am
Forum: General
Topic: Feature request: Timeout and Uptime columns in Address-Lists
Replies: 5
Views: 2645

Re: Feature request: Timeout and Uptime columns in Address-L

+1
Also add a same feature like this

ip firewall adress-list add list=list time-out=00:00:01
by c0d3rSh3ll
Sun Aug 25, 2013 12:39 am
Forum: Beginner Basics
Topic: DDWRT IPTables firewall to mikrotik help
Replies: 3
Views: 1894

Re: DDWRT IPTables firewall to mikrotik help

try this

/ip firewall nat
add action=src-nat chain=srcnat disabled=no dst-address=1.5.0.0/20 out-interface=vlan2 to-addresses=1.5.101.23
by c0d3rSh3ll
Wed Aug 21, 2013 9:54 pm
Forum: Beginner Basics
Topic: Problem with PCC Load balance
Replies: 2
Views: 950

Re: Problem with PCC Load balance

what is your problem?
by c0d3rSh3ll
Thu Aug 08, 2013 9:21 am
Forum: General
Topic: Exclusion from PCC load balancing
Replies: 4
Views: 3330

Re: Exclusion from PCC load balancing

set your pcc rules in the mangle with dst-address.
by c0d3rSh3ll
Wed Aug 07, 2013 10:45 am
Forum: Scripting
Topic: packet sniffer run
Replies: 6
Views: 2149

Re: packet sniffer run

{ local 1 [pick [sys clock get date ] 0 3] local 2 [pick [sys clock get date ] 4 6] loca 3 [pick [sys clock get date ] 7 12] local time [/system clock get time] local date "$2$1$3" local status [/tool sniffer get running] if ($status = false ) do={ put $time; put $date; tool sniffer set f...
by c0d3rSh3ll
Wed Aug 07, 2013 3:24 am
Forum: General
Topic: v6.2 released
Replies: 247
Views: 112021

Re: v6.2 released

6.2 need more ram memory? like a windows OS.
someone with the same problem?
by c0d3rSh3ll
Wed Aug 07, 2013 12:51 am
Forum: Scripting
Topic: packet sniffer run
Replies: 6
Views: 2149

Re: packet sniffer run

try this

ros code

{
local time [/system clock get time]
local status [/tool sniffer get running]
if ($status = false ) do={ put $time; tool sniffer set file-name=$time; / tool sniffer start}
}
by c0d3rSh3ll
Fri Aug 02, 2013 11:17 am
Forum: General
Topic: block pptp hacking on wan pptp server port
Replies: 1
Views: 4758

Re: block pptp hacking on wan pptp server port

I think to add source to address list like this /ip firewall filter add action=add-src-to-address-list address-list=pptp2 address-list-timeout=10h chain=input comment=pptp connection-state=new disabled=no dst-port=1723 protocol=tcp src-address-list=pptp add action=add-src-to-address-list address-lis...
by c0d3rSh3ll
Fri Aug 02, 2013 11:04 am
Forum: General
Topic: No internet with basic routing setup
Replies: 2
Views: 1000

Re: No internet with basic routing setup

you need to add a static route in the dsl router

dst address 127.17.0.0/16 gateway 172.16.0.5

in the mikrotik
dst address 0.0.0.0/0 gateway 172.16.0.1
by c0d3rSh3ll
Fri Aug 02, 2013 10:42 am
Forum: General
Topic: Please help me
Replies: 1
Views: 535

Re: Please help me

if you need a transparent proxy add a rule in nat, set scr-address-list from your ip list blocked and redirect to the proxy.
by c0d3rSh3ll
Fri Aug 02, 2013 10:40 am
Forum: General
Topic: Helo Needed for limitting one connection from one source
Replies: 1
Views: 839

Re: Helo Needed for limitting one connection from one source

you can does with mangle and queue-tree.
in mangle mark paquet from server (src-address) and in queue-tree add a new rule with global-out parent for these paquet.
by c0d3rSh3ll
Fri Aug 02, 2013 10:36 am
Forum: General
Topic: Redirect to different location on same domain
Replies: 1
Views: 860

Re: Redirect to different location on same domain

try this

ros code

/ip proxy access
add action=deny disabled=no dst-host=xyz.com dst-port="" redirect-to=www.xyz.com/mobile
by c0d3rSh3ll
Fri Aug 02, 2013 10:01 am
Forum: General
Topic: VPN(PPTP) setup problem
Replies: 1
Views: 726

Re: VPN(PPTP) setup problem

please post export o print output for fast reply.
by c0d3rSh3ll
Fri Aug 02, 2013 9:56 am
Forum: General
Topic: System rebooted becaused of kernel failure
Replies: 1
Views: 543

Re: System rebooted becaused of kernel failure

reinstall with netinstall. Send to mikrotik support the support.rif
by c0d3rSh3ll
Fri Aug 02, 2013 9:30 am
Forum: General
Topic: connect multiple pptp from a single server
Replies: 6
Views: 1975

Re: connect multiple pptp from a single server

please post your rules
/ppp export
and
/ip firewall filter export
by c0d3rSh3ll
Fri Aug 02, 2013 9:24 am
Forum: General
Topic: Error: Gateway Timeout
Replies: 12
Views: 15161

Re: Error: Gateway Timeout

from your routerOS you can make a ping to internet?
by c0d3rSh3ll
Fri Aug 02, 2013 9:18 am
Forum: General
Topic: Time Limit For Users please help
Replies: 2
Views: 856

Re: Time Limit For Users please help

how you manage your client ? by hotspot, pppoe ?
by c0d3rSh3ll
Fri Aug 02, 2013 8:24 am
Forum: General
Topic: Mikrotik hotspot + UBNT products
Replies: 3
Views: 1965

Re: Mikrotik hotspot + UBNT products

add to ip-binding all mac for ubiquiti devices.
by c0d3rSh3ll
Sun Jul 28, 2013 9:48 am
Forum: General
Topic: Need help to route PPTP client from specific WAN
Replies: 6
Views: 4491

Re: Need help to route PPTP client from specific WAN

add a static route for the server pptp (address from vpnbook).

ip route add dst-address=x.x.x.x gategay=y.y.y.y disable=no

x.x.x.x is the server pptp (vpnbook pptp server) and y.y.y.y is the gateway from wan2.
by c0d3rSh3ll
Sun Jul 28, 2013 9:15 am
Forum: General
Topic: Blocking Sharing of Files from Hotspot LAN to PPPoE LAN
Replies: 1
Views: 1099

Re: Blocking Sharing of Files from Hotspot LAN to PPPoE LAN

add a filter rule for drop all connection from pppoe user.

ip firewall filter
add chain=forward scr-address=x.x.x.x dst-address=y.y.y.y disable=no action=drop
by c0d3rSh3ll
Sun Jul 28, 2013 9:07 am
Forum: General
Topic: Need help to route PPTP client from specific WAN
Replies: 6
Views: 4491

Re: Need help to route PPTP client from specific WAN

add a static route for the server pptp.

ip route add dst-address=x.x.x.x gategay=y.y.y.y disable=no

x.x.x.x is the server pptp and y.y.y.y is the gateway for your dedicate pptp wan.
by c0d3rSh3ll
Sat Jul 27, 2013 1:23 am
Forum: Scripting
Topic: correct this script
Replies: 3
Views: 1518

Re: correct this script

remove the "ip"
is
/ppp secret ...
by c0d3rSh3ll
Fri Jul 26, 2013 10:30 pm
Forum: Scripting
Topic: how to block VNC Connection
Replies: 3
Views: 2342

Re: how to block VNC Connection

first add layer 7 regex for vnc

ros code

/ip firewall layer7-protocol
add name=vnc regexp="^rfb 00[1-9]\\.00[0-9]\\x0a\$"
and then add a filter rule

ros code

ip firewall filter
add action=drop chain=forward disabled=no layer7-protocol=vnc
by c0d3rSh3ll
Thu Jul 25, 2013 9:19 am
Forum: Beginner Basics
Topic: Best way for connecting a new office to the network
Replies: 1
Views: 824

Re: Best way for connecting a new office to the network

for not use NAT, use static routing. for example, if you have a core router and rb751. internet---------core router (192.168.1.1/24)----------------(192.168.1.2/24) 751U-2HnD (192.168.2.1/24)------ 192.168.1.0/24 192.168.2.0/24 in the core route add a static route like this ip route add dst-address=...
by c0d3rSh3ll
Thu Jul 25, 2013 9:06 am
Forum: Beginner Basics
Topic: Help with configuration
Replies: 3
Views: 1185

Re: Help with configuration

what is the problem?
by c0d3rSh3ll
Thu Jul 25, 2013 8:56 am
Forum: Beginner Basics
Topic: how to block unknown IP
Replies: 4
Views: 2282

Re: how to block unknown IP

or simply disable this service if do not use.
by c0d3rSh3ll
Thu Jul 25, 2013 8:53 am
Forum: General
Topic: Unlimited Browsing, Limited Download
Replies: 1
Views: 1415

Re: Unlimited Browsing, Limited Download

in the mangle you can separate http request and download by connection-byte option.
by c0d3rSh3ll
Thu Jul 25, 2013 8:51 am
Forum: General
Topic: Re: problem in re-installing the software in the routerboard
Replies: 1
Views: 885

Re: problem in re-installing the software in the routerboard

if you have correctly configured the netinstall software, check your firewall like windows and antivirus.
by c0d3rSh3ll
Thu Jul 25, 2013 8:48 am
Forum: General
Topic: bypassing hotspot queues for cache hits etc
Replies: 2
Views: 2213

Re: bypassing hotspot queues for cache hits etc

for bypass the queue simple use queue-tree and mangle.
first mark paquet in mangle for/from the server and in the queue-tree select the fisical interface as parent
by c0d3rSh3ll
Thu Jul 25, 2013 8:44 am
Forum: Scripting
Topic: how to block VNC Connection
Replies: 3
Views: 2342

Re: how to block VNC Connection

you can does by layer 7 protocol with regex.

http://l7-filter.sourceforge.net/layer7 ... ls/vnc.pat

o by dst-port.
by c0d3rSh3ll
Thu Jul 25, 2013 3:14 am
Forum: Scripting
Topic: Compacting File Mikrotik Console
Replies: 2
Views: 1354

Re: Compacting File Mikrotik Console

is not possible, routerOS not have a compress software.
by c0d3rSh3ll
Sat Jul 13, 2013 9:42 am
Forum: General
Topic: Visible public ip
Replies: 4
Views: 1338

Re: Visible public ip

you can do this with policy routing.

in the mangle add 2 rules, one with policy for your clients and other for your server. In the routing table set the gateway for either one.
by c0d3rSh3ll
Sat Jul 13, 2013 8:41 am
Forum: Beginner Basics
Topic: PPTP Server not accessible from WAN
Replies: 2
Views: 1718

Re: PPTP Server not accessible from WAN

try disabling all firewall rules.
by c0d3rSh3ll
Sat Jul 13, 2013 8:32 am
Forum: General
Topic: Hotspot and first page redirect
Replies: 1
Views: 998

Re: Hotspot and first page redirect

you can make a hotspot autentication by mac-address for access without login. In the login.html chage the page for the redirect.
by c0d3rSh3ll
Sat Jul 13, 2013 8:08 am
Forum: General
Topic: Backup script
Replies: 3
Views: 1644

Re: Backup script

try this { :log info "Starting Backup Script..."; :local sysname [/system identity get name]; :local sysver [/system package get system version]; :log info "Flushing DNS cache..."; /ip dns cache flush; :delay 2; :log info "Deleting last Backups..."; :foreach i in=[/file...
by c0d3rSh3ll
Fri Jul 12, 2013 8:04 am
Forum: General
Topic: port forwarding
Replies: 2
Views: 740

Re: port forwarding

you can set a range or subnet like
to-addresses=192.168.88.10-192.168.88.20
by c0d3rSh3ll
Fri Jul 12, 2013 7:25 am
Forum: Beginner Basics
Topic: queue tree total upload and download parent
Replies: 4
Views: 2513

Re: queue tree total upload and download parent

post your mangle rules...
by c0d3rSh3ll
Fri Jul 12, 2013 7:21 am
Forum: General
Topic: CCR1016
Replies: 3
Views: 1428

Re: CCR1016

post your export from routerOS.
by c0d3rSh3ll
Fri Jul 12, 2013 7:16 am
Forum: General
Topic: Queues. Sharing bandwidth between two networks.
Replies: 5
Views: 1694

Re: Queues. Sharing bandwidth between two networks.

your queue-tree is ok, but set the parent with pcq too and the parent for download is your local interface.

for the upload is the same but for upload the parent is your wan interface.
by c0d3rSh3ll
Fri Jul 12, 2013 7:04 am
Forum: Beginner Basics
Topic: Radius + VLAN + Hotspot
Replies: 2
Views: 1292

Re: Radius + VLAN + Hotspot

check your firewall rules and masquerade.
your hotspot client can send ping to routerOS gateway? and to the radius?
by c0d3rSh3ll
Fri Jul 12, 2013 6:58 am
Forum: Beginner Basics
Topic: PPTP: client-to-client routing
Replies: 3
Views: 2517

Re: PPTP: client-to-client routing

you can add a static routing.

for example,
in pptp client1

ros code

/ip route add dst-address=network_client2 gateway=pptp-out1
in pptp client2

ros code

/ip route add dst-address=network_client1 gateway=pptp-out2
by c0d3rSh3ll
Fri Jul 12, 2013 6:01 am
Forum: Scripting
Topic: ANY IDEA ?
Replies: 2
Views: 1014

Re: ANY IDEA ?

you can add 2 pppoe client, one for your principal ISP and other for your backhaul link.
In the routing table add 2 routes to 0.0.0.0/0, one with distance=1 for ISP and other for your backhaul with distance=2.
by c0d3rSh3ll
Fri Jul 12, 2013 5:20 am
Forum: General
Topic: How to route LAN devices via an established VPN connection ?
Replies: 4
Views: 5709

Re: How to route LAN devices via an established VPN connecti

with policy routing you can do this. first add a mangle rule like this change your interface lan /ip fi man add action=mark-routing chain=prerouting disabled=no in-interface=lan new-routing-mark=traf passthrough=yes and then add the gateway for this. change your pptp interface /ip route add disabled...
by c0d3rSh3ll
Fri Jul 12, 2013 5:15 am
Forum: General
Topic: Visible public ip
Replies: 4
Views: 1338

Re: Visible public ip

your client and the web server are in the same interface and subnet?
by c0d3rSh3ll
Fri Jul 12, 2013 1:42 am
Forum: Scripting
Topic: ChangeIP SSL read Error
Replies: 1
Views: 1093

Re: ChangeIP SSL read Error

3.30 is a old version. First update your routerOS version and user the changeIP script for this. I have many rb with changeIP script and work fine.
by c0d3rSh3ll
Thu Jul 11, 2013 1:18 am
Forum: General
Topic: NAT 1:1 Log
Replies: 1
Views: 723

Re: NAT 1:1 Log

in system loggins you have a remote action for send all log to a remote syslog server.
by c0d3rSh3ll
Wed Jul 10, 2013 11:04 am
Forum: General
Topic: Firewall rules for interfaces in bridge
Replies: 5
Views: 4438

Re: Firewall rules for interfaces in bridge

set use-ip-firewall=yes in /bridge level.
by c0d3rSh3ll
Wed Jul 10, 2013 11:00 am
Forum: General
Topic: Hide system information and version
Replies: 2
Views: 1394

Re: Hide system information and version

In tool mac-server (mac-server and mac-winbox), enable only your management interface and disable other.
In ip-neighbor enable only your interface.
by c0d3rSh3ll
Wed Jul 10, 2013 10:49 am
Forum: General
Topic: Queues. Sharing bandwidth between two networks.
Replies: 5
Views: 1694

Re: Queues. Sharing bandwidth between two networks.

in the mangle, mark-packet by network A and B. in the queue-tree set the parent your local interface for download. add 2 rule, network A and B. for network A limit-at: 1 M max-limit: 6M for lnetwork B limit-at: 5M max-limit: 6M. for limit and share the BW, add your PCQ rules, and set the child with ...
by c0d3rSh3ll
Wed Jul 10, 2013 10:31 am
Forum: General
Topic: Allow access only from IP
Replies: 2
Views: 765

Re: Allow access only from IP

in /ip service menu set winbox "available option" for your ip.
by c0d3rSh3ll
Wed Jul 10, 2013 9:09 am
Forum: Scripting
Topic: How to check including port to bridge?
Replies: 12
Views: 3544

Re: How to check including port to bridge?

try this, change name1 for your interface. foreach i in=[interface bridge port find] do={ local name1 wlan1 local name2 [interface bridge port get value-name=interface $i] if ($name1 = $name2) do={ log error "interface $name1 is in a bridge"} \ else={log error "interface $name1 is not...
by c0d3rSh3ll
Wed Jul 10, 2013 8:49 am
Forum: Scripting
Topic: Redirect user to specify url via ppoe
Replies: 2
Views: 1311

Re: Redirect user to specify url via ppoe

you can do this with webproxy and address-list.
by c0d3rSh3ll
Fri Jul 05, 2013 9:25 am
Forum: General
Topic: Script if any connection fails
Replies: 3
Views: 1152

Re: Script if any connection fails

first you need add a route static for check remote host like 8.8.8.8 and 208.67.222.222 for isp1 ip route add dst-address=8.8.8.8 gateway=192.168.1.1 and other for isp2 ip route add dst-address=208.67.222.222 gateway=192.168.2.1 and then add two netwatch rule. /tool netwatch add disabled=no down-scr...
by c0d3rSh3ll
Fri Jul 05, 2013 7:45 am
Forum: General
Topic: How to control IDM or FDM speed...
Replies: 2
Views: 1793

Re: How to control IDM or FDM speed...

you can mark in mangle table by Connection-Byte for http request and http download, and in the queue-tree limit these paquet mark.
by c0d3rSh3ll
Thu Jul 04, 2013 11:11 pm
Forum: Beginner Basics
Topic: HotSpot and Radius - problem with userman
Replies: 7
Views: 2594

Re: HotSpot and Radius - problem with userman

User-manager package is not installed in the screenshot.
by c0d3rSh3ll
Thu Jul 04, 2013 9:50 am
Forum: Beginner Basics
Topic: 2 ISP, 2 networks, full failover
Replies: 6
Views: 2086

Re: 2 ISP, 2 networks, full failover

and this topology?
                                   |----------NETWORK1
ISP1 + ISP2 -----RB2011  |
                                   |----------NETWORK2
by c0d3rSh3ll
Thu Jul 04, 2013 9:44 am
Forum: Beginner Basics
Topic: HotSpot and Radius - problem with userman
Replies: 7
Views: 2594

Re: HotSpot and Radius - problem with userman

check if you have enabled http service in /ip services
check your firewall rule.
check if usermanager package is instaled correctly.
by c0d3rSh3ll
Thu Jun 27, 2013 8:13 am
Forum: General
Topic: Make Static dinamic address list
Replies: 1
Views: 752

Re: Make Static dinamic address list

select a dynamic address-list and click in copy button, then click in apply button.

if you need make this job with many address-list you can add a script.
by c0d3rSh3ll
Thu Jun 27, 2013 7:58 am
Forum: General
Topic: please help : how to block any website
Replies: 4
Views: 3726

Re: please help : how to block any website

the simple way is with web proxy and address-list policy http filters.
by c0d3rSh3ll
Thu Jun 27, 2013 7:50 am
Forum: General
Topic: Firewall filter content
Replies: 9
Views: 8575

Re: Firewall filter content

can anyone tell me how to add many words in content ?

I think is not possible, I tested many method and not working. With a simple word is working
by c0d3rSh3ll
Thu Jun 27, 2013 7:42 am
Forum: General
Topic: Feature Request: httpd Server for API Pages.
Replies: 2
Views: 1356

Re: Feature Request: httpd Server for API Pages.

you can mount a metarouter with openwrt in your rb.
by c0d3rSh3ll
Tue Jun 25, 2013 6:14 am
Forum: Scripting
Topic: Scripting Backup to FTP
Replies: 2
Views: 1553

Re: Scripting Backup to FTP

/ip route export file=$GlobalVariable
by c0d3rSh3ll
Fri Jun 21, 2013 7:58 am
Forum: Wireless Networking
Topic: auto bandwidth test
Replies: 1
Views: 1692

Re: auto bandwidth test

try this
{global bps1
/tool bandwidth-test 192.168.88.252 user=admin duration=3 direction=both do={:set bps1 (rx-total-average)};
if ($bps1<=5000000) do={ping 8.8.8.8 count=5}}
by c0d3rSh3ll
Fri Jun 21, 2013 7:06 am
Forum: Scripting
Topic: Help with UPS monitoring script.
Replies: 21
Views: 12399

Re: Help with UPS monitoring script.

try this
{
local status [system ups get value-name=on-line 0]
if ($status = yes ) do={/system script run script1} else={/system script run scrip2}
}
you can change the script1 and script2 for your script for send email or anything
by c0d3rSh3ll
Wed Jun 19, 2013 6:13 am
Forum: Scripting
Topic: hotspot idle timeout
Replies: 5
Views: 3807

Re: hotspot idle timeout

paste directly in the terminal and check the output, and host too.
by c0d3rSh3ll
Tue Jun 18, 2013 8:11 am
Forum: Scripting
Topic: Last Login Time of every Client in Hotspot
Replies: 6
Views: 2535

Re: Last Login Time of every Client in Hotspot

you can get a virtualBox appliance with freeradius and daloradius as front end. Ready to use and free.

http://www.daloradius.com/
by c0d3rSh3ll
Tue Jun 18, 2013 7:43 am
Forum: General
Topic: Queue script error in Routeros 6.x
Replies: 1
Views: 1657

Re: Queue script error in Routeros 6.x

:for x from=1 to=254 do={ / queue simple add name="172.16.200.$x" target="172.16.200.$x" max-limit=4M/4M burst-time="1/1" time="12:00:00-17:59:59,sun,mon,tue,wed,thu,fri,sat"}
by c0d3rSh3ll
Tue Jun 18, 2013 7:38 am
Forum: Beginner Basics
Topic: Public Ip to internal router in network
Replies: 4
Views: 1769

Re: Public Ip to internal router in network

with nat 1:1 you can give to your customer a public ip with a private ip.
by c0d3rSh3ll
Tue Jun 18, 2013 5:22 am
Forum: Scripting
Topic: hotspot idle timeout
Replies: 5
Views: 3807

Re: hotspot idle timeout

try this

ros code

foreach i in=[ip hotspot host find ] do= {
local idle [ip hotspot host get value-name=idle-time $i]
local time 08:00:00
if ($idle > $time) do={
local mac [ip hotspot host get value-name=mac-address $i]
ip hotspot host remove $mac}}
by c0d3rSh3ll
Fri Jun 14, 2013 8:58 pm
Forum: Scripting
Topic: Mikrpotic Script Help - Send specific info via email
Replies: 3
Views: 1116

Re: Mikrpotic Script Help - Send specific info via email

if my answer helped you, please give me karma =)
by c0d3rSh3ll
Thu Jun 13, 2013 9:12 am
Forum: General
Topic: Dns Redirect
Replies: 2
Views: 994

Re: Dns Redirect

force all dns request from your user to the router.

ros code

/ip firewall nat
add action=redirect chain=dstnat disabled=no dst-port=53 in-interface=lan protocol=udp to-ports=53
by c0d3rSh3ll
Thu Jun 13, 2013 8:55 am
Forum: General
Topic: maybe a dos attack ?
Replies: 11
Views: 2680

Re: maybe a dos attack ?

in this moment run torch tool to check who, when and where is attacking your router.
by c0d3rSh3ll
Thu Jun 13, 2013 8:52 am
Forum: Scripting
Topic: Mikrpotic Script Help - Send specific info via email
Replies: 3
Views: 1116

Re: Mikrpotic Script Help - Send specific info via email

try this

test is your name user and SendEmail is your script to send to you an email.

ros code

{
local name "test"
foreach i in=[ppp active find ] do={
local name1 [ppp active get value-name=name $i]
if ($name = $name1 ) do={/system script run SendEmail}
}  }
by c0d3rSh3ll
Wed Jun 12, 2013 2:26 am
Forum: Scripting
Topic: Just check activity of the route
Replies: 2
Views: 2094

Re: Just check activity of the route

To check activity just use netwatch (TOOLS - NETWATCH). There you can put a script that does anything when the route is active (using the def gateway of the route) or inactive. Regards! is not the best idea if you have more gateway to same ip o two router with distances. try this, you can find by c...
by c0d3rSh3ll
Mon Jun 10, 2013 5:21 am
Forum: Wireless Networking
Topic: RB751U-2HnD user,please make a ping test for me
Replies: 4
Views: 1249

Re: RB751U-2HnD user,please make a ping test for me

here you can see other screenshot by wireless and wired, and not downloading nothing. the rb are with default configuration.
by c0d3rSh3ll
Mon Jun 10, 2013 4:56 am
Forum: Wireless Networking
Topic: RB751U-2HnD user,please make a ping test for me
Replies: 4
Views: 1249

Re: RB751U-2HnD user,please make a ping test for me

I am in the same room with the rb.
by c0d3rSh3ll
Sat Jun 08, 2013 12:06 am
Forum: General
Topic: policy based routing
Replies: 2
Views: 1457

Re: policy based routing

exclude the ip server caching from address-list, if you configure the subnet (192.168.162.0/24) you have the ip server in the same subnet and make a loop.
by c0d3rSh3ll
Fri Jun 07, 2013 11:06 am
Forum: Beginner Basics
Topic: i want stop netcut program and programs like it
Replies: 11
Views: 7548

Re: i want stop netcut program and programs like it

activate "client isolation" if your ap is ubnt and unset "default forward" in mikrotik devices.
by c0d3rSh3ll
Thu Jun 06, 2013 8:40 am
Forum: Scripting
Topic: Write Variable in Script
Replies: 3
Views: 1721

Re: Write Variable in Script

is working for me.

what is your version?
try this in a console and check the output:

/system script run nameofscript
by c0d3rSh3ll
Thu Jun 06, 2013 6:16 am
Forum: General
Topic: Why /file get FILE contents on routeros 6 returns nothing?
Replies: 4
Views: 3575

Re: Why /file get FILE contents on routeros 6 returns nothin

ros code

put [/file get dyndns.checkip.html contents]
  • 1
  • 2