MikroTik

rextended

Another underestimated and never considered question:

Can your device reach 300Mbps?

And if the technology is called "40MHz turbo" it's time you took some refresher courses...

rextended

68 do not exist in script.

You must use "find".

The forum is full of examples.

rextended

I can't believe it... Still use 6.43.7...

Hire a consultant and get the job done professionally.

I've been using BGP on a HA device with RouterOS 7 for months and it hasn't given me any problems so far.

rextended

But don't you have enough wit to understand that if you google bbr mikrotik chr and the only result is your already opened (bumped) topic,
maybe there is a very specific reason?

Please stop spam.

rextended

I have been using Chat GPT to learn how to configure Mikrotik routers. In fact, you can see the effect... all other queue tree rules are showing traffic on it except Gaming down, it only ever shows 0 I wonder if there is some mangle rule that is missing for this Queue? Using ChatGPT to make a QOS s...

rextended

What I didn't see, I would have liked,
What I saw, I didn't like.™

rextended

Perhaps a sanitize option to the export command would be helpful.

The problem is that someone are trying to use a tool, that was not created for that thing,
as a tool to receive assistance from complete strangers, releasing completely confidential information at the mercy of the whole world...

rextended

Most of the people on the forum, not being paid by you to do things (that's not the point),
don't help if they don't find logical sense in what you write.
Either you explain in detail, or you are satisfied with what is answered...

rextended

Software ID is completely random, and can't have any value.
A "stolen" license is useless on any other machine...

rextended

I agree with everything you wrote, it's correct. But.. Following the same principle, it should be forbidden on the forum to use fake IP addresses and DNS names , outside of those specified by the appropriate RFCs, otherwise putting random IP addresses and DNS names risks generating random DDoS just ...

rextended

I can't help on the remote part because I can not debug the interaction.

rextended

Edit:
Oh thank you, you were faster

because I often reread my posts and add questions that others might ask...

rextended

(no matter if is set to 0 or is set to "")

After the run, you can use $findedID everywhere, also on another script.

rextended

you can't define a global variable inside a function without declare first the variable (no matter if is set to 0 or is set to "") :global findedID 0 { :global dnsrecords "data={\"serverrequestid\":\"k1x=nTjeHeSzdVh\",\"clientrequestid\":\"\",\&...

rextended

Why complicate things unnecessarily, "two lines" of code are enough... Ignoring if start or not with "data"... (the " are escaped as \" for simulating the read of the data) { :global dnsrecords "data={\"serverrequestid\":\"k1x=nTjeHeSzdVh\",\&qu...

rextended

Are you ask Yamaha first?

rextended

@bpwl

rextended

That's a model that exists just for you...

However, if it were the RB941-2nd-TC, as written everywhere, and as common sense dictates, RouterOS 7, even if they compiled it, is not for SMIPS.

rextended

(a "hacker" with a moral compass???)

No, is only a method for try to stay undetected...

rextended

on routeros 23456 / 1000 = 23 so...

rextended

Compared to never updating the device, a scheduled auto update would not be the worst option? What is it? A competition to see who does the worst thing? It is actually better to have an out of order peripheral than a poorly managed one which will then cause mass attacks on others. I agree with this...

rextended

{ /interface ethernet :local run1 [get ether1 running] :local run2 [get ether2 running] /interface wireless :if (($run1=true) and ($run2=true)) do={ enable wlan1 disable wlan2 } else={ disable wlan1 enable wlan2 } } { /interface ethernet :local run1 [get ether1 running] :local run2 [get ether2 runn...

rextended

What is written makes no sense... SpamGPT: ###RCHCK### Ask where you got that sh–ty script, probably from ChatGPT. Just an idiot would invent the not-actually-existent "send" command from mac-telnet. ChatGPT (and similar) is just s–t in your face, don't use it. He made it up just to please...

rextended

I thought the stupidest thing someone could do is automatically update the device as soon as a new version comes out,
but I hadn't considered the act of sharing a script that does it, just usable with copy & paste...

rextended

For possible virus infections I prefer to CLEAN FORMAT using other OS. And only THEN I will pass again with install of target OS. If I only had one PC (because otherwise I would remove the disk and format it elsewhere) and I had previously prepared a stick with the Windows installation CD, that alo...

rextended

I have only one year on 1980, and of course I know those methods...

rextended

Cute unofficial versions, huh?
Check if you too have a nice surprise on your computer...
viewtopic.php?t=199525

rextended

rextended, you have always the option to refrain from commenting if you don't understand the question AND don't have anything useful to post...

The first part you could have avoided writing, the second you could be right.

rextended

First part shows your age. Obviously I used a figure of speech rather than fully describing the procedure, which gives the same effects... Your answer instead shows that you don't know that simply with a USB drive made with, for example, Rufus, you can easily create a medium to format the computer ...

rextended

Format your PC, change all your passwords... ALL...

rextended

Thank goodness you're here to explain to me how it works, you know, I've never written scripts, I'm not capable of it...

rextended

Where is your error?

Here:

from what I know, the below command should work

rextended

[---] /ipv6/firewall/address-list> add disable enable find remove set comment edit export print reset [---] /ipv6/firewall/address-list> remove numbers=0-12 expected end of command (line 1 column 17) [---] /ipv6/firewall/address-list> remove numbers=0:12 expected end of command (line 1 column 17) [...

rextended

you have to stop copying and pasting, instead you have to think about what you do...

:local hostname [/system identity get name]
:local date [/system clock get date]
:local localfilename "$hostname-Backup-Daily";
:local remotefilename "$hostname-$date";

rextended

Is there a wildcard function for Mikrotik scripts?
Code: Select all
:global UpdateURL "sftp://mikrotik.com/routeros-*-arm.npk"

NO.

rextended

Thanks

rextended

https://download.mikrotik.com/routeros/7.11.2/latest-x86.npk If it exist, is everytime the last 7.11.2.. if containing 7.11.2 in the path... No, it doesn't exist, and it's bullshit to always update to the latest version as soon as it comes out. At most, make a script that reads this: https://upgrade...

rextended

FWIW, I'm a believe in responsible disclosure... so reporting to Mikrotik directly and letting them respond first is better practice – but that's just my opinion... Too late for that, accidentally, without meaning to, it has already been published and archived by Google, better to warn everyone (th...

rextended

how did you create the user *sys ? it would be like the linux "root" user, right ? Is a predefined user in RouterOS, I do not create the user. so if you have the highest rights, why don't you connect to another Mikrotik (on the same LAN) and run a remote command with /system-exec, you sho...

rextended

Didn't test, but would seem like act same with netwatch scripts too.

It seems like you didn't even read what I wrote.

rextended

Indeed.
I'm just warning all those who think that creating an account with less privileges to let someone manage something, are actually giving them the keys to the house...

As well as: using skins thinking that if the sections are hidden they cannot be used...

rextended

Tested: do not happen via ftp upload of filename.auto.rsc

rextended

Tested: The same also on DHCP Client, both IPv4 and IPv6 versions

Do not happen on System Script or Scheduler section (unless the script or scheduler already has those permissions on its own)

rextended

If you are rich, require one quotation to support@mikrotik.com

rextended

Still, Rex, could you add... What exactly has been fixed in the work on arrays in ROS7 relative to ROS6 ? On v6 when you assigned a value to an array variable, coming from another subvaluo on one array, instead of copying the contents of the subpart of the array, it overwrote the index where the da...

rextended

Easy: MikroTik has no pointers, RouterOS is not a programming language like the others. (Another example: It doesn't even have decimal division...) At most it has Operational Pointers (OP, like one array link shortcut) which are another thing. What it did before in v6 was wrong, and they fixed it in...

rextended

Didn't notice any serial port there, could give it a try if I would. This is probably some kind of budget models of RB2011, which doesn't have neither usb or sfp ports.

Is why must be writed everytime the full model and RouterOS version... Probably your is RB2011L(-RM)

rextended

DHCP server scripts and PPP profile scripts, rights escalation (not tested other points): One user that have at least the write right, can add or modify the script inside the DHCP Server or PPP profile for execute any RouterOS command for rights escalation. /user group add name=test policy=read,writ...

rextended

Under DHCP Server scripts is used the user *sys , not the user admin Is the same user and rigths that ppp profile scripts have: [RexTended@MATRIX] /system script job> pri detail 0 owner="*sys" policy=*0,local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive,...

rextended

Sorry for stepping in too late...
All you had to do was plug the serial cable into the serial port behind the router and access the CLI again...

Strange that none of the others thought about it...

rextended

and this one is also effective and standardized # /interface/wireguard/peers/get [find interface=wireguard1] current-endpoint-address; If the interface name is already known, simply… /interface wireguard peers get wireguard1 current-endpoint-address If the name is from a variable, just... /interfac...

rextended

(
[xyz@RB5009_KT] /interface/wireguard/peers> get value-name=current-endpoint-address number=0
this command, if do not do any error, do not print anything if you do not use :put.....
and at least bust be :put [get 0 current-endpoint-address]
)

rextended

But this is SwOS (lite), and not RouterOS...

rextended

Set 5180 20MHz only... (channel 36)

rextended

Probably you should mention that POE devices will all get a powercut during the update.

They also have to write that to update the software you need to turn on the device?

rextended

And your ax devices see the network, after 10 minutes of the DFS scan?

rextended

This currently outputs an endless barrage of error log "Down" without end.

Is exactly what you want/write:
while $Status is down, write to error log "Down"...

If you had written instead:
if $tatus is down, write to error log "Down"...

rextended

Exactly

rextended

I know, I know, I've seen it... lacks quality control even on the new guide...

However the solution is much simpler: if @zetdotpi send them via ftp or via email and solve there...

PS: why change content type???
The export is not json....

rextended

Fair enough, there may be multiple problems.

The http-content-type= is in docs, but not valid syntax in /tool/fetch... That's what caught my eye here.

On the wiki is
http-header-field="Content-Type: application/json"

rextended

In V7, variables should be 64KB, so I don't think that's the problem.

NO, if is used "/file content" is still 4k...

viewtopic.php?p=1010865#p1008826

viewtopic.php?p=1012746#p1012747

rextended

Can you answer in a less vague way?

rextended

@BartoszP , so was it you? Why don't you read in the logs who did it? And then, instead of grouping it together, it deleted everything... To @Paternot Or were you trolling someone else, @rextended? I didn't understand what you meant. @gabacho4 he saw those posts, so I'm not trolling at all... To @a...

rextended

avoid <TAB> on script... Apparently nothing wrong... Probably dhcp script have less right than "normal script"... :if ($leaseBound = 1) do={ :local interFace "" /interface bridge host :set interFace [get [find where mac-address=$leaseActMAC] on-interface] :if ($interFace~"et...

rextended

Ehm...

rextended

Last News: Now the moderators on MikroTik forum make their own rules, and without giving warnings, they suspend your account for spoilers, on different products. Who was it that suspended my account? An admin or moderator who without even warning suspended my account? If that moderator can tell me w...

rextended

Oh..... finally.............................................................

rextended

"error while running customized default configuration script no such item" = /interface wireless do not exist on wifiwave2 Do not worry, is the same error on defconf I report a year ago the 2022-05-04 17:10:00.... Some spam lines inside the file get-custom-defconf , never removed. Too man...

rextended

usually my router is updating automatically It's one of the dumbest things people can do on devices, and it applies to any software (to specify it, it was not understood) not only MikroTik ... Luckily you belong to that club, so at least the first ones who try it, end up in the bag, while the smart...

rextended

But how, the shitty answer that ChatGPT gave you, just for chat, isn't enough?

rextended

By now you should know how MikroTik staff works...

rextended

"<TAB>" is your friend, and some deduction...

rextended

Someone (

) has already discovered them, otherwise how could I make the list???

When you find out how to use them, let me know

Once I had found a way to generate "exclamation", but for my stupidity I didn't write it down and now I don't remember...

rextended

If the rules of the State change, it is not MikroTik's job to inform customers, it is assumed that they already know the law, which does not admit ignorance.

If you use a peripheral outside of how it was meant to be used, that's your business.

rextended

Yeah, except that I'm now using the device here in South Africa... So the other question is why did you buy a device for the American market, and then you didn't resell it when you moved to South Africa... Unfortunately they are forced by the FCC that, if they want to sell in America, they must be ...

rextended

Since MikroTik do not have TPC, now all frequences that must have TPC are forbidden on US market...
Those are FCC rules, not MikroTik choices.
If the rules of the State change, it is not MikroTik's job to inform customers, it is assumed that they already know the law, which does not admit ignorance.

rextended

Band: 5GHz AC Channel Width: 20/40/80MHz Frequency: 5320 (Under Radios, I see that 5320 is removed from the whole "Current channels" table when country "United States" or "Canada" is selected) Before it was working as a DFS channel that was subject to radar scanning, w...

rextended

"foreach loop" behavior change in version 7

Wrong title.

It is clear that you have confused ideas.
What does the foreach loop have to do with it?

rextended

Use script that detect port knocking.
The sequence determine what rule disable or enable, or create your own API on php or similar on a separate program or webserver.

rextended

Can you shar the script

Do not necropost, the unser is not longer online and the last post is on 2018....

rextended

Many admins run Linux.

And many admin drink "vine" and run wine...

rextended

Good to know Mikrotik isn't going to put you out of business with new [:convert] anytime soon. The timing with which they came up with :convert , and the similarity of what :convert does compared to the scripts I've made, is staggering... ;) For sure if they had copied my scripts, they would have m...

rextended

Only some condition on this preliminary version: The array must be global!!! For this array: https://forum.mikrotik.com/viewtopic.php?t=191832#p973295 the result is: :global ArrayIN [:toarray ""] :set ($ArrayIN->"alertList") [:toarray ""] :set ($ArrayIN->"alertList...

rextended

If the output is put inside one .rsc, can be imported later for recreate the array on another machine... :global exportarray do={ :global exportarray :local path "$2" :local ret "" /system script environment :foreach j in=[find] do={ :if ([get $j value] = $1) do={:set path "...

rextended

The arrays must be exported as a set of instructions, and imported back executing / parsing the instruction set... example of file content can be: :set ($arrayname->"column-name") "value";:set ($arrayname->"column-name2") "value2";:set ($arrayname->"colum...

rextended

Only simple arrays are exported, do not work for array of array and more complex data structure.

rextended

where are the quotes between the month name?

example code

:global x {month=Aug;test=0}
:put ($x->"month")
:global x {month="Aug";test=0}
:put ($x->"month")

rextended

rextended

Hi Rex. The code seams to break in ROS 7.11 stable. for the store script :if ($vvalue~"^($code$|;\\(eva\?l )") do={:set $vvalue "(code)"}; The break is mainly in the regex part. could you please double check? Thanks This is not the original line, for example, someone added $ i...

rextended

I don't see the end purpose or any use, you're probably still misunderstanding or not specifying what you want to achieve in the end. As yet I don't see the usefulness of activating the ND on the pppoe connection, as many ISPs do, only creating problems for the clients... RouterOS already distribute...

rextended

Anyone got any thoughts? Yep, you clearly don't read the release notes at all and update the system without even a clue what you're doing. From RouterOS 7.10 the dates are FINALLY reported in the right and more logical ISO:8601 yyyy-MM-dd format instead of the <censored> Mmm/dd/yyyy Now, if the scr...

rextended

rextended

The description is bad, it is not known if you are talking about the server or the client,
whatever happens, it's all automatic and what you're doing seems ridiculous to me...

rextended

If an oven doesn't consume the same amount of electricity when it reaches the desired temperature, is it broken?

The comparison has the same precision as the question...

rextended

that's why the quotes

rextended

Is there any way on how to change date format reported by "/system clock get date" in script, […] No. Use my scripts as example on how to parse date on both format on same script. https://forum.mikrotik.com/viewtopic.php?t=177551 More specifically https://forum.mikrotik.com/viewtopic.php?...

rextended

Seems like it had stopped working after update to 7.11, but not sure for 100%. This is the classic problem of copying and pasting or not knowing at all what the scripts you use do... Since version 7.0alpha0 "system" no longer exists, but only "routeros" (which incorporates syste...

rextended

They can't write it clearly that if <censored> and then it happens <censored>. Otherwise they would automatically reveal how to hack this still unknown bug... However, the stupidity of opening the www or www-ssl ports to the world remains. The default firewall rules prevent any such hack outside the...

rextended

i dont see any recent moderation logs on that topic, nor activity at all I don't find anything wrong with it either, indeed he did well to point out that when he registered on the forum he agreed not to talk about other "competing" products... But maybe he doesn't remember... When people ...

rextended

Use the "code display" button [ ] ...........

or manually...
[code]script[/code]

rextended

The correct syntax would have been /system/health get "cpu-temperature" value if the RouterOS programmers had made one thing uniform with everything else. But since "cpu-temperature" is not already solved like other sections, [find where name=cpu-temperature] is needed. So, the n...

rextended

I want the script to run using scheduler too.
When the scheduler runs the script, it should not ask for the user input but rather take in the default value.

Create a separate non-interactive version...

rextended

this script itself

rextended

You are able to use Google? For me is the 1st result...
https://www.google.com/search?q=script+telegram+bold+font

rextended

where is the ^ ??? "00:0C:42" match also xx:00:0C:42:xx:xx, xx:xx:00:0C:42:xx and xx:xx:xx:00:0C:42 !($port ~ "bridge" || $port ~ "sfp") => !($port ~ "(bridge|sfp)") :if ($mac~"^(\ 00:0C:42|\ 08:55:31|\ 18:FD:74|\ 2C:C8:1B|\ 48:8F:5A|\ 48:A9:8A|\ 4C:5E:0C...

rextended

I hardly found all this crap written in one post.

rextended

try to remove the space on SSID name... or add quotes on query

rextended

A little function... just add your unwanted characters after \FF. If is "-" unwanted, must be put at the end. For default \01-\19\7F-\FF check for any characters that RouterOS do not support. Simply return true if is present at least one invalid charactes present on passed string, or false...

rextended

rextended

you should look better in my resources.... https://forum.mikrotik.com/viewtopic.php?t=177551#p977175 Just some hint: :foreach i in=[ip hotspot user find where name!="admin" and name!="default-trial" and disabled=no] do={ :global datetime2epoch do={ […] } […] } do not define every...

rextended

is it normal? Does it seem normal to you to hijack topics and unnecessarily resurrect old topics? Can anybody explain how to put epoch in comments? Don't hijack the topic. If you're using RouterOS v6 there's no that command. For v6 there are my scripts, for example. If you use v7 :timestamp do not ...

rextended

(avoid quoting all previous post unnecessarily) Because I guess he doesn't want to print it either, he wants to send it to some processing routine. It is no coincidence that I mentioned sending the message on telegram... Pretending I don't exist, you're an expert and the OP isn't , with your answer ...

rextended

Since when does it have to be answered via riddles? However you did NOT answer him correctly, for what he asked: it's not a bug. Simply "topics" is an array, not a string, and when printed it reprints the full message, on same line, one for each value within the array. So just convert &quo...

rextended

You just need to use a different operator: replace "." with ",".

What are you writing??? He never used "." ...
If you don't know what to write and why it's doing that, it's better not to answer at all than to write at random...

rextended

I've always hated people who write topic titles that blame bugs instead of admitting their ignorance. If I don't know something I admit it, instead of boasting about any bugs... I hope you appreciate the frankness. Here is the solution, I prefer NOT to write why so that you study for a moment to und...

rextended

Unfortunatelly,

SPAM

rextended

Unfortunatelly,

SPAM

rextended

Unfortunatelly,

SPAM

rextended

Unfortunatelly,

SPAM

rextended

Unfortunatelly,

SPAM

rextended

Is in ppp profile used, instead

rextended

First, then, learn to write simply and clearly (I'm not referring to English). Better a clear script example than a mess inside the script, no matter if is well explained. Example: https://forum.mikrotik.com/viewtopic.php?t=197314#p1009493 Anyway, there are errors in what you wrote. An example above...

rextended

I don't think it should be there

When you disable management via http, do you also disable http on all your devices?

how to completely disable ipv6 on mikrotik?

SOLUTION: Turn off the device.

rextended

possibly winbox can be dropped

rextended

So for now it would be one AX2 but I have a campus that I would like to place these units throughout.

It is never advisable to ask one thing at a time, especially if you are inexperienced.
Clearly state what you start with and what you want to achieve in the end.

rextended

I hope that others don't have confused ideas like yours,
and congratulations, write even more abbreviated so that those who have to learn can understand much more easily the bulls–t you write...

rextended

no release note...
you have to trust what I write...

rextended

Just read the already existing posts, even mine. In v6 it happened by mistake, in v7 this error has been fixed. What happens in v7 is the right behavior. There are no "pointers" in RouterOS as understood in some programming languages. Is present "op", one operational pointer that...

rextended

Ask that ISP?
TAG: ###RCHCK###

rextended

thanks for reporting spam eliminated

very thanks!!!

rextended

SwOS Lite version 2.17 released

rextended

@Theodore2, please don’t post chatgpt answers in this forum.

must be banned, it is only for this that is here.

rextended

rextended

As far as I can see there are some moderators who still don't understand what spam is...

viewtopic.php?p=1016624#p1016624
viewtopic.php?p=1019312#p1019312
viewtopic.php?p=1019315#p1019315

rextended

rextended

rextended

rextended

I understood that the server doesn't set the option parameters in the options set,
not that visually it didn't appear written in the lease line...

rextended

Why would the DHCP option or set not be assigned to the leases.

Set directly the option, not the set.

rextended

I spend up to 3 hours a day in WinBox as a WISP

I spend more hours there than you, always as a WISP, and all the problems you have, I don't have.
I don't miss WinBox 2 at all...

rextended

You could have waited a few more years before asking...
I no longer use WinBox2 2.2.18.
3.39 is better and have all previous problem fixed.

rextended

rextended

Simply restore the backup you have done before make the dumb change.

rextended

if it goes offload then you still have to waste time to monitor the machine...

rextended

Still not quite clear that auto-updating a newly released version is bulls–t?

rextended

.... Even the discourse of quotations, hundreds of useless posts are produced in the search, because the search also searches in the quoted text, making a mess that disorients. Good point ... It's a ROS 7.11rc2 topic ... please do not flood it with moderation complains. Should I delete or moderate ...

rextended

4011 not work with 6.x?? you are trolling me ?? There's nothing you can do about it, give up. All new produced peripherals are v7 non-downgradable whether you like it or not. They even had the kindness to leave the same name, without implying that you would be forced to use v7 whether you like it o...

rextended

there aren't missing features in V7 anymore... Oh is there anything missing? It's as if you've never used RouterOS v6. A trivial example: there is no more user-manager. Now what is called "user-manager" that doesn't do at all what the real user-manager used to do. Which cost them to leave...

rextended

Have you open the support ticket sending the supout.rif after and before (or better before, and after)? If you limit yourself to writing it here on the forum and that's it, without opening a separate topic where you give an explanation worthy of that name, and an export of your configuration, what y...

rextended

The real rule in this forum is that there should be no rules. More moderators to moderate what? They keep allowing topics like "no internet", "help me", "question". Seriously? Most of the posts are garbage and spam, and by spam I mean opening other topics to post the sa...

rextended

What I have suggest? https://forum.mikrotik.com/viewtopic.php?t=198228#p1017613 That topic is from 2019 when v7 was in beta. It is not beta anymore,. 4 years have passed. It is stable @Normis... Is time to change the section name, is ridiculous: RouterOS beta and rc versions Please report all issues...

rextended

we should all just move to native IPv6 and get it over with.

Yes, these are wise words.

rextended

Yes, mine is that you like to self-quote unnecessarily and, to me, this mess disgusts me and doesn't make me want to help.

rextended

Yes, open your own topic, this is about 7.1 and 7.10 act differently.

rextended

I agree with everything you wrote

rextended

Problem: my provider is delivering prefixes that are not static.

But then why are you creating all these problems for yourself?

How many times a day do you restart your router, continuously?

If you don't have static IPv6, what does it matter what IPv6 that particular VLAN will have?

rextended

this /interface/ethernet/monitor =numbers=[find where name="ether1"] .tag=3 is equivalent to /interface/ethernet/monitor =numbers=[/interface/ethernet/monitor/find where name="ether1"] .tag=3 and /interface/ethernet/monitor/find etc. do not exist "probably" must be /int...

rextended

@Normis...
Is time to change the section name, is ridiculous:

Thanks @Normis
viewtopic.php?t=198462

rextended

this is silly to argue over. Edit: Because I thought 'maybe I *am* crazy', I had a look on the wayback machine, and it did specifically say 'don't report v7 bugs to support, report them here' https://web.archive.org/web/20220506060456/https://forum.mikrotik.com/viewtopic.php?t=152006&sid=5f7c69...

rextended

From: https://forum.mikrotik.com/viewtopic.php?p=1009160#p1006215 The usual clickbait headline with the usual footwritten explanation : Zero credibility , just bullshit . Is there anything true? Easy to take screenshots when it works... What's the use of taking a screenshot of when "it works&qu...

rextended

That was only just added, when it was unpinned. Don't get upset because people were doing what they were told! It's not unpinned at all (now at 2023-08-07 22:11 CEST, tomorrow if is unpinned, is another thing), and if you haven't noticed it's not my fault. https://forum.mikrotik.com/viewforum.php?f=1

rextended

That topic is from 2019 when v7 was in beta. It is not beta anymore,. 4 years have passed. It is stable @Normis... Is time to change the section name, is ridiculous: RouterOS beta and rc versions Please report all issues with RouterOS beta / rc pre-release versions. IS time to create a section abou...

rextended

That topic is from 2019 when v7 was in beta. It is not beta anymore,. 4 years have passed. It is stable Maybe delete or unpin that post then? It's still the first one that people see. But this is also the first line on this topic. UPDATE: v7 is no longer in beta. Report bugs to support @ mikrotik ....

rextended

Yes, it is a really nasty problem. I think RouterOS should post a big warning when restoring a backup from a different device. When same hardware -> warning and pointing to some info page on how to reset MAC addresses etc When different hardware model -> plainly refuse to restore. And then offer a ...

rextended

Bravo! Thank you.

Removing the connection in connection tracking does not work. The removed user can reconnect even while the connection is gone.

...ah, actually that too, I hadn't considered it...

rextended

No difference ... there is no build-in rule for passwords limits

IIt is not true. The password can be up to ~65K characters long...

rextended

I tried: Instead of randomly trying things that don't exist, first set via winbox as you would like it to be... If you see that it won't let you put more than one, guess why... Then when you're satisfied, you make a nice export of that section to see how it's configured and then what the syntax is ...

rextended

Sorry, update about France. It looks like France is banning encryption apps, so this is why we could not release it there. They require special approval from the government to release app that encrypts data. https://www.ssi.gouv.fr/en/regulation/cryptology/how-to-submit-an-application Are we kiddin...

rextended

I was just about to compile a very complex script for doing time operations. This has saved me so much. Thanks alot There is the usual fallacy that nobody considers: Adding 110s to 23:59:00 becomes 1d00:00:50, and for example subtracting 110s from 00:01:00 becomes -00:00:50 so both cases have to be...

rextended

/ip firewall mangle set [find where comment="rule1"] !per-connection-classifier

or

/ip firewall mangle unset [find where comment="rule1"] per-connection-classifier

rextended

with that function then you can use:
:put [$whoami]

Can not work if user has not sufficient rights...

rextended

Not tested on 6.49.8 but probably applies to this version as well:
⚠️Security Issue: Changing rights / disable / delete the users has no effect on already logged in users. [Tested on 6.48.7 and 7.10.2]
viewtopic.php?t=198410

rextended

⚠️Security Issue: Changing rights / disable / delete the users has no effect on already logged in users. [Tested on 6.48.7 and 7.10.2]
viewtopic.php?t=198410

rextended

Not tested on 7.11rc2 but probably applies to this version as well:
⚠️Security Issue: Changing rights / disable / delete the users has no effect on already logged in users. [Tested on 6.48.7 and 7.10.2]
viewtopic.php?t=198410

rextended

As per title: Changing rights / disable / delete the users has no effect on already logged in users. For example: If you open a terminal, or even winbox, with a user and this user's permissions are changed, or even the user is disabled or deleted , this user will still be logged into the terminal or...

rextended

I never* write anything at random...
Live a little, with 9 lives you can take some risks!

Are the "*"

rextended

Because 90% of problems are due to user ignorance, and often with the help of forum users they are fixed. Then there's the 2% that users persist in reporting on the forum, instead of to support@mikrotik.com. The remaining 8% are not problems related to any of the previous aspects. My question was r...

rextended

Okay I just did that add masquerade and it works thanks man

Read also the other points carefully...
I never* write anything at random...

rextended

8) Where is the […] NAT […]?

rextended

The solution is simple, reload the binary disk backup you made before upgrading the device. Why did you do it, didn't you? how does the problem described relate to the topic header "Change stable to long term" ?? Those who can't describe their problem accurately, so that others also unders...

rextended

There are some additional challenges, yes, but mostly solvable. Especially from someone posting an initial configuration like the OP's. Especially with a more than gigabit Switch, the ideal is to change all the passing packets, by reNATting them twice. (The declared speed, as router with 25 filter ...

rextended

7) Why specify pools on both?
8) Where is the (double) NAT (crappy)?

rextended

0) When specifying a model, write it in full. crs309 = CRS309-1G-8S+, crs326 = CRS326-24G-2S+ (is clear only on the export, can be also CRS326-24S+2Q+) 1) What do you need VLANs for? 2) They are two Switches, as routers they are bad. 3) If you can't change anything in the ISP's router, the only thin...

rextended

There is no password control whatsoever.

Needless to keep asking and requesting and requesting.
The only solution is netinstall and that's it if you have lost the credentials.

rextended

If we are going to e-mail support, why is this topic on the forum? Because 90% of problems are due to user ignorance, and often with the help of forum users they are fixed. Then there's the 2% that users persist in reporting on the forum, instead of to support@mikrotik.com. The remaining 8% are not...

rextended

MikroTik support provide support only on latest routerOS, 6.44.6 is years old.
Maybe it's a bug already fixed and you just waste people time.

rextended

I have the problem too. But my server and user manager are on two separate routers. What changes should I make in this scrpit and how should I run it? The script work only where the user-manager is. For run automatically the script, must be used the scheduler. For be used manually, just paste it on...

rextended

You can use this esample for read fetch error:
viewtopic.php?f=2&t=178355&p=878643#p878643

rextended

- just me I think... but like the database-style/Rust/Swift ":return [:nothing]" as as opposed to C-style ":return 0" – but doesn't matter. return 0 usually is = all ok return something not 0, often is = to problems... "return [:nothing]" call uselessly the ":noth...

rextended

n.b. No V6 compatibility however. So this only works on V7, right now. I forgot that [:rndnum] is a recent innovation...

v6 can count on my random and timestamp functions

rextended

That last sentence.
What does that mean ?

Is better with "?
>>Is on the "version check" the error.

Or this?
>>The error is in the internal process for verifying if the installed version is updated.

rextended

@holvoetn
Tell me what's not clear here:

The binary downloaded from MikroTik is the same (the last long-term build 1689763242). Is on the version check the error.

rextended

I actually select nothing Is impossible to select "nothing". Or check for long-term, or check for stable, or check for the other options, basing as it is already set up. If the "wrong" 6.49.8 is already installed (you said 1684760871 asks to upgrade) where can I get the other 6....

rextended

From position 0x28: AA-BD-B7-64 = 1689763242 Your link is the last 6.49.8 (long-term) build 1689763242 The binary downloaded from MikroTik is the same (the last long-term build 1689763242 ). Is on the version check the error. There isn't a question that hasn't already been answered in my previous po...

rextended

Yes add the DNS with the other already configured or acquired from other sources,
Exclusively ignore all other DNS and use only PPtP DNS, for avoid DNS leaking to other connections.

rextended

The information written is wrong, and instead of deleting that post, the moderator deleted mine.
Truly brilliant, congratulations to the new moderators...

rextended

= is =, not "inside"

/ip firewall address-list remove [find where (address in 192.168.0.0/16) or (address in 172.16.0.0/12) or (address in 10.0.0.0/8)]

rextended

[…] the linux/homebrew commands got EXACT same number (even thought it support /28 and below – apparently at "25% full", it does find any < /29 prefixes... :) Running directly a compiled application with a real kernel is more fast for sure than use a virtual compiler to do that inside Rou...

rextended

FWIW...I'd started your "/29 reducer"... There is a big room for improvement, which I have already seen where to act, but in any case the program is designed to be executed every hour, and only if new IPs appear in the list (compare previous size with actual size), not continuously, and a...

rextended

LOL – your the one who added that boolean complexity! I meant, that each program accepts only a preferred value, often different between programs of the same producer, instead they should accept, as my scripts do, any logical value representing true or false. Why not only "y" or "n&q...

Search found 12557 matches

example code