MikroTik

lukkes

Hello, I tried this alredy a few minutes ago, but I get this error in return: ERROR The requested URL could not be retrieved While trying to retrieve the URL: /firefox?client=firefox-a&rls=org.mozilla:en-US:official The following error was encountered: * Invalid URL Some aspect of the requested...

lukkes

there is a way to redirect to an external proxy with the original client ip instead of the MT ip? in order to log the client web surf? you may add route with gateway=squid and some routing mark, and then mark all traffic to port 80 and with src-mac-address=!squid's_one with that mark hmmm, i'm not ...

lukkes

ok bro, i will, thanks

lukkes

http://forum.mikrotik.com/viewtopic.php?f=2&t=38114

Chupaka said that it's not possible not possible...

lukkes

hi, i have a linux proxy server with dns, dhcp, qos, proxy, etc. i want to change everything to mikrotik but i really need to log the visited sites of the clients, i do this with sarg and squid log, i setup a mikrotik with, dhcp, dns, qos, and redirect the port 80 to linux ip and squid port, works g...

lukkes

there is a way to redirect to an external proxy with the original client ip instead of the MT ip? in order to log the client web surf?

lukkes

Hi I try to use this script and appear syntax error (line 49 column 14) I try to looking for the bug but i can't. Can you check the sintaxis? (i try with v3 and v4) Regards M. Hi max, this is working in my router i dont know whats the problem.. hola, max nos conocimos en el mum de argentina, el scr...

lukkes

hi, the problem it's no PSU i've changed and problem persist, i beleive that it's incopatibilty with 3com swith or something like that. i will try with other switch to test. thanks

lukkes

48v? Hmmm ok i will try this.. Thanks

lukkes

Hi, everybody.. i have a RB493 conected to a 3Com Spuertack 3, it used as a load balancer, i need 4 ether more then i bought a RB800 + RB/816, al works fine, i programmed the board all it's ok, al was done by the ethr1 port, but when connected to the 3Com switch, then le port 4 - 16 intermittent lon...

lukkes

changeip it's on the right way.. the best way to block/deny content it's with a squid proxy server and squidguard... runnig parallel to mikrotik an receiving all the port 80 redirected requests.

lukkes

/ip firewall filter
add action=drop chain=forward comment="" content=.jpg disabled=no
add action=drop chain=forward comment="" content=.JPG disabled=no

lukkes

I really don't understand you problem, but i beleive that you have another DHCP in your switch. can you be more specific?

lukkes

thanks everybody for help me,
the problem solved at.

http://forum.mikrotik.com/viewtopic.php?f=9&t=40109

lukkes

thanks everybody for your help, problem solved at.

http://forum.mikrotik.com/viewtopic.php?f=9&t=40109

lukkes

Hi, I make a 10 wan load balance (dsl) with PCC, but i have a big problem, in my country sometimes we have a intermitent down of a various adls at same time, sometimes i have 4 or 5 wand down at same time, this is a big problem because the RouterOS send all the traffic of this 5 down wan for the def...

lukkes

Code: Select all
:global aa {1;1;2}
:set aa ($aa , 3)

[admin@MikroTik] /> :environment print
"aa"={1; 1; 2; 3}
Everything is in the manual:
http://wiki.mikrotik.com/wiki/M:Scripti ... _Operators

Yes i found in the manual, thanks a lot.

lukkes

can somebody give an example in how to fill an array in runtime? not in declaration. thanks

lukkes

yes you're right but it will be a fake load balance, well but better than collapse the first link, i'm tryng to make an script to recreate the pcc mangle rules dinamically and the routing marks too.. somebody have any idea? thanks again

lukkes

ok, Thanks a lot, i will try this, i'm so hurry now but later i will post another command that its not working good, or maybe the problem is between the chair and te keyboard.. ok excuseme for post here because this is yet post in another threat but maybe here it's more appropiate because i really n...

lukkes

Yes, it is possible example set ip address from variable :global myIP 10.1.1.1 /ip firewall mangle add chain=input src-address=$myIP; Thanks for your help, in my specific case it doesn't work. maybe cause i need to concatenate the both-addresses:with the variable? can you help me in this? i dont kn...

lukkes

hi, i need to change, delete an create rules dynamically, it's possible to use a variable as a firewall rule parameter, e.g. :local wans; set wans 3; /ip firewall mangle :log info "Setting filters"; add action=mark-connection chain=prerouting comment="TEST RULE" \ disabled=no dst...

lukkes

So, how i can count the number of routes that have 0.0.0.0 in all the tables need to count these in order to delete and write again dinamic the number of mangle rules to make the pcc marks...

lukkes

for example, you have /ip route add dst-address=0.0.0.0/0 gateway=gw1 routing-mark=to_gw1 then add /ip route add dst-address=0.0.0.0/0 gateway=gw2 routing-mark=to_gw1 distance=10 /ip route add dst-address=0.0.0.0/0 gateway=gw3 routing-mark=to_gw1 distance=10 /ip route add dst-address=0.0.0.0/0 gate...

lukkes

Try using quotation marks: /ip route print where dst-address="0.0.0.0/0" thanks bud, but the output it's the same [admin@router-plaza] > /ip route print where dst-address="0.0.0.0/0" Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - osp...

lukkes

simply add backup default routes (with bigger distances) to each routing table Sorry Chupaka, i cant understand your point... also can you see this post for me? it's another topic, but i don't know how to talk with you directly, and thanks for your help... i have 8 wan, how i can do what you advise...

lukkes

Try using quotation marks: /ip route print where dst-address="0.0.0.0/0" thanks bud, but the output it's the same [admin@router-plaza] > /ip route print where dst-address="0.0.0.0/0" Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - osp...

lukkes

Hi everybody, please can somebody tell me why i fi have this route lists *********************************************************************** [admin@router-plaza] > /ip route print Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blac...

lukkes

@lukkes, the script to distribute the load can be achieved with simple scripting and with more complex to do it in a more precise way so ... its the scripting that will help as usual. i was affraid about that answer, i dont know much about scripting, i just imagine an script to change dynamic 20 ru...

lukkes

I make a loda balance with 8 wan, all works perfect, the issue is that when some provider goes down then the router send the traffic marked to the down provider for the default gateway, it's normal, but can you imagine what happen when 5 of 8 providers is down? all traffic for that 5 providers will ...

lukkes

yes, this syntax is available only in 'routing-test', not 'routing' for example, if you have two links to the provider (eth1 and eth2), and gateway addresses are the same (1.2.3.4), then you should add two routes, like /ip routes add routing-mark=gw1 gateway=1.2.3.4%eth1 /ip routes add routing-mark...

lukkes

Ozelo, realy, realy thanks for share, not much want to do it.. i will try to make the upload part and will post it, that you check, comment and suggest, thanks again

lukkes

please if you can find the way, please tell us. i'm working on it too..

lukkes

hi Ozelo, i'm sorry for i can help you, so i hope you can help me, i'm searching a way to implement a good qos, i've read a lot and mine is working but i'm collecting from working examples, can you share your mangle rules, your queues rules looks good, thanks a lot anyway

lukkes

ok, bro thanks for your advice, hey i work with the advise you told me about look only in table, remember from another post, and works great. thanks a lot..

lukkes

UPDATE: actually, there's about ~2% difference in CPU load! conclusion: matching against ~1100-items address-list is 2% of 3166 MHz cpu... p.s. mine traffic is ~800 Mbps w/o NAT thanks again for your tests, i think that a 2% in a 3000+ cpu it's a huge difference and much for me that im runnig a 8 w...

lukkes

ok understood make almost the same test, with and without connection marks, matching ALL TRAFFIC up/down and sendig to two queues and llimiting, and the cpu load is the same, can you give me the link to your performance issue post? now, have you some experience marking ACK packets, i've read a lot o...

lukkes

ok, in someplaces i've read that we need to mark connectios because the router when the connection it's started then it save it in the connection track, then check packets use more cpu, than check connection firts (mainly we need to mark connections for performnce issue, do you ever heard something ...

lukkes

hi Chupaka i hope you can help me (once again :roll: ), when i need to mark upload and download packets i need to make two connection marks ight? one connection mark and packet mark to upload and another one to download? i got a confusion with this.. something like this it's correct? /ip firewall ma...

lukkes

can you post your mangle rules please? i got a confuse with the packets mark, or maybe can you help me my email is lukkes@cantv.net

lukkes

dont understand your question, excuse me

lukkes

first, you should limit route lookup to the routes with that packet-mark: /ip route rule add routing-mark=to_ISP1 action=lookup-only-in-table table=to_ISP1 now your default route from 'main' table won't work for packets with 'to_ISP1' mark then you can simply use 'ping' command via that routing tab...

lukkes

well, the forward chain marks connection based on src-adress-list but the prerouting chains marks packets based on src and dst ports. alos mark some connection to use the connection-bytes but its marked also by src port 80.. any idea?

lukkes

yes it's possible, here in the forum are examples, just search.. activate in bridge "use ip firewall" and test..

lukkes

As an update to all of my earlier posts. I now know a little more about this problem. The issue definitely is that http://www.google.com (and occasionally other Google domains) is cached for 1 week. Once the problem has affected one router, anything that relies on that routers cache is affected bec...

lukkes

Bump. I've been using this, works great, however, does TCP have to be identified in the mangle rules? I'm having a hard time shaping other traffic separately. If I try to use mangle to prioritize port 80 and give other ports a 256k limit, PCQ just stops. In order to shape P2P, I have to use another...

lukkes

this works for me /ip firewall mangle add action=mark-connection chain=forward comment="" disabled=no new-connection-mark=new_conn passthrough=yes protocol=\ tcp src-port=80 add action=mark-packet chain=forward comment="math first 1mb" connection-bytes=0-1000000 connection-mark=c...

lukkes

hmmm, ok understod, thanks, maybe i didn't read well the link, somebody know if i's really needed another lenght more tha 0-80? with the others lenght it catch much traffic, including p2p traffic
thanks

lukkes

Negge, first congratulation, it works good.. i'm trying to modify it to work in my scenario, i just want to know why you use thats packet size for ack? why you did no use 0-80 too? i've read the site that you told but they dont talk about the packets size you used, can you help me? where did you fin...

lukkes

about the limit-at i've tested and woks better if you set limit-at and max-lmit in parent queue, then set a max-limit in a leaf queue but not a limit-at with that config it works as you said, something like a round robin, network can you help me with something? i dont find a definitive way to mark t...

lukkes

hi, congrat for your post it very good, just some remarks, to mark youtube, metacafe and others i use the mark content, i use content=flv, and it catch all the sites with videos, youtube, youporn redtube, googlevideo, dailymotion, etc... also i've read that the piority just work win t limitation, it...

lukkes

use conection-bytes mark. search in this forum

lukkes

maybe netwokpro is talking about the special caracter that appear when the rules are pasted in the terminal, not when added directly in the "+" butto.. just try this. paste the pattern in te terminal and you will see the error, try to add the battlefiel1942 pattern form terminal console...

lukkes

pcc works perfect for me, in the firewall mangle you can see that the packet count it's almost balanced perfect, also in the interface statics. maybe you miss something,

lukkes

hello, i've setup a hotspot in my network the problem is that the hotspot is responding to ARP packets of other hosts, example in my arp table i see 10.19.91.254 max xx.xx.xx.xx.xx.11 it correct but i see too 10.19.91.35 xx.xx.xx.xx.xx.11, i hope you understand my bad english, i'm usin arp=enabled a...

lukkes

Normis, yeah it's simple but very special too, jejej

lukkes

hi everybody, i have some clients conected with NS5 to an mikrotik ap, they both report 100% CCQ but in the tx/rx hw frames the difference is huge 258000/100000 i remember that i've read somewhere that the values must be equal or very close to have a good link, somebody have some experience with thi...

lukkes

yes, i beleive you're right, i was thinking in just to REDIRECT the traffic port 80 to the hotspot machine, but sounds like impossible, i know that it's possible to redirect from mikrotik to external PROXY but i dont knoe if this other scenarios it's possible too, now you or somebody knows or have a...

lukkes

sorry it's yet created but seems that it's really borred, no replies :'(

http://forum.mikrotik.com/viewtopic.php?f=2&t=37652

my clients ip is 10.19.91.1 - 10.19.91.200

10.19.91.254 linux
10.19.91.253 mk hotspot

talk you in the another topic.. thanks

lukkes

sorry, I'm not familiar with Hotspot. try simply dst-nat all port 80 requests to your Hotspot... 'man iptables' =) Thanks Anyway Chupaka, i've try iptables -t nat -I PREROUTING -p tcp --dport 80 -j DNAT --to-destination 10.19.91.253:80 it redirect all 80 traffic to the port 80 of the hotspot but do...

lukkes

Hey Chupaka, i will make you a question off topic, i have a linux server with, squid, dns, dhcp, etc etc etc, i need to publish a temporal logn page, i dont want to replace all my linux box for a mikrotik router yet, but i need a simple hotspo to show the page for a few days, it possible to setup a ...

lukkes

Hi people, I have a linux server working as squid. dhcp, firewall, ntop, squid analizer, etc, etc. my complete WISP solution is working on it, im starting to migrate all but squid to mikrotik, later i will redrect port 80 to my external squid server, but it is another history by now, my question is ...

lukkes

OK acknowledge boss, thanks a lot, my doubt is now clear...

lukkes

Because 'numbers' isn't a valid parameter. Try it without the 'numbers=' part:
Code: Select all
/ip firewall filter disable 1

Thanks for your help, as i told with numbers=0 works perfect, i try with and without numbers= but with parameter 1, and doesnt work

lukkes

hello, as mrz suggest it works perfect, it's the actual way i yet implemented to work, but i just want an easy and direct way, without put a comment. but why doesnt work with 1?

lukkes

hi everybody. this little script works perfect but only with the chain 0 when i try to enable/disable chain 1, doesnt work, i have only two chains in /ip firewall filter, remember WORKS perfect with chain 0 but dont with chain 1 simply doens nothing with chain 1 [admin@router-gelo] > /ip firewal fil...

lukkes

Thanks Chupaka i will try this, now i want to know if i can use action=lookup ? because i´m using 3.30 and not 4.x OS. thanks

lukkes

[admin@MikroTik] > tool traceroute ya.ru max-hops=4 ADDRESS STATUS 1 192.168.16.250 2ms 2ms 10ms 2 192.168.0.200 9ms 10ms 12ms 3 192.168.0.200 6ms 11ms 10ms network unreachable 4 192.168.0.200 14ms 6ms 53ms network unreachable max-hops reached [admin@MikroTik] > /ip route add disabled=no dst-addres...

lukkes

thanks dude, i think the same of you, but in the wiki tak about the passthrough and f is on or off change the match of the rule, maybe somebody has tested, anyway i will try with your help, thanks again

lukkes

Thanks a lot for your answer, i've read alot of times the iki but really dont understand, somebody can explainme detailed how it works, and much better if somebody knows the config for 8 wans? thanks again

lukkes

good nights, i have an rb433ah with hotspot enabled but when a 20 clients is logged then the cpu load gos to 80 - 90% load, and the web browsing goes to slow, is this issue normal? how many hotspot users can handle this board? the routerOs is 3.20, and have no other rules. thanks a lot

lukkes

good morning dudes, i'm balancing wery well with nth 2,1 and nth 1,1 routeros version 3.0, i need to balance 8 wans, how is the correct nth config for 8 wans? thanks

lukkes

ok dude, i will try this thanks

lukkes

hello dudes,

i succesfull redirect the traffic to port 80 from my MT to an external squid proxy server with dst-nat, but when i setu a hotspot t doesnt work, any helps.? thanks

lukkes

you should use per packet and not per session balance

lukkes

ok seems good, but i want to use RB433AH for the powerfull CPU and it doest have cf slot only microsd, have you ever heard about some routerboard that can handle a hard disk?

lukkes

hello forum good night, i want to build a router with hotspot and many features included proxy, i worked with squid on a pc, but i want to use a routerboard to build this router, i buyed a 532a, rb333 and recently a rb433ah, the real questions is? wich device i can use to store the cache? maybe a po...

Search found 177 matches