I can’t upgrade routeros from winbox.
I get “ERROR: could not resolve DNS name” while checking for updates in the packages area.
Also, I cannot ping from the console. I get a timeout when pinging 8.8.8.8, for example.
I have no problems pinging anywhere from a client in the LAN.
Can anyone point me in the direction of fixing this? I don’t like to get too far behind updates. Thanks in advance.
Config:
# model = RBD52G-5HacD2HnD
/interface bridge
add name=Local
/interface wireless
set [ find default-name=wlan1 ] ssid=MikroTik
set [ find default-name=wlan2 ] ssid=MikroTik
/interface list
add name=listLocal
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=192.168.1.50-192.168.1.200
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=Local lease-time=12h name=\
dhcp1
/interface bridge port
add bridge=Local interface=ether2
/ip neighbor discovery-settings
set discover-interface-list=listLocal
/interface list member
add interface=Local list=listLocal
/ip address
add address=192.168.1.1/24 interface=Local network=192.168.1.0
/ip cloud
set update-time=no
/ip dhcp-client
add disabled=no interface=ether1
/ip dhcp-server network
add address=192.168.1.0/24 dns-server=192.168.1.40 gateway=192.168.1.1
/ip firewall address-list
add address=0.0.0.0/8 comment=RFC6890 list=NotPublic
add address=10.0.0.0/8 comment=RFC6890 list=NotPublic
add address=100.64.0.0/10 comment=RFC6890 list=NotPublic
add address=127.0.0.0/8 comment=RFC6890 list=NotPublic
add address=169.254.0.0/16 comment=RFC6890 list=NotPublic
add address=172.16.0.0/12 comment=RFC6890 list=NotPublic
add address=192.0.0.0/24 comment=RFC6890 list=NotPublic
add address=192.0.2.0/24 comment=RFC6890 list=NotPublic
add address=192.168.0.0/16 comment=RFC6890 list=NotPublic
add address=192.88.99.0/24 comment=RFC3068 list=NotPublic
add address=198.18.0.0/15 comment=RFC6890 list=NotPublic
add address=198.51.100.0/24 comment=RFC6890 list=NotPublic
add address=203.0.113.0/24 comment=RFC6890 list=NotPublic
add address=224.0.0.0/4 comment=RFC4601 list=NotPublic
add address=192.168.1.1-192.168.1.254 comment=\
"List of IPs addresses allowed to use the router" list=allowedRange
/ip firewall filter
add action=accept chain=input comment="Allow Local Ips" src-address-list=\
allowedRange
add action=drop chain=input comment="drop all other inputs"
add action=fasttrack-connection chain=forward comment=\
"fast-track for established,related" connection-state=established,related
add action=accept chain=forward comment="accept established,related" \
connection-state=established,related
add action=drop chain=forward comment="Drop Invalid" connection-state=invalid \
log-prefix=invalid
add action=accept chain=forward comment=\
"Allow LAN access to router and Internet" connection-state=new \
in-interface=Local
add action=drop chain=forward comment=\
"drop access to clients behind NAT from WAN" connection-nat-state=!dstnat \
connection-state=new in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=dst-nat chain=dstnat dst-address=!192.168.1.40 dst-port=53 \
in-interface=!ether1 protocol=udp src-address=!192.168.1.40 to-addresses=\
192.168.1.40
add action=dst-nat chain=dstnat dst-address=!192.168.1.40 dst-port=53 \
in-interface=!ether1 protocol=tcp src-address=!192.168.1.40 to-addresses=\
192.168.1.40
add action=masquerade chain=srcnat dst-address=192.168.1.40 dst-port=53 \
protocol=udp src-address=192.168.1.0/24
add action=masquerade chain=srcnat dst-address=192.168.1.40 dst-port=53 \
protocol=tcp src-address=192.168.1.0/24
/ip firewall service-port
set sip disabled=yes
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh port=2200
set api disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=America/New_York
/system package update
set channel=upgrade
/tool mac-server
set allowed-interface-list=listLocal
/tool mac-server mac-winbox
set allowed-interface-list=listLocal
/tool sniffer
set file-name=hellofile
PS: the crazy stuff at the end is for a pi-hole device (192.168.1.40), which actually works very well, at least I think so.