How to disable attempts to reach the cloud?

RouterOS General
1

Model: 2011UiAS
RouterOS v6.33.3

Syslog ‘info’ messages:

2016-08-04 11:16:31 Info: id:dedd rd:1 tc:0 aa:0 qr:0 ra:0 QUERY ‘no error’
2016-08-04 11:16:29 Info: local query: 2 cloud.mikrotik.com. A
2016-08-04 11:16:29 Info: id:3fb3 rd:1 tc:0 aa:0 qr:0 ra:0 QUERY ‘no error’
2016-08-04 11:16:29 Info: — sending udp query to 10.222.0.1:53:
2016-08-04 11:16:29 Info: question: cloud.mikrotik.com:a:IN

I’d like to disable the cloud (we use this switch in our internal office LAN and don’t want it accessing the cloud). I have ‘cloud’ disabled, what is causing the above DNS queries for cloud.mikrotik.com? (I don’t have a DNS server on 10.222.0.1 as I don’t want any LAN devices to actually do anything other than sit there and switch)

[admin@10.222.0.126] > /ip cloud print
ddns-enabled: no
update-time: no

Looking up cloud.mikrotik.com every second
2

I updated to v 6.36 and still see the switch attempting to connect to the Internet.

You may say, just ignore this, but we have ~ 1000 switches deployed, but I am tasked with figuring out why things end up in syslog.

3

You said You disabled cloud. But did You disabled DDNS AND update-time? You can configure a SNTP client on the /system sntp client to keep the date updated.. Leave /ip cloud update-time disabled.

[paternot@Alfandega1] /ip cloud> print
ddns-enabled: no
update-time: no

It got me scratching my head some time too…

4

You can use output chain firewall rules for this.

5

I have NTP local and 'update-time' as well as 'DDNS' not enabled on the switch.

> /system ntp export

aug/05/2016 00:45:43 by RouterOS 6.36

software id = 0J8T-YFFL

/system ntp client
set enabled=yes primary-ntp=10.222.0.1
> /ip cloud print
ddns-enabled: no
update-time: no

6

Run a sniffer and see what it is looking for. Maybe it just wants to resolve the cloud name - even if will not use it.

7

Disable time-zone-autodetect to disable it,

/system clock
set time-zone-autodetect=no