how to run Nighty firewall

RouterOS Scripting
1

Hello If any body know how to to open all ports and stop my firewall from start time from 23:01:00 and run again the firewall again at 10:59:00 I was did that in version 2.8x

for night
/ip firewall rule forward disable [/ip firewall rule forward find comment=day]

and for day

/ip firewall rule forward enable [/ip firewall rule forward find comment=day]

but changed in mikrotik 2.9 didnt worked if any body can tell me how step by step that will help me alot .
Itried this for 2.9 : /ip firewall filter find action=drop] [/ip firewall filter disable 51] for the night
and for the day rules : /ip firewall filter find action=drop] [/ip firewall filter enable 51]

also for the queues I want to make users use unlimited bandwidh from 2 at night till 8 in the morning and back the limitation again .
please help me

thanks
regards

2

alfanet,
probably time option will help you, ‘time’ is available in firewall rules and queues.

3

Please if u can tell me how I can do it with time option that will be nice from u thanks again

4

If any body have idea please help me with this request thanks again

5 
/ip firewall filter set [/ip firewall find comment=day] time=10h1m-23h,sat,fri,thu,wed,tue,mon,sun

–Eric

6

Hello ,
I tried to make time option for night firewall and queue option for firewall to open all port and for shaping also to make all users have unlimited connection and if I can make balance in traffic when some one using internet and heavy download …

thanks

7

Hello,

Sorry by the invonvenience, but i have a little desperate.

I’d need to make filter for a user that could not enter in 172.0.0.0/8 networks.

This is the post related:

http://forum.mikrotik.com/t/trying-not-to-let-pass-to-an-user-group-to-certain-network/11284/1

Txs a lot.

8

Well I’ll try to explain better:

I did this:


Add one rule to chain=forward,
'ip firewall filter add action=jump jump-target=hotspot chain=forward',
set for 'guest' user profile,
'ip hotspot user profile set profile_name incoming-filter=1 outgoing-filter=1', that will redirect current profile traffoc to chain=1.

Add rule to chain 1 to drop traffic with specific dst-address,
'ip firewall filter add chain=1 dst-address=172.0.0.0/8 action=drop'.

And I applied this rule at the user ‘guest’

I did that for locking to the user ‘guest’ couldn’t acceed to 172.0.0.0/8 but as you can see I obtain a drop
But now I would need that the user could redirect to the hotspot home page or to nay error page where the user can be alerted that can not be acceed to the rank
How could I do it?

Many thanks for your help and understanding.