I recently see log errors in my mikrotik :
script error: no such command or directory (body)
I have mikrotik 2.8.22 with hotspot setup .
Also I see in firewall rule hotspot-temp that bytes - packets is growning (for rule : reject access for unauthorized clients).
So I was enable loging for this rule , and I still dont know what is hapening.
Log i say me now something like this:
hotspot-temp->REJECT, in:Local, out:(local), src-mac 00:c0:02:fe:6d:84, prot UDP, 192.168.3.251:20707->192.168.3.10:137, len 78 in 6-Mar 14:42:41.75
192.168.3.10 in my local ethernet card where is hotspot running , on this interface I have 5 hardware wirelles AP connected , 192.168.3.251 is AP Linksys conected to my hotspot.
What this error mean ? Does it mean that somebody try to authenticate - login to my network ?
I see many of this errors and I think that someone try to break to my network … Do I have I right?
UDP Port 137 is a Microsoft NetBios port, and it is normal to have this blocked because it’s often abused by worms.
As for the script error do you have any scheduled scripts? it sounds like there’s a script running with some incorrect syntax in a scheduled script…
yes i already have blocked port 137 and many other … I copy firewall rules from demo.mt.lv .
I also have few scripts … but in scheduler I have enabled only 2 : one is email backup ,and second is export-make-all-scripts - which export some of my setings into .rsc files … this both scripts running every 168 hours , and both is OK.
I see this errors every day … and I realy dont know what they mean.
On these hardware AP is at the moment no regulary hotspot users .
So I suspect that someone try to break to my network.
Anyway , these days I will be change wep key on that AP , and examine log on this AP …
Solved!
errors are made from script - but it come from netwatch tool …
I was setup netwatch to monitor AP and on down to sent me e-mail :
/tool e-mail send to=“admin@fake.com” subject=“192.168.3.2 is down”
body=“192.168.3.2 is down - AP 02”
now Im change without body part , and now i have no errors :
/tool e-mail send to=“admin@fake.com” subject=“192.168.3.2 is down”
Does anbody know what is wrong with my first script?
try to insert '' characher after 'subject=“192.168.3.2 is down” ’
Edgars
Hm !
Now when I was try this my scripts is here
/tool e-mail send to="admin@fake.com" subject="192.168.3.2 is down" \
body="192.168.3.2 is down - AP 02"
Look that is fine now .
Thanks!