My ISP ( WiLogic ) uses MikroTik Routers and without a doubt..

My ISP ( WiLogic ) uses MikroTik Routers and without a doubt.. my router has been compromised.
I took my time and gathered substantial indications some of which could easily be referred to irrefutable
evidence.. I had only been using their service about 5 months and when I contacted them to get the
credentials to login to the Routers Admin Settings I was told they do not give that information out to
customers, due to something about “Proprietary Software”.

What can I do?? Any Ideas?

I don’t really want to drop them but will if I have to.

Any suggestions / help of most any sort much much Appreciated!!!



JT,
Private Label Collection

Call the Police if its a criminal matter.

The router is your or is WiLogic property?

I’m also a WISP and the credentials to access to OUR main router/CPE loaned for FREE to customer are reserved.
The customer can not go inside the CPE to change any parameter. Must call the office and free of charge is made what is need (if it is possible).
Inside the house, the customer have it’s OWN AP, and can change SSID, password, frequencies, etc. without call us.

CPE, Im gonna be sick!!
Dont you offer the option for the OP to use his own router - provide an IP address etc…
I mean Europeans are naturally friendly (mediterranean ones at least) but holding on to your customers testicles is a step to far.

No, no checks, if they need something feasible, we’ll do it. No user is so experienced as to manage a CPE without problems.
We also make mistakes sometimes, let alone the customers.
And then we want to give a service that works, 99% of the time that someone who is not in the trade (or works at other WISPs) gets their hands on it,
messes up, disconnects from the network, you have to go and fix it, and then complains that the service is not working.

We want the CPE to always work, without the user tampering with it.

If necessary, we separately provide a Router where the public IP rented to the customer is attested, then the customer can get there,
but without breaking the balls at the CPE.
If the client want, can use it’s own router, on this case.

This time I’m forced to use Google Translate, I hope done well his job.

Nope well explained and reasonable. For some people this seems to be a good option, I just cant fathom it, but thats my issue.

Hello johnt6421,

The Mikrotik routers we supply are controlled and managed exclusively by WiLogic and we do not allow anyone outside of our immediate technical staff access to them. We set them up by default in NAT mode with a basic firewall set up for the convenience of the customer. If you need a wifi ssid or key changed or port forwarding set up we do that at no charge; just call us and we can set that up for you.

Also, for those who want to have their own router (so they have complete control), we encourage it. Just plug your own router into the LAN port of the router we supplied and set it to acquire an IP address automatically and it should just work. Then you have complete control over your own router.

re: the mikrotik being compromised; Are you saying the router was compromised or the WiFi password?

Contact our technical support and tell them specifically that you believe the router has been compromised and we will investigate immediately. We don’t believe it has been..but I never say never and will check it out.

–WiLogic, Inc.

Hey wilogic, So If I use your router and not mine that is preconfigured, and I use IPCLOUD will it show me the same public IP as I am getting on the supplied router?
Or is the supplied device already getting a private IP (behind another wilogic router and then attached to a mode,). What I am getting at is
There will be NAT on the supplied Router, is that the ONLY NAT in the way??

What if there was a special user available that had access to WebFig but with a “barebones” skin? Then all they can do is look at the logs to help support and add port-forward rules and nothing else.

Who cares?
If you want manage your own router the way you want … I do not write about yours routers avav but about routers/AP deliverd by ISPs … just buy proper service: public IP + direct connection to the Internet. If you do not want to hassle yourself, you buy simple easy-nobrain-nohassle-letsomeonetakecarewhenihaveproblems service but then do not complain of lacking possibilities If you want to tinker.

Who cares what you think about my question.
I am curious as to how these setups work, because it appears many folks seem to use that sort of thing and then I understand better the config when assisting.
The llama has no off button, we can go all day and night :slight_smile:

Please … be more polite … some could get tired of your “LOLing”, “ROTFLing” and other quite impolite/unpolite (choose the one you want) comments.

Please instruct newbie how to write topics and titles, instead of broken the balls to who help free of charge giving his free time…

You quote the preceding posts again and again … no hope to educate you
http://forum.mikrotik.com/t/networking-education/48954/9

Sometime is for make a “screenshot” where often original post are changed and what are wroted appear different…

The clue is the word “sometimes” .. if sometimeas is not “usually” or “almost all the time” it’s not a problem but if you see 20 post long discussion which consists of several levels nested quotes … it is nosens.


Please instruct newbie how to write topics and titles, instead of broken the balls to who help free of charge giving his free time…

According to your whish If you want comment this answer please treat it as teaching morethan2000post old newbie how to write posts. Free of charge.

No, please don’t be offended, I don’t want to offend you, I’m sorry.
I thought we were just exchanging opinions as between friends.
But if you put it this way I apologize because I didn’t want to be offensive to you, you don’t deserve it.

We have a different way of solving this issue. We give all of our customers full access to their MikroTik routers. If they mess something up that screws up their service, we reserve the right to require them to factory reset the router using the physical reset button to restore it to proper service. Upon doing this, the router will apply our default config instead of the MikroTik default config and we will have access to it again.

Nice mducharme, that seems a very reasonable compromise.
Its a model some should aspire too.

That is a great solution! I am interested how you achieve this on reset-button. Tell it to run a script and point to a config .rsc or backup file after reboot? Why havnt I thought of this before?! Save some time and grief lol