Hi!
Today i had 4-8 MBit/s Traffic between my CPE (Mikrotik) and 18.66.18.89 (Amazon Cloud).
Is Mikrotik calling home?
Highly recommend this, also look at your socks proxy as well as users and IP>services lists to make sure they have not been edited, another 'fun' thing is that they will also try and set up some access to the device other than socks so look out for vpn interface you are unsure of or weird firewall rules.Complaining doesnt help, check scripts and scheduler.
Actually, it is. But not to Amazon, rather to IP addresses in Latvia.No.
That doesn't do 4-8Mbps of traffic as described in the first post.Actually, it is. But not to Amazon, rather to IP addresses in Latvia.No.
I implemented some output rules to monitor that and there are regular connects to the upgrade server at 159.148.172.226 and 159.148.147.204.
These are HTTP (port 80) requests where it fetches the latest available version, giving the actually installed version as a parameter.
Some devices do that, others do not, but it is unclear what is the trigger. Certainly not something I can recognize in the config.
(of course in the default config "ip cloud" also calls home, but I disabled that)
True. It normally makes 1 connection per hour with only a few kb of data.That doesn't do 4-8Mbps of traffic as described in the first post.
I believed that as well, but actually devices do call home to check for updates. No idea why and when, but I am sure there is nothing at all configured to do that.And anything else besides timezone detect, update time and ddns doesn't "auto" call home.
Well, of course you can log what happens in the network. Even when an "output" rule cannot be fully trusted, we have many MikroTik routers in a network with a plain Linux box on the edge, and we can (and do) log what connections are made to the MikroTik servers, after initially finding them.I'll repeat, and that is not specific to ROS: closed source software is a blackbox. You are not going to find out if it is phoning home any time. That is a fact.