MikroTik

network99

thanks guys
yes you right
but I have access to mail server

I wanna limit port 25

for example use 5 time port 25 in 1 hour , is it true ?

whats your ideas ?
is it work ?

network99

can you help me to setup ?

network99

hello guys
I have problem with spamhaus, all of my ip blocked in spamhaus
I wanna set rule in firewall to limit 5 Email per hour

how to configuration this rule ?
can you help me ?

network99

I calculated my network MTU size from ping 4.2.2.4 -l 1455 -f and I realized my network MTU is 1455 Some ping programs the length option specifies just the payload data, others the entire packet. For Windows it is the payload, so from that if -l 1455 works and -l 1456 fails the MTU is 20 (IP header...

network99

What are those 6 Bytes on your second calculation ?

PPPoE overhead = 8 Byte / its incorrect and not should calculated ?

network99

I should set ch-mss on interface (all ppp (my user ppooe)) or set ch-mss on interface connected to internet ??

network99

my network :

network99

hello guys good time I calculated my network MTU size from ping 4.2.2.4 -l 1455 -f and I realized my network MTU is 1455 now, I have a question aboute change mss for my users what ch-mss size should I set for PPPoE-client users and IP Route Users ? IP Route : 1455-40 = 1415 is correct ? PPPoE : 1455...

network99

i have layer 2 network and PPPoE Server.

Im gonna to drop one user (modem) by MAC Address, and Im gonna this user cannot connect to my pppoe server.

how to block this user by MAC Address ?

can I Block and Drop any user by MAC ?

how to I do ?

network99

Run

/tool sniffer quick mac-address=mac:add:ress:of:the:user

and wait...

But that will only show you the VLAN, is that enough?

thank you dear sindy

network99

I have 100 vlan's in MikroTik and I setup PPPoE Server on their. im gonna to find one user who is try to connect to my pppoe server and he cant connect ! I have only his mac-address and i see that in log ! can you help me fo find this user ? how to find or how to understand that try from which vlan ...

network99

hello guys good time I have a question about Queue I have 40Mbps Internet Traffic I have 2 site (two class) and in each class, there are 10 pptp users (with address 192.168.90.0/24) total I have 20 pptp users with Dynamic Queue My problem is Queue : (B) Users (class B) doesnt work !! why Queue : (B...

network99

hello guys good time I have a question about Queue I have 40Mbps Internet Traffic I have 2 site (two class) and in each class, there are 10 pptp users (with address 192.168.90.0/24) total I have 20 pptp users with Dynamic Queue My problem is Queue : Users (class B) doesnt work !! why Queue : Users (...

network99

what do you mean with "online" ? I said online that means see connection realtime like torch tools in mikrotik ! whatever the user is doing / seeing ? yes, that right I need to torch my users connection Be aware that the PPTP VPN might not be encrypted, but if the user is visiting https-c...

network99

can you help me ?

network99

Full tls-host value is the same FQDN server name used in browser. E.g. if you're visiting https://www. cisco.com/c/en/us/solutions/design-zone.html , then tls-host will be www. cisco.com. thanks a lot The big problem is that many popular pages include elements from multiple independent servers or e...

network99

hello guys good time I found this code on internet (for detect and mangle specific site) /ip firewall mangle add action=mark-routing chain=prerouting comment=Youtube dst-address-list=YouTube new-routing-mark=VPN passthrough=no add action=mark-routing chain=prerouting comment=Facebook dst-address-lis...

network99

for anonymous and more secure, what is your advice ?

network99

hello guys good time I have a MikroTik routerboard and I have 3 server (VPS Linux and MikroTik) in 3 country ! I need to be anonymous :) wich one of tunnels are safe and anonymous and doesnt encrypt ? I need to : 1. my ISP shouldn't understand that I'm using VPN (for example run tunnel on port 80? o...

network99

Hello guys
good time

can I run tunnel on port 80 or port 443 ?
like : http://www.dotcomunderground.com/blogs/ ... o-hide-ip/
can I ?

I want to my isp doesnt understant that Im using vpn (my isp have MikroTik CCR1036 and they doesnt have firewall)

can you help me ?

network99

can you help me ?

network99

I want to use static and one port (not dynamic)

what I should do ?

network99

thanks all freinds

my problem solved !
problem was mozilla firfox settings

thanks

network99

By default, SSH tunneling is disabled in RouterOS (and so it is in many, if not all, contemporary linux distributions). Hence /ip ssh set forwarding-enabled=local should be the only thing you need to change. EDIT : sorry, I didn't read the page you've posted till the end. For dynamically created po...

network99

Good Morning, Please send us the Config-File (/export hide-sensitive file=somefilename) thank you for your attentions [user@router] > ip ssh print forwarding-enabled: both always-allow-password-login: no strong-crypto: no allow-none-crypto: no host-key-size: 2048 [user@router] /ip socks> print enab...

network99

hello guys good time I want to run ssh tunnel with putty and MikroTk (for test only) I configured that explained there : http://www.dotcomunderground.com/blogs/2008/12/11/putty-ssh-tunnel-to-hide-ip/ but not working ! what things I should config on MikroTik ? for example need to config socks5 or nee...

network99

hello guys
good time

can I limit ssh port for my user ?
for example : I want to my users (ether2 - 192.168.88.0/24) use ssh only 2 times in 24 Hours ?

what I do ?
can you help me ?

network99

hello guys
good time

I want to if everyone try to connect ssh in 5 times, my router deny his/her src address !
how to detect failed and wrong password connection 5 times in 1 minute ?

have you seen

network99

hello guys I have a MikroTik router, one of my users has connected pptp to server 59.51.2.x I need to torch and sniff that network and connection ! (except Wirshark) have you seen devices or software or method to touch and sniff vpn network in the form of RealTime and online ? I need to device or ap...

network99

hello guys good time have you seen windows application or linux application or script to monitor (via icmp ping) and send sms when distination is down ? attention : my GSM-Modem is USB and I can't use Serial Model on PRTG and cacti and another that, you should use serial modem but unfortunatly I ha...

network99

As I wrote before, is not an insult for all, but this is too much vague about malware distribution from your IP-adress "malware distribution" by email? coming "from your IP-adress"??? can some compromised PC send e-mails, from perfectly valid address to perfectly valid addresses...

network99

You should be blocking *everything* by default and then open only strictly necessary ports. Use VPN or LAN interface for management. You will need to do a clean reinstall if its been hacked already. thnaks I don't think the virtual machine is hacked. Most likely one of the VPN users has a virus in ...

network99

I need pop-site A check (ping - lost - latency) 4.2.2.4 and 192.168.1.20 and 172.16.1.20 and send resulte to main pop-site !

can I setup that with cacti ? can I setup that with PRTG ?

network99

hello guys good time have you seen site or script or application to setup proxy ping with mikrotik devices? I have 5 pop-site with MikroTik Devices, I need to check latency and check ping and jitter from that remote devices to another devices for example, please see this picture : https://i.postimg....

network99

yes, I completely agree
i have sent email to Hetzner and I asked detail ...

but I want to know in general what is that I should block in firewall ?

have you seen a list or site that updated and completed ?

thanks for your attention

network99

hello guys good time I have a VPS-Mikrotik in Hetzner Datacenter, for 3rd Hetzner block my ip and says : We received multiple reports about malware distribution from your IP-adress My VPS-Mikrotik is pptp-server and I have 10 ppp-client and 10 users connected from pptp on my server ! What is that I ...

network99

hello guys
good time

can you help me to find update and complete Malicious and Abuse IP List ?
Where to find it ?

best regards

network99

Drops every 2nd packet when user pings to 95.217.228.176: /ip firewall filter add action=drop chain=forward dst-address=95.217.228.176 nth=2,1 thank you Or if you want it less predictable, there's also: random (integer: 1..99; Default: ) - Matches packets randomly with given probability. thank you

network99

Hello guys !

For a specific job, I need generate paket lost on destination 192.168.42.77
when my users ping 192.168.42.77, them see 50% paket lost on this destination ?

do you have a solution ?

network99

Hi guys, I want a script that will find the best frequency Between 5000 to 6000 One of the following methods: method 1 step A. Ping the client radio with 5000 packet size, if replay with =< 10ms, the frequency is good then go to step C step B. save the frequency to freq.rsc file step C. change the r...

network99

hello guys i need a script for log and choice the best frequency between 5000-5900 best frequency = higher bandwidth (test by ap ping with 60000 packet size ) example : loop { } script set frequency 5000 and ping 172.16.1.1 with 60000 packet size if result is ok (host reachable and pinging), then fr...

network99

update

network99

update

network99

thanks,

What is the routerboard model?

CCR1036 ROS 6.44

Also do you want to slow down *all* traffic on this port including local network, or only routed traffic to other subnets and/or the internet?

I triedو it did not work

network99

hello

how to set 20Mb Queue on ether2 ?
( how to limit Port Speed ? )

this config not work !

/queue simple add max-limit=20M/20M name=ether2 queue=default/default target=ether2

please help me

network99

help me

network99

help me

network99

hello all

i have a problem in usermanager !

how can i create a user with a 30-day time limit ?

What is the difference between uptime and validity ؟

best regard

network99

thank a lot

www.youtube.com in my country is filtered by the government
I can not use the dns trick !!!

Please provide a good solution

Please provide a good solution

network99

hello all

i need to all of YouTube IPv4 Ranges for Mark Routing on MikroTik
Find out where ?

Best Regards

network99

hello all i have need script for report log on mikrotik : if user login to mikrotik ( winbox ) = send email ( usernam , ip ) if user connect via telnet or ssh to mikrotik = send email ( usernam , ip ) if user write or remove policy = send email if routerboard rebooted = send email ( router board reb...

network99

please help me

network99

hello all i have a problem to mark routing on www.youtube.com my rule : /ip firewall layer7-protocol add name=YouTube regexp="^.+(youtube).*$" /ip firewall mangle add action=mark-routing chain=prerouting layer7-protocol=YouTube \ new-routing-mark=vpn passthrough=no /ip route add distance=1...

network99

helll all i have a problem : on CPE router PPPoE-Client is stablished , but CPE router try to reconnect pppoe-connection !!!! PPPoE-Client Router https://pictr.com/images/2018/07/30/3CjiA.jpg PPPoE-Server Log https://pictr.com/images/2018/07/30/3CCI6.jpg https://pictr.com/images/2018/07/30/3CA2D.jpg

network99

update

network99

network99

help me

network99

please help

network99

please help me

network99

hello all im not english , excuse me i have question : What is the best way to share pptp connection ? /ip firewall mangle add action=mark-routing chain=prerouting dst-address-list=MyServer new-routing-mark=pptp passthrough=no src-address=192.168.1.0/24 or /ip firewall mangle add action=mark-connect...

network99

hello all
im not english , excuse me

i have a need script for export all dynamic queue that max limit is 16Mb , export to .txt file

thank a lot

network99

Refresh

network99

please guide me

network99

/ppp active {:foreach t1 in=[find name=pppoe-winuser] do={remove name=$t1}} /ppp active {:foreach t2 in=[find name=pppoe-winuser-1] do={remove $t2}} /ppp active {:foreach t3 in=[find name=pppoe-winuser-2] do={remove $t3}} /ppp active {:foreach t4 in=[find name=pppoe-winuser-3] do={remove $t4}} i ne...

network99

Possibly. I'm trying to think of a legit use of all zeroes as a MAC and I don't know of one. Hopefully someone knows. To me that looks like some kind of a DDoS attack on that subnet. I would sniff it. If a machine is sending out gratuitous arps with all zeroes for all addresses in the subnet, then ...

network99

Hi all

i use RouterBOARD 941-2nD for Local Network
my mac table is full of 00:00:00:00:00:00 MAC addresses ,
where is the problem from ?
Has my router been hacked?

network99

please guide me

network99

Hi all i have SXT Lite 5 ( ROS 6.41.1 ) cpu usage is always 100% I upgraded Firmware & ROS [admin@RB] > export # feb/19/2018 10:27:45 by RouterOS 6.41.1 # software id = UR11-SVAL # # model = SXT 5nD r2 # serial number = 46AD046AD0 /interface bridge add fast-forward=no mtu=1500 name=bridge1 proto...

network99

Refresh

network99

Hello I'm using CCR1036 for clients authentication ( ROS v6.29.1 ) When the connection of my users weakens or 1 second is losst , two connections are made exmaple : <pppoe-winuser> <pppoe-winuser-1> <pppoe-winuser-2> <pppoe-winuser-3> and more ..... The router does not Disconnect the old connection ...

network99

refresh

network99

refresh

network99

You can Ping 8.8.8.8 My Resualt : G:\>mturoute www.google.com * ICMP Fragmentation is not permitted. * * Speed optimization is enabled. * * Maximum payload is 10000 bytes. * - ICMP payload of 1472 bytes is too big. + ICMP payload of 92 bytes succeeded. + ICMP payload of 782 bytes succeeded. + ICMP ...

network99

The MTU of the PPPoE clients should be 8 bytes less than the parent interface. Assuming the parent interface is truly 1500 MTU via Ethernet then the PPPoE interface should have an MTU of 1492. http://baturin.org/tools/encapcalc/ My Resualt : G:\>mturoute www.google.com * ICMP Fragmentation is not p...

network99

please guide me ...

network99

Ping from end user using different packet size thanks for the reply Which IP address should I have ping ? ( Router ? DNS Server ? one hop after router ? ) If your client is a Mikrotik, leave all your pppoe settings to default: you can see in pppoe connection the mtu valute that the system have set....

network99

Firewall rules should be unneeded. There is no roll in the firewall ! ( no filter - no NAT ) Set the MTU values on the appropriate interfaces Do you mean interfaces? I have set 1500 of all interface ( example : ether2 - 1500MTU ) and allow ICMP messages related to path MTU discovery to pass correct...

network99

hello guys i'm not english man , sorry ! for change users MTU , Which rulls to use ? ( input , output or forward ? ) Source ? Destination ? Once created, the rule for the Source (172.16.14.10) and Once created, the rule for the Dest(172.16.14.10) /ip firewall mangle add chain=forward disabled=yes sr...

network99

hello guys i'm not english man , sorry ! my users is low speed my bandwidth : 20Mbps my download speed : 20Mbps speed of page load : 4Mbps !!!!!!!!!!!!!!!!! speed of mobile app : 1Mbps !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ( example : WhatsApp , Instagram , Telegram and .... ) speed of remote applica...

network99

please guide me ...

network99

ip firewall mangle add chain=forward in-interface=ether1 (out-interface=ether1) action=mark-connection new-connection-mark=in-eth1 add chain=forward connection-mark=in-ether1 action=mark-packet new-packet-mark=in-eth1-pack That's a good idea ! But Mangle uses the processor and memory ( When traffic...

network99

please guide me

network99

I think that you want to limit the amount of new SSL OR Telnet connections to a maximum of 5 new sessions every 60 seconds. Is this what you are asking? Well done that's right /ip firewall filter add action=accept chain=forward connection-state=new dst-port=22,23 limit=5/1m,5:packet protocol=tcp sr...

network99

stoser wrote:
I think that you want to limit the amount of new SSL OR Telnet connections to a maximum of 5 new sessions every 60 seconds. Is this what you are asking?

Well done

thats right !

network99

[quote="network99"]hello all im not english , excuse me i have a PPPoE Server ( ccr1030 ) my user lease public ip via pool all my pppoe users have a DNS Problem !!! 2-3 minute reslove all domain an view all website , 5 minute not resolve domain if users set DNS Server on NIC Card : Problem...

network99

hello all

how to rate limit on interfaces ?
no QUEUEU an rate limit by ip address !

thanks a lot

network99

help me

network99

You have to drop all unwanted incoming packets from Internet generally.

how to detect unwanted incoming packets in firewall ?
are you means : connections state ?

network99

hello all

my network 82.15.xx.0/24

i have need drop all DNS request from Internet to my network !

that's mean :

Internet ( udp 53 Request ) -----> 82.15.xx.0/24 ---Drop
82.15.xx.0/24 -----> Internet ( udp 53 Request ) ---Allow

thanks

network99

I am in need of the Rule : My users do not have connect to servers via telnet and ssh more than 5 connections in 1 minute ! that's mean : 192.168.88.2 ssh--> 53.75.51.x = allow 192.168.88.2 ssh--> 43.25.12.x = allow 192.168.88.2 ssh--> 38.12.88.x = allow 192.168.88.2 ssh--> 13.35.21.x = allow 192.16...

Search found 90 matches