bamp :S or must i open a new thread?
on 6.47 atm

You upgraded the firmware?

Regards.

Hi, Sorry I didn't get a email notification about your response, anyway yeah I did, on 6.45.1 (stable) currently.

I dont expect this to be solved immediately, it's more of a request to have it added back in as an option, understandably there are more important things to do but if it could be reconsidered, thanks.

So my RouterBOARD 962UiGS-5HacT2HnT power Led now turns off (blue led) after updating to most recent os, any way to keep the power led on but turn the rest off? basically how it originally worked, thought my router died when I saw the leds off and it's harder to tell its on at a glance now :/ Maybe ...

Seems like when an interface, in this case L2TP Client interface, has been disabled for a while or any time really, winbox gives me an error say the interface doesn't exist after attempting to enable it, I will close the error window and try again and it enables without any issues, seems to intermit...

Request for the ability for /users of the addition of a Src. Address list. Example use case, port knocking for allowed dynamic IP via port knocking such as from a phone or any other dynamic public network, using tikapp or winbox/webconsole..etc, with a limited user account group set. Other than writ...

The buffer bloat is pretty bad for a mikrotik, try do a basic setup without any special rules and try again the cpu might dropping packet processing through firewall..etc My results for comparison: https://www.dslreports.com/speedtest/33630812 Even though my latency is high because of distance, no l...

http://www.dslreports.com/speedtest
post results, if possible do one for each device, tik and other the isp router

So I've appeared to have fixed it /ip settings rp-filter=strict turns out this is a bad idea Reverse Path Filtering (and should be set to no), guess the router thought it was being spoofed or something and just dropping packets no wonder my graph looked weird in traffic under the interface it was se...

So I was testing by cutting wifi connection out completely and using a dialed L2TP vpn conneciton on the router and a mangle rule, routes, nat...etc the basic stuff, and its not working either now.... something is actively stopping the routing.... its weird. Firewall rules prehaps? firewall dump bel...

Remove "dst-address=!10.0.0.0/24" from mangle rules and try again?

Sorry for the late reply, just been busy last couple days, But yeah disabling the dst-address does nothing ;/

Ah, now that we see the correct info, things are more clear. In DHCP client, disable add default route so it gets rid of below; http://puu.sh/A8sFG/bcf07a3352.png Leave the below alone, it is a direct connected route and is needed http://puu.sh/A8sUz/621a5e0f0b.png Then create a mangle rule as per ...

This is what I meant: /ip route add gateway=192.168.43.1 routing-mark=WAN add gateway=<ether1 IP address> routing-mark=WAN /ip firewall mangle add action=mark-routing chain=prerouting dst-address=!10.0.0.0/24 \ new-routing-mark=3G passthrough=no src-address=10.0.0.8 add action=mark-routing chain=pr...

Actually, if you are using the router for DNS, disabling all default routes will cause the router to not be able to resolve DNS. Add a route for ether1 with a routing mark and then add another mangle rule for the whole 10.0.0.0/24 with the same routing mark. And then re-enable the add default route...

You need that second route. Try changing your mangle to

Code: Select all

/ip firewall mangle
add action=mark-routing chain=prerouting dst-address=!10.0.0.0/24 \
    new-routing-mark=3G passthrough=no src-address=10.0.0.8

still no change

Post the result of /ip route export [admin@MikroTik] > /ip route export # apr/22/2018 21:17:16 by RouterOS 6.41 # software id = BTCY-AN6D # # model = RouterBOARD 941-2nD # serial number = 5B3205A5E67D /ip route add disabled=yes distance=1 gateway=VPN-C routing-mark=VPN add disabled=yes distance=1 g...

In your dhcp-client, uncheck add default route. Now add your own route. /ip route add gateway=192.168.43.1 routing-mark=3G Assuming the phones hotspot ip is 192.168.43.1. Thanks, however the route is still added even if I set the dhcp-client to say no for default routes. Still having same issues an...

Specify a gateway with IP address instead of interface in your route

Thanks, but did not make a difference

So my isp sometimes has odd issues where local loop latency spike to 2000ms+ on fiber and can last for few minutes to hours, packet loss etc. (hAP Lite, 6.41) So what I have done to help bypass some this is type have my android phone host a hotspot over its cell network, lte/3g..etc. So far I have i...

Why do you want to almost listen for a port knock? I have implemented port knocking successfully and love it! It is all done in the firewall rules, no scripts... whoops think i gave up on this and forgot i started this thread, anyway What I want to do is when I port knock, say its called (kick-on-k...

So I've got it working however, how do i get it do nothing when it cant find "kick-lo" ? :local "address-list" "Knocked-LO" :local "address-list" "Kick-lo" :if ( :if ( [/ip firewall address-list find list=$"Kick-lo" ] = "" ) do={ ...

Good day, So I want to run a script that almost listens(?) for a port knock on the log (yet to be added, if possible) But I'm having problems getting my find comment then remove to work whats wrong with my script? :local "address-list" "Knocked-LO" :local "address-list"...