meaning that add chain=test-out disabled=no rule="if (dst-len>=0) {accept}\r\ will accept everything, right? or dst>=0.0.0.0/0 will match everything? I'm sorry but moving to a totally new concept is confusing. In the documentation there is an example for matching the default route, but not for ...

Hi chechito,

Yes, I think it's needed to do blackroute similar to NULL0 in cisco.
Do you maybe have any input for my question (post above)?
Hope which of those rules will allow anything.
Thanks.

Mikrotik support - helpful as always LOL I dont get why you have to post such unhelpful posts really... I know where I can find the documentation thanks Can you at least tell me if this will allow everything except 10.8.1.0/24? Will rule 2 accept all prefixes sent, or rule 3, or any of those would w...

Can anybody tell me the equivalent to this this super easy filter in 6.4?: add action=accept chain=TEST-in prefix=103.X.X.0/22 prefix-length=22-24 add action=discard chain=TEST-in And this one: add action=reject chain=out-test prefix=10.0.0.0/24 prefix-length=24-32 add action=accept chain=out-test t...

afaik it seems I'm using the newest Winbox version
I don't really care reporting it further, it's reported here. If they don't want to bother, neither will I. Win win I guess.
I found a workaround anyway, this is just another annoying detail on a long list of Mikrotik's annoying details

I have two routers on 6.47, one is CCR 1036 and other one is CHR. When I click on IP - IPSEC - Policy and then plus to add new policy, I get disconnected from the router. This happens from different devices on both routers. Workaround is adding the ipsec policy commands in CLI. Can Mikrotik team che...

You might be right about this. Zabbix or some other open-source monitoring tool certainly comes to mind. What I always liked abut Dude is it can help you navigate through unknown large network environments much easier as you can understand the topology much easier. I tested Dude on my Azure CHR, and...

There basically is no configuration, it's just a blank CHR router where Dude should work out of the box. Anyway, the entire config: /interface ethernet set [ find default-name=ether1 ] disable-running-check=no /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTi...

Thanks for such a helpful answer mate. As I said, it's in PoC concept phase and monitoring is needed, and I did use Dude on large scale in my ISP so I thought it would be helpful here as well. Maybe instead of trying to be smart you can add something useful to the conversation. :) Thanks in advance....

I've installed a Dude server to CHR Mikrotik router in AWS cloud. However, I cannot access it as it gives me 10061 error message - No connection could be made since target machine actively refuse it. I tried with two different instances, with different size, one is the smallest image, second one a m...

Did anybody managed to get GRE tunnels up on AWS CHR? They are dead which never happened in my long Mikrotik history.
I want to implement GRE over IPSEC.

Mikrotik community. So helpful.

Hello, I have a problem with the source IP of ICMP requests. We use BGP and we have a peeering with a default route. When I try to ping google, it will always select BGP peer address as a source IP address. Here is why. Quote: "If we are pinging out across the Internet, the router will select t...

Hi there, Does anyone know what the limit of the routing table is on the CCR1072-1G-8S+ ? For instance, my current HP HSR6602 can have 4 million routes at max. I am looking to replace this HP with possibly the 1072 as BGP router. Hope to hear from you! Chris So you are replacing a 20000$ dollar rou...

Hi, Im trying to replace a Netgear router with Mikrotik CCR. There are three routers connected through ISP MPLS network, using VPLS. I configured static routing, everything is working, all computers can ping, they can use phones... There are 192.168.6.0, 192.168.7.0 and 192.168.8.0 LAN networks, eac...