MikroTik

SpongeB0B

Thank you @mkx !

no, on this machine I run just only a reverse Proxy, Si i guess I will go for HAproxy.
Can we "easily" reverseproxy website who are running on HTTPS ? (wordpress for exemple)

SpongeB0B

..I do use HaProxy (free, fast) for multiple servers/cameras etc on my inside network. HaProxy can rederect/load balance use HTTPS +++ For example config, just ask, and I will give you a minimum config. finally I have the time to take care of this.. I tried with my DDNS providers (dynu.com) But I d...

SpongeB0B

Good to hear you resolved the issue. For future reference, the traffic between 2 IP addresses belonging to the same bridge and same subnet does NOT go through the firewall as it is a Layer-3 firewall (unless you have enabled the use-ip-firewall option under /interface bridge settings). Thank you ve...

SpongeB0B

Hi everyone, Little update, I've spend few hours to test everything's, I tried also with different routers (DD-wrt, OpenWRT, Stock D-Link and Stock Asus) So I don't experience this Unstoppable DSTNAT anymore, it might be the WP server itself, for what I read and experienced changing the domain or IP...

SpongeB0B

Hi Sob, yes I do see https://192.168.0.X:54321 in browser's address bar... damn so it's the server ! damn why is doing this ? and why he is not doing it when connect directly to it.. so weird.

SpongeB0B

Thank sob, but actually I try the opposite. So first from outside (wan side) this redirection was working (almost as I had the bug with the image not showing) but still trying to figure where is the problem coming with that. the redirection was outside :54321 to inside :443 so the port for the HTTPS...

SpongeB0B

Thank @Sob, So how can you explain when I plug my self (RJ45) directly to the host computer it's work (same IP) but when passing by the router not ! So I don't think it is WordPress or Browser issue but router, is doesn't contain any kind of creative module that would do anything not told it to do b...

SpongeB0B

@msatter, The router is not ok, Within the LAN side the router is not set to redirect anything (only if coming from WAN) furthermore the dstnat rules is disabled -> https://i.imgur.com/KB1F464.png and more the redirection point me the the outside port ! (dst-port and not the correct one ~"trans...

SpongeB0B

Damn

! it's the router !
I just connected directly to the machine who host the WordPress. and it work , no redirection...

Any ideas ? before I trow that piece of #@#*! in the trash ?

SpongeB0B

# aug/21/2019 17:07:40 by RouterOS 6.40.9 # software id = D4LD-IJ8C # # model = RB750Gr3 # serial number = xxxxxxxxxxxxx /interface ethernet set [ find default-name=ether2 ] name=ether2-master set [ find default-name=ether3 ] master-port=ether2-master set [ find default-name=ether4 ] master-port=et...

SpongeB0B

Hi everyone, Few days ago I put in place a /ip firewall nat (dstnat) in order to reach a local hosted WP. So that dstnat was working. but I encounter problem witrh the WP itself (or might be the router finally) See: https://wordpress.org/support/topic/no-images-display-from-www/ Here my "dstnat...

SpongeB0B

@Sindy Thbank you for your answer, yes I need to use the /ip dhcp-server option

Who do you get 0xc0a81301c0a82101 from 192.168.19.1 & 192.168.33.1 ?

Thank you

SpongeB0B

Yes, I found ! the 6 work ! but the client receive only one DNS IP
Did you know how to pass the client two IP's ? (aka the Preferred and the Alternate )

SpongeB0B

Hi everyone,

I would like for a DHCP client to give it a specific DNS , so trough the DHCP server: Options.

Which code/tag is it for the DNS ?
https://www.iana.org/assignments/bootp- ... ters.xhtml

The 6 or 15 ? Thank you.

SpongeB0B

Hello everyone, I would to block one device to communicate outside my Lan. So I Just created the rule number 5 0 chain=forward action=passthrough 1 chain=forward action=accept ipsec-policy=in,ipsec 2 chain=forward action=accept ipsec-policy=out,ipsec 3 chain=forward action=fasttrack-connection conne...

SpongeB0B

Hi everyone, I've setup my SNTP client and it look that it's working fine. https://i.imgur.com/qy8yKlS.jpg but when I do /log print I only see the line where I changed the configuration of the SNTP 20:37:48 system,info SNTP client configuration changed by you but not when the system check/correct th...

SpongeB0B

Hi everyone, is it normal that by default I have two srcnat ?? -> 0 ;;; defconf: masquerade chain=srcnat action=masquerade out-interface-list=WAN ipsec-policy=out,none 1 chain=srcnat action=masquerade out-interface=ether1 Is the rule 1 is not enough by her own ? meaning can I delete the rule 0 ? (I ...

SpongeB0B

OK, but by default Port 2 to 5 are switched together, but without wireless and port 1 (aka WAN) right ?

port 3,4,5 are slave of Port 2 and therefore this is switched correct ?

SpongeB0B

I wanted to be sure that it was the same thing because it has two different name in the WebFig and in the online help.

SpongeB0B

Thank you for the information,

But is it possible and how ?

SpongeB0B

Thank you very much @pe1chl for your extensive answer ! I have stopped already those services, but I would like to close also all the remaining ports from the firewall. I guess I will do this: chain=input action=accept connection-state=established,related chain=input action=drop connection-state=inv...

SpongeB0B

Thank you @pe1chl ! The "dynamic" rules are inserted automatically You mean they are default rules or it might happen that in the futur appear other Dynamic rules ? if yes how are they generated ? The 3rd change is not required, everything is already dropped by default. If I'm not mistaken...

SpongeB0B

Hi everyone, I'm currently setup my first MikroTik router (Hex: RB750Gr3) I have read all the chapter about the firewall but still certain thing are unclear... What are Dynamic rules ? and what is this rule ? /ip firewall filter print dynamic Flags: X - disabled, I - invalid, D - dynamic 0 D ;;; spe...

SpongeB0B

Hi everyone, I edited one of my firewall filter trough the WebFig and the WebFig add un-needed command (in red) (I just paste the needed filter (number 2) /ip firewall filter print chain input 2 ;;; defconf: accept ICMP chain=input action=accept protocol=icmp in-interface=ether2-master log=no log-pr...

SpongeB0B

OK, but by default Port 2 to 5 are switched together, but without wireless and port 1 (aka WAN) right ?

port 3,4,5 are slave of Port 2 and therefore this is switched correct ?

SpongeB0B

Is MikroTik is planning an offline program to read .rif files ?

SpongeB0B

Hi everyone,

Is the Tools\Btest Server

What we can read here : https://wiki.mikrotik.com/wiki/Manual:Tools/Speed_Test

?? Confused

SpongeB0B

Hi Everyone, I just reset my RB750Gr3 and on the first page : 192.168.88.1/webfig/ I can see Bridge All LAN Ports what it is meaning ? By default ports cannot communicate between them ? or it bridge port one to the rest ? I couldn't find the info on https://wiki.mikrotik.com/wiki/Manual:TOC or on th...

SpongeB0B

I've discover an interesting solution , by the DNS record of the DDNS service (that not resources consuming) I believe that if you have multiple websites behind a router, access to each website would require different ports through the router, one for each address. I think you'd have to set up your ...

SpongeB0B

Thank you @ingdaka for the moment the isp router is in router mode (but I'll change this in a near futur and only my Gr3 will "route")

SpongeB0B

Hi everyone, I have two Virtual Machine inside the computer A. https://i.imgur.com/JxXZqbB.png I would like the outside people be able to reach one hosted website on the VM1 Is there any possibility inside the RouterOS to redirect the traffic according the URL ? I'm using a Dynamic DNS ( VM1.DDNS.co...

SpongeB0B

Hi everyone,

Is there any books, online tutorial (not video) where we can learn everything's about the Router OS ?

Thank you,
Bob

SpongeB0B

Hi everyone,

I would like to enable the service www-ssl but to do so I need to generated a self sign certificate. how can I do that ?

Thank you.

SpongeB0B

Hi everyone,

I see in the default DHCP server , in the interface column ether2-master

So did only the port 2 will receive DHCP lease ? or do the ports 3,4,5 are bridged to the 2 ? where can I see this setup ?

Thank you

SpongeB0B

Thank you @vilpalu

so 0.0.0.0 by default in ROS many any IP correct ?

But If I let that as □ 0.0.0.0 (unchecked) it mean that all IP incoming dst IP will be accepted. how can I define the current ISP IP ?

SpongeB0B

Hi everyone,

I would like to change the default DHCP server set in my Hex router.

I would like to

change the network 192.168.88.0/24 to for example 192.168.92.0/24
have reserved DHCP IP for specific MAC addressee

Is this possible with the ROS ?

SpongeB0B

Hi everyone, I would like to create a port forwarding (From my external IP (ISP) to my internal network) I read this page https://wiki.mikrotik.com/wiki/Manual:Initial_Configuration#Static_configuration https://wiki.mikrotik.com/images/3/35/Dst-nat.png So this bring two questions : My Dst adresse is...

SpongeB0B

Thank you @normis
Yes I just need FTP client functionality. Let say I would like to use this server NTP.example.com

So I can let the first Primary NTP server as 0.0.0.0 ?

SpongeB0B

HI everyone,

I just bought a Hex (RB750Gr3) I would like to get the time for this device trough NTP.

I see SNTP but no NTP, I dig inside the online manual but couldn't ound how to enable/install a NTP client..

Thanks B0B

Search found 39 matches

Re: Forward DNS/web site to a local IP

Re: Forward DNS/web site to a local IP

Re: Unstopable DSTNAT

Re: Unstopable DSTNAT

Re: Unstopable DSTNAT

Re: Unstopable DSTNAT

Re: Unstopable DSTNAT

Re: Unstopable DSTNAT

Re: Unstopable DSTNAT

Re: Unstopable DSTNAT

Unstopable DSTNAT

Re: DHCP server: Options

Re: DHCP server: Options

DHCP server: Options

Blocking one device to communicate outside.

Where are the log about the SNTP ?

Default NAT

Re: What mean : Bridge All LAN Ports [SOLVED]

Re: Tools\ Btest Server

Re: Edit a firewall filter [SOLVED]

Re: Trying to understand the firewall workflow in MikroTik

Re: Trying to understand the firewall workflow in MikroTik

Trying to understand the firewall workflow in MikroTik

Edit a firewall filter [SOLVED]

Re: What mean : Bridge All LAN Ports [SOLVED]

Re: Supout.rif reader available

Tools\ Btest Server

What mean : Bridge All LAN Ports [SOLVED]

Re: Forward DNS/web site to a local IP

Re: Forward DNS/web site to a local IP

Forward DNS/web site to a local IP

Where found good documentations, tutorials

where find a good tutorial for the certificates

Default config, ether2-Master what is the master ?

Re: Firewall\Nat port forward

DHCP server, reserved IP

Firewall\Nat port forward

Re: Enable NTP Client [SOLVED]

Enable NTP Client [SOLVED]