Hi, On a hypothetical reset of my router (i.e. reset button on device) due to locking myself out of the device (and no access to via mac address, because mac server is disabled), is it possible to restore the cloud backup that was previously uploaded? Is the device ID still the same as before so the...

Hi, Here is my script, which is very similar than the above, but maybe for some people slightly more clear since no use of variables and no code duplication. :if ([:len [/system backup cloud find status="ok"] ]=1) do={ :put "Removing old backup file..." /system backup cloud print...

Thanks. I think I got it now. I'm also using RAW, however only for early dropping packets, not to mark as notrack.

Oops my mistake. Thanks for the hint. Would you mind explaining why an untracked connection should not be fasttracked? Is it because an untracked connection cannot be fasttracked because it is not tracked by definition? Does it even have an effect to mark untracked as fasttrack? Would that somehow m...

@msatter thanks, so i got it right.

Regarding untracked, I took the rule from here: https://help.mikrotik.com/docs/display/ ... d+Firewall

So does that mean that the packets I see hitting the fasttrack rule are only the packets that are needed form time-to-time to check if the the connection is still valid?

Thank you for the clarification. I guess everything is alright then. Probably i misunderstood fasttrack. So it seems fasttrack has no effect on filter rules but only on connection tracking.

HI all, I have my 2 first foward firewall filter rules as follows: /ip firewall add action=fasttrack-connection chain=forward connection-state=established,related,untracked add action=accept chain=forward connection-state=established,related,untracked I see a lot of packets falling through fasttrack...

Thanks! I was not aware of that config. But yes, what you describe sounds extremely buggy.
BTW: Do you know what 'Keep User Configuration' means in Reset Configuration? What is the purpose of keeping the user config when resetting? Not sure if I got it right.

@pe1chl, I agree. Maybe they could at least propose a reset with subsequent execution of a script, so basically a reset that would factory reset everything except a specific location on the disk where those scripts can be placed to before reset. After the reset ROS could check the presence of a file...

Could we maybe get a response from Mikrotik? In my opinion a backup should only contain the current state, or in other words: old data should really be removed instead of just setting a removed flag, not only for backups but in general. In my specific case I put e-mail config from my personal gmail ...

Maybe you will find the answer here viewtopic.php?t=160552

Thank you! I will continue asking my questions on that thread. This one can be closed.

Hi all, I'm currently running on ROS 6.48.5 LTS. Just out of curiosity i opened my last backup file created with /system backup and i noticed that there are still old e-mail accounts/passwords from /tool email contained in that file. Thos e-mail settings are not used anymore and should have been ove...

Thank you @sindy et al.. The bridge for myself is more or less clear now, however for beginners it is really hard to grasp the bridge concept. @anav: I see the bridge also as a 'connection' between the vlan interface (not port) and the switch. So if i have a vlan interface i want to allow only tagge...

Hi, Just applied the upgrade. Why is the multicast package missing? I have to use IGMP Proxy and now it's not available. EDIT: I had to re-download the multicast package included in all_packages.zip, then applied it and everything back to normal. If I remember right the last time I did an upgrade I ...

For the time being I will install avahi on a Raspberry Pi, however I would really like to have a mDNS proxy feature available in RouterOS. Some clients (seems like MacOS needs it for the scanner of my MFP) need mDNS in order function properly, so it's just nonsense to say that there is no use for it...

Hi @pcunite ! Thanks for this comprehensive guide. Really helped me a lot in order to understand vlans and also to correctly config my MT :). I have a question regarding VLAN security : There is also an ingress filtering/frame-type setting on the bridge itself, however it seems you did not configure...

Hi all, Sorry for the late reply. I now tested now 2frogs' solution. Indeed the problem was that my fw filter rules did not include accept 'related,established' forward connections. After including them, everything works as expected. Thanks 2frogs and everybody else for your help, much appreciated! ...

HI all, I've got a MikroTik CRS326-24G-2S+RM behind my ISP router. The ISP router cannot be set to bridge mode, only DMZ mode where all incoming traffic to the WAN interface of the isp router is forwarded to the Mikrotik router WAN interface. So far so good, everything works. However as soon as I ac...