MikroTik

diamuxin

The fasttrack rule does not exist in the default configuration (you have to create it), it is not clear to me in which position it should go. If you follow advice by @pe1chl, you'll place it as the very first rule in chain=forward, above this rule: filter add chain=forward action=accept connection-...

diamuxin

You can display the defconf using: /system/default-configuration/print The fasttrack rule does not exist in the default configuration (you have to create it), it is not clear to me in which position it should go. /ipv6 firewall { > address-list add list=bad_ipv6 address=::/128 comment="defconf...

diamuxin

Hi, What is the position of Fasttrack rules in the IPv6 firewall? /ipv6 firewall filter add action=fasttrack-connection chain=forward comment="Enable FastTracked v6 traffic" connection-state=established,related add action=accept chain=forward comment="accept established,related,untrac...

diamuxin

diamuxin

This is how you help others, explaining the why of things, so we all learn.

Thanks @tarasfilatov

diamuxin

Sorry, timeout is 3m20s. I see with the VMping program that a few packets or a few dozen are lost, but they appear within the specified time, and netwatch is still able to execute the script. # TYPE HOST PORT TIMEOUT INTERVAL STATUS SINCE 0 icmp 10.14.1.16 80 3m20s 4m up 2024-12-31 01:02:43 Test as...

diamuxin

Miguel,

The CLOUDFLARE list is locked in RAW?

/ip firewall raw
add action=drop chain=prerouting src-address-list=CLOUDFLARE

thx.

diamuxin

Compatible with both IPv4, IPv6 and survives reboots. A 1d interval scheduler is enough. https://gist.github.com/miguelangel-nubla/137fea6653a3d612ca66cd7f8ea7edb6 This is based on someone else script I used for long time, can't find source. Please let me know to give credit. Very useful, thanks.

diamuxin

If you don't publish the content of your script, it will be difficult for them to help you.

diamuxin

can be saved also as json... Now with v7 better use also serialize/deserialize with json Yes, I have tried (for academic purposes) the possibility of using JSON from Netwatch, but I have had no luck, if I try to write (:serialize) from a Netwatch script window, I get the typical error: “executing s...

diamuxin

duplicate

diamuxin

Yes, but It seems more complicated and bloats log, also log has limit so there is a chance that record can be lost for reading. ROS config is easy to create for tmpfs mount, eg. to create on /tmp path: /disk add media-interface=none media-sharing=no slot=tmp tmpfs-max-size=1M type=tmpfs Files store...

diamuxin

The problem is the misleading name: "global" is a user session. ideal => actual :global => <NOT EXIST>, but a file content in store, json, or parameters in layer7 and similar can be used for store simple values. <user> => :global <MISLEADING NAME> <session> => :local at the script start :...

diamuxin

OK, thanks Rex
Molto cordiali.

PS: I do not understand how after so many years Mikrotik has not solved the problem of a “super-admin” user not being able to work with global variables or execute scripts from Netwatch or from the DHCP Client/Server. Too bad.

diamuxin

dont-require-permissions=yes

I tried it, it doesn't work either

Thx.

diamuxin

I am aware that Netwatch UP/Down/Test scripts do not work with global variables and that it can only run scripts with the "read, write, test and reboot" policies, I have created a Netwatch task and a system script. Netwatch Task /tool netwatch add disabled=no down-script=":log warning...

diamuxin

A way to simplify it a little, similar to the last problem, break the logic into two modular parts: { :local bridHost [/interface/bridge/host/print as-value] :local arpTable [/ip/arp/print as-value] :local iFace "*no interface*" # The following MACs are for testing purposes: # :local macA...

diamuxin

Hi folks. In the following code snippet, it does not work when the MAC address does not exist in the Bridge Host table or ARP table to extract the corresponding interface. Where is the error? { :local bridHost [/interface/bridge/host/print as-value] :local arpTable [/ip/arp/print as-value] :local iF...

diamuxin

Might be better to start a new thread to work on your scripts, but in the interest of good spirit.

It works correctly, thank you.

You are right, I should have opened a new post, sorry.

diamuxin

Hi! @excession could you please help me? In the following code snippet, it does not work when the MAC address does not exist in the Bridge Host table, it gives me an empty result, I should see *NOT AVAILABLE*. If the MAC address does exist it reports your interface correctly. Where is the error? Tha...

diamuxin

off-topic.

diamuxin

Updated 16-10-24 Code above is updated, now sorts by IP address! I'm sure my sorting method is horrific, please do chime in if you can tidy it up / make 1000% better by re-writing it. Hi, Could your script be adapted to get some data from the DHCP-Server/Leases screen only? I need to list the hosts...

diamuxin

Very useful your script, thank you!

BR.

diamuxin

no color in the logs ( only black ).

+1

diamuxin

So, it seems to be a bug affecting “ether1” as I have tested that port as POE=Off and the same thing happens again. Edit: I have downgraded to version 7.15.3 and still the same problem: “ether1 link down” -> “ether1 link up” -> “ether1 link down” ...etc. Any solution from Support ? I've got an HAP ...

diamuxin

I have downgraded to version 7.15.3 and still the same problem That is not an answer to the question above. Did you upgrade from 7.15.3 to 7.16 or did you try 7.16x versions in between? (beta,rc) There have been changes to PoE and they affect the programming of a PoE controller, downgrading does no...

diamuxin

I have downgraded to version 7.15.3 and still the same problem

diamuxin

So, it seems to be a bug affecting “ether1” as I have tested that port as POE=Off and the same thing happens again.

Edit: I have downgraded to version 7.15.3 and still the same problem: “ether1 link down” -> “ether1 link up” -> “ether1 link down” ...etc. Any solution from Support ?

diamuxin

Hi, I have an ax3 and behind it powered by POE (from ether1) an ax2 is connected. Since I have upgraded both devices to 7.16 there is a continuous error on ax3 “ether1 link down” -> “ether1 link up” -> “ether1 link down” and so it repeats continuously. Any idea where the problem comes from? Thanks.

diamuxin

Hi friends, How can I get the status of an interface (of a external CAP unit) from CAPsMAN (running, not running or cac)? For example, I have tried this way but it is not possible: :put [/interface/wifi/get [find name=5G-Salon] value-name=state] input does not match any value of value-name Thanks.

diamuxin

First, create this script/function so that it is always available as a global variable. :global human do={ :if ([:typeof $1]="nothing") do={ :error "must provide a byte value to humanize" } :local input [:tonum $1] :if ([:typeof $input]!="num") do={ :error "cannot ...

diamuxin

Bravo Rex! (as always)

diamuxin

any solution?

diamuxin

With the latest beta (7.15beta9), I now get this new message all the time when disconnecting (peer with resolver checked)

back-to-home-vpn: [peer19] CHWCHPuLuweWVZkq3r2HynUP59yxk3GsMX4i9XamAQw=: Handshake for peer did not complete after 20 attempts, giving up

diamuxin

Please use the code tag, to avoid Cool smile face when posting code pre formatted.
Key </>

OK

diamuxin

I need the unit to be days. Try: # rextended's function (thanks Master) # Convert uptime to seconds :global timetoseconds do={ :local inTime $1 :local wPos [:find $inTime "w" -1] :local dPos [:find $inTime "d" -1] :local itLen [:find $inTime "." -1] ; :if ([:typeof $it...

diamuxin

/system routerboard wps-button
set enabled=yes on-event=":if ([system leds settings get all-leds-off] = \"never\") do={\r\
    \n/system leds settings set all-leds-off=immediate \r\
    \n} else={\r\
    \n/system leds settings set all-leds-off=never \r\
    \n}"

diamuxin

Thanks Rex, it works fine.

diamuxin

Hi ! Please, how could a counter be added to know the number of files that the cycle is going to delete? { :global datetime2epoch /system clock :local now [$datetime2epoch ("$[get date] $[get time]")] :local wait 2592000 ; # seconds, 1 month :local fdate 0 :local countFiles /file :foreach ...

diamuxin

{
/ip cloud
:local ipv4 [get public-address]
:local ipv6 [get public-address-ipv6]
:put $ipv4
:put $ipv6
}

diamuxin

:global currentIP :local newIP [/ip address get [find interface="ether1"] address] :set newIP [:pick $newIP 0 [:find $newIP "/" -1]] :if ($newIP != $currentIP) do={ :put [/ip firewall/address-list/add list=wan_ip address=$newIP dynamic=yes] :put "ip address $currentIP chang...

diamuxin

Version 7.15 will include WireGuard peer functionality "responder". Then you will be able to mark your peer as "responder". Then the peer will not spam your log, if you enable this option manually.

Great news!
Thank you very very much.

diamuxin

of course this is expected behavior. people finally need to stop thinking of wireguard being just another server / client vpn software, which gives up after x unsuccessful connection attempts; it is not! once a peer has learned a peer's remote address, it will try to establish a connection indefini...

diamuxin

WireGuard fix solves an issue where RouterOS was trying to connect to peers which have not been used yet and there is no known endpoint-address. WireGuard is a bidirectional tunnel. Once you connect peer, it knows "last remote endpoint" information and tries to connect to it. Fix solved t...

diamuxin

We can compare the configs, just in case: Thanks for sharing: My roadwarrior configuration: /interface wireguard add comment="vpn: roadwarrior" listen-port=54321 mtu=1420 name=wg-rw /interface wireguard peers add allowed-address=<redacted>.30.2/32 comment="My Mobile" interface=w...

diamuxin

Nope, I don't...
Just tested, deliberately.
That is why I am actually wondering, maybe some specific config setting is involved.

Maybe, let's wait and see if someone from the staff can enlighten us.
Thx.

diamuxin

Must be something config specific, I do use wireguard for road-warrior setup and I have 0 such logs.
I don't use or have BTH though.

Try to connect with road-warrior and when you disconnect you will see that the handshak messages start coming out, this started since the first versions of 7.13.

diamuxin

Idem...

With the latest update 7.14.1 the logging problems with the handshake have NOT been solved, both in the wireguard road-warrior links and with BTH.

BR.

diamuxin

Mr. Support, with the latest update 7.14.1 the logging problems with the handshake have NOT been solved, both in the wireguard road-warrior links and with BTH. https://i.postimg.cc/kg0MwDQq/image.png 1. I have connected with the RW, I navigate a little bit and when I disconnect, the messages in the ...

diamuxin

Missing "routeros" directory: https://upgrade.mikrotik.com/routeros/7.14.1/CHANGELOG Hi, Access to CHANGELOG information via CLI does not work: [admin@MikroTik] > :put ([/tool fetch "https://upgrade.mikrotik.com/7.14.1/CHANGELOG" output=user as-value] -> "data") failur...

diamuxin

Hi,

Access to CHANGELOG information via CLI does not work:

[admin@MikroTik] > :put ([/tool fetch "https://upgrade.mikrotik.com/7.14.1/CHANGELOG" output=user as-value] -> "data")
failure: Fetch failed with status 404

Thx.

diamuxin

I send the backup files directly to my FTP server located on my NAS. e.g. /tool fetch address=$ftpserver mode=ftp user=$username password=$password \ src-path=$backupfilename dst-path=$backupfilename upload=yes port=$port; The data is declared in local variables at the beginning of the script. By Te...

diamuxin

That a passive peer (without endpoint) constantly tries to perform a handshake, transmitting data to nothing, just because it has a 0.0.0.0.0/0 in the allowed address, which is what is happening. This behavior is irregular, and is a bug to be fixed. SOLVED in 7.15beta6 *) wireguard - do not attempt...

diamuxin

You seem to be contradicting yourself. Which one is it? I am not contradicting myself (if you had tried it you would understand). I keep insisting that it makes no sense for the passive peer without endpoint to constantly try to handshake, it's a debugging problem not a wireguard interface problem....

diamuxin

Wireguard behavior is not the problem.
The all of a sudden excessive logging is.
This is debug and by default it should be off.
Same with dns, ntp, dhcp... I've seen it all pass by.

Exactly, I think the same.

diamuxin

+1 is very, very annoying especially with road-warrior type wireguard connections. Disable wireguard logging and stop bitching. That a passive peer (without endpoint) constantly tries to perform a handshake, transmitting data to nothing, just because it has a 0.0.0.0.0/0 in the allowed address, whi...

diamuxin

Handshake for peer did not complete after 5 seconds, retrying (try 2) Handshake for peer did not complete after 5 seconds, retrying (try 2) Handshake for peer did not complete after 5 seconds, retrying (try 2) +1, the same by me +1 is very, very annoying especially with road-warrior type wireguard ...

diamuxin

Another simpler method, for RouterOS 7.10+ versions for backup, sending files to an ftp server, local deletion of files and telegram notification. # ------------------ # Function: Telegram # ------------------ :global tgFunc do={ :do { :local BotToken "XXXXXXXXXX:XXXXXXXXXXXX-XXXXXXXXXXXXXXXXXX...

diamuxin

The idea of the script is to take backup with the name of the identity and the current date automatically, so just pasting it on a computer and scheduling a schedule would be guaranteed the copy. I hope you like it and find it useful. I also accept comments to make modifications and see if we can i...

diamuxin

I tried to apply this script to CRS with OS version 7.12, but the script sent all the last logs that appeared in CRS and did not select what was written in :local mkwd What do you think is the cause? Run the script from CLI (between {...}) and check if it dumps any errors, the script works fine for...

diamuxin

Can I search for content within a file? /ip firewall address-list :foreach id in=[find list=servers] do={ :local ipAddr [:toip [get $id address]] :local filenameIP "servers100.txt" /file :if ([:len [find where name="flash" and type="disk"]] = 1) do={:set filenameIP &quo...

diamuxin

Hi, I have this script that exports the IP addresses of this list to a file. /ip firewall address-list :foreach id in=[find list=servers] do={ :local ipAddr [:toip [get $id address]] :local filenameIP "servers100.txt" /file :if ([:len [find where name="flash" and type="disk&...

diamuxin

Bad news

We will miss your very good scripts (especially your functions) thanks to them I have been able to learn a little more every day.
Thanks for your contribution to the Mikrotik universe.

Best regards.

diamuxin

I have tried the script you've mentioned with the today released 7.14beta8 version - it still does not work. Is there a possibility to debug a script to see where the error occurs? So far I just removed the "nolog" parameter but the only thing I get is Starting import of address-list: spa...

diamuxin

Can multiple results be stored in the same file? Is HTTP or FTP okay? Or can it only be FTP? Can you provide some sample scripts? 1) Yes, you can save several results in the same file: see example in my previous post. 2) I have only tested it by FTP and it works. 3) Example of script using FTP # FT...

diamuxin

Thank you for your script example, but this is not what I want. My script loop will produce some results, and my main purpose is to save these results to a file because saving to a file can prevent sudden power outages from time to time. Besides/file set, is there any other good way? I store my sen...

diamuxin

/system clock :local dt "$[get date] $[get time]" :local filename "datetime.txt" /file :if ([:len [find where name="flash" and type="disk"]] = 1) do={:set filename "flash/$filename"} :if ([:len [find where name=$filename]] = 0) do={print file="...

diamuxin

The script I'm using is as per below I've only altered the Bot ID and ChatID. I'm not getting an error so much as the output has been warped as per my last post I get a download link to the telegram API with my BOTID, The message I'm supposed to get is appended at the end aka "Login failure fo...

diamuxin

Hi folks I hate to ask you but this seems to be the right place, have any of you for some weird reason updated to RouterOS V7.13? I did it against my better judgment and now LogFilter is broken The Logfilter works on another router I have around and it worked on here until I updated from RouterOS 7...

diamuxin

False... and define what is "latest versions" for you. uff I can't get used to those manners ;-) but I like him... My answer is based on my own experience (when switching to 7.13) and that's why I wanted to help, nothing more. At the time it didn't work with "mode=https" and swi...

diamuxin

With the latest versions of RouterOS the "fetch" command does not work https anymore.

Try this: (Something similar happened to me with a script)

/tool fetch mode=https \

# change to:

/tool fetch mode=http \

diamuxin

Ok, thanks.

diamuxin

do you have a persistent-keepalive configured? that may trigger that log msg also, maybe the logging became more verbose. means, the message always has "been there" but never popped up in the log. cannot verify a) Persistent-keepalive is not configured. b) With "fetch" new messa...

diamuxin

Hi, When installing the latest beta 7.14beta4 I got these messages on a wireguard road warrior connection, with the stable 7.13 (and earlier) it didn't happen: wg-rw: XN58CdM6ppiSQpDaQT0bh1IMYgUP0czYYY92N1IBwE3c=: Handshake for peer did not complete after 5 seconds, retrying (try 2). When I connect ...

diamuxin

Very interesting.. Thanks.

diamuxin

+1 It would be interesting if we could change the permissions of the *sys user assigned internally to the Netwatch tool, Scheduler or IP DHCP-Server script , for example to allow "policy" to be able to read the content of global variables created by admin or other users. This would make th...

diamuxin

Code: Select all
/system logging
set 0 disabled=yes
add topics=info,!fetch
I just edited default info rule. Is it correct?

Yes.
You have already added it in the new rule

diamuxin

Hmmm... all my fetch scripts works well without ftp policy. WDIDW?

Also how to disable this new fetch logging?

/system logging
set 0 disabled=yes
add topics=info,!fetch

diamuxin

I have several scripts like these (they serve to telegram alert temperature and voltage etc. of the LTE modem) and they no longer work: Try with: :global temp2 :global url "https://192.168.5.2:8443/json.htm?username=mE&ghy&l&password=dGMntyhju&type=command&param=udevice&...

diamuxin

is enabled. I get this from the logs: fetch,info,debug Download from https://api.telegram.org/bot42558852236:AAR_pTRe0CjksgfdydhdncbvfdtY4/sendMessage to RAM FAILED: Fetch failed with status 400 My Telegram script works fine in v7.13 :global tgFunc do={ :do { :local BotToken "XXXXXXXXX:XXXXXXX...

diamuxin

Very interesting...

diamuxin

If after this you do not understand it open a support ticket with Mikrotik. @diamuxin, you are correct ... I did not fully comprehend the meaning of your comment " You have to delete (uninstall) the existing packages except the "routeros" package, then do the downgrade ." Please...

diamuxin

My CCR1009 shows under /system/packages routeros wireless I do not see a match under 7.12.1 in the archive Plus why would CCR1009 load a wireless package ? I have explained it to you several times but you don't want to understand. https://forum.mikrotik.com/viewtopic.php?t=202423#p1042842 v7.12.1 P...

diamuxin

What process did you follow? 1st step is copy file routeros-7.12.1-tile.npk to Files except I renamed the file like you suggested routeros 2nd step is via terminal issue /system/package/downgrade This did not work The procedure that is outlined in the MikroTiK Docs as follows also did not work for ...

diamuxin

httpS

OK, thx

diamuxin

Hi diamuxin
Your suggested fix did not work for me ...

I did it with an RB4011 and it worked for me.

What process did you follow?

diamuxin

they may have changed the address.
> :put ([/tool fetch url="http://upgrade.mikrotik.com/routeros/NEWESTa7.stable" as-value output=user]->"data")
7.13 1702545848

thanks a lot!!

diamuxin

I'm still using the script version that extracts the date from change log, not the URL. Seem to be still working just fine. At the moment. But MT could change that too. This is the change: [ ] > :put ([/tool fetch url="http://upgrade.mikrotik.com/routeros/NEWEST a 7.stable" as-value outpu...

diamuxin

Use httpS MikroTik is changing the urls for the new v7.10+ versions and also for latest v6: Long term: https://upgrade.mikrotik.com//routeros/NEWEST7.long-term (at time I write: "0.0 \r \n" no long-term version) Stable: https://upgrade.mikrotik.com//routeros/NEWEST7.stable (at time I writ...

diamuxin

And still. You HAVE to pass 7.12 or 7.12.1 before you can go up. Maybe I have not explained well, it is not about upgrading, my version before upgrading to 7.13 was version 7.12.1 that I know, that web address I use in some of my scripts to know the last available version 7.X and its upgrade date i...

diamuxin

It should report: 7.13 and epoch date: 1702542240 approx. I suspect that URL was used by RouterOS itself to check for new versions. Now that they mandate the 7.12.x to be an intermediate stop on the upgrade path to 7.13 and newer, I believe they introduced a new URL, and the old one will point to t...

diamuxin

Dear Staff, on hAP ac^2 (and lower) with v7.13 equipment the RAM memory available is ridiculous, 128 MB -> 26 or 28 MB available. I think you should improve the wireless packages so that they don't consume so much.

..

diamuxin

on my CCR1009 After upgrade to 7.13 from 7.12.1 when I attempt to downgrade back to 7.12.1 the downgrade fails. Log file shows omitting package system-7.12.1: newer package system-7.13 is already installed I tried 2 methods for the downgrade 1. via terminal 2. via Packages Both return the same resu...

diamuxin

AFAIK it will only report 7.12.1 if your current version is below 7.12.1. This is because else the update to 7.13 will likely fail. It makes no sense what you say, if I consult that web address (I use it in my scripts) it has to inform you which is the latest stable version that Mikrotik has, just ...

diamuxin

Hi, follow this error:

[ ] > :put ([/tool fetch url="https://upgrade.mikrotik.com/routeros/NEWEST7.stable" as-value output=user]->"data")
7.12.1 1700221125

It should report: 7.13 and epoch date: 1702542240 approx.

diamuxin

In the Netwatch?

# Netwatch (Host tab)
Host: 8.8.8.8
Type: simple
Interval: 00:05:00 
Timeout: 1.00

# Netwatch (Test tab)
:local HOST $host
:local HostStatus [/tool netwatch get value-name=status [find host=$HOST]]
:if ($HostStatus="down") do={/system reboot}

diamuxin

small note outside the version. . . hap ax2 if it had at least USB2 (better USB3.X) it would be an ideal small device and I think its sales would increase several times. . . This way we have ac2 with USB but little storage space and limited RAM, and ax2 without USB but with lots of RAM and enough s...

diamuxin

Hi all! I have the same problem with script on CHR after upgrade :( Download from https://antifilter.download/list/ip.lst to <nothing> FINISHED Download from https://antifilter.download/list/ip.lst to RAM FAILED: Fetch failed with status 206 What can i do with this? https://en.wikipedia.org/wiki/Li...

diamuxin

Hi all! I have the same problem with script on CHR after upgrade :( Download from https://antifilter.download/list/ip.lst to <nothing> FINISHED Download from https://antifilter.download/list/ip.lst to RAM FAILED: Fetch failed with status 206 What can i do with this? The fetch command has incorporat...

diamuxin

+1, report the same error: - fetch with ipv4 url are automatically "translated" into ipv6 by being prefixed with "::ffff:" - This results in either host unreachable or data content = null Had to roll back to 7.12.1 Indeed that is the problem, you have explained it better than me...

diamuxin

This AM i upgraded my CCR1009 from version 7.12.1 to version 7.13 now getting the following error when running a script Download from https://view.sentinel.turris.cz/greylist-data/greylist-latest.csv to RAM FAILED: Fetch failed with status 206 The same script was working fine under 7.12.1 and earli...

diamuxin

Hi friends,

In my script this sequence failed:

[ ] > :put ([/tool fetch url="https://upgrade.mikrotik.com/routeros/NEWEST7.stable" as-value output=user]->"data")
7.12.1 1700221125

It should report: 7.13 and epoch date: 1702542240 approx.

diamuxin

Thank you very much Sertik and Amm0 for your help.

By the way Amm0, your site is very useful:
https://observablehq.com/@a2m0/utf2rsc#decodeStart

BR.

diamuxin

Hi, I would like to know if it is possible based on this code, to insert two (or three) Unicode symbols in a text to send to Telegram, a single symbol if it works fine. # Function $tgFunc by @diamuxin :global tgFunc do={ :local BotToken "XXXXXXXXX:XXXXXXXXXXXX-XXXXXXXXXXXXXXXXXX" :local Ch...

diamuxin

I'm not sure if the ConnectTimeout command is supported as there is no mention of it here - https://wiki.mikrotik.com/wiki/Manual:System/SSH_client However if it is supported, would this work? /system ssh-exec connecttimeout=20 address=192.168.88.10 user=root command="shutdown now" This c...

diamuxin

the
Code: Select all
/delay 30s
doesn't seem to work ?

/delay 30s

Change it to:

:delay 30s

diamuxin

Good, thanks!

diamuxin

OK, thanks for the tip @Amm0.

BR.

diamuxin

Sorry, but after several tests I have already discovered the solution.

{
/interface list
add name=ListB

:delay 1s

/interface/list/member
:foreach i in=[find where ((interface~"ospf") and (list~"ListA"))] do={
    set $i list="ListB"
}
}

diamuxin

Hi, could you help me with this? It may be silly but I don't know what I'm missing... I want to change the "interface list" of a number of interfaces that contain the word "ospf" and replace ListA with the new ListB. [ ] > interface/list/member pr Columns: LIST, INTERFACE # LIST ...

diamuxin

Hi Tangent,

thanks for your reply.

but i using NAS Synology as FTP Server. There is no Syslog features

I have syslog enabled on the Synology NAS, it is an application called Log Center (Centro de registros in spanish) and it works correctly receiving information from all my mikrotik devices.

diamuxin

I was surprised that /user active request-logout is undocumented. Also it's not a request :lol: This one uses the date too. Apparently force logging out a user requires reboot permission for this script to work. It works fine but the active session via Winbox does not disconnect, it only disconnect...

diamuxin

viewtopic.php?p=994781&hilit=unixnow#p992073

diamuxin

Here is my implementation of update script P.S. If somebody want to see code of functions and telegram script used in this script - reply and I'll show you. Very useful your script, thanks. Could you share your $FuncStatus function? A tip: It is not necessary to end each line of code with " ; ...

diamuxin

ChatGPT search: "mikrotik scripting replace character".

Response:

:regsub ???

diamuxin

Example of noip script without global variables (simpler). # Data to be modified :local noipuser "username" :local noippass "MyStr0ngPassWoRd!" :local noiphost "mydomain.sytes.net" # From now on, do not modify :local cIP [/ip cloud get public-address] :if ([:resolve $no...

diamuxin

Ok I understand. The data comes from computers INSIDE my LAN. They are not external data. I'm careful with that evidently,
But thanks for the advice.

diamuxin

The data used is for learning use only.

diamuxin

For convert x|y|z on one array of 3 elements, two way are simpler: first replace inside the string all | with , and use :toarray or use a "while" until you do not process the string from the start to the end and create a new string inside the array fore each | and the last at the end of t...

diamuxin

Thank you all for your advice.

BR.

diamuxin

Is just an example for a little complex string, if the fields are more, a cycle is better... What would be the way to do it without pick? I have tried as an array but only "the comma" works as a separator between values. The vertical bar does not work. { :local test [:toarray "081234...

diamuxin

diamuxin

A little difficult but with your excellent explanation I understand.
Thank you magister!

diamuxin

{ :local test "081234567890|West Java|John Due" :put [:pick $test 0 [:find $test "|" -1] ] :put [:pick $test ([:find $test "|" -1] + 1) [:find $test "|" [:find $test "|" -1]] ] :put [:pick $test ([:find $test "|" [:find $test "|"...

diamuxin

Another way to do it (based on @rextended functions) :global unixtodatetime do={ :local ux [:tonum $1] :local Fzerofill do={:return [:pick (100 + $1) 1 3]} :local prMntDays [:toarray "0,0,31,59,90,120,151,181,212,243,273,304,334"] :local vgmt [:tonum [/system clock get gmt-offset]]; :if ($...

diamuxin

Sorry about that. Changelogs are fixed now.

It's perfect now, thank you very much.

BR.

diamuxin

In the following link (which I use in my scripts) the correct content of the Changelog is not updated, it only reports the previous version 7.12rc1 Use the correct URLs... https://forum.mikrotik.com/viewtopic.php?t=200103#p1030161 https://upgrade.mikrotik.com//routeros/NEWEST7.testing 7.12rc2 16974...

diamuxin

In the following link (which I use in my scripts) the correct content of the Changelog is not updated, it only reports the previous version 7.12rc1 https://upgrade.mikrotik.com/routeros/ 7.12rc2 /CHANGELOG Please, can you check it? What's new in 7.12rc1 (2023-Oct-05 08:46): Changes in this release: ...

diamuxin

I use Visual Studio Code with the "RouterOS Syntax Highlighting" extension installed.

diamuxin

And about [/system clock get gmt-offset], the correct way to use it is how is used inside my script... (until mikrotik do not fix something...) OK, very helpful { :local vgmt [/system clock get gmt-offset] :if ($vgmt > 0x7FFFFFFF) do={:set vgmt ($vgmt - 0x100000000)} :if ($vgmt < 0) do={:set vgmt (...

diamuxin

Now I understand, it's because of the time difference in my country: GMT +2 (summer time). My router is set like this. Thanks. Possible fix?: :local currEpoch :if ([/system clock get gmt-offset] = 7200) do={ # Summer time. GMT Offset +02:00 :set currEpoch ([$datetime2epoch [/system/package get [find...

diamuxin

Hi @rextended, I have detected a small discrepancy: the EPOCH calculations performed by MikroTik are different from the calculations performed by your $datetime2epoch function, what do you think? :global datetime2epoch do={ :local dtime [:tostr $1] /system clock :local cyear [get date] ; :if ($cyear...

diamuxin

OK, thanks.

diamuxin

Much better this way. Nice! One question: Is it only applicable to the "stable" version? https://upgrade.mikrotik.com/routeros/LATEST.7 I have another script to control the "testing" version (I use the extraction of the build date from the changelog), do you know if it is possibl...

diamuxin

This way, I have tested it and it works OK. I hope it helps. The $datetime2epoch and $date2ymd functions should already be in memory. /system package update; check-for-updates without-paging as-value; :delay 3s :global datetime2epoch :global date2ymd :local LatestVer [get latest-version] :local Stat...

diamuxin

I think the script is not well designed. In this part: :if ($DSR <= $DaysToWait) do={ :log info "~~~~~~~~~ New RouterOS release is out for $DSR so NOT updating this device until release has been out for $DaysToWait days ~~~~~~~~~~~~~~~~" :set $DaysSinceRelease $newdays; /file set "Day...

diamuxin

:local A [$datetime2epoch "2023-09-30 16:55"] 1696085700 :local B [$datetime2epoch "2023-08-31 16:55"] 1693493700 Result: A - B / 86400 = 30 days Note: The converter to change the Changelog date to the MT date can be found at: https://forum.mikrotik.com/viewtopic.php?t=200103#p1...

diamuxin

Trouble is the date format in the changelog is different than that in the router "2023-Aug-31 16:55" has to be converted to "2023-08-31 16:55" found a script from @rextended to convert to epoch to do the math but even that does not like the "Aug" format. the datetime2e...

diamuxin

With this script I have the same error: "invalid internal item number". It works on a hAP ac^2 and does not work on a RB4011. Both with v7.11.2. :local output :local filename :local sysname [/system identity get name] :set filename ($"sysname"."-"."Leases.txt"...

diamuxin

I think I have found the solution, before the next local variable in the code of @rextended https://forum.mikrotik.com/viewtopic.php?p=1029048#p994849 :local yyyy [:pick $vdate ($vdoff->0) ($vdoff->1)] ; :if (((($yyyyy - 1968) % 4) = 0) do={:set ($arrm->1) -1; :set ($arrm->2) 30} Add this code snipp...

diamuxin

There would be a solution to get the build date: /system package update :local latest [get latest-version] :local changeLog ([/tool fetch "http://upgrade.mikrotik.com/routeros/$latest/CHANGELOG" output=user as-value] -> "data") :local dateEx [:pick $changeLog ([:find $changeLog &...

diamuxin

Hi Rex ! For your super-function "datetime2epoch" how could we adapt the following date? 2023-Aug-31 16:55 It is to extract the date from a changelog that comes with a somewhat peculiar format (Mikrotik has not yet unified the dates to ISO 8601). What's new in 7.11.2 ( 2023-Aug-31 16:55 ):...

diamuxin

that also returns the build date? When executing the command: :put [/system/package/update/ get] channel=stable;installed-version=7.11.2;latest-version=7.11.2;status=System is already up to date No compilation date available, I have only seen it in the changelog itself: What's new in 7.11.2 ( 2023-...

diamuxin

I have a function that converts the version to a numerical value: https://git.eworm.de/cgit/routeros-scripts/tree/global-functions.rsc?id=9069f71ee6168a651fd42f90b7aea309fefa260b#n1269 [admin@MikroTik] > :put [ $VersionToNum 7.9 ] 118095616 [admin@MikroTik] > :put [ $VersionToNum 7.10beta5 ] 118120...

diamuxin

try requesting 2 times with a delay
:local latest [/system package update get latest-version]
:delay 1
:set latest [/system package update get latest-version]
sometimes it returns empty value or check for empty value

Ok thanks, this way it seems that it has not given error again.

diamuxin

Hi, I have created this script to inform me about new testing versions, but sometimes I get an error: failure: closing connection: <404 Not Found> 159.148.172.226:80 (4) And sometimes it works fine. Do you see any error in the code? thanks. :global prev "" :local ch [/system package update...

diamuxin

Indeed, follow-strict does not add any thing different than print already do. It might be interesting to replace it with a option to limited the number of lines shown, beginning from last. follow-last=10 -> shows the last ten lines (.id) from the otherwise printed text. See here for an example for ...

diamuxin

A great masterclass!
Thank you very much for helping me to understand it.

BR.

diamuxin

So, to keep it short, if I just want to get information about a specific command, for example "/ip/firewall", it would be something like this? :put [/console/inspect as-value request=syntax path="/ip/firewall/"] I've tried it and it doesn't work Can you give me an example please?...

diamuxin

/console/inspect - this is an "easter egg" – but I have an partial example of usage here: https://forum.mikrotik.com/viewtopic.php?t=175564&hilit=%2Fconsole%2Finspect#p966543 Hi @Amm0, Is it possible to dump the command list (/console/inspect) in a file for future reference? Thanks.

diamuxin

Rex, In the tests you have performed and from what you have opened the other thread in the General forum, how did you create the user *sys ? it would be like the linux "root" user, right ? You tell me that the DHCP-Server script uses this *sys user, so if you have the highest rights, why d...

diamuxin

Thanks Rex, for your escalation of this issue.

BR.

diamuxin

Hi, I have found a solution to the problem of using the ssh-exec command from the lease script tab of the dhcp-server since it seems that from this part it does not use the RSA keys assigned to the administrator user (possible bug?). 1. Create a Scheduler task with the following content: (runs with ...

diamuxin

Apparently nothing wrong...
Probably dhcp script have less right than "normal script"...

Maybe you are right Rex, that it is a problem of execution permissions when it involves executing a command on another mikrotik (via SSH with RSA keys).

Thanks.

diamuxin

Hi, I am trying this script to report each lease of my DHCP server (RB4011) but there is some problem in the "ether4" part as I don't get the AP information. :if ($leaseBound = 1) do={ :do { /ip dhcp-server lease :local Comment [get value-name=comment number=[find address=$leaseActIP]] /in...

diamuxin

I am not running pppoe client. My ether2 is WAN. Where do you get the WAN IP? Check IP > DHCP-Client to see if "ether2" appears. Try: :if ([/ping 1.1.1.1 count=6] = 0) do={/ip dhcp-client release [find interface=ether2]} :delay 2s :if ([/ping 1.1.1.1 count=6] = 0) do={/ip dhcp-client rene...

diamuxin

Something like this might work for you. { :if ([/ping 8.8.8.8 interval=500ms count=10]<8) do={ :log error "Warning: no internet connection. Reconnecting..."; # Reset WAN interface. e.g. "pppoe-out1" interface /interface/pppoe-client/disable 0 :delay 5s /interface/pppoe-client/ena...

diamuxin

share your backup script so they can help you...

diamuxin

how to set text in the telegram message as BOLD FONT in the script??? In your code: :local emessage ($thisbox . " !!!_POWER is UP_!!! - current voltage is: " . [:pick $voltage 0 2] . "." . [:pick $voltage 2 3]) use HTML code for bold type: <b>text</b> Example: :local emessage ($...

diamuxin

usually that error is firewall problem, try allowing UDP "5246,5247" on input chain on your bidge side and see if fixes it on v.7.11

But CAPSMAN has always worked fine with v7.10 without the need to open ports 5246 and 5247, I understand that internally CAPSMAN already enables them.

diamuxin

Hi,

Issues with CAPSMAN on a RB4011 router, error type "removing stale connection". Back to version v7.10 and OK.

BR.

diamuxin

Simpler script without using so many global variables. /system health :local tempSystem [:tonum ([get [find where name=temperature]]->"value")] :local voltSystem ([get [find where name=voltage]]->"value") :local tempMax 55 :local voltMin 20 # Check Temperature :if ($tempSystem >=...

diamuxin

I am now trying to run this same script on the latest firmware (7.10.2) and it is not running at all.
Where I have problem?

change this:

:local voltage [/system health get voltage]

by:

:local voltage [/system health get [find name=voltage] value]

diamuxin

Hello!

Is it possible to create a script for wireguard type roadwarrior to disconnect the vpn when it has been inactive for more than X minutes?

BR.

diamuxin

You don't need a complex script to switch from ISP1 to ISP2 and vice versa, with a simple Failover with recursive routes you have it solved, I have it (Fiber + LTE) and it works very well. Luck.

diamuxin

Failover (WAN Backup)
https://help.mikrotik.com/docs/pages/vi ... d=26476608

diamuxin

According to error code 100005 it corresponds to "ERROR_FORMAT_ERROR". Also, the date format you have is the one before v7.10 (aug/09/2023). I would try a version >=v7.10 where the date comes with the international ISO 8601 format (2023-08-09) which matches the date format of the Huawei mo...

diamuxin

Hi, I have RouterOS v7.10 and it works correctly both ways: @diamuxin :global sendSMS do={ # Example: # :put [$sendSMS lteIP="192.168.8.1" phone="+34XXXXXXXXX" sms="test sms via lte api"] :local lteIP "192.168.8.1" :global tokenParser # get SessionID and Token...

diamuxin

I solved the speed problem...

Fake24 aggregator, now is really fast...

This script, what does it really do?
can you give an example to understand it? thanks.

diamuxin

Full version of the @rextended script:

viewtopic.php?t=191520#p1010947

BR.

diamuxin

New TIP: Change DHCP server IP address range (modem) to be able to configure a single IP for the Mikrotik DHCP client. 1. Run the following script to create the global variable dhcpSMS . 2. From the Terminal type: :put [$dhcpSMS lteIP="192.168.8.1" startIP="192.168.8.100" endIP=...

diamuxin

Using third-party applications or scripts linked into the MikroTik RouterOS, it is possible to send MikroTik alerts through WhatsApp. This increases the effectiveness of network administration and monitoring by allowing administrators to simply receive important information on their cellphones. ano...

diamuxin

I think that's right, isn't it?
On the moment I can not test it, but apparently it is correct...

Works OK.

The local variables $userinside and $intinside I have eliminated them because I have not seen any use in the script.

Thanks.

diamuxin

This script save the last checked log for start from that point instead to elaborate all list everytime: https://forum.mikrotik.com/viewtopic.php?p=1004552#p1004546 I think that's right, isn't it? # Check if exist drop firewall rule and add /ip firewall raw :if ([:len [find where src-address-list=&...

diamuxin

Is this?

viewtopic.php?p=929454&hilit=login+failure#p929454

And once the ip of the variable "$ipinside" is blocked in the address list, how can I delete all the lines in the log that contain that IP?

diamuxin

Is this?

viewtopic.php?p=929454&hilit=login+failure#p929454

EDIT:
Can you add it to your post "✂ Rextended Fragments of Snippets"?
so it doesn't get lost!!! hehe

diamuxin

I read somewhere on the forum a similar script already working.

OK, I will look for it

diamuxin

Hi, I have had several attempts to access from the same IP in the Local Network 192.168.1.134 and to all the services of the router (ssh, telnet and ftp), luckily it has not been able to access since I changed user and password at the time. 07-05 13:10:54 system,error,critical login failure for user...

diamuxin

Oh, very complete. Thanks Rex!!
Happy summer!

diamuxin

Hi @rextended, Since the release of ROS v7.10 the date changed to 2023-07-02 format. So this function should change the months array, right? Would it be something like this? /system clock :local strDate [get date] :local intYear [:pick $strDate 0 4] :local strMonth [:pick $strDate 5 7] :local intDay...

diamuxin

Similarly, is it possible to check whether a folder exists? I want to check if /flash/ exists or not before doing my stuff (some cards have it, other don't). The solution is in the previous post (thanks to @rextended), try to adapt it to your needs. :global subdir "flash" :global findresu...

diamuxin

I am working (in my very limited spare time) in a more powerful library for HiLink access in RouterOS scripts that will try to solve these problems, call a function when new sms arrives, and even implements automatic execution of RoS scripts when receiving sms with :cmd, as Mikrotik's own SMS suppo...

diamuxin

Strange, in the end it was solved by deleting and recreating the Scheduler tasks. The events have not recurred.

Thank you.

diamuxin

Uhm... again timezone? Try to schedule the event at 03:00...

Okay, I'll try it tonight. Thank you.

BR.

diamuxin

(export of both scheduler and script?) Of course: (For example for the "backups" script) /system scheduler add interval=1d name=backups on-event="/system/script/run backups" policy=\ ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ start-date=2022-05-01 start-t...

diamuxin

Hello,

I have a problem that I don't understand, my RB750Gr3 router executes twice in a row each script scheduled from scheduler (it should only do it once).

The rest of the Mikrotik routers everything goes fine.

Has anyone had the same problem?

Thanks.

diamuxin

@rextended already makes us happy with impressive contributions, he doesn't need to work any more

diamuxin

Adding "..." as suggested by @diamuxin will add "..." also to shorter messages (don't know if this was clear...) I don't understand you, messages of < 30 characters will always be visible, they are not cut (tested) they are only cut > 30 characters. The lines 2, 3 or 4 that you ...

diamuxin

Excellent @rextended, shockingly easy and works! Now, in a perfect world text with more that 30 characters should have "..." at the end and shorter not. I'll try to scratch my head but if you have an hint to point in the right direction... :) I don't really understand the point of cutting...

diamuxin

Both scripts are updated for:
EDIT x: Exclude on default ipsec error messages phase1 negotiation failed, added the possibility to exclude topics regardless are critical or error or warning
(thanks to @S8T8 for the idea)

Updated! thx

..

diamuxin

Friends, I need a script to disable an interface of my RB when it has no traffic. and after a few seconds that interface is re-enabled. Thank you for your cooperation.

Maybe this can help:
viewtopic.php?t=104841#p521331

diamuxin

Impressive work Rex, thank you very much, really. Thanks, I hope is error free . I do not have Telegram, but the URL "text" is correctly generated. If you ignore the date conversion and the correct urlencode, are less lines of code for do the same thing... ;) I confirm that your script wo...

diamuxin

Impressive work Rex, thank you very much, really.

I'm away with the family right now, I'll try it as soon as I can.

BR.

diamuxin

try to set the device to GMT +00:00...... (and disable auto-detect) Good morning, I have already performed the tests with the following conditions: a) Configured System > Clock - Time: Local time - Date: Current date - Time Zone Autodetected: Unchecked - Time Zone Name: GMT+0 b) System > NTP Server...

diamuxin

try to set the device to GMT +00:00...... (and disable auto-detect)

Ok, I'll do the test tonight.

..

diamuxin

Nothing, the same problem persists.

diamuxin

yes, I uncommented it and save to a global variable, but the result is the same. In your opinion, changing the rules of the date and updated to 7.10 with the new ISO format of the date, could it be solved? On a Miktotik with v7.9.1 I tried tonight to leave the date format of the original script: ma...

diamuxin

Well, the test performed tonight with the original script has been failed, some events of the previous day have been repeated tonight at 00:00 and 02:00.

I think the problem then cannot be the date. I don't know where it fails.

diamuxin

Hello again, I have tested this code (original script) without any modification (only Telegram token and chat_id) and made a simulation by setting the router time to 23:58:00. When reaching 00:00:00:00 no event from the previous day has been repeated, it has worked as expected. @abbio90, try with th...

diamuxin

ipsec script was copied from this one i found on github. so by copying I also copied the errors. I'll try to change this. more than anything I don't understand how to solve the continuous sending of messages at 00:00 and 02:00 My time zone is the same as Italy (from Spain) and the times previously ...

Search found 408 matches