MikroTik

Kataius

Thanks for the reply, I only noticed it now, that it didn't work even in other versions, because I'm affected by a BUG on IoT devices and every firmware update I test to see if the BUG is finally resolved. I will try to contact the author of the script, as you suggest. You seemed to have disappeared...

Kataius

Good morning everyone, since the update to 7.16, the log gives me this error: executing script from dhcp failed, please check it manually the script does what it's supposed to do, who can tell me what was changed? Before 7.16 I had no error warnings. # When "1" all DNS entries with IP addr...

Kataius

I don't have a HDHomerun but it looks like it broadcasts as opposed to multicasts on UDP:65001. IP broadcasts are NOT same as multicast. And HDHomerun using broadcast address for it's discovery protocol (as noted above). I was reading this post: https://forum.mikrotik.com/viewtopic.php?t=210244#p10...

Kataius

I solved it by disabling the NAS port forwarding and Harping NAT. Now I am accessible from outside and I see the local IPs logging in 3 X ;;; HARPING NAT chain=srcnat action=masquerade dst-address=192.168.240.10 src-address-list=filtered log=no log-prefix="" 4 X ;;; OLD chain=dstnat action...

Kataius

Hello everyone, I have a nas in vlan200. to which some vlan100 PCs and all vlan200 PCs have access. I have harping nat. I find failed login attempts from the router ip (192.168.240.1) of vlan200. I did some tests if I make a wrong login in remote it gives me the ip of the remote device that tried to...

Kataius

/interface/bridge/filter/ chain=forward action=accept in-bridge=BR-mDNS out-bridge=BR-mDNS dst-mac-address=FF:FF:FF:FF:FF:FF/FF:FF:FF:FF:FF:FF mac-protocol=ip dst-address=255.255.255.255/32 dst-port=65001 ip-protocol=udp log=no log-prefix="forward HDHR" /interface/bridge/nat/ chain=srcnat...

Kataius

Thanks, I deleted everything and reset everything. I still have the problem that the devices get their IP from the bridge's DHCP server and not from their VLAN's DHCP server (only some devices connected via WiFi). For now I have disabled the bridge's DHCP server. any help? CAP Config: /interface bri...

Kataius

Hi everyone, I'm trying to set up an device with this method, I found a guide in this forum, for a non-mikrotik device: https://community.ui.com/questions/Howto-HDHomerun-discovery-on-different-LAN-segment/97db52c6-4add-4ba1-ab0d-27ee6f43db8f?page=1 But I think I didn't understand anything about how...

Kataius

Thanks so much for trying to help me I have a HAP AX3 I put on VLAN filtering but the problem got worse, now not only does it offer the devices the bridge's DHCP server instead of the VLAN, but the devices actually take the bridge's DHCP IPs... # CAP /interface bridge add admin-mac=48:A9:8A:BC:A5:1F...

Kataius

Thanks for replay. this is my capsman config: # CAPSMAN /container mounts add dst=/opt/list name=pihole_list src=/usb1-part1/container_pihole/list add dst=/etc/pihole name=pihole_etc src=/usb1-part1/container_pihole/etc add dst=/etc/dnsmasq.d name=pihole_dnsmasq src=\ /usb1-part1/container_pihole/dn...

Kataius

Hello! I don't understand if it's normal or my problem: I have 3 vlans. if I connect via eth, everything is fine, if I connect via wireless it works, but I noticed that every time the DHCP of a device is renewed or connected for the first time via Wifi (through capsman), capsman immediately offers i...

Kataius

try with one up?

Kataius

hi, I was trying to discover a device from a vlan (casa) 192.168.0.xx to the device in a different vlan (192.168.240.161). I found these instructions in a non-microtik device forum. (https://community.ui.com/questions/HDHomeRun-Discovery-Across-VLAN/b1008892-3ed1-4e21-b6af-da45733d5150) Is it possib...

Kataius

Hi, I managed to get everything working and it's great! Just one thing, I can't detect a device from one vlan to another with the device app... if I go to the device's IP (192.168.240.161) I can easily access it, but if I try from its app it doesn't work... I found this guide for other routers: http...

Kataius

For all those who come here for the same problem; I solved it by rolling back to version 7.8. no disconnection problems. I've tried them all, the most recent update that doesn't cause problems is 7.8. Thanks for those who dedicated their time to me

Kataius

Unfortunately I'm from version 7.10. updating every version, I was hoping it was a bug but since it hasn't been resolved yet I think it's a configuration problem... (I also have the same problem with 7.14)

Kataius

Thanks for replay.

I try 1500 MTU (both on the AP and RB)

The issue still remain IoT device disconect and reconnet every 10 seconds

Kataius

Hi, I have the following problem with VLANs: -I have an hap connected with capsman to routerboard. -I have 4 vlans -I have IoT devices connected to the vlan (in this case vlan400) Problem: If I put the dhcp server on the bridge and not on vlan400 and in capsman I put only the bridge as the vlan400 d...

Kataius

Hello again! In log of NAT Rules i have this: NAT mdns srcnat: in:(unknown 0) out:macvlan400, connection-state:invalid src-mac MAC DEVICE, dst-mac 01:00:5e:00:00:fb, eth-proto 0800, UDP, 192.168.0.60:5353->224.0.0.251:5353, len 121 NAT mdns srcnat: in:(unknown 0) out:sfp-sfpplus1, connection-state:i...

Kataius

in log ho NAT Rules i have this:

Kataius

Thanks for the reply, sorry if I cause you problems. These are the configurations, BR-Capsman is my main filter bridge. In NAT rules put the MAC of the main bridge. /interface/bridge/filter/ print 0 ;;; Allow mDNS only chain=forward action=accept in-bridge=BR-mDNS out-bridge=BR-mDNS dst-mac-address=...

Kataius

Hi, I'm so sorry to bother you. I deleted everything and redid everything from the beginning. The filter and nat rules show packets now, so they are working. But I don't have any discovery between vlans. Can you guide me where I can look to understand why it doesn't work?

Kataius

Has anyone managed to get spotify connect to work? Sonos and Chromecast apps work great. Thank you!

Kataius

Thanks for replay but nor PIM-SM nor your filter rule solved my problem. Plus i have noticed that bridge nat (mdns) has 0 Packets, is it normal? EDIT: My Bad! The app sonos is working, but i cannot discover the device from spotify, any help? bridge nat rule is not working... here my firwall config. ...

Kataius

Hi everyone, thanks for sharing, I put this setup in the routerboard, it works, but it doesn't find the Sonos soundbar, it only finds all the chromecasts. any suggestions?

Kataius

An other up?

Kataius

Try with one up?

Kataius

Hi Here, I worked on two scripts, where I copied rextended's script (please don't hate me for this). The logic is: 1 fetch the file in X file splits, 2 imports one by one and then deletes them all. The problem is that the first script blocks the entire execution of the second script because it gives...

Kataius

The var size limit is the memory on the device. I take it for granted that one imports 8 megs of address list into appropriate devices, not into little toys like the hAP lite... :lol: https://forum.mikrotik.com/viewtopic.php?p=1012752&hilit=readfile#p1012752 I have a RB5009UG+S+IN not a little ...

Kataius

Thanks for replaying. With this firewall rulesi can ping and i can connect to stove and the mAP (192.168.120.1, 192.169.0.110). But i can access to mAP only with mac address and i don't see it in winbox. Which are the rules set for an AP in mikrotik? Thanks. /ip firewall filter add action=accept cha...

Kataius

The stove has its own dhcp server which cannot be touched. the stove works like a router, you connect to its ssid via its own wifi and control it from there. It doesn't go online alone. you connect to the stove and control it with its app. I would like to integrate it with my home automation server....

Kataius

Thanks for the replay,
The dhcp server of the stove is 192.168.120.0/24 gateway 192.168.120.1

Kataius

Hi everyone, I would like to make a script to run once a week that updates address list on Mikrotik. coming from this topic: https://forum.mikrotik.com/viewtopic.php?p=1051864 I found a very useful script for creating variables. I'm trying to import a file.txt of 8 MB, only it cuts the list to more ...

Kataius

A thousand thanks!!! The DOH were the problem! Thank you!!! Taking advantage of your idea, which of the three rulesets is better? Thank you ---1--- add action=drop chain=forward comment="block internal DOH" dst-address-list=\ DNS-DOH dst-port=443 protocol=udp src-address-list=filtered add ...

Kataius

Hi everyone, I have to configure a connection to a stove as in the diagram... From RB50009 I can ping 192.168.120.150 (IP of the mAP in the stove network) and 192.168.0.110 (ip mAP in the LAN network) From the mAP I can ping the RB 192.168.0.1 and I can ping the stove 192.168.120.1. But from RB5009 ...

Kataius

Hello everyone, I've tried several times, made various attempts, but I can't get out of it. I have a Pihole docker on mikrotik. Pihole works. If I turn off the Pihole docker google chrome gives me this error: DNS_PROBE_STARTED If I put the DNS of the DHCP server (which points to the Pihole) Filter e...

Kataius

Hi, I'm here again... I ask for help on how to configure a single port on the routerboard both as a WAN and as a LAN. I have an ONT connected via LAN to the routerboard, and from the routerboard I have 1 sfp cable that goes to a switch and from there the LAN. the goal is: connect the ONT to the swit...

Kataius

Thanks for replay a systems engineer friend of mine told me that to allow multiple vlans to pass (for example for hapax^3 that propagate vlan100 vlan300 and vlan400 throut wlan) the port must be untagged. So vlan1 = untagged. Right? I use swos, can I post some screenshots so you can tell me if I did...

Kataius

(1) Which Router is the one you are referring to in the diagram?????? I am assuming the 5009!! (2) What is with vlan1 between all the MT devices, I dont see that in the router config you have??? Assuming you meant on the diagram to put vlan100 which contains the 192.168.0.0/24 (3) So you have four ...

Kataius

Thank you so much for the time you are dedicating to me. Thank you with all my heart. Concur network diagram gives us context! In addition need to see complete config again. ( not just snippet of firewall rules ) Thanks, here is. Concur network diagram gives us context! In addition need to see compl...

Kataius

Thanks, I cleaned the firewall rules, but the problems still persist. Maybe because I have VLANs? (1) is now correct (2) removed (3) why doesn't it drop access from domus_net to 192.168.240.210 (4) removed the rubbish :) (5) removed! config: /ip firewall filter add action=accept chain=input comment=...

Kataius

thanks for the reply but it doesn't solve the problems... I put a print of the modification suggested by anav /ip firewall filter add action=accept chain=input comment="defconf: accept established,related,untracked" \ connection-state=established,related,untracked add action=drop chain=inp...

Kataius

Good evening, I have this firewall rules that don't work: add action=drop chain=forward comment="DROP access to SERVER" dst-address=\ 192.168.240.210 dst-port=2424 protocol=tcp src-address-list=net_domus add action=drop chain=forward comment="DROP access to SERVER" dst-address=\ ...

Kataius

Try with one up?

Kataius

Wow it's true! I put the rule in NAT! LoL
Thank you.

For the discussion of the rule that doesn't work:

The problem is that the packages are there and (at least the udp) so the rule works, but it doesn't have the desired effect... Thanks anyway for the help and I hope for someone else!

Kataius

Missing last rule of input chain add chain=input action=drop comment="Drop All Else" Sorry wrong position of the rule. Thanks for correction! B. We redirect aggressive users that change their DNS manually on PC................. add action=dst-nat chain=dstnat comment="Pihole" ds...

Kataius

Thanks for the reply. I'll post the complete configuration right away. Thank you very much # 2023-11-14 15:49:54 by RouterOS 7.12 # model = RB5009UG+S+ /container mounts add dst=/opt/list name=list_pihole src=/usb1-part1/container_pihole/list add dst=/etc/pihole name=etc_pihole src=/usb1-part1/conta...

Kataius

First of all, thank you very much for the explanation and help. I fixed the firewall as you recommended but I still have some problems: 1) If I set the DNS to 8.8.8.8 or 1.1.1.1 on my PC, table, phone, etc. It bypasses my pihole 2) I added these two forward chain rules but they don't work: add actio...

Kataius

Thanks for the reply, sorry for replying so late, but I had personal problems. Here is the complete setup, thanks The goal is to redirect all clients to the pihole (even if they have manually set DNS or are hard bind). If I set the DNS to, for example: 8.8.8.8 it bypasses the pihole. While doing tes...

Kataius

Good evening, trying to redirect all network traffic to the pihole (even if a client specifies different dns). I noticed that the routerboard doesn't apply any dstnat rules. Where am I doing wrong? /ip firewall nat add action=masquerade chain=srcnat out-interface=dimensione-pppoe src-address=\ 192.1...

Kataius

Again i'm here... doesn't works... In a windows 11 pc (for example) if i put automatic dns or 192.168.0.8 as dns all works. If i put 8.8.8.8 bypass pihone. Now i give you my all config of firewall. Thanks for the help you gave to me and thanks for the help you will give to me. /ip firewall address-l...

Kataius

Thanks but it not works also with you suggestion: /ip firewall filter add action=accept chain=forward comment=PiHole dst-address=192.168.0.8 in-interface-list=LAN add action=accept chain=input comment=PiHole dst-port=53 in-interface-list=LAN protocol=tcp add action=accept chain=input comment=PiHole ...

Kataius

Hello, thanks. But problem still remain. If i left automatic dns the device takes 192.168.0.8 (like i have setup in /ip dhcp-server network ) but if i set manually dns in a client, it's bypass pihole and use the manual dns that i have set: Any other ideas? /ip firewall nat add action=masquerade chai...

Kataius

Hi, I set up pihole in a container in the mikrotik. Everything works perfectly, except: if some client set the DNS server manually it bypass the pihole. I put the rules in the firewall to force redirect to pihole but it doesn't work. What am I doing wrong? Pihole IP: 192.168.0.8 LAN filtered: 192.16...

Kataius

Thanks, I didn't know that "print" didn't put everything. I wish some ports were open from the outside. I succeeded with 2 ports, but if I try others or the upnp ports it always gives me that the nat is closed. Thanks Here is my full configuration # may/17/2023 12:13:42 by RouterOS 7.9 # s...

Kataius

Hi, I have a problem with opening the ports. I managed to open two ports, the others and also the upnp does not open the ports for me... Where am I wrong? I used the site https://portchecker.co/checking to see if the ports are open or not. Only 8123 and 32400 are open, the others seems closed /ip/fi...

Kataius

Hi, I have the following problem: With DIG it gives me the DNS name of different devices. For example 192.168.0.19 is a ROG Phone and it gives me this: dig @192.168.0.1 -x 192.168.0.19 +short Shelly-Taverna. ROG-Phone-5.home. ROG-Phone-5. Phone\032ROG5.home. Phone\032ROG5. Shelly-Taverna.casa. I jus...

Kataius

Hi, I have a problem with capsman... I can provision a guest network, but if I put bridge -> port all it gives me the ip of the main network and not the guest network, if instead I set it as bridge -> port eth1, I don't gives me ip on wifi (both guests and main network). Where am I doing wrong? CAPS...

Kataius

hello, I'm trying to better understand ssh and capsman but I don't even understand what to look for... The setup is I have 2 wlan networks (home and guest) with capsman. the goal is: Send a ssh command to capsman - if guest is disabled -> activate it. - if guest is enabled -> disable it. some advice...

Search found 59 matches