MikroTik

hecklertm

Update. I posted in the scripting forum also, but it is not really a true scripting syntax problem, it is an OS command problem. v3.11 does not handle the saving of scripts properly. If you use a command in a script like the :log command, the script source does not save. Instead the results from the...

hecklertm

It seems that every script I add in a 411a, which includes a :log command in the script, the results of the :log get saved into the script source field instead of the script source I typed. Therefore, when I try to run the script again, I obviously get an error because it did not save my real script...

hecklertm

Every script I enter in the 411a gives an error saying "syntax error (line 1 column 1)" or "syntax error (line 1 column 2)". The script will run on the command prompt just fine. This must be a bug. Can someone please tell me how to get around this problem. Using the script comman...

hecklertm

This entire thread is meaningless at this point. The problems I believed were occurring in the beginning were not the problems at all. - The rb411 does not seem to have a clock any better than the 532. - Pasting scripts into a v3 router does not work at all unless you switch the console to vt100. Th...

hecklertm

Found issue is different. Starting a new thread

hecklertm

Many of my scripts may not be necessary anymore if the old scheduling problems have been fixed. I used to have to use scripts like this one that re-schedule every script that executes at a specific time of the day, otherwise they would not execute on time. I think it was a rb532 clock problem if I r...

hecklertm

1) There is a bug in v3.11 on-event={ .. script ..} will not work, you have to add script in quotes on-event="{.. script..}". This bug will be fixed in next version. 2) In v3.x you have to declare variables before usage, so at the beginning of the script you have to add :global b; How are ...

hecklertm

Hi, I am messing with a rb411a for the first time. I normally used 532a in 2.9 in the past. I am trying to get some of my scripts to run, and I think there must be a bug in v3.11 that I am encountering. Let me explain. When trying to enter the scheduled script: /system scheduler add name=reset-scrip...

hecklertm

Hi, I have been out of touch with OS changes since 2.9.42, and I just installed a router with 3.11, but I am finding that some of my scripts are breaking. I originally donated the backup script and scheduler code to the wiki way back and now I am having a syntax problem. Where is an updated scriptin...

hecklertm

No prob.

hecklertm

If that fix does work, I would suggest you send support a request to examine the problem for a real fix.

hecklertm

Can't tell off hand. It sounds like the settings under "/tool e-mail" may not be the same, or you have a firewall issue.

hecklertm

Sorry to nag you about it

You and Janisk seem to prefer static, but there seems to be no logical reason if all link signals are strong. Janisk makes it sounds like dynamic is problematic, but there is no sound basis for the opinion that has been demonstrated.

Thanks for the help anyway.

hecklertm

Then once again, my point was to discuss why dynamic wds is such a bad idea for permanent links. If the links are strong, then why did you say the dynamic links do not produce satidfactory performance in a post above?

hecklertm

Static WDS is still required when distant (read: weak signal) nodes can see each other, or at the very least, a connect=no option setting in both nodes' connect list to avoid those nodes connecting dynamically . Are you saying that if the router is in dynamic wds mode that you could create a connec...

hecklertm

Why would you care if the dynamic links with other APs are being established or not. Do the routers not assign a higher preference to stronger links? Lot's of link negotiating would cause a little CPU overhead, but not really slow down connections (use a rb532). If you have 2 or more equally strong ...

hecklertm

This is an update of my original post here. I have not had time to update my backup scripts since way back when I asked MT to add a find command to the system history command. Well, in 2.9.29, they added it for me, so now my backup script is able to determine whether the "admin" user has l...

hecklertm

GWISA - The install is working rather well now that it is in place at the apartments. Quick question - Do you think I could use a cheaper rb for the other nodes in the mesh? Like an rb133? or even cheaper? Also why do you think if you have more than 6 nodes, it stops working with the single hotspot?...

hecklertm

I installed the 3 routers in their final resting place in the apartment complex. They all seem to be working very well. If anything changes, I will notify. Maybe I should post the config in the WIKI so that other people don't have to stumble around to find an example of a dynamic wds mesh...

hecklertm

That should work fine.

hecklertm

Yes. Mine are configured as listed. First enable rstp-test-bridge "/sys package enable 4" or whatever the number of that package is on your router. Then issues these commands putting your specific locale and frequency settings: Config wireless card, set periodic calibration in case of peri...

hecklertm

I am using three RB532a each with one XR2 card. One is the main gateway also running hotspot, firewall, pppoe, etc. Check out other thread for exact config.

Basically the three routers are layed out like a triangle (covering a 30000 sqft zone of 77 apartments) with a single gateway to the Internet.

hecklertm

Possibly my method of testing was the latency problem. Placing AP2 close to AP1 and removing AP1's antenna so that AP3 could only see AP2 and would have to rely on AP2 to pass traffic. Maybe the latency was being introduced by AP1 not having an antenna even in short range communication to AP2. The c...

hecklertm

I have gotten it to work with the gateway router "AP1" running hotspot on wds interface and the 2 other routers "AP2" and "AP3" as remote APs using dynamic wds The wds config is set as follows: /interface wireless set wlan1 ssid=WIFI frequency=2462 compression=yes band=...

hecklertm

GWISA - I am trying to implement a 3 AP setup similar to what you were doing above. One router is the main gateway and it needs to run the hotspot service. The other 2 routers need to connect ot each other and the gateway router and all APs need to let wireless users access through the hotspot servi...

hecklertm

I looked through that WIKI. It does not help me for this type of install. All APs must be able to allow wireless users to login and authenticate through the hospot gateway/internet gateway. I know GWISA has done this type of install, but I do not see that he or anyone else has posted an example of t...

hecklertm

By the way, the gateway router is running the hotspot service for all of the routers.

hecklertm

I am thinking of trying to have a bridge setup and wds-mode set to dynamic on the gateway router so that either of the 2 remote routers in the mesh can talk directly to the gateway router, but in doing so, I am unclear on how to make a remote routers pass traffic to each other if one can't talk dire...

hecklertm

I have never needed to setup a WDS mesh before, even though I have been using the MTOS for over a year. I am trying to put together a quick install tonight, and I need someone to point me to a good example of what I am trying to do. Similar to the presentation I went to on setting up a WDS MESH at t...

hecklertm

You are correct. I should not have posted code that was not cleaned up.
No offense taken. Thanks for noticing the confusing statements. The post has been updated to reflect your comments.

hecklertm

Whatever... These things are true. Irrelevant to showing someone how a script could be formatted for the use of plink, but true. As I said in an earlier post, this script was built in about 10 minutes (therefore the hard coded 2222 was not removed from testing) and the script does not get used regul...

hecklertm

Ok. Here you go. This is the abridged version after cmit comments... This should show all you really need to know. There are a few variables populated by a database in the beginning. The CFExecute also has the output redirected to a file so you can see the results of the command for "testing pu...

hecklertm

hecklertm

Out of town until next week. When I get back, I will post the script here so that you can see what we are doing. It should be fairly simple since it only took about 20 minutes to throw it together initially. That is why I cannot remember the specifics of how we did it.

hecklertm

I think part of your problem is that you are using WDS which will forward all traffic to the main WDS router (router A presumably). Possibly you can setup an additional VAP on router B and have your clients connect to the hotspot on the VAP instead. Then you should be able to use the WDS link as the...

hecklertm

Why don't you use the hotspot service using Radius to do all of this for you?

Look in the hotspot examples, you may see what you are looking for.

hecklertm

The options concering DST are under "/system clock"

hecklertm

Blocking input to the router does not stop people from accessing the proxy. I argued in another thread about this when someone told me to do the same thing. It does not work. The proxy service gets priority over the firewall rules. The only way to stop people from using the router as an open proxy i...

hecklertm

I don't mean to sound negative, but you don't need "Wireless Networking" help. You need a network engineer who knows how to setup an ISP to help set it up for you. Maybe you should look for a person you can contract or hire who lives in your area. Good luck!

hecklertm

I see this question was asked months ago, but no one had any input. It sure would be nice to know who has had success getting WDS to work between a Mikrotik and other ventor's equipment. I made a stab at trying a Buffalo network router, and it did not establish. I tried a Dlink AP which supported WD...

hecklertm

Mositure had nothing to do with it. The outdoor cases were very sound. The change out of equipment on site fix nothing. I took it away and flahsed the router and reloaded it, but that probably was not necessary because it did the same thing once put back on site. I changed frequencies and it works f...

hecklertm

I have been working with one of the problem routers today. It was moutned on a building side and has an omni on it. I tried another antenna, pigtail and radio card, but no difference. Basically, I flashed the router and reloaded it, and now it seems to be fine. For how long, I do not know. I guess i...

hecklertm

I have several outdoor rb532a which use the pacific wireless aluminum die cast outdoor enclosure. All are running 2.9.26. I have 2 that have been mounted for over 6 months and they have no problems. What is strange is that I have another 2 of them that after a few weeks from install now act very str...

hecklertm

So just so I understand, if the system identity has special characters in it, then it sends out the email twice. Is that what you meant?

hecklertm · Any ideas when 2.9.29 is coming out?

Any ideas when 2.9.29 is coming out?

hecklertm

Any ideas MT staff?

Thanks

hecklertm

/system history only has the option to print. I would like to be able to use the "get" or "find" commands within that menu so that I can determine if changes have been made by a particular user. Does anybody know of a way I can do that? I would like to know because if a command h...

hecklertm

Actually, I poked around a little bit in the manual, and I saw the /system history commands. It would be pretty easy to have the script check and see if any commands have been issued in the router, and if so, go ahead with the backup. The only problem is that if you have the router running automated...

hecklertm

Good idea. Maybe the MT guys can tell us if there is flag somewhere that is set when any changes have been made in the router since last backup or since reboot or a flag that is set if a console connection has been made to the router. Then we could check for the flag and run backup if the flag is se...

hecklertm

Here is the exact entry from one of my routers. Like I said, I have never received 2 emails, only one. [admin@hypewifi0001] system script> pr 0 name="ebackup" owner="admin" policy=ftp,reboot,read,write,policy,test,winbox,password last-started=aug/02/2006 11:15:30 run-count=1 sour...

hecklertm

Very interesting. I wonder why that has never happened to any of my routers before. I can't imagine that my mail server or its Internet connection are faster than everyone elses. Strange...

hecklertm

Make sure that you can send email from all of the different router locations. Some ISPs block port 25 and this will stop you from being able to send email from the router at all. If smtp is not blocked, also make sure to deliver the message to an email address that is "local" to the smtp s...

hecklertm

The syntax is the same. Be careful if you copy and paste multiple lines that it does not have hidden/invisible line breaks in the text. When you copy multiline text from MT to the clipboard, it puts in hidden line breaks at the end of each line that you have to manually remove using the backspace.

hecklertm

For some reason when I searched the forums that article did not come up. I see what needs to be done. I already use 2.9.26 so I will change /int wir proprietary-extentions=post2.9.25 , but what other features about the SR2 does this turn off. Will it change any of the settings that I buy SR2s for li...

hecklertm

Is anyone else having this problem. I have a dozen access points with SR2 cards in them, and the hundreds of thousands of new laptops being shipped using Intel's 3945ABG Pro wireless cards do not see the SR2 radios AT ALL! I can't believe something like this could happen. I have had emails daily now...

hecklertm

wildbill: Very interesting thought. Thank you for the effort. I looked into the nat settings and did a "print all" so that I could see the dynamic rules also, and I set any dynamic rults pertaining to non-authenticated hotspot users to not apply to ether1 (which is the ethernet port I do n...

hecklertm

FYI to everyone. This issue was not resolved. The mikrotik firewall is not blocking inbound traffic to the proxy service on the router on port 80 and 8080 as it should based on the firewall rules I have in place. Obviously, there is a serious problem causing the firewall rules to not relate to traff...

hecklertm

Yes, each time you access the url I posted above, and get another deny entry.

hecklertm

serge: Here is my firewall settings to protect the router. Can you please explain to me where I am allowing users other than the ones I put the rule in as "Local LAN". I only let the addresses I listed to access the router as you had suggested. /ip firewall filter add chain=input protocol=...

hecklertm

Well, it is not working. Look for yourself. Go to http://64.105.225.181:8080

That is the router, and the rule you specified is in the input chain, but it still hits the proxy...

hecklertm

I understand what you are saying. My problem is that people on the Internet are constantly trying to use my proxy. I have denied people from using it with a rule in "ip proxy access". Therefore they are successfully denied. I understand that. But I do not want them to see the proxy at all!...

hecklertm

I looked at the things you suggested, but it is not helping me to determin how to rewrite the firewall rule. If I send you a supout file do you think you can see why I am not able to block traffic from ether1 talking to the proxy at port 8080. The reason I want to block it at the firewall is because...

hecklertm

I set the protocol, but connections still come in. Flags: X - disabled, I - invalid, D - dynamic 0 ;;; Drop external proxy request chain=input in-interface=ether1 protocol=tcp dst-port=8080 action=drop Any other ideas?

hecklertm

2.9.26 - rb532 I dont see what I am doing wrong, please advise. I run the proxy service on port 8080. I have a rule to deny users that I do not want to use the proxy via a "/ip proxy access" rule, but I want to refuse users coming in on ether1 from connecting to port 8080 at all via a fire...

hecklertm

Thanks for the idea, but I thought of putting a local DNS server before I posted.

Maybe the MT guys can respond whether they are wililng to look for a way to change the way the router handles redirects when no DNS is available.

hecklertm

That would most likely work. The only problem is that I have many hotspots, and it would require deploying seperate equipment at each hotspot to run DNS, unless you know of a way for me to set a static DNS entry in the router which can act as a wildcard DNS record....

hecklertm

Can the MT guys respond to whether there is a way around this? I have heard no response for 2 weeks.. Please advise. Thanks

hecklertm

I have run into an perplexing problem, and I am interested to know if anyone can think of a way around it. I have a script which makes the router use a different hotspot "html-directory" to serve the login.html page if it has detected that the uplink to the Internet is down. The purpose fo...

hecklertm

I would like to record the information you obtain when you issue a '/int wir reg pr" and it shows all of the wireless associations plus thier items like mac, signal strength, etc. I would like to actually write the results to the log file on the router which I then send to a server for diagnosi...

hecklertm

You may need to email MT concerning this error. I have not had it occur to me before.

hecklertm

Thanks for your feedback eflanery. Not to seem rude, esp. since I will see you guys Thurs and Fri, but... 1) Breaking out the code to multiple lines for human purposes is not a solution to the editor bug, that is a work around. If I was looking for codeing recommendations, I would have broke it out ...

hecklertm

Yes, please elaborate. I would like to know what you are finding.

hecklertm

Has anyone else had a problem whereby any hotspot users (new or old users) are blocked on all ports accept port 80 after the rotuer has been running for 6-12 hours? It works fine again if you reboot. I do not have this problem with my 2.9.18 routers, only with a rb using 2.9.23. Anyone else?

hecklertm

Here is the script I use. You will have to set a schedule for it to run at the time you wish. This script portion is very long because it customizes the backup file name to the router's indentity and the time and date of the backup. Otherwise, you would always get a backup file with the exact same f...

hecklertm

FYI: MT says that it is on the "list" of things to add some day.. When? They will not say. Also, I asked if the "list" was available for non-MT emplyees to see, and as I kind of expected, it is not.

hecklertm

Any MT guys see this post???

Is this an old issue that everybody already deals with and does not care? Should I not bother trying to use the built in editor and just edit long strings on my own computer instead?

hecklertm

I never recieved feedback from the MT guys on the problem with the editor inside of MT causing the console to "freak out" if you use the backspace key to delete a <cr> and merge two lines together into one line. What its the problem? I have had this problem ever since I first used the edit...

hecklertm

Somehwere between the revisions of 2.9.13 and 2.9.20 the logging of "web-proxy, info" changed. In order for me to log web proxy hits, I had to enable "web-proxy" indepentdently of "info" under /sys logging. This of course makes sense because it should not have been logg...

hecklertm

That is interesting. I have all of my rb532a running 2.9.18 and one running 2.9.20 and the workaround I recommended seems to be working very well. I actaully have the router also rebooting itself every night, and then after reboot it resets the scripts and then executes flawlessly. The only problem ...

hecklertm

I cut and paste config information into my new routers to save time typing. It seems that if you "paste" 2 or more scheduled scripts which run every 1m, since the 2 scripts were pasted from the clipboard almost at the exact same time into the router, the scripts conflict with each other du...

hecklertm

You need to post this in the Genreal Networking forum instead. Maybe MT will move it for you so you dont need to cross post.

hecklertm

SR2/SR5 vs. nmp-8602 - Showdown at dusk.... I have seen so much information posted back and forth about all three of these cards. I would like to get final summations from people who have an opinion (based in actual usage results) of which of the cards perform the best when used with MT APs. 2.4 and...

hecklertm

djape: It looks like my timed scripts are working ok. I had an event ,which is set to run at 3am every morning, and it just ran a few minutes ago at 3am. So I guess the work around I posted above actually works. Let me know if it helps you too.

hecklertm

BTW: after about 10 minutes, it looks like the router started reporting logs with the correct time.... dec/31/1999 18:00:34 dhcp,info,debug dhcp-client on ether1 got IP address 192.168.1.100 dec/31/1999 18:00:34 system,info dns changed 13:42:38 system,info,account user admin logged in from 192.168.1...

hecklertm

I am trying something which may work, and I will let you know if it works for me. Since scripts which run often (like every minute) run no matter what time of day the router has, the following script will run every minute, and if the router has recently rebooted, it will remove a scheduled script an...

hecklertm

I have several router which work fine, but I have one router which the log entries are 1 hour earler than the time on the router. Here is a print out to prove. [admin@hypewifi0008] system clock> /log pr dec/31/1999 18:00:34 dhcp,info,debug dhcp-client on ether1 got IP address 192.168.1.100 dec/31/19...

hecklertm

Ok, I just decided to set all of my scripts to start-date=dec/31/1970

I works, and I see no other way at this point. Any better ideas?

hecklertm

Does it fix the problem of hotspot html "form redirect" statements not being able complete the redirects. I have never heard back from MT on this issue at all.

hecklertm

Is MT going to do anything to fix the problem with scheduled scripts on reboot and the use of NTP? I cannot get my scheduled scripts to work after reboot either, and I have multiple routers deployed that get rebooted regularly and manually resetting the start time on each script in each router is ju...

hecklertm

Obviously, this shows that I am a total novice when it comes to the scripting. I would like to add that when I pasted the code below into the window so that you could read it, it would break itself up incorrectly. But, I tested if I paste the code in and then manually removed all of the extra "...

hecklertm

I have had the worst time with trying to design scripts by slowly building the script on the command line and as copy and pasting the elements I want to use into a "notepad" text file, and then once I have the whole thing the way I want it, I paste it all at once into the "source"...

hecklertm

magic: What SSH program do you use to send your scripts? plink? Mindterm?

hecklertm

If you are really looking for a steakhouse in downtown Dallas, I suggest the Hoffbrau Steakhouse. Mmmmm good.

http://cityguide.aol.com/dall...

hecklertm

If you actually upgrade your routers 30 times a year, you obviously do not mind wasting your time. There is no reason to upgrade a router unless it is broken or the new version has a particular feature you need to use. Do you think that they come out with new versions every week or two expecting tha...

hecklertm

I have used many versions of 2.8 and 2.9 other the last year, and all have shown the same issue. I am still puzzled as to why when a wireless client associates to my MT routers for the first time (or for the first time since having associated with some other router), the clients take way long to aqc...

hecklertm

Good question. 2.9.19 had a bug in it that I could not allow to exist, so I had to downgrade back to 2.9.18 before trying to see if reading the license made it stop coming up. If it in fact never comes up again after hitting "yes" and reading it one time, then obviously the issue is mute a...

hecklertm

look on http://wiki.mikrotik.com under the firewall section

hecklertm

If you want it to log web-proxy requests with cache,

/ip proxy set max-disk-cache-size=none
/ip proxy set enabled=yes

hecklertm

(taloot) No, its not hard, but maybe microsoft should put their legal disclaimer up each time you reboot your computer or anytime you run a microsoft application. Just seeing it would get a little old, wouldn't it? Some people don't use winbox at all and prefer the command interface due to its BREVI...

hecklertm

FYI: I upgraded from 2.9.18 to 2.9.19 and when computers try to login to my hotspot, the redirect command I put in the login.html page (to redirect the users to my authentication server) just gets executed over and over and over again very so fast that the browser never makes it to the authenticaion...

hecklertm

That makes sense. Thank you.

hecklertm

Hi, When at the command prompt I type in :log info [/ip address get 0 address] and a log entry with the ip address of item 0 appears in the log as I wish. But when I create a scheduled task to do this every 5 minutes, it does not work. I get an empty log entry. From what I can tell, it is not execut...

hecklertm

I suppose they should have the MUM in the middle of Montana where most of us in the US live.. :P Dallas, TX is fairly centralized. If you can only do one in the US, doing East or West coast is financially unfair to half of the attendees either way. We should be happy that they are coming to the US t...

hecklertm

I see no manual about what available options can be configured when sending email form the router. The obvious - server, from, to, subject, body. What if I need to use "smtp auth" to send mail to the mail server? Especially if you cannot use a static IP on the router WAN interface and ther...

hecklertm

cmit:

plink.exe seems to work fine for me to execute commands on a the router. What problem are you running into? I have a cf webserver app running plink in a cfexecute command allowing it to send comands and receive response via plink. No problems.

hecklertm

search the forums

Sten, I spent an hour searching the forum before I posted and found only one article similar in structure to my post, and it gave no final recommendation. Lighten up

hecklertm

Thanks. I assume the interval is in minutes? the manual does not say.

hecklertm

Naturally I did that first. I do not see that it says that wireless-test was removed.

hecklertm

I see no wireless-test package in 2.9.13 for the rb500. Has it been removed? I have sr2s which I need to have the fix from 2.9.11 in wireless-test or I have to set manual tx rpower. Is the wireless package in 2.9.13 updated to include what was also in the test package?

Please advise

hecklertm

I have a rb523a running 2.9.10 with the manual power settings for a SR2 radio. The radio seems to put out lower and lower power as time goes on. After 2 days, I get slow connect speeds, and then I do a system reboot (soft reboot, not power off) and the radio strength goes back to normal... Any ideas...

hecklertm

I already redirect to my server for authentication using a form redirect in the login.html, but if the server is not available, no one can login to the hotspot. Can anyone tell me if there is a way they know that will let me redirect to a different webpage if the first attempt to redirect fails? Is ...

hecklertm

What tools do any of you use to troubleshoot WLAN range or interference problems?

hecklertm

Is there any ability to log and export the wireless snooping data into a mapping software, so that I can visually layout the range and strength of my wifi networks? I see "Hive" from Berkeley (bvsystems.com), but I think it requires you to own one of their yellowjacket analyzers. I also se...

hecklertm · I checked and it works on for me using 2.9.10.

I checked and it works on for me using 2.9.10.

hecklertm

My 2 posts from above explain that I figured out this particular issue. Thanks

hecklertm

Well, it is reasons like that which has us all using MT

hecklertm

I know that Kazaa Klite can communicate over port 80, but I probaly tries its default ports first, which you could then identify who is using it through the log of a firewall filter.

hecklertm

Just a little more info. To have all pptp sessions with different interface names I use.

0 I chain=dstnat in-interface=!wlan1 protocol=tcp dst-port=80 action=dst-nat to-addresses=x.x.x.x (ip of proxy) to-ports=8080

hecklertm

Well, the problem was my own mis-managed firewall rules in the x86 routers. I deleted the masq action on the subnet of the pptp ip pools. I should have uploaded my config so someone could have pointed out my blindness.

hecklertm

I have setup two rb532a routers (2.9.10) as a hotspot and pptp-server for windows clients. The pptp client's and non-pptp client's do dhcp OK. I used the exact same commands on a third x86 MT router. The non-pptp client's dchp OK, but when the pptp client's get the dhcp info, they get the correct ip...

hecklertm

I believe you need to make sure to install the webproxy-test package on your rb532. It needs to be a rb532a in order to run proxy though, since it needs 64MB ram.

Your settings should be available in the /ip proxy after that.

hecklertm

Just posting what I determined through another post.

0 I chain=dstnat in-interface=pptp-in1 protocol=tcp dst-port=80 action=dst-nat to-addresses=10.100.3.1 to-ports=8080

hecklertm

I figured it out myself. Is there a more descriptive explanation of all of the firewall options other than the existing 2.9 docs? I pieced together the answer by looking through other forum posts, but (unless I am not seeing it) a simple "port forwarding" example in the docs would have sol...

hecklertm

I am using 2.9.10.

How can I redirect all http (port 80) requests received

- from clients of the the router's PPTP server (in-interface=pptp-01)
- to the router's internal proxy/webproxy/hotspot proxy service (port 8080 or 64874)????

Thanks in advance

hecklertm

I suppose once the tunnel is terminated by the router and it then routes the traffic toward its destination, there should be some way to have the http traffic passed through the web-proxy service first, the same way the hotspot transparent proxy works. Maybe I would need to set a firewall rule to se...

hecklertm

I am not sure you understand what logging I an talking about. Radius accounting will give me uptime and packets transfered. I do not think it can give me web-proxy logs.

hecklertm

I have setup pptp connections for hotspot users to use for more security. When they establish the pptp session with the router, I am no longer receiving "web proxy info" message on that user. I thought that since the user was logged into hotspot and then created pptp on top of hotspot logi...

hecklertm

Thank you fro the reply. Will I have to connect to the modem using a ppp connection and the connect to the router via IP, or is it posiible to have the modem respond as the serial console?

hecklertm

There are no mpci or pcmcia modems listed there.

hecklertm

Hi, Can I use a pcmcia or mini-pci modem inside the rb532 to establish a remote console session to the router? The manual talks about establishing the connection via serial port but not via an internal serial device. If it does work, do you have any recommendation on a pc or mpci modem to use? Thanks

hecklertm

Pardon me, please. My mistake. I have many routers and this particular one was i386 and actually had the /ip web-proxy on it. I removed web-proxy and installed the new 2.9.10 and webproxy-test instead. It does correctly show all of the information. However, it splits out the log information across m...

hecklertm

I have logging working correctly using the "2.9.8 webproxy-test" package, but the logs show the router ip address as the client requesting the webpages and not the ip of the actual user who is requesting the pages. The information is only meaningful if I know the true client ip address tha...

hecklertm

I found the answers.

Wireless adapters are not support until after version 4 of workstation or server ver 3.

The hard drive problem was because I needed to change the virtual drive ID to IDE0:0 in the advanced options.

Thanks anyway.

hecklertm

Serverwinkel: Quick questions on this subject. I am creating test router installations on a winxp computer, and I do not see an option to create a "vlance" adapter. I am using vmware 3.2 workstation. Are you using a newer version? Also, when I have created virtual machines using other OSs ...

hecklertm

Hey, that's' great! Thanks for adding it in. I bet it will come in handy for many people in time.

hecklertm

That should work as long as your tool logs the originating ip address of the computer which sent the update. It would be much easier and would stay within the scope the DDNS tool. Sounds like it has good potential.

hecklertm

Have you considered trying to customize the login.html built into hotspot user authentication webservice so that the login page when accessed attempts to do a form post to a page on another webserver (normally this is done when you use an external authentication server). That other webserver's http ...

hecklertm

Is there any possibility of something similar to a WGET command being added to scripting language anytime in the near future?
Thanks

hecklertm

What if your MT router is behind another gateway router (which has NAT'd the ip address of the MT router), but you have told the gateway router to do a one-to-one NAT of its external ip address (DMZ port forwarding) to the MT router so you can access it from the Internet. The MT router does not know...

hecklertm

Normis: Thank you for the detailed explanation. I appreciate it very much. I hope that the wiki project goes well, so that a wiki faq called "How to cache or log http requests for hotspot users?" includes what you just posted and also the prior post which says that a parent proxy must be u...

hecklertm

The cf card that I bought with MT on it was shipped with 2.8.27 for some reason, and I had to upgrade it to 2.9.8. I upgraded it before I did any of the router config, so I was not trying to use any older 2.8 settings. Is it possible that the upgrade caused some sort of package problem that makes so...

hecklertm

Thank you for the reply. 2.9.8 does have the /ip web-proxy feature. I want all traffic dst=80 to be forwarded to the web-proxy on port 8080. The firewall rule which is listed on the /ip web-proxy manual page, which says that it will do this, is not working. I am not interested in the hotspot proxy o...

hecklertm

My problem seems to be that my http traffic is not redirecting through the web-proxy automatically. What I originally forgot is that since the http requests pass through the proxy, it is automatically logged with no need to additional logging rules. I forgot this because my proxy redirect is not wor...

hecklertm

I mean that I would like to log the URL's visited by hotspot users.

hecklertm

I have spent several hours trying to figure out what fireall rules to insert to attain the results, but to no avail. Please help some in forum or from MT. I emailed MT, but have gotten no response. I do not understand why running web-proxy and then logging the http requests was no issue for me in 2....

hecklertm

Thank you for setting this up. It has been difficult looking through forum archives for bits of code that I have seen before. I need the rules for logging http traffic of hotspot users. Could someone please post that in the wiki? I aksed for it in a forum post yesterday, but it seems to mundane of a...

hecklertm

I am sorry if this is redundant, but I am not finding a post that shows an example. I am setting up a hotspot in 2.9 with http traffic logging I used 2.8 before and logged the http requests sent through the transparent proxy. I turned on web-proxy on 2.9 but I cannot seem to tell if : a) the traffic...

hecklertm

Normis, what if you want to use MT as a wifi router and a workstation simultaneously for budget purposes? Do you think running MT as a VMware guest or host is possible?

Thanks

hecklertm

I have been looking at the 2.9 manual, and I am not clear on whether you could setup a virtual AP, and then enable WPA only for the particular VAP. Therefore, first time clients could connect with no encrytion and once validated they would be given the PSK to use for future connections using the WPA...

hecklertm

Thank you for responding. I thought I was the only person remotely interested in this concept. I will continue to research the concept and let you know how it goes. I did get a response from someone at MT who said the folloeing: -------------------- You can try to print something with the help of se...

hecklertm

Hi, Has no one who looks at this forum ever attempted something like this? Has no one ever connected any printer to an MT router? Has anyone ever tried? I would appreciate it if any of the more experienced forum members (including MT employees) would reply with a positive or negative response or som...

hecklertm

Thanks for the replies. I had already disabled TELNET since it is clear text. I was more concerned with SSH and the console. My unix boxes and ssh clients on other platforms do not show the login prompt, but I was not sure that maybe some other SSH clients, which I have not used, might show a login ...

hecklertm

No one has any input on this?

hecklertm

Does anyone know if we can change the login prompt on the MT which is seen when using telnet or ssh? It currently shows MikroTik v2.8.28 Login: I would rather it not show anything other than "Login:", so that if someone port scans the router from the inside of the network (which shh will b...

hecklertm

Has anyone implemented a solution where they connect a standard receipt printer to the MT and then make it print a receipt when requested through an external server using a scripting language like expect? Specifically, I would like to know if it is feasible to connect a receipt printer to the MT. If...

hecklertm

Hi, I searched through the archived posts, and I see where changeip.com has posted a script to do DDNS updates from the MT router to their service, but I run my own DNS servers, and I would like to have the router tell my DNS servers instead. The question I have is whether anyone has an example scri...

hecklertm

If Kazaa is unable to communicate on its standard ports, it will resort to using port 80. As of first version of Kazza Lite, this has been the case. There is no stopping it, you can only try to throttle it. which can also ne to the detriment of legitimate http users.

hecklertm

The example posted in the archived post called "Hotspot Javascript Encyption Example" did in fact work correctly once I first tried to use it without modifying it. Then I just put my test user "Ex" and password in and it was fine. I suppose when I tried it the first time I change...

hecklertm

Hi, I uploaded md5.js to my webserver and copied an example hotspot config from a post in the archives. I am not poficient with Javascipt, so I played around with the syntax for a few hours, and I am still getting the error that the "router will not accept unencrypted passwords". If I did ...

hecklertm

Thanks. I did not realize they were regex symbols for some reason.

hecklertm

I see in the explanation of the walled garden that there are several symbols which you can use such as ^ \\. $, but there are only 3 or 4. Does anyone know of more? What symbol or syntax do I use to setup a rule to allow ANY characters at the end of a URL? Therefore, I would allow any page from http...

hecklertm

I guess since I was looking through the "Device List", and saw that the Aironet 340 would work in my PC router, I was stupid for not reading other chapters in the manual to later find out in the chapter on wireless configuration that the Cisco cards are not ones which can be used in "...

hecklertm

I switched the HD to IDE0, and it works fine. Thanks for the help!

hecklertm

The hard drive is a salve behind the CDROM. Will that not work properly. The initial install runs fine. It is a Western Digital WD400BB Enhanced IDE drive.
Thanks

hecklertm

On first boot up after CD install at 7F all I see is L 07 07 07 07 07 07 07 07 07 07 07....... It goes on for 10 or 12 lines adding another "07" every minute. I assume this is some sort of hardware compatibility problem. I was expecting the first time login instead. The system is an IBM PC...

Search found 165 matches