Our RMA department only has received a few devices with such issue, so I wouldn't say this issue is widespread. Looks like half of the people with the problem have already posted in this forum. We would not like to spread any kind of panic now, so please sumbit to RMA as usual for any defective uni...

There is no specific list of affected devices. There is a hardware change involved, so software upgrade can't help.

does this mean that I don't have to choose 1009 for now, and look for some other model due to some hardware(i assume unidentified) issue?

huh Samba is not a best choice through the internet, so I should configure tunnel and sync using it.
Maybe there is some way to initialize sync procedure from mikrotik?

I have USB HDD connected to my 2011 and sharing(using SMB) files to my home network. Once per day I want to syncronize data on my remote server to this HDD. I imported public ssh key to mirkrotik and now able to ssh or scp. Normally I use rsync for such purposes but in case with MT it doesn't work. ...

I've contacted Mikrotik support and got and answer to add rule /ip firewall filter add action=drop connection-state=invalid I've added it to the router for all 3 chains(input, output and forward) and now i can see that these rules are blocking invalid packets. So this is not actually the routeros is...

I've checked on my WAN interface with Wireshark and yes some packets from LAN forwarded to WAN without NAT. ROS 5.19, x86 on Intel Atom DN2800MT.

Looks like this is not a hardware issue, so maybe this is linux(kernel or iptables) problem.
Do you have any ideas?

Do you have any forwarding filter entries in IP Firewall? Typically you would be allowing connections from the LAN side to the WAN side and only allowing ESTABLISHED and RELATED connections coming back WAN>LAN. Try adding such filter entries and make sure that the NAT entry matches the same traffic...

Is it only occasional packets that arrive upstream with the private IP? Does the NAT seem to operate normally from the LAN side - i.e. you can use internet service etc. without problems? If so, you can avoid the log entries upstream by dropping any packets with the RFC1918 src. address on the WAN i...

Also check which device is using .254 and what its IP settings are.

.254 is my PC which got IP address using DHCP on RB. So there is nothing weird. I have also SIP phone and its packets also I can see with original private IP arrives from ether1(WAN)

What masquerade does, is substitute the source address with the address of the interface the packet is leaving the router. I am not sure if the last rule you have posted actually does that. Try it this way: /ip firewall nat add action=masquerade chain=srcnat comment="default NAT rule" out...

Hi all, I've put RB951 onto my workplace(made some kind of private network inside corporate) On WAN interface(ether1) i have public IP and all other(ether2-5+wlan1) are in bridge-lan and has 192.168.18.1/24 So my PC, Laptop and Mobile phone have ip addresses from private range. configuration is simp...

so anbybody solve this issue?
or is it HW problem?

there is a little problem with supout.rif
i cant create it due to flash failure(IMHO)

we have same problem with password forgetting.
by the way there is some problems with making backup or file export, seems something wrong with flash drive or .... dont know...
if you wanna see it on live system just write me in private and ill make you access.

I think it will be much better if you implement it. I have radius+mysql auth for pppoe and i never do some additional configs on MT for adding or removing accounts.

Im using MT with radius authentication. But if i disable user in radius it does not kick him out until next asossiation.
Anyone knows how to kick him out by script from linux(snmp or smth else)???

Yes, nstream and polling enabled.

I heard if to set fixed ACK timeout and fixed rate, delays on big load of channel will not grows. I have link on 25 km with SR5 cards on both ends and i tried to test this but it seems doesnt working. According to manual i configured ACK to 203(5GHz link) and rate to 18Mbit But i noticed if i set AC...

I need to build 2 hop link on SR5.
If i use RB532 with 2x SR5 +25db antennas on the tower between 2 hops
1.sr5(25db-ant) -------14km------2.sr5(25db)sr5(25db)------25km-----3.sr5(25db)
what will be real transfer between point 3 and 1 on my graph?
i need 10mbit duplex.
any suggetions?