On Windows8 I can run it, but cannot connect to any of my routers, if I try an older version, it says I need to update, which gives me 3.11.. when I try and connect I get the error: ERROR: no roteros.jg found Not sure what that means, Google hasn't been forthcoming. Possibly a picture with a typo? r...

What are you having trouble with?

Ok, just realized this post was 2 years old.. in my defense, I'm recovering from surgery.

What are you having trouble with? I can see input chains and Mangle/prerouting chains etc all working on my Mesh. Create a rule but only "log" first, see if you are matching correctly, for yours, I would create the following on your Mesh Portal device: /ip firewall mangle add action=log ch...

Don't you need to specify the community string "-c string" with snmpget?

That is the community string specified on the router.

As per: http://wiki.mikrotik.com/wiki/Manual:SNMP

Not sure if you guys got the help you needed, but it looks like your proxy has been opened to the world, you need a rule like: /ip firewall filter add action=jump chain=input comment=\ "Ensure proxy is accessible only to internal clients" disabled=no \ dst-port=8080 in-interface=ether1 jum...

I got it to work.. partly. Its logging entries at least, thousands of them! Made a better solution by directing the logs to my Ubuntu workstation and filtering input with some simple syslog-ng configs.. Got proper logs and it all just "works".. :-) The critical part: filter web { match('w...

I got it to work.. partly. Its logging entries at least, thousands of them! For some reason it splits requests into User & URL's into domain and path.. which is weird, as rebuilding them from the database is made more difficult, something I discovered when I couldn't get the bloody thing to prod...

Have you read: http://wiki.mikrotik.com/wiki/SNMP_MRTG

Because I got it working with that. Lovely graphs too!

Try: http://forum.mikrotik.com/viewtopic.php ... 68#p336860

can you explain what can i do with the link? My implementation: /ip firewall address-list add address=31.13.24.0/21 comment=\ "Facebook IP Subnets from: http://bgp.he.net/AS32934#_prefixes" disabled=\ no list=Facebook add address=31.13.64.0/24 disabled=no list=Facebook add address=31.13.6...

Yeah, I've encountered these DNS Violations before.. really the only way to avoid that, is to either use a public DNS server (if you can get to google's etc), or run your own server. Running your own DNS server is pretty easy, doesn't use too much resources, but you will need to be able to contact o...

Can you show us the rule you are using? /ip firewall nat print chain=dstnat Refer here for specific guidance: http://wiki.mikrotik.com/wiki/Forwarding_a_port_to_an_internal_IP Note, FTP generally requires port 20 as well. Don't forget to disable the FTP server in MicroTik /ip service disable ftp Als...

Do you send syslogs to yourself to monitor it? /system logging action set 3 bsd-syslog=yes name=remote remote=YOURSYSLOGSERVERIP remote-port=514 src-address=0.0.0.0 syslog-facility=local3 syslog-severity=notice target=remote add action=remote disabled=no prefix="" topics=info Now everythin...

You are forwarding two TCP ports, does your game only use TCP? This page suggests forwarding errors too: http://www.trinitycore.org/f/topic/4467-realm-access-error/ Perhaps you need the dst-addrees (WAN IP) set as per: http://wiki.mikrotik.com/wiki/Forwarding_a_port_to_an_internal_IP Try something l...

Try this: /ip firewall mangle add action=change-ttl chain=postrouting protocol=tcp dst-port=53 disabled=no new-ttl=set:100 passthrough=yes /ip firewall mangle add action=change-ttl chain=postrouting protocol=udp dst-port=53 disabled=no new-ttl=set:100 passthrough=yes Will obey existing rules (passth...

The proxy needs the dstnat rule in NAT, so check that too.
See if it is actually proxying connections:

Figured it out, had to use "Passthrough" to add extra marks to packets, routes and connections.. Damn this is cool! FYI: Passthrough means it will continue processing rules, so a mangle rule adds a route-mark, then another checks and adds a Packet Mark, then a third checks and adds the con...

How many connection marks can we put on there?
I have been using mangle rules to mark connections as FTP/SSH/etc.. and now want to ensure that traffic goes through the correct interfaces, but I'm worried that my exquisitely written rules will fail if they detect the wrong connection-mark..