MikroTik

dotnet

i think you will re-setup your web-proxy in your Mikrotik. if you again face the same problem, please show your configuration.

dotnet

http://wiki.mikrotik.com/wiki/MikroTik_RouterOS

dotnet

To configure 10k for p2p traffic.

/queue simple
add target-address=<network_address_of_your_local_network> max-limit=10k/10k p2p=all-p2p

It limits widely used p2p protocols, except encrypted p2p.

best regards

dotnet

@karina We made a RB1100 with full BGP feed on it. Routing traffic from clients to up to 10 000 random Internet IPs a) Connection tracking disabled - 1200-1300Mbps b) Connection tracking enabled, but no firewall rules - 680-750Mbps c) Connection tracking enabled, all traffic passes trough 100 firewa...

dotnet

@karina

how much Traffic is passing ???
its depend on your Router (Firewall filter & configuration)
Actually micro sd card is not suitable for heavy data transfer.

best regards

dotnet

@xtrego / ip address add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=Local add address=192.168.2.1/24 network=192.168.2.0 broadcast=192.168.2.255 interface=wan1 add address=192.168.4.1/24 network=192.168.4.0 broadcast=192.168.4.255 interface=wan2 /ip route add dst-ad...

dotnet

@max

it's a basic upgrade or upload system for Mikrotik Router.
you may follow the link for reference:
http://wiki.mikrotik.com/wiki/Manual:Upgrading_RouterOS

best regards

dotnet

@max open your winbox then drag & drop all package of 6.0 in you winbox file menu. then go to system >> upgrade >> upgrade package source >> click + sign >> router ip address >> admin >> password (router password) >> Apply. then you will reboot the system. i hope your system will upgrade automat...

dotnet

@max i don't know what's your actual hotspot configuration. Here is a Example: /ip address add address=192.168.0.1/24 comment=Out to users disabled=no interface=LAN network=192.168.0.0 add address=192.168.1.6/24 comment=INTERNET disabled=no interface=WAN network=192.168.1.0 /ip pool add name=hs-pool...

dotnet

@max

what's your method for internet user ?
pppoe or ip base ???
have you any load balancing ?
pls export your configuration ...

best regards

dotnet

@max You can block file download by Mikrotik Proxy. Example /ip proxy access add path=*.avi action=deny /ip proxy access add path=*.flv action=deny /ip proxy access add path=*.mkv action=deny You can block any web site via domain name. Example: /ip proxy access add action=deny disabled=no dst-host=f...

dotnet

@ max

what about your Mikrotik-Proxy ?

dotnet

@ karina

Don't use "always from cache" for Mikrotik Web-proxy.
This is one kind of force command.
So it will be missing sometimes & user will be get an error page (By default).
Bcoz Mikrotik Web-proxy is a Basic Web-proxy.

Best regards

dotnet

/ ip address add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=Local add address=192.168.2.1/24 network=192.168.2.0 broadcast=192.168.2.255 interface=Wan (Connected with Mikrotik & Proxy-server by Cross cable which is your Wan) /ip route add dst-address=0.0.0.0/0 g...

dotnet

@max please install the Mikrotik Software in your pc. then you will active Web-proxy & activate your secondary hard disk for data caching. Then what's your method for your client pc's ? I will solve your problem with your method or policy. please show me your previous Router configuration. best ...

dotnet

ok. Actually you have to need more customization in firewall rules. Here is the solution. Detect and Block Hotspot Shield program traffic (vpn application) /ip firewall mangle add action=add-dst-to-address-list address-list=WhiteList \ address-list-timeout=4d4h chain=prerouting comment=WhiteList con...

dotnet

@ reinerotto

Thanks. i know what is Squid/LUSCA (Nginx,Ruby,storeurl.pl)
if anyone want to advise from me, i will try to give him suggestion.

best regards

dotnet

@ ba7abak Actually Mikrotik Web-proxy is a Basic proxy-server. Not for customization proxy service. So Master pc have (1 LAN - 2 WAN ) the second pc have 2 LAN (if it's Mikrotik) Otherwise second pc have to need (1 Lan - 1 WAN) [for Squid server] @ reinerotto New user can not properly setup & ma...

dotnet

please try this link. i hope you have got something.

http://wiki.mikrotik.com/wiki/How_to_De ... ication%29

best regards

dotnet

if you want to build an external Mikrotik web server for caching,
so you have to need a pc which have P3 or P4 Processor, 2GB Ram, 2 hard disk
(one is for operating system & 2nd is for data caching), 2 Lan Card & Thermal casing.
then you will make a good web-proxy server.

best regards

dotnet

ok. I think your mikrotik product RB951-2n is not support any Memory card or Usb stick. So you have to need an external PC that will be caching content. Otherwise you can't do it. Now you will make a Squid server or External Mikrotik Web proxy server for giving your client this type of service. I wi...

dotnet

http://forum.mikrotik.com/viewtopic.php?f=2&t=70400

*** just try to follow the rules & don't copy-paste.

then give me feedback what do you want actually & send me your configuration

best regards

dotnet

I hope it will be work for you. Bcoz i have solve some problem with this nat for web proxy. Please don't copy-pase. Just follow the rule: /ip firewall nat add action=redirect chain=dstnat comment="redirekt port 80 na web proxy port 8080" disabled=no dst-port=80 in-interface=!ether4 protoco...

dotnet

Here is describes 2 Method for your load balancing (PCC & ECMP) Please don't copy-paste. Just follow the rules: ++++ PCC ++++ / ip address add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=Local add address=192.168.2.1/24 network=192.168.2.0 broadcast=192.168.2.255...

dotnet

1st your have to need setup a bridge then it will be ok
pls follow the rules :

/ interface bridge
add name="bridge1"
/ interface bridge port
add interface=ether2 bridge=bridge1
add interface=ether3 bridge=bridge1

/interface bridge settings
set use-ip-firewall=yes

Best regards

dotnet

already i told that 1mb = 1024000 so you will multiply your acutual bandwidth quantity. *** just for example 50 mb = (1024000 x 50)= 51200000 (Max Limit for Main) Now try yourself. I hope you will success ... you have to setup Bridge in your Router for Better performances. just follow the rules / in...

dotnet

yes it will be work. if your line is 1 mb *** 1mb = 1024000 *** 2mb = 2048000 just change your requirement /queue simple add name="main" target-addresses=192.168.0.0/24 max-limit=2048000/2048000 *** you can specific also your ssl connections. /queue simple add name="ssl" parent=m...

dotnet

few change in your configuration : pls follow this rules /ip firewall filter add chain=input connection-state=established comment="Accept established connections" add chain=input connection-state=related comment="Accept related connections" add chain=input connection-state=invali...

dotnet

your user's network address

dotnet

Follow the rule ...
Don't copy-paste ....

http://forum.mikrotik.com/viewtopic.php?f=2&t=69939

http://forum.mikrotik.com/viewtopic.php?f=2&t=70715

dotnet

yes you can limiting p2p pls follow the rules : /queue simple add name="main" target-addresses=192.168.0.0/24 max-limit=512000/512000 add name="http" parent=main packet-marks=http max-limit=256000/256000 priority=1 add name="p2p" parent=main packet-marks=p2p max-limit=5...

dotnet

http://wiki.mikrotik.com/wiki/Manual:IP/Hotspot

dotnet

i think you don't need to block p2p. it will be open but bandwidth will set as your requirement ... just follow the rule ... /queue simple add name="main" target-addresses=192.168.0.0/24 max-limit=512000/512000 add name="http" parent=main packet-marks=http max-limit=256000/256000...

dotnet

http://forum.mikrotik.com/viewtopic.php?f=2&t=70627

dotnet

Here is describes 2 Method for your load balancing. ++++ PCC ++++ / ip address add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=Local add address=192.168.2.1/24 network=192.168.2.0 broadcast=192.168.2.255 interface=wan1 add address=192.168.4.1/24 network=192.168.4.0 b...

dotnet

In this scenario , Mikrotik have Three interface card. Description is as follows 1) LAN interface = Connected with user switch 2) WAN interface = Connected with ISP WAN 3) Proxy interface = Connected with SQUID PROXY Server via Crossover cable *** SQUID Server have two lan cards. One is connected wi...

dotnet

that's true.
find your solution with Firewall filter, mangle, Traffic Shaper, Load balancing, queue rule & Block your proxy for open network.

dotnet

for your reference only ...

http://wiki.mikrotik.com/wiki/Upload_wa ... ad_another

dotnet

I hope this will be work for you /ip route add dst-address=0.0.0.0/0 gateway=113.20.16.20 routing-mark=to_wan1 check-gateway=ping add dst-address=0.0.0.0/0 gateway=227.30.32.30 routing-mark=to_wan2 check-gateway=ping add dst-address=0.0.0.0/0 gateway=192.168.1.1 distance=1 check-gateway=ping add dst...

dotnet

http://forum.mikrotik.com/viewtopic.php?f=2&t=69939

dotnet

your configuration is ok. but something may be edit. just try this way. /ip proxy enabled: yes src-address: 0.0.0.0 port: 8085 parent-proxy: 0.0.0.0 parent-proxy-port: 0 cache-administrator: Dotnet max-cache-size: unlimited cache-on-disk: yes max-client-connections: 1000 max-server-connections: 1000...

dotnet

thx for your configuration. But some change in your /ip firewall Filter or Nat i am sharing my configuration for your reference: With PCC or ECMP Load Balancing Method : ++++ PCC ++++ / ip address add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=Local add address=192....

dotnet

pls follow the both link for your answer.

http://forum.mikrotik.com/viewtopic.php?f=10&t=64894

http://forum.mikrotik.com/viewtopic.php?f=9&t=70260

Best regards

dotnet

pls show your full configuration.
May be something wrong in your setup ....

Best regards

dotnet

CONFIGURE DDNS SCRIPT AND SCHEDULER ON MIKROTIK ddns-script-modem-in-pppoe-mode- code. (For your copy & paste facility) :global ddnsuser "user-id from changeip.com" :global ddnspass "passwd" :global ddnshost "full hostname" :global ddnsinterface "ether1" #...

dotnet

you should need 1 mangle rule in starting .. /ip firewall mangle add action=mark-packet chain=output comment="Cache Hits" disabled=no dscp=4 new-packet-mark=cache-hits passthrough=no /ip dns set allow-remote-requests=yes cache-max-ttl=1w cache-size=5000KiB max-udp-packet-size=512 servers=8...

dotnet

is it single Wan Link ?
PCC or ECMP ???
Then what's your Mangle ?
Pls show your complete Configuration with Web-proxy..

Best regards

dotnet

I don't know what's your configuration? PPPoE or Hotspot .. i am described here only PPPoE & user manager setup for your pin & password This guide will illustrate howto create PPPoE server in MIKROTIK RouterOS (I used v 5.21 in this example). This article will also demonstrate on how you can...

dotnet

200mb & 10000 user ....

i think you must be used 3rd party Radius Server.
Mikrotik User Manger is so good but not in Big Environment.
you have to need DMAsoftlab Radius Manger for better result & as per your customization.

best regards

dotnet

I think Mikrotik has not proper automatic script for pppoe or hotspot expired user. May be following these rules for your expired user. Adding IP pool for Expired / Non Payment Users /ip pool add name=Expired-Pool ranges=192.168.30.1-192.168.30.254 Adding Profile for Expired / Non Payment Users /ppp...

dotnet

pls show your configuration of Hotspot & User Manager ....

dotnet

I think your mangle rule should be some changed /ip firewall mangle add action=mark-connection chain=input disabled=no in-interface=wan1 new-connection-mark=wan1_conn passthrough=yes add action=mark-connection chain=input disabled=no in-interface=wan2 new-connection-mark= wan2_conn passthrough=yes a...

dotnet

I have already used my Mikrotik below setup for PCC Load Balancing with Web Proxy. I hope it will be work for all. I am working on MikriTik RouterOS 5.23 (X86) My Mikrotik has 3 interface. / ip address add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=Local add address...

Search found 53 matches