Hello everyone! I'm trying to run a very simple script, but apparently I'm doing it wrongly. The steps the script should run are as follows: Read a list of IP addresses from an address-list For each of the IP address, check if it is a lease of the DHCP server If yes, extract the comment that the spe...
Hello there. I would like to ask for support for an annoying problem that I'm facing since a while. I have a RB750UP to manage a small office. For requirements reasons, the MK was set up to have a LAN network over the set of 5 ethernet ports, and a VLAN. In particular, the VLAN network is regulated ...
Hi there! I would like to have some clarification about how simple queues work in Mikrotik devices. In particular, is not 100% clear (or I'm not 100% sure to have understood it correctly) how the hierarchy works when there are parent and child queues. A schematic description of the hierarchy I'm wor...
Hi everyone, I would like to share an approach I adopted for the execution of a script that was blocked by a "failing" /tool fetch command. Specifically, I was trying to write a script that -- among the other instructions -- performs the remote reboot of an ADSL modem. This is done through...
Hi everyone, thanks for your replies. This was the mother of all the observations: if two devices in the same subnet are not connected directly to Mikrotik's Ethernet ports but to some external switch, there is no way to force the frames between them to take the long path through Mikrotik's CPU if t...
Here the export of my config # aug/05/2018 RouterOS 6.42.6 # model = 750UP /interface bridge add admin-mac=aa:bb:cc:dd:ee:ff auto-mac=no comment="created from master port" name=bridge1 protocol-mode=none /interface ethernet set [ find default-name=ether1 ] name=LAN1 set [ find default-name...
Hi, Normally packets from 192.168.0.0/x to 192.168.0.0/x are not actually routed, they are delivered directly between the devices at L2, so the firewall rules which act at L3 won't ever see these packets. You can switch on use of ip firewall rules also for frames forwarded between ports of a bridge ...
Thanks for the reply. I will make a configuration jump and post it. In the meanwhile I tested the 6.40.8 firmware and things seem to be the same O.O Now I'm wondering whether I'm going mad or what. I have a simple filter rule in the firewall like this Chain:forward src address: 192.168.0.0/24 dst ad...
Hi, To get the idea, what is wrong with your config, anyone on this forum will need to see it. Together with your network topology scheme. Otherwise it would be just further guessing :) yes you are completely right :) What is the most efficient and forum friendly way to post a router configuration? ...
Hi, I've recently upgraded from 6.40.x (I do not remember the x) to 6.42.6 on a RB750UP device. The upgrade itself went well, despite the fact that my firewall rules and queues are not working anymore. Traffic seems to be "avoided" by the rules and I cannot log even LAN<->LAN traffic. No w...
Hi, Have you already tried to set "use-ip-firewall" checkbox? Yes, I checked the box in the Bridge->Settings window. Nothing changed. It seems that packets are not "captured" by the firewall rules. This fact is quite annoying. I also tried to create a filter rule directly in the ...
Hi, That conversion is mandatory from 6.41 and Master port is replaced by bridge. I understand this point, but does it mean that former configurations are broken? If you want to filter traffic on the bridge you need either configure bridge filter rules or set use-ip-firewall=on in bridge settings. D...
Hi, thanks for the reply. I upgraded from a 6.40.x version, but to be honest I do not remember the "x" value. I did not have any fasttrack rule enabled. My problem is that if I put a rule in the IP->Firewall->Filter rules for instance to log traffic from 192.168.1.x to 192.168.1.y, no pack...
Dear all, after I've upgraded my RB750UP, I'm not anymore able to have my logging firewall rules and LAN queuing rules working. In particular, it seems that is impossible to log or apply any kind of rule over packets travelling inside the LAN. Even torch, fails to find connections between devices ov...
Hi, I'm currently facing a significant increase of ports scans, winbox tentative connections (I think due to the recent exploit published https://github.com/BigNerd95/Chimay-Red ) and a lot of other intrusion tentatives. In order to cope with this situation, I put in place a mechanism in the firewal...
Hi all, I am currently managing few Mikrotik routers remotely. All of them have always been updated frequently. However, I red that the last updates remove the functionality of "master port" and might induce in some problem after the system reboot. As I need to perform the upgrade remotely...
Dear all Recently I put in place some queuing rules in order to shape and better manage the traffic over my network (in particular for bandwidth eater services like Netflix & co.). A set of mangling rules together with marking actions have been put in place to accomplish this objective. The high...
Hi, thanks for the reply! Yes, I agree with you. As long as the connection is kept estabilished all the packets should be automatically marked irrispectively from the packet direction. Of course, if the connection is closed, then it will need to be re-estabilished in order to mark the packets again ...
Hi all, I'm trying to implement a mechanism to perform a management of the bandwidth for different services running over my network. For instance, Youtube and Netflix are some of those services involved in this process. In order to implement this procedure, my logical flow was the following: At fire...
Hi everybody, I'm a RB750UP user and I'm experiencing a weird issue. I can connect to the RB by means of Winbox without any problem if I'm connected to the local network. If I put myself outside the LAN, the connection to the RB via the public IP works, even though after few seconds winbox gets disc...
Hi, i've a mikrotik 750GL. On ETH3 i've set up 2 addresses 192.168.200.1/24 and 192.168.201.1/24 On Eht3 is running an Hotspot system, where the profile dispatch addresses with dhcp pool 192.168.200.2-192.168.200.254 On 192.168.201.0/24 network i have APs. If i connect to mikrotik router i cannot pi...
Hi Everybody, I'm new to this forum and new to Mikrotik's world. I've recently bought a 750GL Routerboard and started to make something cool. :o Following various tutorials on the net I've built up a Hotspot server and it works fine. This is my configuration: Eth1 -> Running DHCP Client, obtaining I...