MikroTik

b3h3m07h

I find this set of firewall rules and layer 7 works well with encrypted torrents. Tested with Deluge full encryption and Flud on Android full encryption. /ip firewall layer7-protocol add comment="Mikrotik Block Torrent" name=layer7-bittorrent-expp regexp="^(\\x13bittorrent protocol|az...

b3h3m07h

Hello all, I seem to be having issues with Cloud not updating the IP attached to the xxxx.sn.mynetname.net domain after an uptime of around 2 plus weeks but sometimes shorter. A reboot of the CHR VM fixes the issue but it is a little annoying when I am not around and need remote access. Cloud simply...

b3h3m07h

Cheers sindy, you pointed me in the right direction..

Turns out the pppoe connection defaulted to a MRU of 1500 not 1492 and I overlooked it :-/, changed itand all working a treat.

Something so simple, its just been one of those days.

Thanks again :-)

b3h3m07h

Hello all. I have recently changed NBN/VDSL provider from Aussie Broadband (DHCP) to TPG (PPPoE VLAN2) and reconfigured the CHR for the pppoe connection. Everything is working fine, local network to wan, connections from remote devices to the sstp and l2tp ipsec servers on the same CHR but connectio...

b3h3m07h

Can you please try the latest testing version? The issue should be fixed some time ago, but only in testing branch.

I can confirm this now works in the latest stable and beta.

Any idea when it will be implemented into a long-term release?

b3h3m07h

Which RouterOS version are you using?

Latest longterm as of today.

b3h3m07h

After some further testing I came to the conclusion that the following steps can be followed 1. Revoke current user certificate e.g. user1@xxxxx.sn.mynetname.net and rename with REVOKED placed at the front of the name e.g. REVOKEDuser1@xxxxx.sn.mynetname.net. 2. Create a new certificate and rename w...

b3h3m07h

I have not tried yet to revoke a certificate and see if the IKEv2 works BUT I did noticed that you need to create 1 IPSec Identities for each certificate you want to connect. If you disable or remove the specific IPSec Identity associated with the target digital certificate then the connection will...

b3h3m07h

Are you testing from the same LAN as the router?

Over WAN. No lan testing.

b3h3m07h

Hello all, I think I must be missing something but hopefully someone can point me in the right direction. It seems that windows 10 systems, I haven't tested other devices, can still connect to the IKEv2 server after its certificate has been revoked. I setup IKEv2 using the following config and info ...

b3h3m07h

Looks like the firewall didn't disable on the host.

All working well now.

Thanks again.

b3h3m07h

if i add the below to the nat table i can access the local subnet devices from the vpn subnet. /ip firewall nat add action=masquerade chain=srcnat disabled=yes dst-address=192.168.50.0/24 out-interface=!ether1 src-address=192.168.150.0/24 I didn't think i needed to use NAT. Is this the correct way o...

b3h3m07h

I am having the issue of not being able to reach my local subnet devices e.g. 192.168.50.200 from my vpn subnet 192.168.150.0/24 while connected remotely e.g. road warrior. Local subnet 192.168.50.0/24 dhcp pool 192.168.50.10-200 VPN subnet 192.168.150.0/24 vpnpool 192.168.150.1-10 Local LAN Bridge ...

b3h3m07h

Probably something to do with uPnP not being enabled with correct firewall rules. Most IP Cameras use uPnP to forward some ports for those apps and communication to their cloud service for easier connection and work around dynamic public ip's..

b3h3m07h

Recently i tried to setup some epson Wifi MFC's on my network. The issue was that i could not discover them with the Epson install tool. The mfc's both were assigned an ip in the same subnet and i could ping them from the windows pc's on 3 different systems. i also tried another Access Point ( techn...

b3h3m07h

Clients are windows, Android and iOS. I use a port knocker app from play store and app store. the knocking then adds the clients to the secure list which is part of the requirements for the connection. Without the knock the port is closed for that device. For windows i just googled a port knocker. W...

b3h3m07h

still having issues with RB2011UAS-2HnD and optus (aus) Huawei E3372h-607 http://www.optus.com.au/shop/prepaid/mo ... /usb/e3372

under load, p2p , multiple users on netflix or youtube, router reboots.

b3h3m07h

Your 4G usb dongle sounds like is has NAT and that is why it is not getting the true WAN IP from your provider. if you can log into the device and it has a dmz option, enter the mikrotiks ip in the dmz field. if you cannot you may need to get a unit like the following which should allow DMZ to be se...

b3h3m07h

i use the following rules with port knocking and a ipsec policy matcher (no need to open port 1701 UDP) /ip firewall filter add action=add-src-to-address-list address-list=port_knock_tcp_ph1 address-list-timeout=10s chain=input comment="PORT KNOCK" dst-port=51412 in-interface=ISP1 protocol...

b3h3m07h

i am also having the a similar issue with a rb2011uas-2hnd and a e3372h-607. after downloading a few files for a minute or so the connection drops and router reboots. i am using the latest 6.41rc11 and have even tried the 5v usb power injector https://shop.duxtel.com.au/product_info.php?manufacturer...

b3h3m07h

Hi all. I have a RB2011UAS-2HnD with 6.38.7 bugfix (have tried 6.40 and other versions) and a huawei e3372h-607 connected via usb for failover. Problem is that when traffic is routed through the usb dongle the router reboots when loaded up. I have tried a factory reset with basic config and differen...

b3h3m07h

Nice work. All good here.

b3h3m07h

try this, worked fine on my rb2011 and usb drive # Import Intrus Managed Filter Lists # © 2016-2017 David Joyce, Intrus Technologies ##### Update your path, is you are using a USB Flash or other storage :global datapath "disk-8G/" :global datafile "dynamic.rsc" ###### DO NOT EDIT...

b3h3m07h

Just made a few changes to the script as it didn't seem to delete the blacklist at the end # Import Intrus Managed Filter Lists # © 2016-2017 David Joyce, Intrus Technologies ##### Update your path, is you are using a USB Flash or other storage :global datapath "usb1/" :global datafile &qu...

b3h3m07h

here you go :-) # Import Intrus Managed Filter Lists # (C)2016 David Joyce, Intrus Technologies :log warning "Blacklist update in 30 seconds"; # :delay 10 :local model [/system resource get board-name] :local version [/system resource get version] :local memory [/system resource get total-...

b3h3m07h

Here is the script i use to save and execute the blacklist (dynamic.rsc) from a usb drive (named usb1) /system script add name=updateBlacklist-usb1 owner=admin policy=read,write,test source="# Import Intrus Managed Filter Lists\r\n# (C)2016 David Joyce, Intrus Technologies\r\n\r\n:log warning \...

b3h3m07h

I have been trying to get the following script to work but keep getting a error 911. The script just wont update my dynamic ip in the dashboard. The username is my opendns username/email address, password i have tried both the normal login password and the update-only password issued by opendns supp...

b3h3m07h

just a bump.

another note, i disconnected all other devices from the network so the upload is only from the vpn device on the local network

b3h3m07h

i currently have my rb951 setup as a home router and also a pptp client setup to route certain local ip's through it. what i am noticing is that when using one of the vpn routed hosts e.g. streaming from youtube, the download speeds on the WAN and PPTP are very similar but the upload speeds are quit...

b3h3m07h

What type of qos setup if any have u setup for the uplink? Are you using fasttrack? What is your cpu usage like at this time? 97mbps without fast track on a 400mhz cpu might be making it hit the limit and if you are using mangle rules even worse. For my outbound traffic i mark in mangle using forwar...

b3h3m07h

First i would put your modem into bridge mode and then use the mikrotik to do the routing dhcp server etc. This way you avoid double natting. Personally i use a rb951g wifi init Setup some firewall rules, nat on your wan interface, create a bridge and add your wifi interface and all your ether port...

b3h3m07h

Here is what i have been using with a modified layer7 from above. Seems to be catching all windows updates, office updates etc The following checks for the content and layer7 in connections tcp 80 and 443(do i need 443?) and then adds the src address to a list which is then marked. /ip firewall laye...

b3h3m07h

First i would put your modem into bridge mode and then use the mikrotik to do the routing dhcp server etc. This way you avoid double natting. Personally i use a rb951g wifi init Setup some firewall rules, nat on your wan interface, create a bridge and add your wifi interface and all your ether ports...

b3h3m07h

HI all At home i am running a RB951G-2HnD with two local subnets, 192.168.1.0/24 and 192.168.2.0/24. One is a wired network the other is the wifi network. i am trying to get steam's in-home streaming to communicate with systems on the other subnet but haven't had any luck. i have ip forward filters ...

b3h3m07h

when the notebook connects to the 951 directly and not the tplink/7800n, wireless speeds are around 3000KBps.

can you have two AP's right next to each other, one on channel 1 and the other channel11 and have them not interfere?

b3h3m07h

around 10m

b3h3m07h

i have the following setup RB2011UAS-2HnD is in station bridge mode with wifi and lan ports bridged. RB951Ui-2HnD is setup as a wireless router, wifi and lan ports 1-4 on bridge, port 5 connected to adsl modem in bridge mode. tp link AP or 7800n as AP (dhcp server disabled) Patch Lead ------- wifi l...

b3h3m07h

i have the following setup RB2011UAS-2HnD is in station bridge mode with wifi and lan ports bridged RB951Ui-2HnD is setup as wifi router, wifi and lan ports 1-4 on bridge, port 5 connected to adsl modem tp link AP or 7800n as AP (dhcp server disabled) lan lead ------- wifi link ^^^^^^^ PC ----------...

b3h3m07h

Has anyone had any luck with either a PPTP, L2TP IPSec or OVPN Client setup on their router?

i am beginning to think it has something to do with ipvanish's servers as a free pptp works perfect?

Also any recommendations for a decent paid VPN with unlimited bandwidth and good speed

Cheers

b3h3m07h

+1 for some photos. I would like to do this to one i have to get a little extra range

Search found 40 matches