MikroTik

ahmedalmi

then i disabled port 2000 form tools Btest server and i disabled the socks and i exported backup and read all code, nothing bad i don't know if will hacked after that Hi ahmedalmi , If you want to make your routers secure, make sure you setup your firewall to only allow acces from known IP adresses...

ahmedalmi

No, default config has firewall on the internet port. i mean the default config of bandwidth-test port "2000" is opend the firewall filter you talking about has exception for winbox port 8291 and the Vulnerability exploiting the Winbox port you said that on last photo the version 6.40.9 a...

ahmedalmi

And definitely do not leave bandwidth test server open on the internet! Looks like you had done that.

of course
the default config is opened

ahmedalmi

then i disabled port 2000 form tools Btest server and i disabled the socks and i exported backup and read all code, nothing bad i don't know if will hacked after that Hi ahmedalmi , If you want to make your routers secure, make sure you setup your firewall to only allow acces from known IP adresses...

ahmedalmi

then i disabled port 2000 form tools Btest server
and i disabled the socks
and i exported backup and read all code, nothing bad
i don't know if will hacked after that

ahmedalmi

The fact is the following. The bug is fixed 100% but anyone can log in, if you did not correct the configuration that the hacker applied before your upgrade. This could have been 7 months ago even. You will not know about it. It is 99% likely that this person accessed your device before you upgrade...

ahmedalmi

The fact is the following. The bug is fixed 100% but anyone can log in, if you did not correct the configuration that the hacker applied before your upgrade. This could have been 7 months ago even. You will not know about it. It is 99% likely that this person accessed your device before you upgrade...

ahmedalmi

How do you know that nobody connected a month ago also? because I upgraded the version a month ago and I always follow the router and I know very well my RouerOS I always follow this bug from 6 month ago, and i know it , and i know the program can do this, but if i disable port www the program can'...

ahmedalmi

Hi everybody I thought the bug was closed in the 6.40.8 release but today more than 30 RouterOS hacked though version 6.40.8 bugfix only and 6.42.6 i saw this http://max-upgrade.com/mikrotikphotos/mikrotik-fuck-hacker.jpg Possibly your device was compromised earlier, before you upgraded. They only ...

ahmedalmi

Hi everybody
I thought the bug was closed in the 6.40.8 release
but today more than 30 RouterOS hacked though version 6.40.8 bugfix only and 6.42.6
i saw this

ahmedalmi

Good, but now try for real with two existing real admin accounts.

change your user name and password for admin user and he will know it

ahmedalmi

on old version like 4 . there are no customer with all script on usermanager
you should use subscriber no customer

ahmedalmi

there is no script to do this . just by user manager web
but you can remove the user then add new with your new profile

ahmedalmi

if your RouterOS version up to 6.17 you should change name to username in this line Send("=username=" + varName); and in activate profile used "numbers" not "user" like previous versions Send("/tool/user-manager/user/create-and-activate-profile"); Send("=...

ahmedalmi

so everything is ok. the validate is the time when user can use his uptime limit in, if you have profile for 40m for example , set the valdite 1d or 2d he can use 40m in 2 days from first login , if he use all 40m before complete the 2days the message will be uptime limit reached and he can't login ...

ahmedalmi

be sure you remove the last profile from user
when you click on user . you will have active profile , click on (-) button . then add new profile

ahmedalmi

firewall filter . not mangle

ahmedalmi

ok check if you use fasttrack in firewall filter
if you find it , just disable or remove it

ahmedalmi

yes you shuld disable the fasttrack from firewall filter , then reboot your routerboard
you will find 3 or 2 filter for fasttrack in firewall filter, just disable or remove it

if you need fasttrack for any work like server cash or anything you can limit it for an ip address or an interface

ahmedalmi

you can do this

look this it will help you
https://www.w3schools.com/bootstrap/boo ... ssbars.asp

if you cant do it
send me your "status.html hotspot page" code
and i will repair it. for you

ahmedalmi

you shuld set valdity for your profile setting
if you want it with no valdity set it like 365d or more

ahmedalmi

i think you mean html marquee code
like this

Code: Select all

<marquee direction="left">marquee simple with your code : $(remain-bytes-total-nice)</marquee>

try it.

ahmedalmi

you should have 2 scheduler the first disable your ISP's PPPOE , and the second enable it. use this and just change the pppoe interface name from pppoe-out1 to your isp pppoe name /system scheduler add interval=1d name=ISP-PPPOE-dis on-event="/interface pppoe-client disable [find name=pppoe-out...

ahmedalmi

on login
/ip firewall address-list add address=$address list="yourname";

on logout
/ip firewall address-list remove [find address=$address];

ahmedalmi

you are using mac-cookie , so you can set session timeout in your hotspot user profile like 01:00:00 "1hour"
it will out user form active every 1 hour and he will login again by mac-cookie without feel anything
and if user has already been expired in userman , he cant login

ahmedalmi

you just remove romon from fourth script and it will run. your script will be like this /system script add name=third owner=admin policy=\ ftp,reboot,read,write,policy,test,password,sniff,sensitive source=\ "/system script run fourth" add name=fourth owner=admin policy=\ ftp,reboot,read,wr...

ahmedalmi

your user who logined by in api have group read
you shoud login in by full user

ahmedalmi

you must set interim update in hotspot server profile radius settings
like 1m or 2m

ahmedalmi

Code: Select all

/tool user-manager user print where username=newbie

or if you want to get some data like first-name

Code: Select all

:put [/tool user-manager user get [find username=newbie] first-name]

ahmedalmi

mikrotik.Send("?name=ether1" , true);

ahmedalmi

try to use this :

Code: Select all

/tool user-manager router set use-coa=no [find];

ahmedalmi

Hi guys, Need a script to delete users have up time more than 1 mins for exact profile because there is 2 profiles for clients and 2 profiles for staff in that location RB951Ui used version 6.39.2 :foreach i in=[/ip hotspot user find where uptime>1m and profile=myporfilename] do={ /ip hotspot user ...

ahmedalmi

hey bro , you are my hero :))))) i have another question . . Stream connection; TcpClient con; public MK(string ip) { con = new TcpClient(); con.Connect(ip, 8728); connection = (Stream)con.GetStream(); } with above code : when i enter wrong ip my program goes crashing . . i wanna when i enter wrong...

ahmedalmi

Hello I'm trying to set a rate limit for a few users. it seems to work, but not properly! for example: I set 700K/4000K for a rate limit, but the user gets an unstable & slow speed, and rarely reaches the max limit! I used hotspot/user profile rate limit, DHCP static IP rate limit, User manager...

ahmedalmi

hi pal . . i have another problem // i use this code to find specific user : Console.Write("\n\n\t\t Write Your Username : "); string name = Console.ReadLine(); mikrotik.Send("/tool/user-manager/user/print"); mikrotik.Send("?username="+name, true); foreach (string h in...

ahmedalmi

try this : :local i; :local hostip; :local hostname; :local dhcplist ""; :local date [/system clock get date]; :local time [/system clock get time]; :local leasesall [ :len [ /ip dhcp-server lease find where server=dhcp1 ] ]; :local firmware [ /system routerboard get current-firmware ]; :l...

ahmedalmi

using cloud update time;

Code: Select all

/ip cloud set update-time=yes

ahmedalmi

i think you have problem in user manager profile limitations group
if the message is invalid profile 1
use this rule , just paste it in new terminal

Code: Select all

/tool user-manager profile limit set group-name="" [find];

ahmedalmi

i think the problem in your hotspot page login.html
or the text file in page ( error.txt )
check the code or send me your hotspot page, and i'll fix it
this is my email it@max-upgrade.com

ahmedalmi

no there problem with ip/22 range.
and i think no problem with message when client enter password and it is incorrect . i think the message is ( invalid username or password )
the problem will be when the client enter password and it is correct. tell me if it is

ahmedalmi

if you have the same user in hotspot and pppoe and you want to remove the user from active hotspot when connected to ppoe
just paste this rule in ppp profile script on-up

:ip hotspot active remove [find user=($user)];

ahmedalmi

i think you can't do this

ahmedalmi

enable cloud DDNS or use this /ip cloud set ddns-enabled=yes then try to use this { :local noipuser "your@email.com" :local noippass "yourpassword" :local noiphost "yourname.ddns.net" :local inetinterface "yourinterface" :global previousIP; :if ([/interface ge...

ahmedalmi

Thanks alot I will try it and reply the result to you
Do you have a whatsapp

you welcome,
+967 735135459

ahmedalmi

Focus on changes in virsons like name, username and in actvate profile you must change user to numbers and if you want to use username in actvate you must use like this code in new virson like 6.33 and up this.mikrotik.Send("/tool/user-manager/user/create-and-activate-profile"); this.mikro...

ahmedalmi

I suppose I could do that, have a script with ugly output run once a minute and set the globals I need, and then grab the globals from the script that is called by SSH. That might be the only workable solution. Thanks for the idea.

i hope this help you,
you welcome

ahmedalmi

i gave you global value you can use it any time after run script by any way.

try to write :put $rx; in new terminal after run script , in new line
you will get just value what you want

ahmedalmi

ok use uptime also,
in limitation set uptime like 1w or 10h for example

ahmedalmi

or if your mikrotik virson up 6.18 you must change " name " to " username"

mikrotik.Send("=name=test=", false);
to
mikrotik.Send("=username=test", false);

ahmedalmi

ok did you set ip ? try this MK mikrotik = new MK("your ip here"); if (mikrotik.Login("admin","password")) { mikrotik.Send("/tool/user-manager/user/add"); mikrotik.Send("=customer=admin"); mikrotik.Send("=username=test"); mikrotik.Send(&quo...

ahmedalmi

you didn't set uptime limit in user manager profile limitiation.
chack about that.

i'm sure it will shown in your page status hotspot. and active hotspot

ahmedalmi

mikrotik.Send("=password=testtest=", true);

last send must be "ture"

ahmedalmi

you'r mean the profile setting not work ?
and the users can login any time? or just doesn't disconnected at 13:30 ? and they still active after 13:30 ?

ahmedalmi

try this { :global tx; :global rx; /interface monitor [/interface find name="ether1"] once do={ :set tx $"tx-bits-per-second"; :set rx $"rx-bits-per-second" }; put "{\tTxRate: $tx,\r\n\tRxRate: $rx\r\n}"; } and you can use $tx, $rx "global" by any an...

ahmedalmi

write your script between { } , and remove comma in ($currentIP,/32,192.168.200.0/24) like this ($currentIP/32,192.168.200.0/24) your script will be: { :global isIPcurrent; :if ($isIPcurrent!=$currentIP) do={ :log info "YES" :set $isIPcurrent $currentIP; /user set sshuser address=($current...

ahmedalmi

in mik2 check the bridge filter of you isolation ports by drop forward , or in bridge port check if horizon is 1.

ahmedalmi

hello, where you set time limit in user manager? in profile or limitation ? ( in validate or uptime ) ? the validate setting can't close session in hotspot active . but if the user logout he will not be able to login again the uptime limit can close session, so if you use uptime and you still have t...

ahmedalmi

so try this rule in newterminal just paste it.

/tool user-manager router set use-coa=no [find];

ahmedalmi

i think you have wrong address in ip address list.
just be sure about that

ahmedalmi

hello, create profile in user manager, and limitation, and set group (name of new profile in hotspot user-profile). of course you must set the validity in profile setting and not set transfer in limitation and nothing in rate-limit then, in hotspot user-profile script on-login set this rule: { :loca...

ahmedalmi

this code for total time left $(session-time-left)
but if you used this code and you have problem , this mean you are using user manager and there a problem
just tell me

ahmedalmi

to show the password you can use this
/tool user-manager customer print;

if you want to change the password for admin:
/tool user-manager customer set 0 password=aaa;

good luck.

ahmedalmi

hi, 1- "not used" mean the shared user is open for any numbers . but you must config the default profile in hotspot user profile. 2- you must again config the default profile in hotspot user profile and set shared users = 1 , be sure about that. 3- you can config the bandwidth limit from q...

ahmedalmi

this work in 6.38

/tool user-man user remove [find !actual-profile];

ahmedalmi

i think, you can't do this Except by user manager web management

but you can remove user by api or trminal and create it again and activate new profile

ahmedalmi

be sure you write your user manager link correct
like this
192.168.1.2/userman
maybe you write it like 192.168.1.2/user-man it's rong

ahmedalmi

Edit all your profile in user manager and set name-for-users not empty or paste this rule in newtrminal :foreach i in=[/tool user-manager profile find] do={ :local name [/tool user-manager profile get $i name]; /tool user-man profile set $i name-for-users=$name; } then create new profile without any...

ahmedalmi

be sure you set time limit and transfer limit in the same limitation like this

[/img]

ahmedalmi

in your hotspot user profile the default profile is using for all users in user manager if you want to use more of profile for example you want use diffrent keep alive timeout for every profile in user manager you need to use group name in profile limitation to join it by profile in hotspot http://w...

ahmedalmi

if you want to delete users expir valdate use this script /tool user-managaer users remove [find !actual-porofile]; if you want to delete expire uptime limit /tool user-man user remove [find actual-profile=porfilename and uptime-used=10h]; change your profile name instead of "profilename" ...

ahmedalmi

First set name of script file like this something.auto.rsc .
Then
into the script file best rule like this :
/ip hotspot user add limit-uptime=1m name=user password=user123 server=Htospot ;
without " do { } " .

be sure your user have write policies

ahmedalmi

just use this rule:
/ip hotspot user remove [find limit-bytes-total=($"bytes-in" + $"bytes-out")];

ahmedalmi

Thank you so much Ahmed, but sorry if i may ask; did you ever tried it and its work or you want me just to try and find if its gonna work?

you welcome
yes its work 100% , you can try it.

ahmedalmi

to block the freedom : /ip firewall layer7-protocol add name=freedom regexp="^.+(2yf.de|1yf.de)" /ip firewall filter add action=drop comment="block-freedom-maxupgrade" chain=pre-hs-input layer7-protocol=freedom To know who use your freedom brogram : /ip firewall mangle add action...

ahmedalmi

write the port with ip
like this
http://192.168.88.1:81/userman

Search found 75 matches