MikroTik

lbachero

Do you mean when your client goes in IP > NEIGHBOR and see your MAC and IP?
If that's it, you can disable the discover:

/ip neighbor discovery set bridge-interface discover=no

lbachero

Do you want an example?

/ip firewall nat add dst-address=$public_ip protocol=tcp_or_udp dst-port=$range_ports to-address=$private_ip to-ports=$range_ports

Regards,
Leandro de Lima Camargo

lbachero

Here is a Mikrotik forum, not an English forum, man.
Note I helped him with the only possible option to solve his problem. And with bad english! xD

I finish my collaboration on this topic!

Regards,
Leandro de Lima Camargo

lbachero

Guys, He said that Winbox showed an error when he try to connect by MAC. If you can't connect by MAC, there isn't another option. Unfortunately, you need to reset and lost all configurations. Regards, Leandro de Lima Camargo Thanks Leandro, it seems that sometimes reading isn't as easy as it looks ...

lbachero

Besides of this /29 subnet, do you have an another public IP from ISP?

Regards,
Leandro de Lima Camargo

lbachero

Can you describe your network?

What are the models of routers?
How many ports they have?

Regards,
Leandro de Lima Camargo

lbachero

Do you have 2 Public IP's on the same interface? How? So, if you want to choose a main gateway, you can set the metric attribute. The first with metric 1 and the second with metric 2. You can set it creating static routes or setting on the WAN configuration (DHCP, PPPoE, etc). Or you can create a ba...

lbachero

Guys,
He said that Winbox showed an error when he try to connect by MAC.

If you can't connect by MAC, there isn't another option. Unfortunately, you need to reset and lost all configurations.

Regards,
Leandro de Lima Camargo

lbachero

If you want to use the second router in the same subnet, you need to put the second router as a bridge device.
I don't know which router you have but the basic is put an IP address from the subnet (192.168.88.0/24) on it, disable DHCP server and connect the cable to LAN port.

lbachero

I need to do this to tcp too?

No, only in UDP (Recursive).

This code catch all dns packets e redirect to dns that is configured in DHCP on Mikrotik?

Yes, it will catch every DNS request and redirect to RB.

lbachero

Just remember:
Someone can configure DNS manual on its machine.

So, you can do this:

/ip firewall nat add chain=dstnat src-address=!192.168.88.10 protocol=udp dst-port=53 action=redirect to-ports=53

lbachero

I'll suggest to liberate only ports 587,110,etc.
But how they use with browser too, it's not possible.

You can limit with Connection Bytes, how you said, or create a hotspot with bytes limit per user.
Both works.

lbachero

The email access is through Browser or Mail Client/APP?

lbachero

The option "Transparent Proxy" on User Profiles is checked?

lbachero

Can you post your firewall config?

lbachero

It's complicated... You could drop all IP's instead of Microsoft and Google blocks IP. The problems is the devices will can to access YouTube, Bing, Google+, etc. You can do something like this: /ip firewall filter add chain=forward in-interface=$LAN dst-address=!allowed_blocks action=drop I don't k...

lbachero

Why do you have 2 IP's on WAN interface?

lbachero

/ip firewall address-list add address=90.111.222.0/24 list=Allowed add address=90.200.100.0/24 list=Allowed /ip firewall nat add action=dst-nat chain=dstnat comment="Port Forward" src-address-list="Allowed" dst-port=80 in-interface=ether1 protocol=tcp to-addresses=192.168.1.200 ...

lbachero

Who has the Public IP?
You need to redirect on this device too.

Sent from my XT1225 using Tapatalk

lbachero

Create a DNS name like: /ip dns static add name=www.facebook.com address=127.0.0.1 Or to an IP with web server and block page. It's a solution instead of layer 7, like normis said. Sent from my XT1225 using Tapatalk OK, I create DNS name, but how to block facebook.com? can I need firewall rule?, if...

lbachero

Create a DNS name like:

/ip dns static add name=www.facebook.com address=127.0.0.1

Or to an IP with web server and block page.
It's a solution instead of layer 7, like normis said.

Sent from my XT1225 using Tapatalk

lbachero

any body cant help me?

Did you already read about netflow?
You can export all connections to a server.

Sent from my XT1225 using Tapatalk

lbachero

No, just UDP.

lbachero

Both routers.

Router A (10.20.0.X)
Router B (10.20.1.X)

You redirect port 37777 from router A to router B, and router B to device with IP 10.20.1.224.

lbachero

It depends.
Your ISP needs to be tagged?
If not, don't tag.

lbachero

You can do it like this:

/ip firewall filter add chain=input protocol=tcp dst-port=21-23,80,8291,8728,8729 src-address-list=!trust action=drop

So, put your IP in trust list:

 /ip firewall address-list add list=trust address=X.X.X.X comment="Home Public IP"

lbachero

Just create a VLAN with ID 30 and create a PPPoE Client over this VLAN.

lbachero

I'm using L2TP + IPSec (Because Sierra doesn't support PPTP). Just enable L2TP-Server with IPSec option: /interface l2tp-server server set enabled=yes ipsec-secret=*shared-secret* use-ipsec=yes I'm using login with Radius, so: /ppp aaa set use-radius=yes It's not necessary to configure anything in I...

lbachero

Hello! I have a script called "upgrade" on /SYSTEM SCRIPTS. #Upgrade Package List /system upgrade refresh :delay 10s #Download the Packet /system upgrade download-all :delay 55s #Add scheduler to run a another script called firmware /system scheduler add disabled=no name=upgrade start-time...

lbachero

Hello. Please, paste your export from firewall/mangle. Basically, you need to use mark-routing with src-address (or in-interface, if you use static interface for clients). /ip firewall mangle add chain=prerouting src-address=Client_IP_A action=mark-routing new-routing-mark=route1 /ip firewall mangle...

lbachero

Hello.

Is there any OID to monitor how many clientes are connected per AP?
I searched in the forum and just found this OID: 1.3.6.1.4.1.14988.1.1.1.6.0, that shows all clients.
With last MIB file, it doesn't work.

Thanks.

lbachero

Hello.

Could you find anything?
I need this too.

Thanks.

Regards,
Leandro de Lima Camargo

lbachero

Hello,
Can i reset OID of wireless interfaces without reset configuration?
I want to monitor frequency in each router.

Thanks.

lbachero

Hello,
Is possible no have proxy DNS in hotspot?
The hotspot redirects UDP/53 for UDP/64782 and i don't wanna this.
I searched in forum but i not found a solution.

Thanks!

lbachero

Links work fine. We also have testers from Brazil, who use the app.

I tried to search for TikApp but i haven't found.

lbachero

We have started working on an Android utility that gives you ability to configure your router more conveniently, while on the go. You must apply to the closed testing group: https://plus.google.com/communities/108325974373530666627 Then you will be given access to the download: https://play.google....

lbachero

Which log type you chose? (/system logging)
Have a software from Mikrotik site (MT Syslog) that can read webproxy log.
But i never try to open a log file in this software, only in real time.

Regards,
Leandro de Lima Camargo

lbachero

Hello.
How do I control the upload of users who are not authenticated in the hotspot?
Infected users send requests for multiples IPs in the world but simple queue don't control this.
In the tab HOSTS of Hotspot, Rx Rate is 15Mbps~18Mbps.
Any idea?

Thanks!

Regards,
Leandro de Lima Camargo

Search found 38 matches

Re: How to block neighbours Advertisment

Re: mapping range of sequential ports to same port on sequential IPs

Re: How to get access to SXT5 again? [SOLVED]

Re: How to get access to SXT5 again? [SOLVED]

Re: how to nat public ip subnet with mikrotik

Re: Have a problem with configuration

Re: 2 default-gateways in router

Re: How to get access to SXT5 again? [SOLVED]

Re: Have a problem with configuration

Re: Forward one host to different DNS address

Re: Forward one host to different DNS address

Re: Need help with limiting Internet Access

Re: Need help with limiting Internet Access

Re: Help with separation of internet traffic by different links.

Re: Help with separation of internet traffic by different links.

Re: How to block all websites ?

Re: Internet not working! Ping OK

Re: Filter port forwarding

Re: Port-forwarding does not work, but why?

Re: Firewall Filter Restriction

Re: Firewall Filter Restriction

Re: RE: Re: Ip address log

Re: SNMP works on TCP?

Re: DST NAT

Re: ISP PPPOE WITH VLAN TAG

Re: Wan IP block

Re: ISP PPPOE WITH VLAN TAG

Re: VPN MAC OS

Problems with run script via SSH

Re: Mikrotik PPPoE Server

OID CapsMan per AP

Re: CAPsMAN OIDs

Reset OID Wireless Interfaces

No proxy DNS in Hotspot

Re: Tik App, MikroTik android utility ALPHA test

Re: Tik App, MikroTik android utility ALPHA test

Re: analysis the logs

Control the Upload | Users not authenticated