MikroTik

hossain2004a

Just check this out:
http://forum.mikrotik.com/viewtopic.php?f=10&t=94188

hossain2004a

You should specify more details so I can help.
Maybe there is firewall rules don't let you access o or mane they're is a problem with you CV cloud or private IP

hossain2004a

Did you try to login via Mac ?

hossain2004a

So you just can't access port 80? And you can access winbox remotely?

hossain2004a

any solution on this?i need it .. Still the same problem stated in first post? Yes Anyone have solution for this . now i using routeros 6.30.2 It's really easy bro. Just use PCQ in queue and you get what u want. Just go to queue and set PCQ queue for whole network, so if just like user c connected ...

hossain2004a

Where is the problem now?
Specify so maybe I can help better

hossain2004a

any solution on this?i need it ..

Still the same problem stated in first post?

hossain2004a

Just tell me more about your problem
You just need to update you router OS to the latest version in first place and then go to Mikrotik downloads and then download userman package and copy it to the root of your files and reboot. Done

hossain2004a

And of course it should be noted that you should configure hotspot user profile as well.

hossain2004a

Open up your winbox and check how many active users are, If there were too many of them just kick them out else if your statement is right you need to email support.

hossain2004a

OMG!!!

hossain2004a

It's easy Mahmood. just in Firewall--> Filter drop all packets to your Xerox AIO except those with your src-address and dst-port of 80. These way client can't access your web config and still can print. And for your HP color create rule in your firewall which drop everything except yourself and your...

hossain2004a

And Zero can I possibly ask what is your Dell switch model? I don't remember - it was those older poweredge switches that had that god-awful command line language. Probably your printer issue would have been solved if you bound them with a to-address=10.5.50.X address, IP-address=192.168.20.x (prin...

hossain2004a

I had a problem (unfortunately I never could solve it) where certain model Dell switches would not be recognized by ..... for First time I ran Hotspot in my network I had such problem like "amirreza" I couldn't ping my printer. that time my printer's IP was in 192.168.20.0 network and my ...

hossain2004a

This is just for my test Amir:
In:
/Hotspot server
open up your hotspot server and change the Address pool to: none

tell me whether you can access it or not.

hossain2004a

As I checked my configs for bypassing my SHARP and Minolta printer, there is no need to Walled Garden it. Walled Garden is used for another purpose. You just need to bypass it in IP binding. Why your Hotspot range is "192.168.1.240"? is this a range? while it should be 192.168.1.1-192.168....

hossain2004a

Please double check your configs.
in ROUTER section it must be "Parent time Zone"
and in CUSTOMER section it should be your specified time zone (e.g. mine is +3:30)
if you have more that 1 CUSTOMER, then do the same thing for them.

Are YOUR configs like this?

hossain2004a

I'm sorry that I'm here at home so no access to my router in office which is now off.

In my setting I just remember that in ROUTER section you should choose "parent time" and in CUSTOMER section you should choose +5:30. this should work. I check my UM tomorrow.

hossain2004a

You're only able to recover your users if you have backup and there is no otherway. AND if you wanna set ROUTER in UM, make sure no one is connected to hotspot. then try it. And if it says IP is already used so just check if there is any "127.0.0.1" or not. AND I should note that the UM is...

hossain2004a

facebook is blocked in country

but I redirect bing to google. that was fun

but when I tried some HTTPS, no luck. just open that page with delay.

hossain2004a

anyone having this problem at v6.28? After i upgrade to v6.28, my router will stop function after sometimes, i cannot using winbox login, cannot get ip address from DHCP server, the router like totally freeze, i need to physically turn off the power and on the power again? It is happened on my CCR1...

hossain2004a

which website did you use that hotspot page is not redirected? some SSL and HTTPS like google? This case i think you wont be able to solve it. but if you enter for example bing.com it would be alright, If not you should check your firewall and NAT rules. the redirect rule are there. make sure you di...

hossain2004a

haha. I'm not gonna filter facebook (that's why I use "e.g."). I'm just curious of it's knowledge. And as I said, In my country facebook is blocked ( :lol: ) so people use VPN and proxies and... Can you give me the config so i can test it? :D (I've got plenty of IPs and sample config but i...

hossain2004a

And if you disable that Walled Garden rule, would it be OK?

hossain2004a

then you're fighting a losing battle. :D I think no one cares as me in this situation. I tried to block them. no luck. sometimes it's good to block it in internet cafe :D but because of loosing customers ( :lol: ) I didn't go further. I think you can block them in your domain via some group policy ...

hossain2004a

then you're fighting a losing battle. :D I think no one cares as me in this situation. I tried to block them. no luck. sometimes it's good to block it in internet cafe :D but because of loosing customers ( :lol: ) I didn't go further. I think you can block them in your domain via some group policy ...

hossain2004a

How does this work licensing-wise? Do you have a stack of Free Demo licenses for this purpose? No - qemu copies the image for each new instance of the router. Each copy has the same soft-ID, and has the same amount of its 24-hour test clock active as was left when I finished getting the basic confi...

hossain2004a

Sorry bluemoon. I have 3 Ethers active. one for Hotspot and LAN and two others for internet. If i'm gonna open my webfig or UM, I just enter another Ether's IP from client computer. should note that the only one who knows it it's me. so no one can open it easily so it's more secure. So I think inste...

hossain2004a

Hi :) I was having a problem for such tasks with (PPOE/Hotspot/User manager) but I had created a very useful script to pass this problem. my case was deferent than yours so I will not post my exact script but I will mention the general idea for it. by executing conditional [IF] command in the scrip...

hossain2004a

What is RoMon exactly?

hossain2004a

I'm not PPPoE expert, but once I tried it in past just had to write some Route rules...

hossain2004a

In my Router' office. I enable 3 Ethers of MT, so in my clients's system if i'm gonna use webfig I just enter another Ether's IP. No need to Walled Garden anything at all. And It's good for security reasons, no one can easily open your webfig. Even I chenge the Port of "WWW" service so it'...

hossain2004a

In my first steps of experience of using mikrotik I just see i can't play with it in our office. So I took it in home and work and play with it for 2 month. I practice with those service that We want in our office. Real scenarios. Necessity is the mother of invention It would be nice if there was p...

hossain2004a

If you wanna have script to add TOR's IP's you should see "emils" Post in above.

about other VPN and software like free gate.... I'm not sure you'll be able to make it...

hossain2004a

@Zerobyte Did you remember about evil software?? TOR is one of them. :D :D It's only evil if you use it to hide criminal activities.... Keeping the boss's middlebox from snooping on web browsing habits - or keeping the NSA out of your web browsing, that's the kind of use for me - not to go get acce...

hossain2004a

@Zerobyte

Did you remember about evil software?? TOR is one of them.

hossain2004a

any problem?
internet is connected already...

hossain2004a

WebProxy is the way to go.
http://wiki.mikrotik.com/wiki/Manual:IP/Proxy

But i'm not sure redirecting in proxy would be work with HTTPS or not

(long time no check)

hossain2004a

Do you have several free Radius(s) or just having one and other CCRs are using that? I didn't use MAC cookies very much, because it's not good idea in our network, so no experience. But I think if the cookies are saved in router it self (not free Radius) so you would not be able to do that. otherwis...

hossain2004a

2 DHCP servers come handy when you separate them completely. But If you connect all 3 Ethers to one switch or hub it made some problem like this. There is no need to disable Ether2. Just disable the DHCP server you don't wanna make dynamic address. For example in my 450G I did this: Ether1: Hotspot ...

hossain2004a

Here's what I found, maybe someone know it. just for the records: I was looking for exception of counting data. It's easy (e.g. exception of calculating in share folders and drives in windows) just walled garden the specified port for example for this kind of work I walled ground ports 139 & 445...

hossain2004a

if you want the wireless network to be the same LAN as the 4 ethernet ports, then the only way to connect these is with the CPU bridge. . That's right. but the question came to my mind... I've masquerade home's router Ether1. Is there any need to masquerade WLAN? I'm not entirely sure what you mean...

hossain2004a

if you want the wireless network to be the same LAN as the 4 ethernet ports, then the only way to connect these is with the CPU bridge.

.

That's right. but the question came to my mind... I've masquerade home's router Ether1.
Is there any need to masquerade WLAN?

hossain2004a

With all respect to ZeroByte, I'm just gonna share my experience about this matter which took very time to find out! and Indeed it was not my fault at all 8) I was testing every thing to reach my router from remote computer, using DDNS. The Winbox was right but i needed WEBFig as well. In the end I ...

hossain2004a

But remember CRS is Cloud router switch. It's good for switching not routing. But RB2011 is router board.

hossain2004a

yes I know about log-in script, but do you have some of these script or shall I write one? (I'm too lazy

)

hossain2004a

It seems this website is caching it self to my computer (or smart phones) in order to open up faster in later. even the pages I didn't open (1 saw one or 2 page of it). Hop fully after minutes and minutes these unwanted caches will erase and I can get rid of them. Thank you boen_robot for caching id...

hossain2004a

Hello again! In order to have Graph of usage of my users in hotspot server (for example) I do this: make unlimited queue with lowest (8) priority with target IP of my User with name of my user. then I go to graphs and make graph out of that queue. and just make it available for that specific IP and ...

hossain2004a

Thanks for reply and OK for 2nd part

and you know first time I noticed that I was trying that website via one of my customer's Apple iphone. so there is no any windows virus.
and I don't think there is problem with computers and viruses... They are fully protected.

hossain2004a

Hello everyone. I'm just wondering if someone test this website on his Hotspot sever while you didn't authenticate to the hotspot server so then you are not able to open any website. http://www.varzesh3.com/ I don't have any walled garden for this website. But i'm wondering why only this website is ...

hossain2004a

If you're device is faulty so clearing and uploading database would be dangerous.
As I once talked to support they suggest my to clear my logs. It help me so much. for CPU load and error "Radius not responding"
also deleting session log after months is helpful.

hossain2004a

If you wanted the BURST to work correctly you should config it correctly or else it wont work.
Can you post your limitation?

hossain2004a

Maybe that's because of CSS's caches.
It happens a lot.
Just delete you're browser's cache and cookies and every thing....

and Login into UM again.
This should work. all the time for me.

hossain2004a

Is there any way to adjust menu like in Winbox?
I'd like to add byte-out in specified place.

hossain2004a

If you're looking for sample and easy using graph.
Just go to Queues and make unlimited queue with lowest priority for one user (put user's IP in target)
then go to graph
and graph your queue.

hossain2004a

Maybe that's because Quick set is for home and home users don't think of and don't know of any DDos and Brutes and ...... Yes there are lot's of problem with this quick set. But as I said it's awesome to have $30 with fully ROS. And for networking stuff at least you should know something. otherwise ...

hossain2004a

The problem not is the people,,, Te problem is MIKROTIK Team,, dont answer never nothing !!!!!

And I think you should convinced by people's guidance ....

hossain2004a

@ZeroByte

Still I don't know why I don't have such problem....
and yes. I'm not looking for problem. Just looking for knowledge of it

hossain2004a

I think there is topic talked about this matter in past. I think in the end they say you should walled garden google or something like this

But I don't know, I don't have such problem with my hotspot....

hossain2004a

but they can handle they router to someone who is able to config that. That's all people do here

but yes.... You are right

hossain2004a

I don't think that hap lite is aimed at consumer market. My opinion is that it is answer to request of ISPs to get some cheap device we can give at customer's place and be able to manage / monitor it and can get rid of tplinks with openwrt because other suitable devices just cost at least three tim...

hossain2004a

I've got some of this stupid problem and errors but after another connecting there were no problem.
just note that problem occur when try to connect via remote computer. in addition you should know we have all of kind of problems in secure connection HTTPS SSL , ....

hossain2004a

Simple question: Which one do you prefer for transportation job ?

Just wondering how he gonna wash the first car

hossain2004a

There is no specific setup to make one Ethernet port as WAN. I mean when you route your internet via one Ethernet to to MT (modem ---> MT) so this specific Ether is WAN Port. if I understand you correctly. e.g. mine is: Ether2 Address: 192.168.20.0/24 and my modem is: 192.168.20.2 Ether3 Address: 19...

hossain2004a

For example, If I'm gonna devote "9988" for accessing my web server via remote computer I should do: ip firewall nat add chain=dstnat protocol=tcp dst-port=9988 action=dst-nat to-addresses=192.168.50.13 to-ports=443 And there are some config which you should do in your modem setting: e.g. ...

hossain2004a

. Do I now need to consider a scheduled reboot to keep the CCR in top performance??? Capture.PNG As far as know, I saw some MT's product which was working for 1 year without any reboot. I don't know how they re working! For my RB450G I just know after days of working without any shutdown or reboot ...

hossain2004a

Outline question: I'm sorry for this.

why should I bridge Wlan and one Ether together?

hossain2004a

If I have an F-16, I want more missiles and radars and engines and night vision and stuff - not cup holders, wine refrigerators, fold-out beds, and all-leather interiors. If I want those things, I would prefer a corporate jet in stead of an F-16. +1 Yes, You're right. Always there are priorities we...

hossain2004a

@ZeroByte

What's usage of OpenDNS except what is in Wikipedia in nutshell?

hossain2004a

[ But it's not - there is no DHCP running on the PPPoE connection in my example. That's why I built pppoe on a separate vlan - so that the DHCP would fail (no dhcp on the pppoe service vlan) but pppoe will get its IP from IPCP (a negotiation phase of a PPP connection). Doing it like this keeps you ...

hossain2004a

Print server is the right way to go, the only question is which one it should be. Now we are talking :D Have you ever seen or just heard about print server built in CISCO OS and routers ? Even these SOHO's cheap ones ? I'm not asking for Linksys branded as Cisco. :( Cisco targets home users but wit...

hossain2004a

hmmm, you should call support. did you ticket them? If not, so you should be

Maybe they will ask you such question:
Do you have any real problem?

any packet lost?

hossain2004a

If it's disconnected so at least it must be ZERO.
Did you check the logs? anything special?

hossain2004a

Is there someone here to shut this forum? Or I don't know, at least it's funny to see the Karmas :D :D +1 and -1 :lol: up and down My Idea is -1 to print server, because of CPU load, bugs and whatever badness it has. sharing printer on Desktops is so easier. I have 4 printer shared via my Server, I ...

hossain2004a

Thank you for your reply my friend.
Yes. I'm looking for exception of counting data. It seems it's impossible.

hossain2004a

I don't know how your's is working. But my DVR has streaming port which is 8000. so when I dst-nat 80 port for opening DVR page from remote computer still my streaming port is needed because how the browser should know where is your data? Browser requesting for streaming port but because you didn't ...

hossain2004a

Do you know your streaming port?

e.g. mine is 8000

hossain2004a

hossain2004a

Best suggestion Ever....

Try to keep each rule as simple as possible.

Using in-interface allows dynamic WAN IP address without needing to change the firewall configuration every time the IP changes, so I gave that method in my first set of commands.

hossain2004a

In our Internet Cafe we had such problem. I have 2 LinkSys modems. I disable both DHCP Servers and the only DHCP which is active is MT. 1st network: 192.168.20.0/24 2nd network: 192.168.30./24 hotspot: 10.5.50.0/24 my MT doesn't have any wireless interface. So when users wanted to connect my network...

hossain2004a

No matter how many users you have. With your L4 Licence only you can have 200 active user at all and If you like to use User-Manager (for better controlling of users) you may have only 20 active users. http://wiki.mikrotik.com/wiki/Manual:License But why not i don't want to use a radius server.

hossain2004a

So what is your problem?

It's earlier morning, It's holidays... bad English understanding.

Please state your problem again

hossain2004a

hossain2004a

:IP/Firewall/Filter
I didn't work with "P2P" section. But maybe If you Drop all P2P, that should work, I don't know.

But It's about a year I'm using Leach services. It's funny. slow torrents become fast TCP 80 download

hossain2004a

To change whole speed of TX and RX of Ethernet port, just change Bandwidth(TX/Rx) as you wish.

I don't know what are you going to do, But maybe using Queues would be better choice. You can specify which IP should have limitation.

hossain2004a

It is all good until something bad hapens like in my situation!

I'm not in mood of translation....

hossain2004a

hossain2004a

Can not start the service from Administrative Tools/Service

problem???

hossain2004a

@ZeroByte
Can you give me starting point to figuring ARP Proxy? I found it too useful...

hossain2004a

.
.
.
.
One of my law in computer's stuff learning Is to know the lowest level of one thing, one knowledge or one matter. So you would know how system works.
And for these DNS stuff you said, Thank you ZeroByte

fascinating

hossain2004a

hossain2004a

VPN over DNS?
what is it?

The only usage of VPN which is used by majority of people in my country is for proxy purposes and passing filter contented websites. And of course some company used it for their network. but VPN over DNS??

hossain2004a

I don't know whether you test the Syslog and Webproxy while you are running proxy software e.g. free gate or hotspot shield (those software as we know them as Evil software) or not. As I see, when you use such software, all the logs goes down. Just show you that one of your computer made some connec...

hossain2004a

Can you post your "Health" section?

hossain2004a

Is there any picture or something you can show us?
Because I didn't see your android version.

hossain2004a

Bump....

If there is no answer just tell me.

hossain2004a

There are 2 possibilities:
1- They are working on your problem
2- They have forgot it!!!

hossain2004a

common, explain more. not enough to be solved.
Explain the whole thing

hossain2004a

but is there any way I will know who is trying to enter?
mac address of the device?

I didn't get it exactly, So can you say more?

hossain2004a

Hello guys. I'm just wondering if I can except one of my traffic come from computer to my Server. I'm using Hotspot. I share my ESET Antivirus signature database on my server and my clients will update themselves from Server. So My Hotspot will count them "DOWNLOAD" and We get paid for thi...

hossain2004a

Completely agree with this. Even I remember I gave them access to connect remotely to my RB, so that they can fix it. SO no problem with them. As I'm in business and such thing like this, I cal tell you if you insult your customer, so He will not buy from you again. and Mik Sup is not crazy to do su...

hossain2004a

As I see, the best way to Kick the Users out is to use GUI of mikrotik. I mean Webfig. so i made low access user for my employers so that they can kick the user without problem.

And yes, I know you have problem with UM. just consider this post as suggestion

hossain2004a

Never heard of it before. This cable is wonderful!

me too.
But Jarda, is there anything else special is needed to run with this Leaky feader?

and I'm agree with RB951 because i see it better that Cisco AP!

hossain2004a

There is no picture here. I can't see it.
and
I don't have any experience in Static IP, because I didn't use it and it's very dangerous for me to use it (security reasons

) so don't know when static IP is unreachable. so other guys should help you

Just temporary solution:
use DDNS

hossain2004a

Actually this is not a place to state your problem, you should do it in Beginners or general.

But.
to solve your problem for port forwarding for DVR;
If your DVR is like mine, so You need two NAT, it describe here:
http://forum.mikrotik.com/viewtopic.php?f=2&t=94998

hossain2004a

Can you say why it is not possible?

Why should it be possible?

hossain2004a

I guess your RB2011 has 2 fans. don't I? Are they working? Is there any dust or dirt on your RB which doesn't allow air to flow? is your place warm? I didn't experience this issue on RB but once my Computer get to 100 Celsius and after that just shutdown. I saw there were lots of dirt and dust on my...

hossain2004a

I'd like to know when will you correct the bug in UM?

which is after you add new langauge and open new windows (e.g. session list) you can not close the new window.
already supports tell me they are working on it.

hossain2004a

I don't know if someone tell this before.
But is it possible when you shutdown/reboot the RB, the COUNTERS wouldn't reset at all and continue working?

hossain2004a

In my first steps of experience of using mikrotik I just see i can't play with it in our office.
So I took it in home and work and play with it for 2 month. I practice with those service that We want in our office. Real scenarios.

Necessity is the mother of invention

hossain2004a

i want to show Download limit and how much the user have consumed from this limit on status page i have tried to use all the available variables but all gave no value i think it is because the limit is set within the userman radius not with the hotspot but how can i show the userman download limit ...

hossain2004a

Are you able to enter your Username and Password or when you enter
routerip/userman

you even can't access it?

Did you change your Radius setting in RB?

U wanna reset UM?

just delete it's package and install the package again.

hossain2004a

Can anyone tell me when you get this message (Please Wait and browser stop responding) , what is your CPU statues? is it using %100 ??

hossain2004a

So far, no response from either the technical support Mikrotik. Will the anyone care? Or it will be corrected to version 7 of ROS?

I'm very lucky in contacting mikrotik supports

.... maybe I should try

Thanks God I'm not alone!

hossain2004a

That's great.
Thanks for quick reply Rajesh

All you need is to forward 2 ports:
1 of them to you CCTV (xxxx to 80)
another one to the port which is transmitting (8000 to 8000)

hossain2004a

Hi guys. I was wondering if someone can help me. I'm able to open my office router page in home by entering DNS page and right port number. no problem, I can open my webfig and UM page via remote computer. The problem is to open DVR or CCTV's page. If I'm gonna open my CCTV's page over my local netw...

hossain2004a

I don't know any other free software. you should pay for rest of them

hossain2004a

If you wanna see what website did your user accessed: first of all you should enable your webproxy and make transparent proxy. really easy. just follow instruction in link below: http://wiki.mikrotik.com/wiki/Manual:IP/Proxy#Proxy_configuration_example if you are done with your web proxy so you shou...

hossain2004a

by user activity you mean you wanna see what website did your user opened or how much your user download and upload?

hossain2004a

All my config is yours

Working without problem.

hossain2004a

interesting.

@ZeroByte

Can you tell me what should i do for my burst rates in my hotspot?
my download limit is 200K and I wanna set 20 sec for burst time
what is the best burst threshold and burst limit?

hossain2004a

I think it happens to me. Because of damn CSS design

you should always delete your cookies and caches and "Ctrl+F5"
I just close and open it again. Solved.
maybe you should try it in terminal.

hossain2004a

There are several places needed to configure.

In RB:
Radius section should be configured.
IP/ Hotspot/ server profile/ radius tab should be configure

In UM:
Routers - you should create your router and try to config it.

If you of above has done correctly so there should be no error and no problem.

hossain2004a

No backup?

hossain2004a

Backup your data.
Try to reset your MT.

hossain2004a

If you could force a device to run an application and for that application to perform a specific task, just by sending/manipulating network packets... there's a word for that: security exploit. :lol: When I was child (years ago), I was trying to do that, but fail :D My best way is to tell your cust...

hossain2004a

Are you using UM or not? It's obvious it's showing your speed limiting and the values are shown for specific part e.g. first one I think showing download rate 2nd one showing upload rate and so on. If you are using UM: go to Profile/Limitation Or if you are not using Radius: go to PPP/profile check ...

hossain2004a

In your 2nd RB: In radius page: enter the IP of your 1st RB (which has UM) and the secret code - The IPs of two RBs should be different (it's obvious!) In your 1st RB --> in UM --> Routers: add your second RB and it's secret codes I don't think there is no other specific config and option. this shou...

hossain2004a

You can have your User-Manager (google it and you find it in wikis)

Also it's not bad (and it's easy) to add some firewall rule for brute attacks (google this too: ssh brute mikrotik and also telnet brute mikrotik)

But you should start reading book and wiki ..... Step by Step

hossain2004a

There is no need to run both at the same time. The unit gets good cooling with one fan. The second fan is there only as backup, if the first fails. Try to stop it with a pencil, and you will see how this works. nice.... :D But what happens when the router or switch reach high temperature (mine is +...

hossain2004a

Just one question:
Is your router time OK and set?

AND DID YOU ALSO set your customer time?

- should note there is no such bug in this section - as I know.

hossain2004a

I don't have CCRs so no experience.
But I did it with my Dlink and Cisco switches. just opened that and add one extra fan

hossain2004a

I just saw your topic now :D You should choose whether use Hotspot or PPPOE. For your start maybe it's easier for you to start with Hotspot . there is no specific and special config for small needs. Just follow the instruction and you should succeed. (but should know there are lots of things too :D ...

hossain2004a

that because maybe the "user" and "profile" section are separated from each other and sometimes do silly thing. Couple of days ago i run /tool user-manager database clear-log in CLI to deleting my log. but after day i saw specific limitation for specific profile has activated in ...

hossain2004a

You need none of them. Just enable the Cloud and watch the magic. /ip cloud set ddns-enabled=yes There is dns name on that, easily copy and paste it into remote winbox and you will access that. if you deny input connection so you should write rule to access your incoming winbox. Nope. Try yourself ...

hossain2004a

Hi.
Is it possible to update my windows time from Mikrotik?
Because updating time from "windows time" is quite disaster to me.

hossain2004a

You need none of them. Just enable the Cloud and watch the magic.

/ip cloud set ddns-enabled=yes

There is dns name on that, easily copy and paste it into remote winbox and you will access that. if you deny input connection so you should write rule to access your incoming winbox.

hossain2004a

http://wiki.mikrotik.com/wiki/Manual:In ... le_Example

hossain2004a

Filter "content" is not content of URL, but content of packet.

for URL filtering you can use Transparent Webproxy with Access List rules

You are not able to do it while transparent proxy is not working with HTTPS.

hossain2004a

Did you try making folder on you SD Card so that you can mark your folder on SD card as folder for caching on disk?

hossain2004a

Well last night i was try to upgrade my x86 ROS to v6.27 ... Userman is give error like "radius server not responding" so i must fast downgrade to v6.26. On other routerboard devices it looks that all is fine. Can someone try to upgrade device with userman ? It's been month, I've upgrade ...

hossain2004a

I know MT which was working for 1 year without even restart with solar power. unfortunately i cant see your picture.

hossain2004a

I'm not familiar with your free radius. I'm just gonna ask Can your users login and logout without problem and when they connect are they shown in your active section of Hotspot in your winbox?

hossain2004a

As I know, you're not able to do so, when download limit reach, Mikrotik will kick the user out and when user try to login the error apper:
Download Limit reached. obviously you can change the error for example translate it to your own language but redirecting.... I don't think so.

hossain2004a

Obviously you can, check this picture, in your UM router page you can add 2 MT. easy and in radius section of your 2nd router you should enter the 1st mikrotik ip and shared password so the 1st router would be your database and 2nd one will only read from it. http://s5.picofile.com/file/8171911150/3...

hossain2004a

There is a little problem annoying me each time I upgrade and:
after each upgrade all of my counter will reset.

hossain2004a

yup, and my configs are like this:

So I let UM decide what to do, actually I limit it to 1 user share, or 2. and more than this number is not allowed by UM

hossain2004a

One of my mistakes when i newly run the hotspot:
In user profile of Microtik I've set 1 share user, but in UM I've set 2. and it won't work properly because of this illogical setting, so I've deleted share user setting from mikrotik and only do it in UM. best work for me.

hossain2004a

he said logos, not logs

hahaha.
My fault.
checking forums in end of my work time and this is the result

hossain2004a

Delete everything in /ip Routes and then config fail-over or load balancing your searching for in forums or wiki. maybe this should work. at least worked for me. otherwise your config should be checked.

hossain2004a

This is not complete fail-over, I mean this setting will only work when for example your power of modem goes off. but when internet gone your modem still pinging. here is my fail-over setup. change as you need it. thanks to unknown user who help me (i forgot his name :D) add dst-address=4.2.2.4 gate...

hossain2004a

Would be nice to be able to add logos etc.

yes but maybe they think you should use Syslogs

hossain2004a

there is no need to set up DHCP or ... for this thing. just need to config your failover setup.

http://wiki.mikrotik.com/wiki/Advanced_ ... _Scripting

hossain2004a

I'm sorry but I didn't get the last sentence. what did you mean? "external IP"??

and maybe you have default configuration which effect your config. hmm?

hossain2004a

Ok, thnx. But still not sure if I will gett any surprise. Which methode ist best to make a upgrade but still have the change to downgrade without lost my settings... should note that for security reasons you should upgrade and upgrade to be safe. check the log for this and see the :D Download the p...

hossain2004a

If so, you're not able to use that because there is no facility in software to do your jobs and no connecting to router.
maybe you should use mikrotik free radius, ha?

hossain2004a

under attack tarpit made my router unresponsive and internet went down....for local users, not for attacker....

what kind of attack? brute? DDOS?
limiting may not be so usefull for DDOS. as i saw in one of thread before

hossain2004a

As I understand

:::::

There is router option in Userman. you can show your 2nd server's userman the 1st server (config it with ip and secret), so 2nd server will get data from 1st server and all users will store in 1st server.

hossain2004a

Can users open login page manually (i mean not by redirecting)?

Did you try reset HTML?

hossain2004a

The website is blocked in my country

so you should check the software and see whether there is any radius section or not.

hossain2004a

no need to use src-address

hossain2004a

I don't know what software you are using, but for that purpose, you're software should be capable of: 1- connecting to MT (radius) 2- and creating users automatically as you desired. or if you want to use free radius of MT there is only "batch" option which will let you to make numbers of ...

hossain2004a

All I know about golden law of queuing (

) you should put the fastest queue in higher priority .

hossain2004a

Hello.
I'd like to set simple queue for range of IP or IP pool (for example dhcp ip pool).
I know I should use use PCQ. is there anyohter way? Let's say for 100 user i just wanna write:
192.168.20.100-192.168.20.200
not entering each ip every time . cause this would kill me.

hossain2004a

------

hossain2004a

Hey, On my customer's computer, sometimes when they gonna open new browser and connect to Hotspot via it's login page the encounter problem, no opening, no login page and no internet, I check everything, cable - network etc, everything is good until I open my Share drive from My Computer, I would op...

hossain2004a

@fewi
I love your helping

That's fantastic.

hossain2004a

I should note that you're not able to access /userman via Lan you're running Hotspot and should use another ether. for example my hot spot network is: 10.5.xx.0/24 on ether1 ether2: 192.168.xx.0/24 when I'm going to use /userman:: http://192.168.xx.1/userman and it works, also I check it via hotspot...

hossain2004a

Vibe uses HTTPS protocols, so?

hossain2004a

Did you bind some IP?

hossain2004a

Because it use another port to connect to, in our country we use this (benefit

) to bypass the blocked website e.g youtube

hossain2004a

any idea?

hossain2004a

you can user Webproxy but i should notice that it's capable of blocking HTTPS not HTTPS, although i blocked Gmail because in my country there are some problem with Https.

hossain2004a

maybe this will help

ros code

/ip firewall layer7-protocol
add name=teamviewer regexp="^(post|get) /d(out|in).aspx\?.*client=dyngate"

not workin...
This software using HTTPS protocols so i think you're unable to block it

hossain2004a

I've been reading about Dynamic DNS scripts on the forum, so I wanted to test it. But when I try to past a script into Winbox or ssh terminal, it does not seem to work: [admin@MikroTik] > /system scriptadd name=ddns policy=\ syntax error (line 1 column 35) [admin@MikroTik] > <pre>ftp,reboot,read,wr...

hossain2004a

Hi, I'm using UM and i'm try to limit my wireless customers's download rate to 200K for upload and download. I did this: http://s4.picofile.com/file/8166911276/queue.JPG The issue is here that with non limited users, you have download rate for 300KB but with limited user you would have 100KB (for ex...

hossain2004a

Hi. straight to my problem, I should say i can wake my system on lan via mikrotik terminal, so there is no problem with this. The problem is here that i cant do it via remote system, I set up DDNS, no problem with using winbox via remote computer. I accept incoming /forwarding port (12002 for this s...

hossain2004a

It's not wisely to store your logs into LOGs,Setting Syslog is better.
And also you can decide what to log in:

System / Logging

hossain2004a

Watch out. CRS is not router. You might be disappointed by its routing speed when you use it as router. It is a switch. Maybe that with 100Mbps there will be no impact but you have to think of future also. Are you going to rise your connectivity? If that's the case, why does the Routerboard site sa...

hossain2004a

It would be also nice to have power cycle button for whole device, because when you do shutdown there is no way to remotely start the router and sometimes simple restart is not enough. But I think the reason they do this is to turned on always and forever :lol: , like Ethernet Switch which they tie...

hossain2004a

http://wiki.mikrotik.com/wiki/Advanced_ ... _Scripting

hossain2004a

I think they don't relate to each other so there would be no problem with them, Imaging mikrotik is your Modem and compare it with Win server, there would be no problem?

P.S: I didn't test it yet, but will do in future

hossain2004a

There is no need to write a rule.

IP / Neighbor List / discovery interface
disable all interfaces.

Also maybe you wanted to write a rule, I tried to block SSH

and it block discovery

hossain2004a

I think you need to make transparent proxy on those computers who are ether2 and ether3. so if no transparent webproxy on ehter1 so there would be no blocking. http://wiki.mikrotik.com/wiki/Manual:IP/Proxy To enable the transparent mode, firewall rule in destination NAT has to be added, specifying w...

hossain2004a

I dint't get it exactly

but maybe looking for Accounting software and ....?
so Hotspot would be your solution, as i use it in our internet cafe, my customer come, enter their user and password then they can use Internet. it's accessible in both LAN and Wireless.

hossain2004a

I just didn't update....

hope there would be no problem with that

hossain2004a

Are your hotspot user's log in??
and why there are some many bridges?

hossain2004a

any idea?

hossain2004a

You can't.
You should user Usermanager at least and then use:
Bind on first use.

hossain2004a

Hello All Today I was checking my logs, No problem until I saw couples of anonymous access (just trying) to SMB but They were failed because no guests are allowed. so what should i do to prevent such connection? can i drop them totally? fortunately i drop SHH and FTP Brute, but can anyone help me wh...

hossain2004a

And what? Jamming the signal is widely illegal in many countries.

In my country there are lots of mobile jammer, wifi jammer, satellite jammer

hossain2004a

I'm using Win XP and it doesn't have any particular settings. Also when using dude there would be no sharing and also I cant access other system.
I'm in internet cafe and I would like to store webproxy logs.
is there any way?

hossain2004a

First I removed all of limitation in userman from web but they still existed!!! so: in terminal: tool user-manager profile profile-limitation print delete all assigned limitation to profile. no need to delete profile tool user-manager profile limitation print delete all limitation. and then try to m...

hossain2004a

export your configs in terminal by:

export

hossain2004a

web proxy wont work transparently because facebook uses https. I have no idea about that, because in my country facebook is blocked :D :D :D but you should note that by some software like Hotspot shield or Freegate you can bypass everything!!! but:: in winbox: IP/firewall/ L7 protocols Add new L7 p...

hossain2004a

why dont you reset your hotspot html??
easiest way!!

hossain2004a

You should use Webproxy.

http://wiki.mikrotik.com/wiki/Manual:IP/Proxy
If i understood correctly, in winbox i have to head to IP>WEB PROXY and configure this, correct ?

Yup,
then you should config transparent proxy and then enjoy blocking

hossain2004a

Same problem and I emailed mikrotik. It's from browser's cache and It will kill you!!!
First of all you should remove all limitation from terminal and then clear your browser's cache and then make new limitation.

hossain2004a

I'm gonna wake this topic because i'm facing SPI.
Does anyone one what is this "SPI"??

hossain2004a

Hi, i want drop hotspot clients from host list if not login to 5 minute. Cause they are use my network for file transfer without login. How can i block this event. Thanks for help ! How they use your network traffic when you have hotspot server? Is it possible? unless you opened ports 139 and 445

Search found 247 matches