Thanks for the advise, @Amm0 I thought about that already. Will try to figure out something with placing the unneeded(and harmful for my config) hotspot rules below my own manually created. Except that I have a couple of hundreds of NAT rules and dozens filter rules. And that's not very convenient t...

You should be able to have static filter rule in chain=forward BEFORE the dynamic DNS redirect rule that action=accept the DNS traffic. Hotspot enter their dynamic rules via action=jump, so you're free to add static config BEFORE the initial jump. I understand that. But I DON'T NEED that redirect a...

Dynamic rules not being removed should be reported to support and fixed.

Do you mean not being removed after switching off the feature which created them(like after switching off hotspot)?

@rextended - kheem - so, am I wrong about CoA/PoD for IPoE users?

@rextended - please, checkout the updates to my previous comment Are you trying to peel potatoes with a pencil? You're using the wrong tool... - yep, that's kinda looks like that, but for now I don't have another options(or maybe something changed and I don't know about that? - despite the fact I'm ...

ok, @Amm0 - let me be more specific. In my particular case I'm talking about hotspot. And yes, I don't want(don't need) some of the dynamically created Firewall/NAT rules the way they were created. It doesn't matter, if I don't need them at all or if I just need to make some changes to them - I can'...

Don't know how to tag @MikrotikSupport here.
But I want to join the claims too. If we can't edit/remove the dynamic entities(objects) - then at least let us be able to disable them. To be able to create our own, suiting our configs.

Hmmm - that's quite an option to check if the traffic is not going to www.some.paymentsystem.com in prohibitive rules...
Thanks alot for advise!

Hello! I'm running RouterOS 6.43.8 on x86. Now I'll try to explain my problem: Let's say we have an IP address 10.10.10.1 in an address-list NO_ACCESS and for this address-list we have a blocking rule and NAT rule which try to redirect blocked users to personal page, like this: chain=forward action=...

Thanks alot!

Hello to all! I want to monitor the signal levels of my Mikrotik Access Points and CPEs(subscribers devices) connected to those APs via SNMP. I already have a PHP script to do that, but I faced with a problem. During my lab test with SNMPWalk and SNMPGet I've figured out, that this group of OIDs: .1...

Hello, @Kentzo Here https://packagecontrol.io/packages/MikrotikScript the last version is 1.3.6 and same mentioned on github https://github.com/Kentzo/MikrotikScript/releases But you've made changes later, on 30 Jan 2016 for example. The question is: if all of the last changes are in the compiled pa...

Could we expect that 6.40.5 will become "bugfix" or 6.40.6 with fixes from 6.41? 6.40.5 is the last with "old-known-bridge-implementation" technology and not all want to upgrade to "new-better-but-not-too-familiarized" one. +1 .. absolutely, and keep 6.40.x on bugfix f...

@mkx : my VLAN-infested RBs are still on 6.40.5, so things might have changed do you have a vlan filtering ability and hw-offload in your bridge configurations? 'cause if no - yep, things are changed and, if my memory serves me, in 6.40.5 brigde had no vlan filtering ability yet and master-port fun...

dsiecinski, I think you need to report it to Mikrotik directly...

Hello to all! I need help with clarifying some things about new bridge behaviour and switch and switch VLANs and all the around stuff. First of all - explain to me please, how does bridge interface PVID and bridge ports PVID and switch ports PVID and the VLAN ID of the VLAN interfaces added in inter...

@Feklar, @pe1chl

The question is not about the "arp" setting of interfaces. It's about the "published" setting in "/ip arp" items, introduces somewhat silently in recent RouterOS versions, and which isn't yet documented in the manual.

That's exactly what I've meant!

For the MAC address, you edit by the command line, I don't know why it's not accessible by Winbox, but as far as I know it's never really been available. I don't quite understand. What do you mean saying "it's never really been available"? And what benefits gives me "published" ...

Hi guys!
Can anyone "to drop some light" on such a question like: what for is ARP-published feature? And why the MAC-address field becomes readonly when I choose it?

you can try unset 0 out-interface

OMG, it worked!!11!11!1 It was that simple? I've been messing around for couple of hours and the answer was so close...
Buuut, I stil wonder, it there is another way to do that?

Hi there to all! It may seem ridiculous, but I can't figure it out, how to remove an interface from a NAT rule. For example, I have a rule like this: [root@MikroTik] /ip firewall nat> print Flags: X - disabled, I - invalid, D - dynamic 0 ;;; default configuration chain=srcnat action=masquerade to-ad...