MikroTik

Mp1104

Hello. I did want to inform those that updating rc1 to rc3 via packages update method bricked my CCR1009-7G-1C. After a gruesome hour of manual reset attempts, I managed to recover via netinstall 7.1.1. Any version above that would not function. The RB firmware was still on 7.2rc3 after restoring to...

Mp1104

I've realized that the AI may be sending a targeted DNS query to the authority servers indicated in the answer later on, so I've edited the rules in post #25 (because I think it is the post which the OP should mark as the solution if he eventually gets back to the topic) by adding a condition that ...

Mp1104

At one point I did have issues with port forwarding with XBOX and resorted to the following link which instructs to apply firewall rules the following https://support.microsoft.com/en-us/help/4026770/xbox-open-these-network-ports-for-xbox-one Please do correct me if im wrong with this! I'm afraid i...

Mp1104

Second, what did you have in mind when putting in these two rules? /ip firewall nat add action=dst-nat chain=dstnat comment="XBOX 53 TCP" dst-port=53 in-interface=ether1 protocol=tcp to-addresses=10.0.1.XXX to-ports=53 add action=dst-nat chain=dstnat comment="XBOX 53 UDP" dst-po...

Mp1104

So please change the /ip dhcp-server network in your configuration, namely, change dns-server=10.0.1.1 to dns-server=8.8.8.8 , so that the AI would bypass Mikrotik's DNS and ask uncle Google's one directly. (Of course you have to restart the AI to get this via DHCP) If it helps, we can find a way t...

Mp1104

So what we know is that: the AI sends a DNS query to pool.ntp.org, gets a list of four candidates for a NTP server, uses one of them and when it gets no response from there, it doesn't bother to try another one. it sends a DNS query to RV750-39a9391a-device.aylanetworks.com, and when it gets an ans...

Mp1104

So what we know is that: the AI sends a DNS query to pool.ntp.org, gets a list of four candidates for a NTP server, uses one of them and when it gets no response from there, it doesn't bother to try another one. it sends a DNS query to RV750-39a9391a-device.aylanetworks.com, and when it gets an ans...

Mp1104

Please save the quote with the address somewhere else and then edit it out from your post above. Have you given a thought to reading it in the direction of the arrow? Downloaded.

Im officially a dumb ass lol, sounds good!

btw I removed the quote with.. ofni ruoy <--

Mp1104

There isnt any way to PM you the link?
Use <-- , I'll edit it out as soon as the message comes.

You have me stumped on that one

I just threw in the flag haha Let me know when you download.

Mp1104

I find it hard to believe the forum has no private message features! Bummer!! Ive done a deep scan on the wireshark file and it appears to not have any sensitive data on it so hopefully I wont be attacked by tomorrow lol. I can take screen shots as well but you wont be able to navigate through the l...

Mp1104

While I work on the sharing, I have provided the sensitive omitted config to view, Im still learning a lot of the L3+, granted I work in the field but primarily deal with L1/L2 (submarine/terrain optical transport only) But I can't thank you enough for assisting me with this! It just seems to not ma...

Mp1104

Here is the requested packet sniff with nothing but the Shark requests. This is all that the packet sniff spits out. There is nothing after line 117. How would you like me to post the wireshark? I can take screen shots as well but you wont be able to navigate through the layers and view the respecti...

Mp1104

it appears that it leaves the router 10.0.1.124 UDP utilizing (Ports 49150-49160) and tries to hit a series of external source IP's (presuming it is the cloud databases) at ports 123,
after it times outs on the connections status, it stays with

SRC 10.0.1.124:49153
DST 10.0.1.1:53 (timeout of 2:50)

Mp1104

While I perform this, not sure if this will help, but I was able to narrow down the ion shark mac/ip as it appears to have arp-ed. So I torched the associated/linked ip for the bot and was able to snap this.

Mp1104

I apologize but the the packet sniffer process you have advised brings up nothing but a blank wireshark log when stopped/imported to the desktop and ran on wireshark. It just does not seem to capture anything regardless of interface. Start/Stop/Save etc.

Mp1104

I have the same issue only, I have a Mikrotik hAP that seems to not like this product either. Ive tried everything. From the items suggested above to changing all of the wifi settings and The ion robot has its own internal wifi - 10.221.203.1 My internal mikrotik router is - 10.0.1.0/24 It instructs...

Mp1104

It's DNS. Go into IP > DNS and specify some servers there - either the ones your ISP gave you to use, or just put 8.8.8.8 and 4.2.2.2 in there. ZeroByte, I apologize for the delayed response, I was able to trace the issue to the modem, for some particular reason it was experiencing DNS resolution i...

Mp1104

hello! I tried to perform a ping through terminal within mikrotik and it cannot resolve, I do see an "R" (gateway1) while in interface list and it is acquiring an ARP from the .109 looks like it could be a DNS issue I cannot seem to figure out. I am as well receiving m traffic to a device ...

Mp1104

Your configuration looks correct. I suspect that the link to your ISP's device is not working right. Check the ARP cache. In winbox, go to IP > ARP You should see a MAC address for xx.xx.xxx.109 If not, then you've got a communication problem on ether1-gateway My 2011 wouldn't link to my cablemodem...

Mp1104

[admin@MikroTik] > export # dec/28/2015 23:22:44 by RouterOS 6.33.3 # software id = 1CJK-0VUQ # /interface bridge add admin-mac=XX:XX:XX:XX:XX:34 auto-mac=no name=bridge-local /interface ethernet set [ find default-name=ether1 ] name=ether1-gateway set [ find default-name=ether2 ] name=ether2-master...

Mp1104

Hello, I am attempting at configuring a Static IP provided by an internet service provider on a RouterBoard 2011Ui AS-RM. This is my first attempt at this configuration, Ive exhausted all efforts and have searched forums and videos to no resolve. I was provided the following information by the ISP S...

Mp1104

I just learned about this myself not too long ago.

Go to, IP/Services/and disable each service you want. If your using strictly WinBox disable all except for Winbox and WWW,

or simply change all the ports for each service to a custom port number so they are not your commonly used ports.

Mp1104

KillerOPS! you are the man! Thanks a bunch, I just did that and worked like a charm!

Mp1104

If you don't want to add them one by one, you should take the IP files from that website and automate using PHP, bash, or something else to output a properly formatted .rsc script that can be imported into the router and automatically add the address list entries. You'd also have to add firewall ru...

Mp1104

Do you use SSH/telnet often on that router? If you use winbox to administer your devices, simple disable SSH/telnet in services.... Thank you very much! Didnt think to do that. I am still getting a decent amount of attempts according to the log, for example: input: in:ether1 out:(none), src-mac XX:...

Mp1104

I am literally being "Brute Force" attacked daily with IP's attempting to Log in via SSH, Telnet, according to my log.. I have set strict rules but has not detoured whom ever from continuing these attempts at logging in. I was being attacked about 300+ times a day. Now each IP that attempt...

Mp1104

ok, Understood! and thank you for the reply. I have a list I acquired from ipdeny.com and its about a list of 4000+ ips :( Is there any easier way of performing this through CLI? rather then inputting it block by block through the WebGUI Firewall Filter? using telnet o ssh or in winbox you can laun...

Mp1104

ok, Understood! and thank you for the reply. I have a list I acquired from ipdeny.com and its about a list of 4000+ ips

Is there any easier way of performing this through CLI? rather then inputting it block by block through the WebGUI Firewall Filter?

Mp1104

Thank you Feklar !!!!

Mp1104

Hello all,

Was curious to know if there is a way to block all IP/Traffic based on location utilizing the Firewall Filter Application within RouterOS?

So for example:

Blocking all requests or pings from a particular Country, etc?

Mp1104

Anyone? Im sure it seems basic but a little help here would be appreciative. Thanks.

Mp1104

If WAN is disconnected or the cable modem goes offline, the connection status icon on the clients laptop/desktop adapter still shows an "active connection" as opposed to an exclamation for "no internet"

Any input as to why this is occurring?

Search found 32 matches

Re: v7.2rc2 and v7.2rc3 is released!

Re: Router blocking traffic of Shark Ion Robot

Re: Router blocking traffic of Shark Ion Robot

Re: Router blocking traffic of Shark Ion Robot

Re: Router blocking traffic of Shark Ion Robot

Re: Router blocking traffic of Shark Ion Robot

Re: Router blocking traffic of Shark Ion Robot

Re: Router blocking traffic of Shark Ion Robot

Re: Router blocking traffic of Shark Ion Robot

Re: Router blocking traffic of Shark Ion Robot

Re: Router blocking traffic of Shark Ion Robot

Re: Router blocking traffic of Shark Ion Robot

Re: Router blocking traffic of Shark Ion Robot

Re: Router blocking traffic of Shark Ion Robot

Re: Router blocking traffic of Shark Ion Robot

Re: Router blocking traffic of Shark Ion Robot

Re: ISP Static WAN issues (Configuration)

Re: ISP Static WAN issues (Configuration)

Re: ISP Static WAN issues (Configuration)

Re: ISP Static WAN issues (Configuration)

ISP Static WAN issues (Configuration)

Re: Blocking unwanted IP login attempts

Re: Methods to possibly blocking all IP traffic based on Location?

Re: Methods to possibly blocking all IP traffic based on Location?

Re: Methods to possibly blocking all IP traffic based on Location?

Re: Methods to possibly blocking all IP traffic based on Location?

Re: Methods to possibly blocking all IP traffic based on Location?

Re: Methods to possibly blocking all IP traffic based on Location?

Re: Clients not displaying "dropped connection icon"

Methods to possibly blocking all IP traffic based on Location?

Re: Clients not displaying "dropped connection icon"

Clients not displaying "dropped connection icon"