Sorry, I never did get this to work properly.

I don't think that there are some kind of wildcards, but you can do this with simple script: :foreach i in=[/ip firewall connection find ] do={ :if ( [:find [/ip firewall connection get $i src-address] 192.168.0.112 ] >= 0 ) do={ :put ( [/ip firewall connection get $i src-address] . " " ....

I've been looking at the "/ ip firewall connection" list recently and trying to search it based on src-address and dst-address. The problem is that it seems to require that you specify a port number, so that: :put [find src-address=192.168.0.112] returns nothing. Instead I'd have to print ...

---- Hai,... :wink: yes, you can add rule like this and put on top rule . /ip fire filt add chain=forward prot=tcp tcp-flag=syn connection-limit=6,32 acti=drop it mean 6th connection will drop. Thanks for the reply. Doesn't that just mean that each local IP address only gets allowed 5 connections t...

I'm having problems with bandwidth-hogging users on our satellite internet connection. The current biggest issue seems to be people using "download accelerators". Some component in the system (probably the V-SAT modem) seems to share bandwidth equally between all connections. So if you're ...

1) About the issue related to Unicode characters, it will be fixed in the upcoming RouterOS version. However it is possible to specify code instead of character, e.g. USD instead of $, EUR instead of €. The only problem with using the code is that no-one in Nigeria is familiar with it, they wouldn'...

mac is very unstable connection as tcp/ip take care of packet retransmissions end everything (ethernet), and if you use this in secure mode, then even more unstable it becomes. it is advised to use mac-winbox only if there is no other choice left and you have to connect to device (like there is no ...

I just upgraded to RouterOS 2.9.43 and Winbox immediately stopped working. It loads and looks OK, but most of the windows (for example IP -> Hotspot -> Active) contain no data. If I open a terminal from within Winbox I get an empty terminal window. However, if I change to using TCP/IP to connect to ...

I've been trying out User Manager today and noticed a couple of little problems in v2.9.42: We're in Nigeria, where the currency is the Naira (symbol Unicode 20A6), if I try to set the currency for a customer to the HTML entity ₦ it is ignored. If I paste in the character (from Windows Ch...

You can not achieve much of an effect with priorities for downstream traffic on your end of the link. Priority queueing of your downloads should be performed on the ISP's router at the other end of the link. Ah yes. Unfortunately we have no control over these things at the ISP's end. Satellite ISPs...

I've been experimenting with Hotspot user profile rate limiting, to try and prevent some of our users (kids in the staff quarters) hogging all our bandwidth (a measly 128Kbps downlink). It seems to be working, apart from the relative priorities. For example, I've set the staff quarters users to prio...

This follows on from a previous post where I was trying to work out how to do bandwidth limits per user that changed over time. I've now come to the conclusion that that would probably be too complicated, so I'm thinking that some system that prioritised traffic depending on the user's hotspot profi...

OK, I've been looking through the manual and trying to get a better understanding of queues. So I think I should be able to add a packet mark for each hotspot user profile, for example our staff quarters users (profile 'residence') would have their packets marked differently from staff in their offi...

How about 64Kbits, same performance as a 56k modem operation FLEX. Useable for internet but not hogging to the available bandwidth 64Kbit/s is half of our bandwidth, so the per-user limit would need to be set lower than that. Or maybe I can just have all the 'residence' users sharing 32 Kbit/s betw...

I'm trying to log what URLs my users are requesting, so that I can present them with evidence that they're abusing our (very restricted) bandwidth downloading porn. My logging config is: > /system logging print Flags: X - disabled, I - invalid # TOPICS ACTION PREFIX 0 info memory 1 error memory 2 wa...

OT: You know that 5kbit are only 625byte/s ... even a GPRS connection is faster?!! Do you think of 5kbit per user or do you want to share it among all? It is a little bit slow, just the first number that popped into my head. If they keep accessing the kind of sites (porn, mostly) that they are just...

Our network has a mixture of different types of users, including wireless connections from the staff housing on campus. At the moment some of the staff kids are on vacation from college and are clogging up our 128/64 kbit/s VSAT link during the day. During the night I don't care what they do. Is it ...

Has anyone set up the walled garden on their router to allow access to Windows Update and McAfee anti-virus updates?

I've been trying to work out what URLs I need to allow, but neither of those make it easy.

Kevin

Oops, I added the last mangle rule but forgot to move it to the correct position.

Thanks for the help, I'm hoping this will improve things a bit.

Kevin

OK, I now have /ip firewall mangle (including my two preexisting rules): Flags: X - disabled, I - invalid, D - dynamic 0 chain=forward src-address=192.168.0.0/24 action=mark-connection new-connection-mark=users-con passthrough=yes 1 chain=forward connection-mark=users-con action=mark-packet new-pack...

I'm quite new to MikroTik and still struggling a bit. We have a 128/64 Kib satellite link for our internet connectivity, which works fine until somebody starts a large download. At that point DNS lookups get very slow and usually stop working. I've followed the instructions in the MikroTik reference...