- Public - talk.mikrotik.com.au

Help with BGP on v7 (not a joke)
by Christopher Hawker 07 Dec '22

07 Dec '22

Hey all, I'm currently trying to get BGP working on v7. I am almost there, we are getting a full table from our upstream peer and are sending them our prefix (which they confirm they are receiving). The final thing we need to work out is filtering. We have a single /24 v4 prefix being announced and receiving a full table. If there's anyone out there that has some working examples for import and export filters it'd be greatly appreciated. Thanks, Christopher H.

2 1

Blocking FTP
by Karl Auer 07 Nov '22

07 Nov '22

I'm wondering if I have fundamentally misunderstood something. In fact I am rather hoping I have. An outside agency has reported seeing telnet connection attempts coming from the outside IPv4 address of a client's router. They have provided info that shows quite clearly that these are attacks coming from the router. To see where in the network they were originating, I added these lines at the front of each of the input, output and forward "/ip firewall filter" chains: chain=xxx action=drop \ protocol=tcp dst-port=23 \ log=yes \ log-prefix="TEL_xxx" My log output shows exclusively lines with "TEL_output". I wasn't expecting any "TEL_input" lines, but I was definitely expecting some "TEL_forward" lines, assuming the miscreant is inside the network. Here is a sample (a.b.c.d is the outside address of the router, w.x.y.z is the destination address): 18:44:35 firewall,info TEL_output output: in:(none) out:e1-uplink, proto TCP (SYN), a.b.c.d:54315->w.x.y.z:23, len 40 I.e., the packets seem to be sourced at the router. Does this mean that the router is the source of this nefariousness?!? Or am I missing something? There are quite a few of these, I'm seeing about 20 per minute. The router version is old and should be upgraded: 6.36 (stable). It appears that an earlier colleague added three mangle/passthrough statements, but these as I understand it are effectively just counters. There are no other mangle statements. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160

4 4

WTB Mikrotik CCR2004-1G-12S+2XS
by Christopher Hawker 11 Oct '22

11 Oct '22

Hello all, Trying to hunt down a CCR2004-1G-12S+2XS somewhere in Sydney. If you have one interstate I will also consider, however pickup is preferred. CH.

1 0

Mikrotik as NBN router?
by Karl Auer 27 Sep '22

27 Sep '22

Hullo all. A client is about to change NBN suppliers, and the new supplier apparently does IP-over-Ethernet (IPoE). >From what I can find out about this, it should be pretty much as simple as "connect port 1 on the Mikrotik to the correct data port on the NTD". And, I guess, make sure there is a DHCP client on port 1 and turn off the existing PPPoE stuff. However there are mentions of having to set up the Mikrotik to send DHCP option 60 with its DHCP requests. Has anyone used a Mikrotik with the NBN and IPoE, and if so are there any tricks? Regards, K. PS: I haven't seen any messages on this list for it seems like yonks... though there was a mailing list reminder on 1/9. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160

7 11

Mikrotik Routers in Sydney
by Christopher Hawker 30 Aug '22

30 Aug '22

Hi All, Currently looking for a router in Sydney which has 2 x SFP cages and can handle two multihoming peers with full feeds. All the usual vendors are low on stock with ETAs of 2+ months for delivery. Please do reach out to me off-list. Thanks, Christopher H.

1 0

MTCNA Training Duxtel USB
by Dave Browning 23 Aug '22

23 Aug '22

Hi All, Wandering if anyone has the USB that you receive from the Duxtel MTCNA training? I recall it having a PDF of the training material, as well as some configs and useful tools. I just have no idea where I put mine 😂 Cheers, Dave

1 0

Partial internet on MacOS. Unable to browse to Mikrotik
by Chris Herrmann 24 Jun '22

24 Jun '22

This might be related to a routing issue that we saw earlier. We had connectivity issues to a range of Akamai & AWS IP space from a variety of end points domestic & international. It seemed to be picked up and mitigated quickly by Australian 4G operators, but there are several ISPs locally & internationally I'm aware of who didn't fix it - and they only got visibility again once the underlying issue was sorted. >From our side we saw everything come up again ~11am Sydney time (GMT+10). If it's now working OK for you... then that was probably it. If it's still broken... then probably not... Cheers, Chris

2 1

Partial internet on MacOS. Unable to browse to Mikrotik
by mamancc＠hotmail.com 24 Jun '22

24 Jun '22

Hi, I have Mikrotik RB4011 with the following setup working beautifully for the past 4 years:NBN Device Netcomm - Mikrotik RB4011 (RouterOS v6.49.6) - Netgear Orbi (not acting as a router). We switched over to a new ISP about 3 weeks ago and internet has been working beautifully as well till last night. I don't think the ISP change is the cause but I thought I share it. Our NBN is FTTP. >From last night we have not been able to browse internet using our Macbooks:1. we have 2 Macbooks, used both macbooks to attempt browsing through Firefox and Safari, none works; however sending/receiving iMessage works!;2. cleared Cache and Browsing History/Data; still not working3. rebooted the Macbook, still not working4. my attempts to navigate/connect to Mikrotik via the browser is challenging. It takes many attempts to connect. Once connected I attempted to Check for Update, and it returns Error. When I hit the Close button from the Check for Update page, I recall it took me to a page with option to Downgrade, and on that page there appears to be a selection/list of modules and (IP6 was greyed out) so I clicked on IP6 and hit enable. It doesn't appear to do anything. Internet appears to still work via:1. mobile phones, but not all applications2. Windows laptop browser able to browse to internet, however unable to navigate/connect to Mikrotik still I am yet to reset Mikrotik configuration. Hoping someone able to shed some light on what may be the issue please. Cheers,Adrian

7 10

Re: [MT-AU Public] Partial internet on MacOS. Unable to browse to Mikrotik
by mamancc＠hotmail.com 24 Jun '22

24 Jun '22

Mike, To add, other applications on the Macbooks are able to access internet: AppleTV app on Macbook, Spotify, and Apple Store. What makes me think it's something to do with the Mikrotik is the struggle to simply browse locally to the Mikrotik or Netgear Orbi, either via the Macbooks or Windows laptop. Yes I have rebooted both the Mikrotik and Netgear Orbi a couple times at least. Regards,Adrian On Friday, June 24, 2022 at 07:56:00 AM GMT+8, mamancc(a)hotmail.com <mamancc(a)hotmail.com> wrote: Hi Mike, What works:1. TV,2. Mobile phones most applications 3. Windows browser browsing internet4. Macbooks iMessage What does NOT work:1. Macbooks browser browsing internet or even attempting locallly to connect to Mikrotik or Netgear Orbi2. Windows browser attempting to connect to Mikrotik or Netgear Orbi3. The wife tells me that certain mobile phone messaging application does not work Cheers,Adrian On Friday, June 24, 2022 at 07:34:29 AM GMT+8, <mike(a)duxtel.com> wrote: Do you think it is only macbook, or something else? i.e. can you access internets OK using some other devices, like TV, PC, mobile phones, etc? Cheers! -----Original Message----- From: Public <public-bounces(a)talk.mikrotik.com.au> On Behalf Of mamancc(a)hotmail.com Sent: Friday, 24 June 2022 9:24 AM To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> Subject: [MT-AU Public] Partial internet on MacOS. Unable to browse to Mikrotik Hi, I have Mikrotik RB4011 with the following setup working beautifully for the past 4 years:NBN Device Netcomm - Mikrotik RB4011 (RouterOS v6.49.6) - Netgear Orbi (not acting as a router). We switched over to a new ISP about 3 weeks ago and internet has been working beautifully as well till last night. I don't think the ISP change is the cause but I thought I share it. Our NBN is FTTP. >From last night we have not been able to browse internet using our Macbooks:1. we have 2 Macbooks, used both macbooks to attempt browsing through Firefox and Safari, none works; however sending/receiving iMessage works!;2. cleared Cache and Browsing History/Data; still not working3. rebooted the Macbook, still not working4. my attempts to navigate/connect to Mikrotik via the browser is challenging. It takes many attempts to connect. Once connected I attempted to Check for Update, and it returns Error. When I hit the Close button from the Check for Update page, I recall it took me to a page with option to Downgrade, and on that page there appears to be a selection/list of modules and (IP6 was greyed out) so I clicked on IP6 and hit enable. It doesn't appear to do anything. Internet appears to still work via:1. mobile phones, but not all applications2. Windows laptop browser able to browse to internet, however unable to navigate/connect to Mikrotik still I am yet to reset Mikrotik configuration. Hoping someone able to shed some light on what may be the issue please. Cheers,Adrian _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au

1 0

Sponsored placed available at MikroTik Certification Training coming up in Brisbane in May
by mike＠duxtel.com 14 May '22

14 May '22

Hi all! We have some certification classes coming up in Brisbane during May 2022 and, as usual, we like to offer one or more 'sponsored' places at one or more of those training events to support tech communities, education and charity type organisations. Applicable classes are MTCRE (Routing) and MTCINE (Internetworking) - eligible candidates must be MTCNA certified, or significant and demonstrable background experience with MikroTik products, and should have some association with one of the mentioned organisation types above, or particular personal circumstances that may warrant sponsorship. Anyone interested in exploring these opportunities further, please get in touch with us direct via training(a)duxtel.com <mailto:training@duxtel.com> , or just reply direct to myself : ) Cheers! Mike Everest. ------------------------------------------------------------------------------------ Why Choose DuxTel for all your MikroTik needs? 10 good reasons: http://duxtel.com/why_duxtel ------------------------------------------------------------------------------------ Follow our tweets for news and updates: http://twitter.com/duxtel

6 11