- Public - talk.mikrotik.com.au

Odd IMAP failures, seems to be network
by Karl Auer 09 Apr '22

09 Apr '22

I run a Mikrotik router as my home router, have done for years. I personally have never had an issue with it. The current one is an hAP ac^3 running 6.47.10 with plenty of free RAM and disk space and virtually zero CPU usage. However one of my "users", running Thunderbird on Windows, has an ongoing problem using IMAP. When she sends an email, the email is not saved to the (IMAP) "Sent" folder. If she saves a draft, it fails to save to the (IMAP) "Drafts" folder. In both cases the failure comes after a long wait, indicating IMHO a network problem. This does not happen all the time, but often enough (well more than half the time) to be extremely frustrating. We can discern no commonality between the affected messages - large, small, addressees, attachments etc. Sometimes if she disconnects from the network and then reconnects, the message will work the second time around, but IMHO this is just blind luck. The thing is, this does NOT happen when she is using the same computer outside our home - on a public network, her phone's hotspot or whatever. Only at home. I have excluded wifi as the problem; she gets the same issue on a wired connection. I have set up my own IMAP connection (though not as yet with Thunderbird) and cannot replicate the problem. She and I use the same local network, the same email provider and the same connectivity provider (ADSL from iiNet). The link is slow (about 14/0.4), but has been dependable and as I say, I do not have any problem other than with speed. This has been going on for probably about two years now, getting steadily worse, to the point where she now leaves the house to work (which is a big deal, as it's a 40-minute round trip to a suitable location). I'm at a bit of a loss as to what it might be, and am asking here to see if anyone has a router-related clue. Or any ideas as to how I might go about troubleshooting this. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: 9FB6 C08F 91CB 5093 30EF 3E2F 8C94 EEBD 117C 4A10 Old fingerprint: CF68 0C56 EEE4 CC19 28D4 03B3 BCE0 E800 E31F 7254

5 11

Re: [MT-AU Public] Network Routing Issues
by Michael Junek 04 Feb '22

04 Feb '22

Windows firewall on the workstation perhaps? ________________________________ From: Christopher Hawker <chris(a)thesysadmin.dev> Sent: Thursday, 3 February 2022 19:05 To: MikroTik Australia Public List Subject: Re: [MT-AU Public] Network Routing Issues Hi Dave, That was my thought too, however I've placed a rule at the top #1 that allows ICMP from any IP on any zone to reach any other IP on any other zone, same result. ________________________________ From: Public <public-bounces(a)talk.mikrotik.com.au> on behalf of Dave Browning <dave(a)dlbnetworks.com> Sent: Thursday, February 3, 2022 6:39 PM To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> Subject: Re: [MT-AU Public] Network Routing Issues Given you can get one way, it’ll be a firewall issue. I reckon your are being “Sophos’d” and it’s simply blocking inbound ICMP. > On 3 Feb 2022, at 5:32 pm, Christopher Hawker <chris(a)thesysadmin.dev> wrote: > > Hello all, > > I'm trying to work on a setup using 2 x CHRs at separate locations, with an EoIP tunnel between them. The tunnel itself works, and I am able to route across it. > > At the A-side is a workstation (192.168.0.1) with a Sophos router as the default gateway (192.168.0.254) and the A-side CHR is the tunnel gateway (192.168.0.253). At the Z-side, there is the single CHR (172.16.100.254) which is acting as the default gateway and a Windows server (172.16.100.1) behind it. I have BGP configured between the two sites over the tunnel and this works as expected. Sessions are up and routes have propagated. > > 192.168.0.1 is able to ping and can traceroute to 172.16.100.1 and results are returned however, 172.16.100.1 cannot ping/traceroute to 192.168.0.1 which has me puzzled. I did some more digging, and the traceroute to 192.168.0.1 shows that the last hop before timeout is 192.168.0.253. > > I apologise for my poor explanation; however I hope it makes sense to someone. Would anyone be able to shed some light on why it may be doing this, or what I am missing? > > Thanks, > CH > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au

5 5

Network Routing Issues
by Christopher Hawker 03 Feb '22

03 Feb '22

Hello all, I'm trying to work on a setup using 2 x CHRs at separate locations, with an EoIP tunnel between them. The tunnel itself works, and I am able to route across it. At the A-side is a workstation (192.168.0.1) with a Sophos router as the default gateway (192.168.0.254) and the A-side CHR is the tunnel gateway (192.168.0.253). At the Z-side, there is the single CHR (172.16.100.254) which is acting as the default gateway and a Windows server (172.16.100.1) behind it. I have BGP configured between the two sites over the tunnel and this works as expected. Sessions are up and routes have propagated. 192.168.0.1 is able to ping and can traceroute to 172.16.100.1 and results are returned however, 172.16.100.1 cannot ping/traceroute to 192.168.0.1 which has me puzzled. I did some more digging, and the traceroute to 192.168.0.1 shows that the last hop before timeout is 192.168.0.253. I apologise for my poor explanation; however I hope it makes sense to someone. Would anyone be able to shed some light on why it may be doing this, or what I am missing? Thanks, CH

3 3

Some Mikrotik gear on eBay
by Jason Hecker 10 Dec '21

10 Dec '21

Hi, I have an LHG with an EP06-E module and an LTAP for sale on eBay. Alas they are just kicking around taking up space at the moment. Both have ROS7.1 installed and the EP06-E is in MBIM mode. https://www.ebay.com.au/itm/115125379119 https://www.ebay.com.au/itm/115126893331 Regards, Jason Hecker <https://www.upandrunningtech.com.au/>

1 0

The unicorn is stable apparently
by Andrew Gilbett 08 Dec '21

08 Dec '21

So I guess everyone is busy testing V7.1 (Stable)

5 4

VLANing on a CCR1009
by Christopher Hawker 02 Dec '21

02 Dec '21

Hey folks, I’m currently working with a CCR1009 and a Cisco switching stack. We have 4 VLANs on the network, and if a device is configured on a VLAN it can ping its gateway, however cannot access the internet if a source NAT rule is configured using a specific public IP. If it is configured as a masquerade, it works using the primary IP for outbound NAT. What could I be missing? Thanks, CH Sent from my iPhone

4 3

ether2 not enabled as bridge port
by Karl Auer 01 Dec '21

01 Dec '21

We found that ether2 on a newly installed RB4011 was "not working". Investigation revealed it was not delivering an IP address via DHCP. Further investigation revealed that unlike every other port 3-10 in the bridge, ether2 was disabled. Since the DHCP server is on the bridge interface, devices connected to ether2 are not getting served. /interface bridge port add bridge=bridge1 disabled=yes interface=ether2 add bridge=bridge1 interface=ether3 [etc] I didn't configure this unit. I'm a bit mystified as to why it would have been configured like that. My question is whether I can safely just enable it. I can't see why not, but as it is now in production I thought I would ask the brains trust... Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: 9FB6 C08F 91CB 5093 30EF 3E2F 8C94 EEBD 117C 4A10 Old fingerprint: CF68 0C56 EEE4 CC19 28D4 03B3 BCE0 E800 E31F 7254

5 8

PS180-T / RB4011
by Denis Hancock 30 Nov '21

30 Nov '21

Hi All Has anyone been able to get an vDSL SFP PS180 to work with Exetel on an RB4011 ? We're using VLAN8 (8/35 LLC) (we hope) so SFP has a VLAN8 hanging off it PPPoE client interface set to VLAN8 thanks for any advice -- *Denis Hancock* Chief Technical Officer / Director Helpdesk 1300 139 593 <1300139593> Mobile 0407 687 621 <0407687621> Unit 15, 5 Enterprise Drive, Rowville 3178 <https://goo.gl/maps/HGmhhNncEF12> <https://www.facebook.com/samuraiconsulting.melbourne> <https://au.linkedin.com/in/denishancock> Australian Information Security Association (AISA) Member This email is intended only for the addressed and is subject to copyright. If you have received this email in error, please notify me immediately.

5 8

Fiber splicing and testing gear - available
by Mike Everest 25 Nov '21

25 Nov '21

Hello, As a favour to a deceased estate liquidator, if there is anyone interested to consider purchse of some fiber splicing and testing gear to please contact me off-list. Apologies to those who might consider such a post 'inappropriate' here (those folks are welcome to let me know off-list also ;) but finding a buyer will be very helpful to the young family :-} Thanks! Mike.

1 0

RB4011 and Yealink W60B
by Karl Auer 22 Nov '21

22 Nov '21

Just installed an RB4011 in a client site. They had an existing Yealink W60B phone there, powered by a plug-pack. The specs on the plug pack say 600mA output. Tried plugging the phone in to the poE port (10) on the RB4011, with no success. The W60B showed no evidence of seeing power. Tried setting poe-out on the port to "forced-on", no change. The Yealink doco says it requires "IEEE 802.3af, Class 1" PoE. I can't find any such spec for the RB4011, just lots of statements that it is passive PoE. Is there a trick or should I give up? Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: 9FB6 C08F 91CB 5093 30EF 3E2F 8C94 EEBD 117C 4A10 Old fingerprint: CF68 0C56 EEE4 CC19 28D4 03B3 BCE0 E800 E31F 7254

9 10