MikroTik

rextended

@nichky Amen... Better work to have again the separate web interface for the user-manager or at least leave the users use previous "v6" user-manager. why are messages being deleted? When will BFD be added? For 2 reason: that messages are offtopic, and as required by forum administrator is ...

rextended

When 6.x go out... dramatic change... From the 6.23.5 it was more than stable, with the exception of some later versions, which were then fastly corrected...

rextended

For example: /ip firewall address-list add list=unexpected-address-source-from-ISP address=10.0.0.0/8 add list=unexpected-address-source-from-ISP address=127.0.0.0/8 add list=unexpected-address-source-from-ISP address=169.254.0.0/16 add list=unexpected-address-source-from-ISP address=172.16.0.0/12 a...

rextended

I use on default "unreachable" on CPEs, if some interface have some IPs on that range, count more than the unreachable... (for prevent spoofed traffic or errors go outside), the other controls of incoming packet source are on edge router, and control of packet from CPE are on separate fire...

rextended

Not only local subnets, consider also your WAN IP (how is possible to receive one packet with your own IP?...) and the other public IPs you have (if you have any).
Also from internal subnets can't come your WAN IP...

rextended

This time @DarkNate is absolutely right,
but instead to delete @anav & other users posts, please move to one split topic, omitting my & DarkNate useless frills.
Thanks.

rextended

Seems pretty simple to me.......... and not the biggest ask in the world. Two simple rules: 1a) Do not accept packets from the WAN that have as source the IPs that are used internally, even the public ones if the ISP has assigned them to you more than one. 1b) If the ISP doesn't do its job, block a...

rextended

@anav Simply answering, and this goes for any use, the blackhole is better because the packet just disappears without a trace OR consequences of it being gone. Routing decision happen before firewall filter (not RAW) drop the packet, and since, whether the firewall filter (not RAW) blocks it or not,...

rextended

It is better for all if the user stay. First of all, a confirmation email should be needed, since someone could have stolen his account ... Speaking only from a technical point of view, all the other post where other user quote, keep the original author, and are stored as text inside post. [quote=Da...

rextended

You're right, but I find it unlikely that an attack will send all (assigned) IPv6 addresses anything...
How many days and bandwidth would it take?....
Also port scans on IPv6...must already know the address...

In IPv4 now everything is simpler, they are a handful of addresses in comparison....

rextended

No, is a RB532 or RB532A, have 2 colums of 3 leds...

rextended

@chechito

rextended

Go here, and after a backup, delete all: C:\Users\%USERNAME%\AppData\Roaming\Mikrotik\Winbox If for some reason you can not delete all, something keep locked the file, probably anuther winbox session (on another user?). Check the processs on exection if some istance of winbox is locked. Reboot the d...

rextended

The executable doesn't make it on github, but the user loads it... Users don't check what's written at all, but they love copy-and-pasting... Leave it alone if there is someone who reads everything and compiles things on their own ... But this refers to anything, in a general way, not in the specifi...

rextended

Since RouterOS & other network OS do not support characters out of ASCII-7-bit range, usually the "µ" micro (is for small M on greek, "mi") sign is replaced with "u" by resemblance. This also happen on some other abbreviations like uFL for µFL connector, but on this...

rextended

On the past some "ready package" posted from users, not only for macos have surpriseS inside...

rextended

Please keep it civil, disagreements/discussions regarding approaches or interpretations of networking concepts are fine, but there should be no personal attacks.

No problem, already received from me:
viewtopic.php?t=194794#p991909

rextended

@DarkNate... My name is not written on it but it is clear what he was referring to. I see what caused your post. But it doesn't seem to me that it should be just a moderator's job asking for respect from everyone in the forum... Why are you continuing? I already wrote to you that it's already over f...

rextended

You want to make me look like a troll while he insults others?

For me it's already over here.
And it would be better if he deigns to get off the podium and help others without offending them who have no instruction.

rextended

I don't know what "begging", you're talking about. Ask Bitcoin on form, for example? I'm not about to elaborate further than what I already did, unless you pay me for it, in Bitcoin. Furthermore, I'm not getting paid in this forum to teach people concepts I learnt in the 8-10th grade, But...

rextended

Ok, we will propose to MikroTik to close the forum, so there is nothing up to Your Majesty D.H.D. Master Know-It-All of the Universe. They will reopen another one where users must have at least 100 degrees, 100 diplomas and 100 masters to access it. I see you're picking up money everywhere, you seem...

rextended

Do not lost time in useless frills. You need to do something every 10 days? Schedule someting that run every 10 days: done... (and when you copy someone script is nice to cite the source...) And about the update script before, why wear uselessly the flash? Has a limited write count... But if you ins...

rextended

First of all, fix all error you have introduced on the script, like the space here: "tunnel =yes", second, the script is v7 and you try to use it on v6.

rextended

Goooofffff eeee A I ?

Another motherf–er that post ChatGPT reply on forum....

rextended

( the correct syntax is https://v6.sync.afraid.org/u/<API-KEY> )

for me the previous script work as expected with "full" IPv6
and also 2800:a4:1a48:9a00:: still a valid IPv6

rextended

My solution didn't mean that such a function shouldn't be implemented, like ":search" & ":replace"...

rextended

Lately I connected Mars to Venus, it gave me more satisfaction... Literally... You should do it too, maybe you calm down and get off the podium... Anyway, the point is not to be superheroes like you who save the world and the rest are all shits who can't do anything, but to understand the difference...

rextended

{
:local testString "FQDN: host.documentation.net"
:local removeThisAndAllBefore "FQDN: "
:put [:pick $testString ([:find $testString $removeThisAndAllBefore] + [:len $removeThisAndAllBefore]) [:len $testString]]
}

rextended

The bogons problem is overstated, you simply have to block what comes from outside that has the same IPs you have inside... For example, if you don't use 10.x.x.x/8, the packet is dropped regardless (because the router doesn't know where to deliver it) whether it gets stuck in the firewall or not......

rextended

When the device start to do that, often has flash broken...

rextended

@Amm0
Excuse me, but I was sincerely asking about another practical use, except the above, not about the technology to use,
because I can't think of anything else...

@optio
please do not quote all or go out one mess

rextended

Or you can just be kidnapped and forced to log in and nothing helps (maybe suicide capsule with poison in tooth?)

I'd give him the emergency PIN, which if entered still allows decoding and access, but also call the police without notification...

rextended

I'm using web api for refreshing IP on some dyndns service, there is no alternative other than store raw api credentials (user/pass) into script afaik, that's why my backups are always encrypted. Why you do not use the MAC of one or more ethernet interface as seed for encrypt the password? If the s...

rextended

Actually I have the main network on The Dude, rigth click and open with winbox launch one program that ask for PIN. If PIN is correct*** decode the passed username and password from The Dude and use it as parameters to launch Winbox. (obviously on the RouterBOARDs winbox is authorized only or from l...

rextended

Script must not store passwords...
At least the first part of the password should be plain text in the script, and an "export" or accidentally unencrypted backup might reveal that part...

rextended

Or for paranoid encode also the password on SMS :lol: :lol: :lol: :lol: the script chgpass decode it and apply the correct password. :cmd Vq70980q script chgpass KNHT6ICJOMQG63TFEBSXQYLNOBWGKLROFY====== Since the encoding can be arbitrary and not necessarly baseXX, is strong enough for detect failed...

rextended

Preventing authentication even if password is compromised. I'd like, if possible, to get answers that don't involve what I've already ruled out: username and password being stolen (no matter how or why) Btw. you are missing some hypothesis using sms codes and setting dynamic passwords combining the...

rextended

Manual upgrade ?

Make sure wifiwave2 package from extra package download is installed.

No, is installed this time

(hint: "Type: WiFi Wave2" on image

)

(OT, for other users, I'm referring to this)
viewtopic.php?t=194707#p991302

rextended

Serious question, I'm not kidding:
Aside from preventing that if someone gets the exact right credentials, on the first try they can log into the router,

what is two-factor authentication for?

rextended

The second factor can be simply the SSH cert, the MAC of the device used for try the access, the IP binded to the profile etc. etc. etc. *** BEGIN FIRST HYPOTHETICAL ENVIRONMENT *** Open WinBox, select the device fomr Managed / Neighbors / Romon list, example: "MySecuredRouter KNHT6ICJOMQG63TFE...

rextended

@eallen , And the wireless interfaces? :global ifWAN "ether1" /int bridge remove [find] add name=bri-lan protocol-mode=none /int bridge port remove [find] :foreach ifList in=[/int ethernet find where name!=$ifWAN] do={add bridge=bri-lan interface=$ifList} :foreach ifList in=[/int find whe...

rextended

Want to change a secure method to an insecure method to add another insecure layer?

rextended

The model is not a property you can set, so what's the point of saving it in the backup?

At least search the device name... But also backup have on default for filename the same of device name and the isodate-time...

rextended

But.. is the same.... what is not correct on my reply?

rextended

https://i.mt.lv/cdn/product_files/RB1100AHx4v5_180118.png Each port of each group can reach at the same time wire speed, but each grup can communicate with each other to max 2.5Gbps. The max speed at same time between all groups still 2.5Gbps. switch1 group is ether1-5 switch2 group is ether5-10 an...

rextended

numbers=0 NO never use numbers. You can also write this to be added when you dhcp is bound - and then also remove when unbound (important) NO for same reason on previous posts ********************************* If work do not change. Endless loops are one idiocy, till exist the scheduler or netwatch.

rextended

Is clear, he has copied only routeros without the wifiwave2 separate package...
Also when dowwngrade, because for downgrade to 7.6 he can only download the routeros package...

You must download also the extra packages and put on routerboard routeros v7.8 and ONLY wifiwave2 7.8 package

rextended

MikroTik do not have any (authorized or not) service center, for what I know.
Is why you must contact your reseller.

rextended

Not working on latest macOS Ventura 13.2.1. Crypt32.dll error in wine.

Probably the fix for CVE-2023-23514 is involved

rextended

without gateway

Probably windows think that do not have internet SO the time is unavailable...

Also RouterOS must be syncronsized with external source for provide NTP service...

rextended

You forget to add first the admin access

rextended

Thanks, I do not remember precisely why, but I remember that updating one array defined with ({}) cause later a mess with other arrays defined on same way...

rextended

missing / in front of "ip" Why do not use directly RouterOS script instead of install python just for repeat 2 lines??? # "pinhole name/comment"= "outside_port", "protocol", "inside_host", "inside_port" { :local rules { "Joe web server...

rextended

It doesn't matter if the app works or not, some users never use the app and have constant problems with "this feature",
they better know whether to choose the app to work or their connection to work...

rextended

If you use the device for mark the connections, you drop the total bandwidth because is a switch, not a router,
all traffic pass inside CPU instead pass only to switch chip...

Only 1.3Gbps max

rextended

Did not have problems with ISP yet. It's enabled just that MT smartphone app can have correct internet connectivity status.

There are not only "your connection", others also need to know about these problems before they get screwed...

rextended

this one also:

/interface/detect-internet;set detect-interface-list=none;set detect-interface-list=WAN

Bad idea at all use detect-internet...
Some ISP lock-out your router if receive unsolicited DHCP-client requests...

rextended

I use 6.48.6 and it work as expected, not needed to go to 6.49.x or v7

rextended

define: connect two LANs... change to one LAN all the address, conforming to the fist LAN, (or add 2nd IP to the devices, but not everytime is possible) [often suffice just increase subnet mask of both LAN and assign both gateway/dns IPs to main router] else is not merge two LAN, but ROUTING two lit...

rextended

The master in problem description, congratulations...

viewtopic.php?p=890557#p890557

i have no mikrotik device

Has something changed?

rextended

Probably @ekarin user is hijacked, because after years of his unused account, writing that, for no reason, to old post that have already 7.1, is illogic.

rextended

The current RouterOS v7 now runs L3 HW Offloading for fasttrack connection without problems. You can try the current RouterOS v7. It should be OK. The post is one year old, I do not think the user wait till now for your (useless... I do not read any advice) reply, L3HW is already available from 7.1...

rextended

@anav... vlan VID 1 (also 0 and 4095) is for you (and also for me) like ChatGPT for someone...

A good habit is use only VID from 10 to 990

rextended

Where can we report that it is a bug?

Click on "support" on the following page.
https://mikrotik.com/

rextended

The model is: CRS125-24 G -1 S -RM If netinstall not work again, or is defective, or is locked with protected-routerboot, but still defective if has lost the config for no reason. The USER forum can not do any, if is defective. You must contact your reseller for the warranty, and if is out of warran...

rextended

No problem bro

thanks for understanding

rextended

simply you can reply by advice or somethıng useful instead of replying with meaningless talk we wrote a lot of useless responses Instead of writing something useful to benefit everyone!! I have already provided a working solution to do that on post #2, al other posts, actual or future, are useless,...

rextended

Dont write any childrens books..........

Now, I've already written post number #2, it was just a clarification,
and to highlight that when someone use one (supposed) Artificial Intelligence, that person admit that don't have one for himself.

rextended

With only one Audience placed to near the center, on top of one closet,
I cover 2 apartments, ~120m² each, one on top of another...

rextended

just use winbox/webfig and go on system / reset configuration and click on "reset configuration" without selecting any option

if you are unable to access again the device with winbox or webfig, search the instructions of how do a netinstall

rextended

The code that needs to be inserted can be found here: https://forum.mikrotik.com/viewtopic.php?t=177551#p980163 Already provided on post #2, and on the post #5 is clear that have read the post... Is true: :local message [/urlencode $output] "/urlencode" not exist, another ChatGPT lie

rextended

Other shit:
viewtopic.php?t=194664

rextended

Yeah better to not provide any help if you reply like that it's not related to copy & paste man this part of my script it didn't work anyway that's why I Asked As I have already written to you, I have already answered you, and correctly. Just copy and paste the full function, which you can find...

rextended

I don't provide any help from what it comes from that shit.

But you can not do a complete copy & paste? Why only a few lines? Are the others there for nothing?

End of help.

rextended

Can you give me an example how it should be ...and didn't I just do it? How many time you need the same info? https://forum.mikrotik.com/viewtopic.php?p=974517#p974797 Bad attitude copy&paste without understand what you doing... Not noticed before: :local message [/urlencode $output] Where you ...

rextended

If you use "url", "mode" is useless. <<paste ASCIItoCP1252toURLencode function here>> :local chat_id "" :local bot_token "" :local destination "8.8.8.8" :local output [/tool traceroute $destination] :local timestamp [/system clock get time] :local me...

rextended

I have integrated some description on previous post...

On v7.6 and previous (only v7) there is present one bug that cause disappearing of global variables,
(see my post on release topic)
is why is important specify both RouterOS version and platform.

rextended

Globals have to be defined in top-level scope Can be defined any time... but... :if (true) do={:global outx "OK"} :put $outx # this work because the new line, on terminal, is another context that find already defined globally "outx" # using { } prevent the "test1" work...

rextended

All code run in terminal needs to be in one block.

Except when is never used one ":local" variable.

rextended

:log info "Why is above blank after it was run once?" Why did you write it like that, if you define the variable after, it's not retroactive.... Why doesn't "something" end up in my global var after I've run this script once (never mind multiple times)??? I don't know what other...

rextended

@Rextended I will travel to Italia in may to see your beautiful country

Thank you

I hope you enjoy

rextended

:if ([ /interface/bridge print count-only where name="foo"] > 0) do={ /interface/bridge set [ find where name="foo" ] protocol-mode="rstp" } else={ /interface/bridge add name="foo" protocol-mode="rstp" } One of the correct ways is: /interface bridge...

rextended

I see censorship is starting to work on this forum and inconvenient facts are pushed to other threads. If it was censorship they would have been deleted, not moved. In fact you wrote offtopic again. Unfortunately, even incompetent people can write on the forum, and you are proof of that, so it's be...

rextended

I'm not sure of installing a switch on the Client Site will be a good image for an "Enterprise Company"-ish. Really? not... A switch for 5Gbps is one switch only also on client side. If you have to manage 100Mbps can suffice, but with 5Gbps you kill the CRS cpu... For example, if you buy ...

rextended

Do not use ({}) for define empty array, the correct way is :local arrayvar [:toarray ""] I myself used that method once suggested by another user, but it backfired because, although I don't quite remember now how, it had unwanted effects that backfired on me in programming. IT SEEMS to wo...

rextended

If I actually had a need for a random number, in V6, and had internet... /tool/fetch to random.org would be even "more random" The online version can be "offline" for some reason or you can need that on closed net... I rewrite some minutest ago the OP and convert it to two disti...

rextended

I'm not one expert on BGP, but why you can not create filters???

rextended

Yes, on your example, 3 times "2" and 2 times "11", and 2 times very close to the 2 ("3" and "4") If they are random it could happen , even once in a million, if not more, that the same number comes out 10 times in a row and over... Why not? But obviously one ...

rextended

On RouterOS 7, if you use filters, what is not accepted is implicity discarded.

rextended

Same problem here,

Same? After 8 years you have a v4.x Dude database to be imported on v6.x?

rextended

The CPU can have the same load all the time,
so you would never get such different numbers,
but they would always fluctuate in the usual range like 9/10/9/10/11/9/10... etc.

rextended

but I wanted to know if I could use a CRS, because our "consultant" told us it was feasible for queuing and routing

But which consultant is one who advises you to use a switch as a router with queues for 5GBps??? (does not import the brand)

rextended

Thanks...

IRQs

Something really "random" and not repetable on reboot

On 2021 the random on v7 not exist or not work...

rextended

Yes, I'm all for feature equalization

rextended

Yes, because if you want set wifi or other interface that appear later because driver must be loaded, the script fail.

If is a simple thing, like set system identity, that not involve wait to load something, delay is not needed.

rextended

Will net install remove the default password and set it to something known by us? These questions surprise me, it seemed to me that you were an expert in mass configuration... I have understand bad... If you netinstall device without flag "Apply default config" (with -r on linux) or using...

rextended

How do you mass brand though when you have to lookup the password for each router individually? Why? As I have already wrote, I must unpack and plug the device to the ethernet cable, what does it take to hold down reset? I don't care what password it has. At this point I'm wondering how do you mass...

rextended

Also can be added "first letters uppercase after , . ; ! ? etc.", but then it becomes too complicated for how it was thought. Of course, to do this, a small modification is enough to check if the previous character was one of those in the list considered as sentence breaks... but here we g...

rextended

I've tried it and something is wrong here […] Yes, I have pasted a work in progress code, fixed the description of the parameter on the post. I'm going to change the script to implement on no-parameter the "First only case": the Uppercase only at the start, the rest lower. Is why you get ...

rextended

refreshed

rextended

Functions to convert a string to lowercase, uppercase or proper case (only the first letter up, the other low) Any other non A-Z a-z character passed remain unchanged. Optional parameter: 1) no parameter convert the first letter uppercase, all the others lowercase. 2) "U" convert to upper ...

rextended

search tag # rextended str2case string lowercase uppercase proper case Functions to convert a string to lowercase, uppercase or proper case (only the first letter up, the other low) Any other non A-Z a-z character passed remain unchanged. Optional parameter: 1) no parameter convert the first letter ...

rextended

I don't see all these problems... For the mass configuration the password is completely ignored, so I have to pick up the device to connect it to the ethernet cable, when I'm there holding down reset takes a moment, and with the branding package I can set the default password that I like... (I wrote...

rextended

7.8 is only 17 days old...

rextended

Create a backup,
create a job that resore automatically the backup if on 5 minutes you do not delete the job.

If you lost device control, after 5 mins it reload the backup,

rextended

@holvoetn Don't waste your time too... Now he even talks that I accuse him of hacking… Whatever anyone else writes, he don't understand a very simple concept: It misuses the hardware that can't do all that, it wasn't born to do it (and neither him, I see)... Now let's see what an idiotic phrase he ...

rextended

1) but the peer must be active or give error

:put [/ip ipsec active-peers get ([find]->0) remote-address]

2) / 3) if is > 0 at least one active-peer is present

:put [:len [/ip ipsec active-peers find]]

rextended

Could you stop be idiot and stop flame person on forum? Does the truth "burn" with flames? But don't you understand that you are using a product that has a completely different purpose as if it were a superior router? It is obvious that the device crashes. In fact, as I told you, years la...

rextended

https://fccid.io/TV7CPG52X

Sorry, and the news?

The link is on OP...

rextended

No one noticed it??? a 911G-5HPnD !!! Uh... .. 64 MB of RAM, birdge cache for 15 minutes (instead of 5), single core 600MHz... Level 3 license, is a CPE, not a router... useless services enabled like loop-protect (has only one ethernet...) Do not have any crypto hardware, CPU used als for l2tp and e...

rextended

Ah, I forgot the ! on translation.... The " " ara mandatory, do not exist "one array of MACs", but "array of strings". Or you find something, or you find "nil", you can not have zero, 0 is a result, and find is not a "count"... If the find not find y...

rextended

You need to translate YOUR need into code... Pratically you want FIND inside $mac array if at least $leaseActMAC is present at least one time... :local mac {"00:11:22:33:44:AA"; "00:11:22:33:44:BB"; "00:11:22:33:44:CC"} :if ([:find $mac $leaseActMAC] > 0) do={ ( do not ...

rextended

@anav

[…] from Iran […]
[…] its probably an illegal use of your internet connection.

If it is true, he risks death if he tries to circumvent the censorships for himself and for others...

rextended

sell my VPN through this router or sell ping reduction VPNs again through this router But how do you come up with certain things? If they already have a "slow" connection of their own, adding an extra layer (a VPN) and going through your connection as well, the ping at least doubles... i'...

rextended

CRS is a Switch, CCR is a Router.
Do not do router's thing with a switch (for example, routing and queues)

rextended

If you see the test result of the devices, for example the RB4011 https://mikrotik.com/product/rb4011igs_rm#fndtn-testresults You can see the max speed of 4,286.9 for 25 queues, obviously if you have less queues.... but have only one SFP+ CCR2004 have 2 SFP+ and https://mikrotik.com/product/ccr2004_...

rextended

Post by @FramiJhames looks very much like something ChatGPT might come up with.

Ohhh.. what....

rextended

Question created from ChatGPT???

rextended

Perhaps this a ChatGPT invasion LOL

rextended

I don't know what the problem is @aromerombit There isn't the slightest problem, if you pay attention we just want to understand where they teach that bulls…t. It's obvious that if you have to drive 5G and you use a "hEX S" it doesn't work... To have a more precise opinion, you must be mo...

rextended

It is the same thing as writing that a bicycle cannot have a speed limited to 200...
OBVIOUS...

rextended

How to solve my user name "nj:nj@corecasys.com" I-have-already-reply-to-you-on-previous-post But I have also readed the instruction on noip.com.... You read the instruction for group update or you are able only to copy&paste? https://www.noip.com/integrate/request Also why you do not ...

rextended

@erlinden, didn't you realize he's a troll? It is not the first time (see previous link on my post) after YEARS that a release has come out, she warns everyone "don't put it, it blocks everything for me" and the others answer... "take some course you don't know how to use it". An...

rextended

I don't have the exact site, but also during training this was mentioned a lot, I actually asked about this because right now we are limiting a 3 Gbps service seems like its working though. Who taught you that? We need to go back to who sells this information to get elucidations, otherwise they are...

rextended

for what I have read Mikrotik doesn't limit the bandwidth correctly when is more than 1Gbps

And where did you read it?

rextended

In fact they work both on winbox and on webfig, just open the terminal...

rextended

What you give with this command on terminal?

/system identity export

You have ALREADY defined the mikrotikName valiable with ":global mikrotikName" or ":local mikrotikName" ???

Show all the script, probably the error is on another place.

rextended

Realy thinking that i lose many time for hide important data? Now you understand why I treat people like you how should they be treated? If you're not good at doing things, it's not the fault of other forum users or MikroTik staff. https://forum.mikrotik.com/viewtopic.php?p=964230#p964201 Are you t...

rextended

Probably because is not the domain "jeff.corecasys.net"...

rextended

Is not my code... https://datatracker.ietf.org/doc/html/rfc2822#section-3.2.1 P.S.: why http and not httpS? fetch do not support redirect. You read the instructions? Like not.... Authorization: base64-encoded-auth-string should be the base64 encoding of username:password. GET /nic/update?hostname=my...

rextended

@anav, @holvoetn,
if both you want, I ask ChatGPT to make me a script, I have ZeroTrust with that...

rextended

EDIT: added details, see next post

rextended

So thank goodness that there is also ChatGPT that "tells" what MikroTik must do, in addition to all the other experts on the forum who know how to run the company? How lucky the MikroTik Staff is, it's full of people who tell them what to do, otherwise they had already closed since 2003......

rextended

ChatGPT strike again: https://forum.mikrotik.com/viewtopic.php?t=194448 //**// I finally understood... They are creating "a machine" to replace one of the most hated jobs in the world: a politician... On the other hand, he speaks well, promises well, it seems that his speeches contain some...

rextended

Is why: https://forum.mikrotik.com/viewtopic.php?t=194143 I finally understood... They are creating "a machine" to replace one of the most hated jobs in the world: a politician... On the other hand, he speaks well, promises well, it seems that his speeches contain something ... but in the ...

rextended

For Mikrotik Staff:
Mans please stop going all time for new version and more testing before pushing version.
Stop doing with us Alpha testers!!!

In fact this version is only over a year old, too little between one long-term version and another.

Do you realize the bullshit you write?

rextended

This soft 6.48.6 is heavily bugged, be carreful all !!!

Good thing you wrote it!!!
After a year and over of using 6.48.6 on more than 4000 devices, not even ONE has crashed.

Could it be that maybe the problem is elsewhere?
Like how do you set them up or treat them yourself?

rextended

@AUsquirrel be carreful when using software 6.48.6.

Luckily you warned him after 4 months...
Otherwise he was waiting another 4 months...

rextended

I prefer that simply the topic from which it is taken is reported, but that the user does not write or pretend that he wrote it. If instead it is part of several fragments, write the original author is enough ;) Instead, if someone use it for commercial purposes, clearly indicate the original author...

rextended

Function for decode a Base32 string based on RFC 4648 Optional "mustpad" parameter, if is present, consider invalid Base32 input when do not have the required padding (is optional on RFC 4648). Optional "hex" parameter use RFC 4648 base32 Extended Hex Alphabet encoding instead ot...

rextended

search tag # rextended decode base32 to string or data based on RFC 4648 Function for decode a Base32 string based on RFC 4648 Optional "mustpad" parameter, if is present, consider invalid Base32 input when do not have the required padding (is optional on RFC 4648). Optional "hex"...

rextended

Function to convert a string (or a Byte stream) to Base32 based on RFC 4648 Optional "nopad" parameter do not put the padding "=" character (is optional on RFC 4648). Optional "hex" parameter use RFC 4648 base32 Extended Hex Alphabet encoding instead ot the standard enc...

rextended

Why not also the Base32??? :lol: search tag # rextended str2base32 string or data to base32 encoding RFC 4648 Function to convert a string (or a Byte stream) to Base32 based on RFC 4648 Optional "nopad" parameter do not put the padding "=" character (is optional on RFC 4648). Opt...

rextended

A new version with some added error checks:
viewtopic.php?t=194152#p989289

rextended

Function to convert Base16 to string (or a Byte stream)

Option "ignoreodd" ignore if the decoded string have odd value (must be have only character pairs).

viewtopic.php?p=989289#p989289

rextended

search tag # rextended base16dec base16 to string or data decoding Function to convert Base16 to a string (or a Byte stream) Note: the function accept mixed A-F a-f case. Option "ignoreodd" ignore if the decoded string have odd value (must be have only character pairs). pratically is a rev...

rextended

Function to convert a string (or a Byte stream) to Base16

Optional "lowercase" use lowercase a-f in place of the correct A-F

viewtopic.php?p=989286#p989286

rextended

search tag # rextended str2base16 string or data to base16 encoding Function to convert a string (or a Byte stream) to Base16 Optional "lowercase" use lowercase a-f in place of the correct A-F :global str2base16 do={ :local input [:tostr "$1"] :local options [:tostr "$2"...

rextended

Look at what they put in that library 16 hours ago, not even a thank you... Do you understand what I mean now? My original (04 Mar 2023, 02:34): https://forum.mikrotik.com/viewtopic.php?p=988931#p988056 Copied (Commits on Mar 9, 2023): https://github.com/merlinthemagic/MTM-RouterOS-Scripting/blob/ma...

rextended

My testing BGP border router still alive and do not crash (CCR2116-12G-4S+ fact 7.2.3 / curr 7.8 / fre HDD 104.8 MiB / free RAM 14.9 GiB) uptime 8d 21:58:02

rextended

for a programmer of your level. Please, I'm just one of many programmers who also script RouterOS. Certainly there are others who are better, at least they are not good with the work of others (I want to clarify that I am not referring to you or to some user HERE on THIS forum...) I still have to t...

rextended

@TomjNorthIdaho
Thanks.

rextended

Headache-inducing, not paginated and the variables are called a,b,c,d etc...

They are from 3 years ago, I expected you to at least fix them with the latest things you learned.

rextended

And what does the change log have to do with it? Read the change log... Normal or professional users have to read the change log, no excuse. I'm a normal user, I'm not a person who sits and looks at WinBox all day. Don't read instructions or contraindications on medicines? I don't think you are tak...

rextended

use netinstall and everytime read (first, obviously) full changelog from one version to another...

rextended

Function for decode a Base64 string based on RFC 4648 Optional "url" parameter use URL and filename-safe encoding instead ot the standard encoding. Optional "mustpad" parameter, if is present, consider invalid Base64 input when do not have the required padding (is optional on RFC...

rextended

search tag # rextended decode base64 to string or data based on RFC 4648 Function for decode a Base64 string based on RFC 4648 Optional "url" parameter use URL and filename-safe encoding instead ot the standard encoding. Optional "mustpad" parameter, if is present, consider inval...

rextended

Probably, not.
And I write probably because I do not know a method, not because is on this way for sure.

rextended

Is there way how to keep names of logs without change upon next file creation?

Set file count to 1 and lines per file 2000...
1 + 1 = 1...

rextended

This line is the last one in the script. There's no one to wait for. And so what? What's the difference with the fact that you can't have an interactive session with execute? You're getting heavy. If I explain something to you and then you start looking for absurd twists and turns, it's not fine wi...

rextended

:global test do={:log info mama}
[…]

This is one function, not one variable where inside is present one string that represent one script for be compared later with parse or execute.
"(eval /log infomessage=mama)" is NOT one script, is [useless] precompiled code.

rextended

Is not needed to duplicate all the string creation and set $accName comment=$newComm just write it one time at the end of if /else If :pick not find any to pick, return nil , instead of one empty string, nil can not be copared with empty string "", not work. You add : after Bal because som...

rextended

Look, life teaches, one bomb is enough, and nothing work anymore...
People forget how to do things without electricity and without supermarkets and starve...

Artificial intelligence must help us find the key to the problem, not add more key holes...

rextended

But don't you realize? This is a Forum, not a Chat, and it is normal that everything leads to discussion on technical topics... We only go OT on the release thread, because here from what I've read so far everyone agrees on the uselessness of ChatGPT in producing something that isn't fake. There rem...

rextended

This should not be too hard to implment.

Like count on BGP routes?

rextended

You need interactive terminal with that script?
Execute execute async on separate thread the script.
execute command do not wait any and the script go immediately to next line of script,
execute is executed separately.
You can not have output on terminal.

rextended

??? On RouterOS 6.48.6 works. { :global test ":log info \"ok parse with find\"" :local variablename "test" [:parse [/system script environment get [find where name=$variablename] value]] } { :global test ":log info \"ok execute with find\"" :local va...

rextended

Everytime the "status" filed is one string, is one failed ping (because containing the error code: { :local test [:ping [:resolve "www.mikrotik.com"] count=3 as-value] :local avg 0 :local fails 0 :local min 00:00:10 :local max 00:00:00 :foreach try in=$test do={ :set avg ($avg + ...

rextended

Function to convert a string (or a Byte stream) to Base64 based on RFC 4648 Optional "url" parameter use URL and filename-safe standard encoding. Optional "nopad" parameter do not put the padding "=" character (is optional on RFC 4648). https://forum.mikrotik.com/viewto...

rextended

search tag # rextended str2base64 string or data to base64 encoding RFC 4648 Function to convert a string (or a Byte stream) to Base64 based on RFC 4648 Optional "url" parameter use URL and filename-safe standard encoding. Optional "nopad" parameter do not put the padding "=...

rextended

The topic title is wrong

rextended

As far as I seem to remember, it was something wireguard would self-test to prove encryption and generate temp keys,
but it's been a while and I haven't done any testing on v7 which I don't use.

rextended

(★‿★)

rextended

You do not specify RouterOS version, probably v7 because v6 do not have as-value for ping. But on v7 as-value still no return stats, but only single pings (you can calc it sum all 3 times and divide by 3)... Alternative for v6 (work also on v7) :put ([/tool flood-ping [:resolve "www.mikrotik.co...

rextended

A snipplet can not suffice, for example $total is missing and miss also what happen before and later :local comm [/ppp secret get [find name=$accName] comment] -> :local comm [get $accName comment] :local prof [/ppp secret get $accName profile] -> :local prof [get $accName profile] set $name comment...

rextended

One simple example: RADIUS server and user-manager on the same machine (same for The Dude & Co.). Must be used 127.0.0.1, because is more secure and spoofing resistant, and if you change for some reason the other IPs of the machine, you do not need to change also the RADIUS and user-manager conf...

rextended

indeed, and the logs give you an idea of what it is

viewtopic.php?t=182006

viewtopic.php?p=943790#p943790

rextended

2- Sob never mentioned it so it cant be true. Never mentioned???... I think I saw it in some threads that WG supposedly connects to localhost. I didn't examine it myself yet, but I don't see any good reason why it would do it (I'm not saying it's not possible). https://forum.mikrotik.com/viewtopic....

rextended

Again: add rule to log all about localhost, and read the log...
Will you believe the logs or not?

rextended

In fact, something is missing... 1) The reply ignore Wireguard, for example. 2) It omits that it is needed for the CAPs-MAN if it is in the router itself, not if there is a CAPs-MAN located in another network device. 3) Omits that CAPs-MAN uses 127.0.0.1 (localhost) exclusively only if one or more m...

rextended

About 127.0.0.1, just log & read... ;) About TCP loose: if you use NAT, keep connection-tracking strict, if you do not use any form of NAT, you can leave it loose. Brief description, not precise, just rapid concept: If is allowed, on reboot (yes, reboot, all connection is destroyed, why try to r...

rextended

Can be one your internal device that send DHCP request outside the device, like TP-Link Repeaters or TP-Link PowerLine. If the ISP have something configured wrong ( LIKE DHCP SERVER ON PPPOE CLIENT ....) it may appear that the packet is coming to you... 1) Disable Detect Internet (on Interface, butt...

rextended

Wait September and you will have a surprise with RouterOS v7.11.9...

rextended

Let me just remind that Rextended had moderation privileges for a while and as Normis said back then, "with a great power comes great responsibility". I believe the power was stronger than sense of responsibility and the privileges were taken away.. No, the problem is another... I couldn'...

rextended

Rex, you're not out of a job yet :lol: My concern is the opposite, I'll stop fixing other people's scripts, if I have to start fixing ChatGPT's scripts too. Sooner or later I notice it when I check them. I feel cheated and it's all a waste of time, just when I opened the petition it happened 2 time...

rextended

It's these kinds of crap programs, that do what want do without ask, the real malware...

I don't think you've popped up a window to ask for permission, and scanning from all devices to all devices is further bullshit, especially if you're using VPNs...

rextended

One line for each, OBVIOUSLY.... Alternatively, set one or more tags inside the comment and disable only the IPs that have that TAG, for example: enable single group /ip firewall address-list enable [find where list="test" and comment~"group5#"] or enable multiple group /ip firew...

rextended

interprets code and forbids submit if syntax fails. Imagine if they start doing such a thing on the forum. There is no module on phpbb that does this, and why would they bother to fix the problems created by others. Just don't accept scripts from ChatGPT. The search is hard enough, then mixing in c...

rextended

I understand, but it's rarer and it has to be done on purpose... Isn't it possible to prevent the forum from becoming a source of completely useless scripts which then damn those who find them, thinking they were written by someone, instead of specifying that they are ChatGPT "Author's False&qu...

rextended

Thank you very much, but tidying up also takes a lot of time

rextended

Ignoring the x.x.x.x/29 public IPs block given by your ISP, the correct way, if you do not want use BGP &Co. also internally, is to publish your own two /30 block on main EDGE router. The edge router can not have any IP of the two /30 block and you can use all 8 IPs on different machines (or mul...

rextended

I think the TS wants to be able to enable/disable items on a list...which is, as far as I know, not possible. The items on address list can be disabled or enabled individually. For disable / enable all togheter is this /ip firewall address-list disable [find where name="test"] /ip firewal...

rextended

you're not accurate in your description, a script can't read your mind. disables any IP address that is in the address list where = in the ip firewall address list + what to do = disable + on what = find "any IP address" (or better: all IPs, IP-prefixes, and DNS names) + where = where list...

rextended

Why not?
Try yourself.

rextended

against Russia

The sanctions are against those who govern, not against the people.
The Russians don't want war.They are brothers like everyone else.

rextended

P.S.: Works only with global variables, not for local.

rextended

I've never written "trick code into memory" (and I don't know what you mean by that phrase), so don't write things that are inaccurate. Via scripting you can create the script in memory (SCRIPT, not compiled CODE), and then run it, but if you expect it to write something about it, you will...

rextended

If it says on the site, and there's clearly a separate connector, it's true.
I don't think they would have left it written for years if it was wrong...

rextended

No need to open more topic for same thing...

viewtopic.php?f=9&t=178435&p=879152#p879152

rextended

Admins: Any reply? Thanks.

Search found 10190 matches