Sunday, August 27, 2017

Dude Email Notification

Posted by at 12:26 AM 1 comments

Read full post »
Labels:

Sunday, August 20, 2017

Payment Reminder For PPPoE

Posted by at 9:25 AM 19 comments

/ip pool
add name=block ranges=172.16.202.1-172.16.202.254
/ppp profile
add change-tcp-mss=no local-address=10.10.0.1 name=Block rate-limit=100K/100K remote-address=block
/ip firewall nat
add action=redirect chain=dstnat comment="Payment redirect" dst-port=80 protocol=tcp src-address=\
    172.16.202.0/24 to-ports=8080
/ip firewall filter
add action=accept chain=forward comment=Reminder dst-port=53 protocol=tcp src-address=172.16.202.0/24
add action=accept chain=forward dst-port=53 protocol=udp src-address=172.16.202.0/24
add action=drop chain=forward src-address=172.16.202.0/24
/ip proxy
set cache-administrator=AfriCloud enabled=yes max-cache-size=none src-address=0.0.0.0
/ip proxy access
add dst-host=www.paymentreminder.weebly.com
add action=deny redirect-to=www.paymentreminder.weebly.com
Read full post »
Labels:

Sunday, July 16, 2017

Secondary Link For Backup

Posted by at 2:25 AM 10 comments



/interface bonding
add mode=active-backup name=Wan-bonding1 slaves=ether1,ether2
/ip address
add address=98.140.10.54/30 comment="Wan Network" interface=Wan-bonding1 network=\

    98.140.10.52
Read full post »
Labels: ,

Sunday, July 9, 2017

Block Daily Motion

Posted by at 1:40 AM 1 comments

/ip firewall address-listadd address=198.54.201.0/24 list=DailyMotionadd address=198.54.200.0/24 list=DailyMotionadd address=195.8.214.0/24 list=DailyMotionadd address=195.8.214.0/23 list=DailyMotionadd address=188.65.126.0/24 list=DailyMotionadd address=188.65.125.0/24 list=DailyMotionadd address=188.65.124.0/24 list=DailyMotionadd address=188.65.121.0/24 list=DailyMotionadd address=188.65.120.0/24 list=DailyMotion/ip firewall filteradd action=drop chain=forward comment="Block DailyMotion" dst-address-list=\DailyMotion/
Read full post »
Labels:

Sunday, July 2, 2017

VLANs with UBNT AP

Posted by at 1:09 PM 6 comments






Read full post »
Labels:

Friday, June 30, 2017

Site-to-Site GRE Tunnel (MikroTik to MikroTik)

Posted by at 12:12 PM 2 comments

Router-1
/interface gre
add !keepalive local-address=41.165.17.158 name=gre-tunnel1 remote-address=95.142.143.17
/ip address
add address=172.16.1.1/30 interface=gre-tunnel1 network=172.16.1.0
/ip route 
  add dst-address=192.168.5.0/24 gateway=172.16.1.2
/
Router-2
/interface gre
add !keepalive local-address=95.142.143.17 name=gre-tunnel1 remote-address=\
    41.165.17.158
/ip address
add address=172.16.1.2/30 interface=gre-tunnel1 network=172.16.1.0
/ip route 
  add dst-address=192.168.2.0/24 gateway=172.16.1.1
/

Read full post »
Labels: , ,

Friday, June 23, 2017

High Priority For Speed Test 8Mb Per User (speedtest.net)

Posted by at 9:31 AM 35 comments


/ip firewall layer7-protocol
add name=SpeedTest regexp="^.+(speedtest).*\\\$"
/ip firewall mangle
add action=mark-connection chain=forward comment="Speed Test Server" \
    layer7-protocol=SpeedTest new-connection-mark=SpeedTest_Con passthrough=yes
add action=mark-connection chain=prerouting new-connection-mark=SpeedTest_Con \
    passthrough=yes protocol=tcp src-port=8080
add action=mark-packet chain=prerouting connection-mark=SpeedTest_Con \
    new-packet-mark=SpeedTest_Packets passthrough=no
add action=mark-connection chain=postrouting dst-port=8080 new-connection-mark=\
    SpeedTest_Con passthrough=yes protocol=tcp
add action=mark-packet chain=postrouting connection-mark=SpeedTest_Con \
    new-packet-mark=SpeedTest_Packets passthrough=no
/queue type
add kind=pcq name=Dow8MB pcq-classifier=dst-address pcq-dst-address6-mask=64 \
    pcq-rate=8192k pcq-src-address6-mask=64
add kind=pcq name=Up8MB pcq-classifier=src-address pcq-dst-address6-mask=64 \
    pcq-rate=8192k pcq-src-address6-mask=64
/queue simple
add comment="Speed Test 8Mb Per User" name="Speed Test" packet-marks=\
    SpeedTest_Packets queue=Up8MB/Dow8MB target=192.168.2.0/24
/
Read full post »
Labels: , ,

Thursday, June 1, 2017

Secure MikroTik and Limited Access (Winbox, SSH, FTP, Telnet)

Posted by at 10:29 PM 2 comments

/tool mac-server
add disabled=yes interface=all
/tool mac-server ping
set enabled=no

 /ip firewall filter
add action=drop chain=input comment="Block Mikrotik Discovery" disabled=no dst-port=5678 protocol=udp
add action=drop chain=input comment="Drop All WINBOX Request By MAC Address" disabled=no dst-port=20561 protocol=udp
add action=drop chain=input comment="WINBOX Just Allow On My PC" disabled=no dst-port=8291 protocol=tcp src-address=!##Your IP Address
add action=drop chain=input comment="FTP Just Allow On My PC" disabled=no dst-port=21 protocol=tcp src-address=!##Your IP Address##
add action=drop chain=input comment="SSH Just Allow On My PC" disabled=no dst-port=22 protocol=tcp src-address=!##Your IP Address##
add action=drop chain=input comment="FTP Just Allow On My PC" disabled=no dst-port=23 protocol=tcp src-address=!##Your IP Address##
Read full post »
Labels: