Common Questions:difference between Masquerade and SRC-NAT
One of the common questions I get is what is the difference between Masquerade and SRC-NAt? Which should I use? The quick answer is to use SRC-NAT if your gateway IP is static, and use masquerade if it can change. …
Mikrotik and Letsencrypt
Recently there has been some activity on integration with LetsEncrypt and Mikrotik. WHile Mikrotik does not directly support Letsencrypt directly yet, you can make it work with this setup https://github.com/gitpel/letsencrypt-routeros
Mikrotik advanced tools
Become a Patreon
Mikrotik chains explained
From the Mikrotik Wiki input – used to process packets entering the router through one of the interfaces with the destination IP address which is one of the router’s addresses. Packets passing through the router are not processed against the rules …
Protecting Mikrotik from DNS amplification
This content is for Patreon subscribers of the j2 blog. Please consider becoming a Patreon subscriber for as little as $1 a month. This helps to provide higher quality content, more podcasts, and other goodies on this blog.To view this …
Use tarpit vs drop for scripts blocking attackers
There are many scripts out there, especially on Mikrotik, which list drop as the action for denying bad guy traffic
Mikrotik releases some new certifications
Mikrotik has released some new certifications. https://mikrotik.com/training/about MTCNA – MikroTik Certified Network Associate (view outline) MTCRE – MikroTik Certified Routing Engineer (view outline) MTCWE – MikroTik Certified Wireless Engineer (view outline) MTCTCE – MikroTik Certified Traffic Control Engineer (view outline) MTCUME – MikroTik Certified User …
j squared 60ghz talk at USA mum 2019
Justin Miller and I were asked to give an impromptu discussion on 60GHZ at Mum USA 2019. Just has a very urban deployment of Mikrotik 60GHZ. We talk about some use cases and even drag some audience members in.
MikroTik Router as a Vultr host
Recently I spun up a Mikrotik instance under Vultr for the purpose of doing some v6 testing. I was running into some problems with getting IPV6 to route properly. Vultr has IPV6 setup on their side to auto configure a …