Mikrotik DNS DDoS script
Do you want to protect your Mikrotik from DNS DDoS attacks? The following script looks for malformed DNS packets commonly used in DDoS attacks
mikrotik
Dot1x in Routeros 6.45.1
Some of you may have noticed a new menu item pop up in winbox labeled dot1x Dot1x is implementation of IEEE 802.1X standard in RouterOS. Main purpose is to provide port-based network access control using EAP over LAN also known as EAPOL. 802.1X consists of a supplicant, an authenticator and an authentication server (RADIUS server). … Read more
RouterOS 6.45.1 Out – Security Fixes
Mikrotik has released RouterOS 6.45.1 with some security vulnerability fixes. Some of these have been known and fixed before, while others are new fixes.
Mikrotik RouterOS 6.43 and older notes
For those of you running newer routerOS versions you should be aware of this. Downgrading to any version prior to v6.43 (v6.42.12 and older) will clear all user passwords and allow password-less authentication. Please secure your router after downgrading. I am not sure when this actually started as it shows up in the changelog of … Read more
Mikrotik LoRaWAN products
Taken directly from Mikrotik newsletter 89. https://download2.mikrotik.com/news/news_89.pdf R11e-LoRa8EU – a new LoRaWAN concentrator Gateway card in miniPCIe form factor based on Semtech SX1301 chipset. It enables LoRaWAN connectivity for any MikroTik product that has miniPCIe slot with connected USB lines. With the support of 8 different channels in 868EU band, Listen Before Talk (LBT) and … Read more
Mikrotik Releases 6.43.16
Mikrotik Releases 6.43.16 update to router os.
Mikrotik Basic setup video
Doing a basic setup of a Mikrotik router with some best practices and tips to configure
How I learned to love BGP communities and so can you
For the purpose of part one of this article we will talk about communities and how they can be utilized for traffic coming into your network
Common Questions:difference between Masquerade and SRC-NAT
One of the common questions I get is what is the difference between Masquerade and SRC-NAt? Which should I use? The quick answer is to use SRC-NAT if your gateway IP is static, and use masquerade if it can change. The Mikrotik Wiki Entry Firewall NAT action=masquerade is unique subversion of action=srcnat, it was designed for specific … Read more
Mikrotik and Letsencrypt
Recently there has been some activity on integration with LetsEncrypt and Mikrotik. WHile Mikrotik does not directly support Letsencrypt directly yet, you can make it work with this setup https://github.com/gitpel/letsencrypt-routeros
Mikrotik passing multiple subnets across a tunnel with multiple policies
Recently we had an issue with an IPsec tunnel on Mikrotik passing multiple subnets across a tunnel with multiple policies
Mikrotik advanced tools
Become a Patreon