South Africa’s biggest forum. Discuss, discover, and connect with thousands of members.
On linux I use this https://github.com/trick77/ipset-blacklist Just checking to see if someone has done the same for a Mikrotik.I use this
Unless we're talking different subjects here
I use this
Unless we're talking different subjects here
My hAP ac² doesnt struggle at all.How do you find the performance of your Tik with all those rules?
It has a quad core CPU. Not everyone uses a quad core Mikrotik.My HAP-AC2 doesnt struggle at all.
I'm going for an 8 core x86.It has a quad core CPU. Not everyone uses a quad core Mikrotik.
9 core CCR here, but want to get a 36 core CCR during the next year or soI'm going for an 8 core x86.
I'm currently running a USG Pro but will be reinstalling my CCR and moving back to that. The USG is just not my style, I prefer Mikrotik. Easier to configure. Easier to work with for me anyway.Having gone through a lot of crap with reconfiguring Mikrotiks recently , I really missed the ease of use and functionality of the UBNT stack to get things done.
Mikrotiks are def powerful and lots of configurability, but now I just prefer UBNT.
As an experienced WiFi and Mikrotik user. The best advice coming from some whose worked at a few ISP's setting up both internal and external wireless links....
As a inexperienced WiFi and Mikrotik user. I have two old router's I have setup to carry my signal to other parts of the house. Both are connected with ethernet cable. Both working OK.As an experienced WiFi and Mikrotik user. The best advice coming from some whose worked at a few ISP's setting up both internal and external wireless links....
Steer clear from repeaters. The reason for saying this is that a repeater, only repeats what you give it. So if the signal to the repeater is bad (under -50dBm) then you will get massive delays and often timeouts from your DNS requests. In practical terms... windows or your cellphone will tell you, "No internet"
My suggestion... Always run a LAN cable to every WiFi router and set it up in Access Point mode. Give it a static IP for reliability. and either setup a new or same SSID (WiFi name)
Only run repeaters if you absolutely have to and the is no other way to get a cable to that AP.
General rule of thumb is to keep your repeater under 5meters from the master AP.
I hope this helps.
I have been using a script for a while now that downloads a list of blacklisted IP's and then creates an address list on the Mikrotik called blacklist. You then have to create a drop rule using the "Raw IP Filter" as this blocks the traffic on the pre routing before it has a chance to enter the the router to be processed by the input chain. At that time the connection would already have been established.Anyone have a recipe for a good block list script? I use IPSET on debian and have that working as a charm and want to do the same on a Mikrotik.
So if they are both cabled back to the gateway either directly or via switch, then its just a question of WiFi networks.As a inexperienced WiFi and Mikrotik user. I have two old router's I have setup to carry my signal to other parts of the house. Both are connected with ethernet cable. Both working OK.
So if they are both cabled back to the gateway either directly or via switch, then its just a question of WiFi networks.
What i mean is do you want separate WiFi networks where you would have to check your phone to see if you've changed over?
Or do you want to setup one big network, same Wifi name.
The latter is more difficult to setup but could prove more user friendly when it come to adding devices as you only need to connect each device to one network.
Interesting. I will have to tap into your knowledge as I have some further plans ahead. Will keep contact. Thanks.So if they are both cabled back to the gateway either directly or via switch, then its just a question of WiFi networks.
What i mean is do you want separate WiFi networks where you would have to check your phone to see if you've changed over?
Or do you want to setup one big network, same Wifi name.
The latter is more difficult to setup but could prove more user friendly when it come to adding devices as you only need to connect each device to one network.