how to prevent the client to change the static IP Address which we provide?. probably one of the questions that you've come to mind. This setting is usually required for school networks. Often try to change-change client ip address, still greet their intentions know that does not get an IP address in the limit. So with this setting if client ip address that does not change according to what we give, they can not use the internet connection. Let us exploit mikrotik firewall functions.

You make bandwidth management with setting like this:

Client 1: IP 172.22.0.23, the limit of 64kbps download 256kbps upload limit
Client 2: IP 172.22.0.34, limit 1mbps download, 256kbps upload limit

» Read More...

One function is to store the proxy cache. If a LAN uses a proxy to connect to the Internet, it is done by the browser when a user accesses a web server url is taking these requests in a proxy server. Whereas if the data has not been contained in the proxy server then get directly from the web proxy server. Then the request is stored in the proxy cache. Furthermore, if there are clients who make requests to the same url, it will be taken from the cache. This will make access to the Internet faster.

How to ensure that every user accessing the Internet through a web proxy that we have enabled? For this we can implement a transparent proxy. With the transparent proxy, every browser on a computer that use this gateway automatically go through a proxy.

» Read More...

Network Address Translation or more commonly referred to as NAT is a method to connect more than one computer to the Internet network using a single IP address. Much use of this method due to the limited availability of IP addresses, the need for safety (security), and the ease and flexibility in network administration.

Currently, the widely used IP protocol is IP version 4 (IPv4). With a length of 4 bytes address means that there are 2 to the power 32 = 4,294,967,296 IP addresses available. This amount is theoretically the number of computers that can directly connect to the internet. Because of this limitation most of the ISPs (Internet Service Provider) will only allocate one address for one user and this address is dynamic, meaning that a given IP address will be different each time the user connects to the internet. This would make it difficult for businesses to lower middle class. On the one hand they need a lot of computers that are connected to the internet, but on the other hand only one IP address available, which means there is only one computer that can connect to the internet. This can be overcome by the NAT method. With a NAT gateway running on one computer, an IP address can be shared with several other computers and they can connect to the internet simultaneously.

» Read More...

This guide will explain how to create a web load balancer using HAProxy, HAProxy is an open source product and who supports the purposes of fail over load balancing webserver, largely for the purpose reverse proxy in site a high daily traffic (High availability load balance (support fail over and session) using the Debian base HAProxy).

how do I see if a site (web) using a load balancer or not? easy, type on terminal your linux host -t a and enter
the result will be like this
is an alias for detik.com.
detik.com has address 202.158.66.20
detik.com has address 202.158.66.86
detik.com has address 202.158.66.94
detik.com has address 202.158.66.190
detik.com has address 203.190.241.41
detik.com has address 203.190.241.43
detik.com has the address 203 190 241 166

» Read More...

On the use of queue (bandwidth limiter), the determination of CHAIN ​​in MENGLE largely determine the course of a rule. If we install the SRC-NAT and WEB-PROXY on the same machine, often rather difficult to make a perfect queue rule. CHAIN ​​detailed explanation of the election, can be seen in the manual mikrotik.

The experiments were performed using a PC with RouterOS version 2.9.28. On these machines, use 2 pieces of interfaces, one for gateway named PUBLIC and another for a local network called LAN.

[admin@instaler] > in pr
Flags: X - disabled, D - dynamic, R - running
# NAME TYPE RX-RATE TX-RATE MTU
0 R public ether 0 0 1500
1 R lan wlan 0 0 1500

And here is the IP address used. 192.168.0.0/24 subnet is the subnet gateway for this machine.

» Read More...

Bridge mode allows the network to one affiliated with the network on the other transparently, without the need to go through routing, so the engine is in the network that one can have IP addresses that are in a same subnet as the other side.

However, if our wireless network is quite large, this will create a bridge mode wireless traffic increases, since there will be a lot of broadcast traffic from one network to another network. For a network that is large enough, I suggest the use of routing mode.
Here is a diagram of the network that we will set.

Configuring the Access Point

» Read More...

Previously I've written a Mikrotik Tutorial about Limiting download with IDM in Mikrotik, this time I will share again on how to limit the streaming video, especially youtube.

This step by step limit Youtube Video streaming:

1. Create a first-http-protocol video layer7

/ip firewall layer7-protocol add name=http-video regexp="http/(0\.9|1\.0|1\.1)[\x09-\x0d ][1-5][0-9][0-9][\x09-\x0d -~]*(content-type: video)"

2. Create Mark Mangle Packet http-video

/ip frewall mangle add action=mark-packet chain=prerouting comment="http-video mark-packet" \ disabled=no layer7-protocol=http-video new-packet-mark=http-video \ passthrough=no

3. Create a Simple Queue http-video

/queue simple add max-limit=0/64000 name=http-video packet-marks=http-video

Changes will be felt when playing streaming video on youtube. so good luck

» Read More...

Keylogger, so frustrating to be found on the computer you are using, or you manage a computer cafe, several ports that are often used keylogger is the following: 25, 995, 465, 587, 110 or who frequently use email and ftp service.

The ports should be blocked, to minimize fraudulent activity that occurs due to a keylogger. And here's how to block ports used by keyologger:

Open Terminal mikrotik:

ip firewall filter add chain = forward protocol = tcp src-address = 192.168.181.0/24 action = drop port = 21
ip firewall filter add chain = forward protocol = tcp src-address = 192.168.181.0/24 action = drop port = 995
ip firewall filter add chain = forward protocol = tcp src-address = 192.168.181.0/24 action = drop port = 25
ip firewall filter add chain = forward protocol = tcp src-address = 192.168.181.0/24 action = drop port = 465
ip firewall filter add chain = forward protocol = tcp src-address = 192.168.181.0/24 action = drop port = 587
ip firewall filter add chain = forward protocol = tcp src-address = 192.168.181.0/24 action = drop port = 110

» Read More...

H4BZTXM9N6MC Mikrotik command actually almost the same as the existing command linux, mikrotik because basically this is a Linux kernel, the result of processing back from the Debian distribution of Linux. Use the same command shell, such as saving the command, simply use the TAB key on the keyboard then a long command, no longer need to be typed, simply type the beginning of the command is called, will automatically display the Shell will own commands respect. For example IP ADDRESS command in mikrotik. Enough just type in the IP ADD spaced press the TAB key, then the automatic shell will recognize and translate the IP ADDRESS command.
Let us continue with the introduction of this command. Once logged in, check the condition of the interface or ethernet card.

» Read More...

How to calculate subnetting?. for those of you who want to know how to quickly calculate subnetting following his review.
1. Default Prefik:
- Class A with Subnet mask 255.0.0.0; or prefik = / 8; or binary = 11111111.00000000.0000000.0000000
- Class B Subnet mask 255.255.0.0; or prefik = / 16; or binary = 11111111.11111111.0000000.0000000
- Class C Subnet mask 255.255.255.0; or prefik = / 24; or binary = 11111111.11111111.1111111.0000000

2. Number of Subnet:
2x where x is the number of binary 1 in the last octet or can use a formula Prefik - Default_Prefik.

3. Number of Hosts per Subnet:
2y - 2 where y is the number of binary 0 in the last octet or can use a formula max_prefik - Prefik.

» Read More...

FTP Server service on our Mikrotik Router of course, we need to run for administrative purposes. But, what if  FTP is running, there are those who want to use FTP on the router mikrotik to try things that are harmful to our Network. The most common way for this is usually done is by using the method of Brute Force Attack.

Brute force attack is an attack technique of a computer security system that uses the trial of all possible keys. This approach was originally referring to a computer program that relies on computer processing power than human intelligence (source : Wikipedia)

This must be done to prevent the above is actually quite simple. It only took 3 rule in the firewall.

» Read More...

VPN is a technology that allows a server can be contacted from the Internet, without a special partnership with Internet Service Provider. With this technology the server can be placed anywhere.

Mikrotik novice user for you, how to make vpn mikrotik is very easy in the following explanation:

1. Log in to Mikrotik through your favorite Winbox utility.
2. Click Menu "PPP" => Point to Point Protocol.
3. Click the tab "Interfaces".
4. Click Menu Add "PPTP Server" => Point to Point Protocol Tuneling.
5. Give the name for this new interface, for example: vpnserver
6. Then give the name of the user, for example: myvpn
7. Then Click the Tab "Secret", give name: myvpn
8. Checkmark Password, fill in: myvpn
9. Enter Local Address, for example: 172.16.25.50
10. Enter the Remote Address, for example: 172.16.25.250
11. Next click the "PPTP Server", Checkmark "Enable".
12. Checkmark also "MSCHAP1" and "MSCHAP1".
13. VPN Server is ready.

» Read More...

Load balance on the mikrotik is a technique to distribute the traffic load on two or more lines in a balanced connection, so that traffic can run optimally, maximize throughput, minimize response times and avoid overload on one connection path.
During this time many of us who think wrong, that by using loadbalance two connection lines, then the greater the bandwidth that we will get a doubling of bandwidth before using loadbalance (accumulation of both the bandwidth). This needs to be clear first, that loadbalance will not add much bandwidth we get, but it only served to split the traffic from both the bandwidth so they can be used in a balanced manner.
Here script Load Balancing for Mikrotik Router Board

» Read More...

For those of you who want to restrict users who use a software download IDM (Internet Download Manager) in Mikrotik. Here's how, For I do not want to bother with what the extension, but can also be configured like this:
* Browse the full bandwidth
* Download any file extension, which is more than 1M, will terlimit so 256kbps
* If the download <1M, will get a full bandwidth
* Watch the video has finished dilimit 128 kbps

I apply this Setiing using RB750G

» Read More...

Another option is the method of bandwidth management, if if wanted bandwidth is shared equally by Mikrotik, such as bandwidth 256kbps downstream and 256kbps upstream. While the client will access as many as 10 clients, each client automatically gets a small upstream and downstream bandwidth of 256kbps divided by 10. So each one can be 25.6 kbps. If only 2 Client who access it each can be 128kbps.

For that type used PCQ (Per Connection Queue), which can be automatically divide the traffic per client. About the type of queue in mikrotik This can be read on the manual in http://www.mikrotik.com/testdocs/ros/2.9/root/queue.php.

Previously need to be made a rule in the mangle. Such as:

» Read More...

Starting from a desire to learn to use Mikrotik as LoadBlance between two 3G mobile internet service, trying with difficulty to use mikrotik 3:22 version was not supported by the PCC who feature reliable for LB, so capitalize stained guugle ubek2 tuch dictionary I have.
As a result, the end may also be a guide to using mikrotik software this v.320 upward.
Viewed from fame, mikrotik always continue to grow from time to time. many feature from mikrotik also in attendance, one of which is useful for input into the PCC configuration Loadbalancing internet connection.
how can we immediately began installing software licensed mikrotik v3.20 using crack.

Materials
1. Mikrotik Router OS v3.20
2. Software Mikrotik Crack v.3xx
3. v3.30.npk or upgrade mikrotik os v3.30.iso
4.winbox, could find themselves

Step by step

» Read More...

Bandwidth management is an essential part of everyday operation for typcial ISPs, businesses, and even everday home users. There are many different types of management tools available to RouterOS users, QOS, rate-limiting, packet-limiting, to name a few.

I personally operate a wireless ISP, in an area that has no other type of convential high-speed internet (ie. cable, fibre, or DSL). Not having access to fibre myself, I am in a situation where the single fastest backbone connection I can get does not provide enough bandwidth for me to have only one connection. As a result of this limitation load-balancing multiple internet backbone connections is very important.

» Read More...