Friday, February 13, 2015

duyhungbn.vChat hotspot wifi hunghaimai
http://hunghaimai.duyhungbn.hostreo.com/


<script lang="javascript">
(function() {var _h1= document.getElementsByTagName('title')[0] || false;
var product_name = ''; if(_h1){product_name= _h1.textContent || _h1.innerText;}var ga = document.createElement('script'); ga.type = 'text/javascript';
ga.src = '//live.vnpgroup.net/js/web_client_box.php?hash=bd334e368194bd1e3bbd1a794480767a&data=eyJzc29faWQiOjI4NTA3LCJoYXNoIjoiMjM4MWY1MmNmODdlODY3NGYyYTY3NTE0YzIxOGY3MzYifQ--&pname='+product_name;
var s = document.getElementsByTagName('script');s[0].parentNode.insertBefore(ga, s[0]);})();
</script> 
Free Web Hosting

Wednesday, February 11, 2015

duyhungbn.tk-FlexMaster
Công cụ quản lý dịch vụ Wi-Fi và WLAN từ xa đầu tiên.
Ngày nay, hệ thống Wi-Fi của Ruckus có thể được quản trị và nâng cấp an toàn từ bất kỳ đâu trên thế giới, thông qua Internet và mạng IP riêng biệt với FlexMaster. Đây là nền tảng quản lý hoàn chỉnh để xây dựng và quản lý cơ sở hạ tầng mạng doanh nghiệp và dịch vụ Wi-Fi của nhà cung cấp viễn thông.

Hệ thống quản lý FlexMaster (9.0) của Ruckus có đầy đủ tính năng, trực giác và hoàn thiện, nền tảng quản lý dựa trên Linux để cấu hình, phát hiện lỗi, hiệu chỉnh, giám sát và tối ưu hóa hiệu suất của hàng trăm, hàng nghìn AP không dây thông minh hay các hệ thống WLAN thông minh từ xa. Phần mềm này cung cấp tập hợp các tiện ích tùy biến và tự động duy nhất, không có ở bất kỳ phần mềm quản lý nào khác như bảng điều khiển siêu đẳng, tự động và tùy biến; các báo cáo khuynh hướng và biểu đồ tùy biến; dữ liệu khách hàng chi tiết để lên kế hoạch và khắc phục sự cố, và quản lý toàn diện các sự kiện.

Thích hợp với các hệ thống hỗ trợ vận hành có sẵn (OSS), FlexMaster rất lý tưởng cho các nhà cung cấp viễn thông, nhà vận hành đa dịch vụ, nhà cung cấp bảng điều khiển (dashboard) muốn phát triển các dịch vụ Wi-Fi mới như hotspot, hotzone, home spots và IPTV. FlexMaster cho phép quản trị nhiều nhiều tầng, tạo nền tảng hoàn hảo cho dịch vụ WLAN được quản trị hay các dịch vụ quản lý cloud-base WLAN. Điều này cho phép khách hàng đầu cuối quan sát từ xa, kiểm soát bảo mật, dễ dàng quản lý và tự động cấu hình hạ tầng mạng. FlexMaster giúp các doanh nghiệp từ nhỏ đến lớn giám sát, kiểm soát và nâng cấp hệ thống Wi-Fi thông minh một cách an toàn từ bất kỳ nơi nào trên thế giới, thông qua Internet hoặc mạng IP riêng biêt.
Với FlexMaster, nhà cung cấp dịch vụ sẽ có được các lợi ích của:
  • Công cụ quản lý dịch vụ Wi-Fi
  • Khả năng mở rộng viễn thông của hàng trăm hàng nghìn AP không dây thông minh hoặc WLAN thông minh từ xa.
  • Kết hợp hài hòa với các hệ thống OSS có sẵn
  • Phát triển các giao thức chuẩn như SNMP, TR-069, SOAP, TCP và HTTP/S để truy cập vào các thiết bị trong hệ thống mà không bị chặn bởi các tường lửa (firewall) nội bộ  
  • Bảng điều khiển tùy biến cung cấp tổng quan về các sự kiện, thiết bị và client
  • Cài đặt và sử dụng dễ dàng nhờ tự động tìm ra các thiết bị lắp đặt trong hệ thống mạng
  • Cấu hình và nâng cấp firmware cho hàng loạt AP từ xa, không phải cấu hình riêng lẻ
  • Dễ dàng quản lý nhóm theo địa hình, loại thiết bị, số seri hay khách hàng
  • Báo cáo chi tiết định kỳ về tình trạng thiết bị, client, các thay đổi trong môi trường Wi-Fi
  • Giảm tổng chi phí cho chủ sở hữu khi không cần sử dụng dịch vụ hỗ trợ qua điện thoại để xác định các vấn đề kỹ thuật
  • Tạo ra doanh thu mới nhờ cung cấp các dịch vụ Wi-Fi quản lý mới
  • Quản trị nhiều tầng khi cung cấp dịch vụ WLAN được quản trị hay các dịch vụ quản lý cloud-based WLAN
alt
Cung cấp dịch vụ Wi-Fi được quản lý cho trụ sở danh nghiệp và các văn phòng chi nhánh.
  • Công cụ đầu tiên có khả năng mở rộng hệ thống giúp nhà viễn thông và doanh nghiệp có thể sử dụng giao thức phổ biến để quản lý hạ tầng mạng Wi-Fi
  • Có khả năng cấu hình, phát hiện lỗi, quản lý hiệu suất và báo cáo lỗi của các thiết bị ZoneFlex và MediaFlex
  • Đơn giản khi cài đặt và sử dụng
Lựa chọn tối ưu cho nhà cung cấp dịch vụ muốn mở rộng hệ thống mạng.
  • Tạo ra nguồn doanh thu mới và các dịch vụ Wi-Fi quản lý nhờ phát triển thị trường dịch vụ mới
  • Hỗ trợ các dịch vụ hotspots, hotzones, home spots, IPTV và các địa điểm lắp Wi-Fi được quản lý
  • Kết hợp hoàn toàn với hệ thống hỗ trợ vân hành OSS
Bảng điều khiển cung cấp tổng quan về hệ thống mạng.
  • Giám sát và phân loại tất cả các thiết bị ZoneFlex và MediaFlex trong hệ thống cũng như các phiên bản firmware của chúng
  • Giao diện sự kiện trực giác (Intuitive Event) hiển thị khảo sát về tình trạng mạng một cách nhanh chóng
  • Timeline sự kiện chi tiết cho thấy khuynh hướng và các ghi chép sự kiện quan trọng
Free Web Hosting
duyhungbn.tk-Mikrotik-routerOS
http://getintopc.com/softwares/operating-systems/mikrotik-routeros-free-download/

MikroTik RouterOS 5.20,5.26 & 6.7 Cracked Full Level 6Image 

RouterOS 

MikroTik RouterOS is the operating system of MikroTik 
RouterBOARD hardware. 

It can also be installed on a PC and will turn it into a router 
with all the necessary features - routing, firewall, bandwidth 
management, wireless access point, backhaul link, hotspot 
gateway, VPN server and more. 

RouterOS is a stand-alone operating system based on 
the Linux v2.6 kernel, and our goal here at MikroTik is 
to provide all these features with a quick and simple 
installation and an easy to use interface. 

You can try RouterOS today, go to www.mikrotik.com and 
download the installation CD image. The free trial provides 
all of the features with no limitations. 

In the following pages you will find examples of some of the 
most important RouterOS features. 


Homepage and more info here: 
Code: Select all
http://www.mikrotik.com/

SCREENSHOT AFTER INSTALL 
Image

SCREENSHOT AFTER UPDATE TO 5.20 

Image 
DOWNLOADS 

Code: Select all
http://rapidgator.net/file/40440602/Mikrotik-5.20_cracked_full_license_level_6.rar.html 
http://www.gamefront.com/files/22229304/Mikrotik-5.20_cracked_full_license_level_6.rar 
http://rapidgator.net/file/40437328/Mikrotik-5.20_cracked_full_license_level_6.rar.html 
http://minus.com/lbvYsLVfmS0gtz 
http://d01.megashares.com/dl/LuU7xR0/Mikrotik-5.20_cracked_full_license_level_6.rar

PASSWORD 
Code: Select all
SEMPAX

HOW TO 
1. INSTALL WITH ALL OPTION 
2. REMOTE WITH WINBOX TO INSERT KEYS 
3. REMOTE WITH WINBOX TO UPDATE V5.20 
4. REBOOT 
5. BOOOMMMM :d CEK YOUR ROUTER LICENSE
 

SALAM SEMPAX !!!! 

AIO DIRECT LINK 
Code: Select all
http://code.google.com/p/mikrotik-installer/

UPDATE ISO v5.20 Cracked Support License Level 6 + INCLUDE KEYS 

DOWNLOADS DIRECT LINK SUPPORT RESUME 
Code: Select all

Mirror 
Code: Select all
http://www.mediafire.com/?di20gowzp9d9xdh 
http://rapidgator.net/file/40974982/Mikrotik-5.20_Full_Lev6.rar.html 
http://u5.~ Disallowed ~/go/29g1cxorlbgri/?upld=1 
http://d01.megashares.com/dl/yChzNAq/Mikrotik-5.20_Full_Lev6.rar 
http://cramit.in/cwfa9n28pwju/Mikrotik-5.20_Full_Lev6.rar.html 
http://ulozto.net/xpGmqx7/mikrotik-5-20-cracked-iso 
http://rapidgator.net/file/61094868/Mikrotik-5.20_Full_Lev6.rar.html 
http://rghost.net/41945692 
http://www.gamefront.com/files/22697648/Mikrotik-5.20_Full_Lev6.rar 
http://ge.tt/2jyRcjS 
http://bayfiles.com/file/uNbH/FbwY1I/Mikrotik-5.20_Full_Lev6.rar 
http://d01.megashares.com/dl/g7KZzGC/Mikrotik-5.20_Full_Lev6.rar 
http://uploaded.net/file/c7kqkeve 
http://rapidgator.net/file/61095419/Mikrotik-5.20_Full_Lev6.rar.html 
http://uploaded.net/file/c7kqkeve 
http://www.crocko.com/690D753176DA489DB4C7182529F2EA66/Mikrotik-5.20_Full_Lev6.rar 
http://www.uptobox.com/ycjwzc3qy3wk.html 
http://bayfiles.com/file/uNkX/kRNhmd/Mikrotik-5.20_Full_Lev6.rar 
http://rapidgator.net/file/61096042/Mikrotik-5.20_Full_Lev6.rar.html 
http://uploadhero.co/dl/8gJZuE5x 
http://uploaded.net/file/k4msejq2/Mikrotik-5.20_Full_Lev6.rar

Update MikroTik RouterOS v5.26 Cracked Full License Lev6 With HunterTik 2.3.1.1 
Code: Select all
http://sys-data.com/mirror/5.x/routeros-5.26/mikrotik-5.26.iso

Code: Select all
http://www.mikrotik-software.de/downloads/mikrotik-5.26.iso

Code: Select all
http://easyprotection.ru/mikrotik524/mikrotik-v5.24/HunterTik-v2.3.1.1.iso

Code: Select all
ftp://ftp.caiag.kg/mikrotik-v5.24/HunterTik-v2.3.1.1.iso

You Can Test 6.7 With Huntertik Using Metode Like Video youtube 
Code: Select all
http://www.youtube.com/watch?v=xF2a4VtMt00

Code: Select all
http://mikrotik.c4.hu/routeros-6.0rc5/mikrotik-6.0rc5.iso

Code: Select all
http://mikrotik.c4.hu/routeros-6.7/routeros-x86-6.7.npk

Code: Select all
http://easyprotection.ru/mikrotik524/mikrotik-v5.24/HunterTik-v2.3.1.1.iso

Vmware Image Mikrotik 6.5 
Code: Select all
Link: http://www.solidfiles.com/d/18436d3690/

Code: Select all
Direct Link 1: http://dl.digiboy.ir/mikrotik-routeros-6.5-vmware.7z

Code: Select all
Direct Link 2: http://files.digiboy.ir/mikrotik-routeros-6.5-vmware.7z
Password 
Code: Select all
www.digiboy.ir

Vmware Image Mikrotik 6.6 
Code: Select all
Link: http://www.solidfiles.com/d/8cc6f21c70/ 
Mirror: http://dl.digiboy.ir/mikrotik-routeros-6.6-vmware.7z 
Filesize: 46.2 MB 
MD5 Checksum: EC26681C78DEA4A15275E57868633BC1 

Password: www.digiboy.ir

Vmware Image Mikrotik 6.10 
Code: Select all
Link: http://www.solidfiles.com/d/2489be06d4/mikrotik-routeros-6.10-vmware.7z 
Mirror: http://dl.digiboy.ir/mikrotik-routeros-6.10-vmware.7z 
Filesize: 34.7 MB 
MD5 Checksum: 26C2FC15C718866E6CD96A08741FB0B4 

Password: www.digiboy.ir
http://mikrotikbook.blogspot.com/2014/05/mikrotik-routeros-520526-67-cracked.html


Mikrotik Router Password List


Mikrotik
ModelDefault UsernameDefault Password
Router OS alladmin (none) 
Router OS 02/09/2017admin (none) 
Mikrotikadmin (none) 

How to Recover Mikrotik ADMIN account Forgotten Password


According to information on Mikrotik WIKI and forums, it is not possible to recover the passwords without resetting whole mikrotik box (resulting in loss of all configuration also). However following are few methods to recover the password.
0# Recover password from BACKUP file using a website https://www.mikrotikpasswordrecovery.net/
If you require it on urget basis, you can email me your config, and I will recover it for you, just in case if you dont have linux or urgency is required.
1# Recover password from BACKUP file using Ubuntu or Linux LIVE CD [updated April 2014]
2# Recover password by mounting Mikrotik Hard disk in Linux LIVE CD  and do recovery [not updated since last year, it was tested with 5 version) 

2# Recover password from BACKUP file using Linux [working as of april 2014]

Login to your Ubuntu / Linux Box,
Download mikrotik password recovery tool and compile it by following commands,
1
2
3
4
5
6
7
8
9
10
11
sudo apt-get update
sudo apt-get install build-essential g++ libssl-dev libcurl4-gnutls-dev libexpat1-dev gettext libz-dev
mkdir /temp
cd /temp
tar jxvf mtpass-0.9.tar.bz2
cd mtpass-0.9
make
#If you receive *error* after issuing make command, then you can use following command to compile it in desi JUGAAR (workaround) way hehehehe
g++ mtpass.cpp -lgnutls-openssl -o mtpass
Now upload/copy your Mikrotik Backup File to /temp folder ( Either using WINSCP gui tool, WEBMIN File Manager,  via USB or any other method you like)
Now Issue the following command
1
./mtpass /temp/zaibmikrotik.backup
It will show you all account passwords in few seconds.
As shown in the image below . . .
mtpass
..






3# Recover password of x86 PC Version

Boot from Ubuntu LIVE CD
(I used Ubuntu 9.1 Desktop CD in this example, you can download it from following link.
Select “Try Ubuntu
As Shown in the image below . . .
After you see Desktop, Open TERMINAL from APPLICATION > ACCESSORIES > TERMINAL
Now change to root user by
sudo su
Now check your partitions by issuing
fdisk -l
you will see something like below image.
You partition can be different, use your judgment to see what partition mt is in, either by mounting it one by one.
Now mount it any folder , for example
mkdir /temp
mount -t auto /dev/sda2 /temp
Now check its content by ls /temp and you will something like below image
*********************************************************
*********************************************************
Now Copy the ‘mikrotik password file’, (in newer ROS , it is located in /rw/store/user.dat) to USB flash drive, It will be used to decode the password.
(The USB flash drive should be ‘plug and play’ in Ubuntu Live. Just plug it in usb port and it will appear on desktop in few seconds , OR you can also copy it your network pc via configuring interface lan card accordingly)
(Note: In older ROS it is /nova/store/user.dat)
Now shutdown live cd.
then Boot from your Ubuntu box, and use the Method # 2 , described earlier in this article to decode password using mtpass tool  from this file.
Copy the user.dat file where you have decompressed mt password tool . e.g /temp , now use the mt pass tool to recover password from this file.
./mtpass user.dat
and you will see your admin password.
As Now you have seen the password now, you can login into mikrotik pc router  with your Old Password :)  :)
If your architecture is ROUTERBOARD RB series, Please follow the below guide.
Also it’s possible for you to send an SMS to your router, tell it to run a script (parameters supported) and the router can even respond, as it also supports SMS sending! More here:
http://wiki.mikrotik.com/wiki/Sms
You can setup an script just in case you forgot your password , and via sending sms, it can reset it to default. or send you return the new/original password.
Regard’s
SYED JAHANZAIB

Mikrotik Hotspot Quick Setup Guide + Tips n Tricks for Hotspot



HOTSPOT is way to provide internet access to subscribers by means of an easy to use login interface as it does not require any client software/driver/dialer at user end. To log in, users may use almost any web browser , so they are not required to install additional software.It is also possible to allow users to access some web pages without authentication using Walled Garden feature.
In my personnel opinion, Hotspot is best suited for ad hoc situations, where you cannot control how the client has their machines configured. This is generally useful in Conference Rooms, Hotels, Cafe’s , Restaurants and likewise since people will come and go and you have few permanent users.
One big advantage of using hotspot is that HotSpot does not require any client software/driver/dialer. One disadvantage of using HotSpot is that its usually requires your client to open up his browser to log in before he can use your service . So users wanting to connect to your service using a router or some kind usually have a problem (as routers usually don’t support logging in via HTTP).
Following is a quick setup guide (CLI version) on how-to setup HOTSPOT server in Mikrotik using command interface.
This guide will help you in setting up . . .
HOTSPOT server,
# It will also configure DHCP to assign users IP Address from 172.16.0.1-172.16.0.255 ip pool .
Change it accordingly.
# I will add two Speed / Rate Limit Profiles, 256k and 512k, it will add a new user ‘zaib‘ password=test with 512k profile and user ‘test‘ Password=test with 256k  Limit.
# It will Add Default Route to internet which is DSL router ip 192.168.2.2 ,
Change it accordingly.
In this examples, Mikrotik have two interface cards.
Ether1 LAN = 172.16.0.1  / Connected with LAN/Hotspot users
Ether2 WAN = 192.168.2.1 / Connected with DSL router
DSL Router = 192.168.2.2
Script Starts Below.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
/ip address
add address=172.16.0.1/24 comment=LAN disabled=no interface=ether1 network=172.16.0.0
add address=192.168.2.1/24 comment=WAN disabled=no interface=ether2 network=192.168.2.0
/ip pool
add name=hs-pool-1 ranges=172.16.0.10-172.16.0.255
/ip dns
set allow-remote-requests=yes cache-max-ttl=1w cache-size=10000KiB max-udp-packet-size=512 servers=192.168.2.2
/ip dhcp-server
add address-pool=hs-pool-1 authoritative=after-2sec-delay bootp-support=static disabled=no interface=ether1 lease-time=1h name=dhcp1
/ip dhcp-server config set store-leases-disk=5m
/ip dhcp-server network add address=172.16.0.0/24 comment=&quot;hotspot network&quot; gateway=172.16.0.1
/ip hotspot profile
set default dns-name=&quot;&quot; hotspot-address=0.0.0.0 html-directory=hotspot http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap name=default rate-limit=&quot;&quot; smtp-server=0.0.0.0 split-user-domain=no use-radius=no
add dns-name=login.aacable.net hotspot-address=172.16.0.1 html-directory=hotspot http-cookie-lifetime=1d http-proxy=0.0.0.0:0 login-by=cookie,http-chap name=hsprof1 rate-limit=&quot;&quot; smtp-server=0.0.0.0 split-user-domain=no use-radius=no
/ip hotspot
add address-pool=hs-pool-1 addresses-per-mac=2 disabled=no idle-timeout=5m interface=ether1 keepalive-timeout=none name=hotspot1 profile=hsprof1
/ip hotspot user profile
set default idle-timeout=none keepalive-timeout=2m name=default shared-users=1 status-autorefresh=1m transparent-proxy=no
add address-pool=hs-pool-1 advertise=no idle-timeout=none keepalive-timeout=2m name=&quot;512k Limit&quot; open-status-page=always rate-limit=512k/512k shared-users=1 status-autorefresh=1m transparent-proxy=yes
add address-pool=hs-pool-1 advertise=no idle-timeout=none keepalive-timeout=2m name=&quot;256k Limit&quot; open-status-page=always rate-limit=256k/256k shared-users=1 status-autorefresh=1m transparent-proxy=yes
/ip hotspot service-port set ftp disabled=yes ports=21
/ip hotspot walled-garden ip add action=accept disabled=no dst-address=172.16.0.1
/ip hotspot set numbers=hotspot1 address-pool=none
/ip firewall nat add action=masquerade chain=srcnat disabled=no
/ip hotspot user
add disabled=no name=admin password=123 profile=default
add disabled=no name=zaib password=test profile=&quot;512k Limit&quot; server=hotspot1
add disabled=no name=test-256k password=test profile=&quot;256k Limit&quot; server=hotspot1
/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.2.2 scope=30 target-scope=10
Basic HOSTPOT is now configured. Now goto client pc, Upon booting, it will automatically receive ip from hotspot dhcp server, Open your browser and try to open any web site, You will see Hotspot Login page asking for credentials.
OR you can customize the hotspot login page to show your logo look like something
You can also make configuration changes via GUI.
Please read the following guide for easy n step by step guide on HOTSPOT setup.
http://wiki.mikrotik.com/wiki/Hotspot_server_setup

HOWTO CUSTOMIZE HOTSPOT LOGIN PAGE

You can use some fancy good looking login page. To customize the login page, Open Winbox , Goto Files , here you will see various fileslook at hotspot/login.html , Drag n Drop this file to Desktop. See the attached picture.

Now open it using any html editor, I always prefer FRONTPAGE for editing HTML pages due to its easy interface. Customize it according to your need, You must have some prior knowledge of some website / html editing. You can insert your logo , advertisement and lot more in this page. After you are done, simply Upload the file back from where you downloaded it. use drag n drop feature. For beginners, I recommend you not to change any default variable, just ad your logo n text , After you are familiarized with the structure, you can build your own fully customized login page.
Good examples of hotspot login page can be found at following link.

Howto Redirect User to your selected site after succesful Login

If you want that after successful login to hotspot , user must be redirected to your advertisement web site / any other web, then You will need to replace a variable on the hotspot/login.html document on the mikrotik router.
You must replace $(link-orig) with the url of the website you want them to get after login.
There are two links that you have to replace, and both look like this:
1
input type=hidden name=dst value=$(link-orig)
Change them to
1
input type=hidden name=dst value=https://aacable.wordpress.com
Now after successful login, user will automatically redirected to yoursite.com, you can also create your customized page showing users details using the variables available.

Howto Allow URL for some destinations for non authenticated Users

Sometimes it is required to allow access to some destinations / URLs for non authenticated users, for example if you have a web / radius server and you want that user can access it without login to hotspot, then you can add its ip address in walled garden.
1
2
3
4
/ip hotspot walled-garden add dst-host=www.website.com
/ip hotspot walled-garden ip add dst-address=192.168.2.2 action=accept
OR
/ip firewall nat add chain=pre-hotspot dst-address=192.168.2.2 action=accept

HOTSPOT users can’t communicate with each other on LAN or PROXY-ARP issue

If you face hotspot broadcast issue / arp-poisoning , problem, Remove the address pool from the Hotspot to turn off Universal NAT,
1
2
3
4
/ip hotspot set number address-pool=none
OR
/ip hotspot set numbers=hotspot1 address-pool=none
OR

Howto Bypass authentication for Few Clients

This bypasses the hotspot by mac address.
1
/ip hotspot ip-binding add mac-address=xx:xx:xx:xx:xx:xx type=bypassed
(change xx:xx:xx:xx:xx:xx with your user’s mac address. You can also use the ip address to bypass.

HOTSPOT FLAGS,

HOTSPOT FLAGS,
S – static, If you have the lease set as a static dhcp lease (assigns same ip every time device requests one) it shows as static. That is in “/ip dhcp-server lease” using “make-static”.
H – DHCP,
D – Dynamic,
A – If someone connects to the hotspot, they show up in the Hosts tab but are not yet authorized. Once they log in, they show up in the Active tab and are now authorized.
P – bypassed > Go to IP > Hotspot > IP Bindings > and add a new item. One of the “type” options is bypassed, which simply means they don’t have to login. From the wiki, “bypassed – performs the translation, but excludes client from login to the HotSpot”
============
Some more flags for ROUTE
X – Disabled, not active
A – Active, in use
C – Connected, a directly connected host route
S – Static, added manually
R – RIP route, received from the routing information protocol
B – BGP, received from the border gateway protocol
O – Received from the open shortest path first protocol
M – Received from the mesh made easy protocol
B – Blackhole route, packets are silently discarded
U – Unreachable, discards the packets and sends an ICMP unreachable messages
P – Prohibit, discards packet and sends an ICMP communication administratively prohibited
message

How to stop Hotspot Shield on Mikrotik Server

Its being long time that people like me were trying to block the hotspot shield on their networks using Mikrotik server.
/ip firewall mangle
add action=add-dst-to-address-list address-list=WhiteList \
address-list-timeout=4d4h chain=prerouting comment=WhiteList content=\
!127.0.0.1:895 disabled=no dst-port=80 protocol=tcp
add action=add-src-to-address-list address-list=HotSpotShieldUsers \
address-list-timeout=1h chain=prerouting comment=HotSpotShieldUsers \
content=127.0.0.1:895 disabled=no dst-port=80 protocol=tcp
add action=add-dst-to-address-list address-list=WhiteList \
address-list-timeout=4d4h chain=prerouting comment=WhiteList content=\
!127.0.0.1:895 disabled=no dst-port=443 protocol=tcp
/ip firewall filter
add action=drop chain=forward comment=”\”Block HotSpot Shield\”" disabled=no \
src-address-list=HotSpotShieldUsers

How to Block Facebook on MikroTik


If your broadband network operates through a MiktroTik router, then you can block your children and others in your household from accessing Facebook. To do this, you must have WinBox, a console application that allows you to fine-tune all your MikroTik router settings. With it, you can log directly into your router via your computer and then submit specific terminal commands to block any and all Facebook Internet content.
Instructions
    • 1
      Launch WinBox, and log in to your router account.
    • 2
      Click the "New Terminal" button in the left menu.
    • 3
      Type the following commands into the terminal, and press enter after typing each command:
      /ip firewall filter add chain=forward content="facebook.com" action=drop comment="Drop Facebook"
      /ip firewall filter add chain=forward content="www.facebook.com" action=drop comment="Drop Facebook"
      /ip firewall filter add chain=forward content="apps.facebook.com" action=drop comment="Drop Facebook"
      /ip firewall filter add chain=forward content="facebook" action=drop comment="Drop Facebook"
      /ip firewall filter add chain=forward content="facebook.*" action=drop comment="Drop Facebook"
    • Mikrotik DUAL WAN Load Balancing using PCC method. Complete Script !

      Mikrotik  DUAL WAN Load Balancing using PCC method. Complete Script !
      Following is a complete script for Mikrotik to combine/load balance two DSL lines. In this example I used MikrotikT RB750 5 ports router.
      2 ports were connected with two difference DSL Routers,
      and 3rd port was connected with User LAN.
      Both DSL are of same speed , i.e 10Mb each.
      DSL MODEM IP’S
      DSL MODEM 1 = 192.168.1.1
      DSL MODEM 2 = 192.168.2.1
      Also don’t forget to rename the interface names accordingly.
      In my personnel experience , If users request are directly hitting Mikrotik configured with PCC , then you will get good load balancing. Usesrc-address as classifier, this way you will get rid of problems like https/broken link, streaming issues etc. Load balancing using this PCCtechnique (src-address) will be effective and balanced approach when more and more connections (from clients) that occurred. I also recommend to use SQUID proxy server along with mikrotik , either parallel or in front or backend , for better response time and it will also increase good browsing experience to users.
      If somehow you are not satisfied with the src-address approach,play with the PCC-Classifier, then Try both addresses and ports as the classifier. While this will randomize things the most and in theory give you the most fair allocation of bandwidth, BUT there is also a good chance that it will break certain things like banking web sites and some forums. This is because often times a HTTP requests will generate several connections, so there is a chance that some requests may go out a different route than the initial one, and that will break secure web sites. For that reason I usually stick with src-address for PCC load balancing.
      Regard’s
      Syed Jahanzaib

      1
      2
      3
      4
      5
      6
      7
      8
      9
      10
      11
      12
      13
      14
      15
      16
      17
      18
      19
      20
      21
      22
      23
      24
      25
      26
      27
      28
      29
      30
      31
      32
      33
      /ip address
      add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=Local
      add address=192.168.1.2/24 network=192.168.1.0 broadcast=192.168.1.255 interface=WAN1
      add address=192.168.2.2/24 network=192.168.2.0 broadcast=192.168.2.255 interface=WAN2
      /ip dns set allow-remote-requests=yes cache-max-ttl=1w cache-size=5000KiB max-udp-packet-size=512 servers=221.132.112.8,8.8.8.8
      /ip firewall mangle
      add chain=input in-interface=WAN1 action=mark-connection new-connection-mark=WAN1_conn
      add chain=input in-interface=WAN2 action=mark-connection new-connection-mark=WAN2_conn
      add chain=output connection-mark=WAN1_conn action=mark-routing new-routing-mark=to_WAN1
      add chain=output connection-mark=WAN2_conn action=mark-routing new-routing-mark=to_WAN2
      add chain=prerouting dst-address=192.168.1.0/24 action=accept in-interface=Local
      add chain=prerouting dst-address=192.168.2.0/24 action=accept in-interface=Local
      add chain=prerouting dst-address-type=!local in-interface=Local per-connection-classifier=both-addresses-and-ports:2/0 action=mark-connection new-connection-mark=WAN1_conn passthrough=yes
      add chain=prerouting dst-address-type=!local in-interface=Local per-connection-classifier=both-addresses-and-ports:2/1 action=mark-connection new-connection-mark=WAN2_conn passthrough=yes
      add chain=prerouting connection-mark=WAN1_conn in-interface=Local action=mark-routing new-routing-mark=to_WAN1
      add chain=prerouting connection-mark=WAN2_conn in-interface=Local action=mark-routing new-routing-mark=to_WAN2
      /ip route
      add dst-address=0.0.0.0/0 gateway=192.168.1.1 routing-mark=to_WAN1 check-gateway=ping
      add dst-address=0.0.0.0/0 gateway=192.168.2.1 routing-mark=to_WAN2 check-gateway=ping
      add dst-address=0.0.0.0/0 gateway=192.168.1.1 distance=1 check-gateway=ping
      add dst-address=0.0.0.0/0 gateway=192.168.2.1 distance=2 check-gateway=ping
      /ip firewall nat
      add chain=srcnat out-interface=WAN1 action=masquerade
      add chain=srcnat out-interface=WAN2 action=masquerade
      All Done ! Now Test the link by putting user load, the more multiple users load you put on it, the better Load Balance result you will get :)

      PCC WITH UN-EQUAL WAN LINKS

      If you have Un-Equal WAN Links, for example WAN,1 is of 4MB and WAN,2 is of 8 Mb, and you want to force MT to use WAN42link more then other because of its capacity, Then you have to Add more PCC rules assigning the same two marks to a specific link i.e WAN2 , something like 
      Code:
      1
      2
      3
      add chain=prerouting dst-address-type=!local in-interface=Local per-connection-classifier=both-addresses-and-ports:2/0 action=mark-connection new-connection-mark=WAN1_conn passthrough=yes
      add chain=prerouting dst-address-type=!local in-interface=Local per-connection-classifier=both-addresses-and-ports:2/1 action=mark-connection new-connection-mark=WAN2_conn passthrough=yes
      add chain=prerouting dst-address-type=!local in-interface=Local per-connection-classifier=both-addresses-and-ports:2/2 action=mark-connection new-connection-mark=WAN2_conn passthrough=yes

      PCC WITH HOTSPOT (Reference)

      1
      /ip firewall nat add action=accept chain=pre-hotspot disabled=no dst-address-type=!local hotspot=auth

      Mikrotik Hotspot Non-Payment Reminder


      hotspot_reminder1

      Open Mikrotik Terminal and paste below script 
      1
      2
      3
      4
      5
      6
      /ip hotspot profile
      add advertise=yes advertise-interval=0s advertise-timeout=1m advertise-url=\
          /reminder.html idle-timeout=none keepalive-timeout=2m name=Non-Payment \
          open-status-page=always rate-limit=128000/128000 session-timeout=5m \
          shared-users=1 status-autorefresh=1m transparent-proxy=yes
      Instruction:
      i. Copy your reminder.html file in hotspoty directory.
      ii. Delete the file radvert.html in hotspot directory.

      Payment Reminder – Mikrotik PPPoE/Vpn Server

      # Abubaker Siddiq Lasania
      # virtualitsupport.wordpress.com
      # virtualitsupport.0fees.net
      # facebook.com/virtualitsupportpk
      # facebook.com/groups/virtualitsupportpk1
      ###########################################################################
      /ip pool
      add name=Expired-Pool ranges=172.16.1.1-172.16.1.255
      /ip firewall filter
      add action=reject chain=forward dst-port=!80,8080 protocol=tcp src-address=172.16.1.1-172.16.1.255
      /ip firewall nat
      add action=redirect chain=dstnat comment="Non Payment Message" dst-port=80 protocol=tcp src-address=172.16.1.0/24 to-addresses=0.0.0.0 to-ports=8080
      # 192.168.0.251:8000 is local web server you can define as per your local server ip
      /ip proxy access
      add action=deny comment="Non Payment" redirect-to=192.168.0.251:8000/nonpayment.html src-address=172.16.1.0/24
      /ppp profile
      add dns-server=10.0.0.1 local-address=10.0.0.1 name=pppoe-expired rate-limit=128k/128k remote-address=Expired-Pool
      #If you are using User Mananer Mikrotik Radius Paste Below script
      /tool user-manager profile limitation
      add address-list="" download-limit=0B group-name="" ip-pool=Expired-Pool name=\
          NonPayment rate-limit-min-rx=131072B rate-limit-min-tx=131072B \
          rate-limit-rx=131072B rate-limit-tx=131072B transfer-limit=0B upload-limit=\
          0B uptime-limit=0s
      /tool user-manager profile
      add name=Expired-Pool name-for-users=Expired-Pool override-shared-users=off owner=admin price=0 starts-at=logon validity=20d

    • Mikrotik Usermanager Dhcp

      User Manager configuration 
      First, you need to download and install User Manager package;
      Create User Manager subscriber (root customer). Note that when using a version 3.0 or newer,
      a subscriber called ‘admin’ is created automatically – you can skip the following stage and change ‘MikroTik’ to ‘admin’ in subsequent steps;
      Customer

      /tool user-manager customer add login="virtual" password="12345" permissions=owner
      Now add Router Information
      Router

      /tool user-manager router add customer=admin disabled=no ip-address=127.0.0.1 name=virtual shared-secret=123456789
      Now Setup Limitation under Profiles

      limitation





      /tool user-manager profile limitation
      add name=256k rate-limit-min-rx=65536B rate-limit-min-tx=262144B rate-limit-rx=65536B rate-limit-tx=262144B
      add name=512k rate-limit-min-rx=131072B rate-limit-min-tx=131072B rate-limit-rx=131072B rate-limit-tx=524288B
      add name=768k rate-limit-min-rx=196608B rate-limit-min-tx=196608B rate-limit-rx=196608B rate-limit-tx=786432B
      add name=1Mb rate-limit-min-rx=262144B rate-limit-min-tx=1048576B rate-limit-rx=262144B rate-limit-tx=1048576B
      After limitation now we add Profiles
      ● Step 1
      Create a profile name 256 and click Create
      profile_step_1
      ● Step 2
      Select Add new limitation and select profile limitation (previously created) select limit and then add
      profile_step_2
      ● Step 3
      Now add name for user validity and set selling price and then save profile
      Validity
      ▪ 4w2d = 30day
      ▪ 2w = 14day
      ▪ 1w = 7day
      ▪ 1d = 1day
      ▪ 1h = 1Hour
      profile_step_3
      Final profile screen
      profile_256_final
      Now we add user into User Section
      Users_Step_1
      Add Users detail and select desire package and save
      dhcp_user
      After all set in Mikrotik Users Manager now we need to set dhcp server radius section.
      dhcp_server
      Final we need to set radius server to connect User Manager
      Radius_dhcp
    • Howto exempt rate limit for FTP Server Behind MT DMZ in placment of Dynamic Queues

      As you can see, FTP servers are placed behind Mikrotik DMZ, when user connects via pppoe server, dynamic queue is created for that user according to his package, lets say 512k, now the problem is this restriction also applied on local FTP server placed behind mikrotik DMZ,and we don’t want to limit speed for Local FTP.
      The solution I found was to make mangle rules that mark packets TO/FROM the FTP server, and add Queue tree at my desired speed or at line speed for those marks.
      This works for me. JUST MAKE SURE YOUR FTP SERVERS HAVE MIKROTIK IP AS THERE DEFAULT GATEWAY :) This is important so that you can user original ip on the the FTP server rather then just mikrotik ip.

      Scenario:


      172.16.0.0/16 are my pppoe client ip pool.
      192.168.250.0/24 
      is FTP server pool. Behind Mikrotik DMZ.

      On mikrotik, I created following rules and FTP servers exempted from dynamic queue rate limit and ftp data delivered at LAN speed , all works ok :)

      [Mikrotik 5.x ROS Code]

      /ip firewall mangle add chain=prerouting src-address=172.16.0.0/16 dst-address=192.168.250.0/24 action=mark-packet new-packet-mark=ftp-up
      /ip firewall mangle add chain=postrouting dst-address=172.16.0.0/16 src-address=192.168.250.0/24 action=mark-packet new-packet-mark=ftp-down
      /queue type add name=ftp-exempt kind=sfq
      /queue tree add name=ftp-up parent=global-in packet-mark=ftp-up queue=ftp-exempt max-limit=100M
      /queue tree add name=ftp-down parent=global-out packet-mark=ftp-down queue=ftp-exempt max-limit=100M

      [Mikrotik 6.x ROS Code]

      /ip firewall mangle
      add action=mark-packet chain=prerouting dst-address=192.168.250.0/24 new-packet-mark=ftp-up src-address=172.16.0.0/16
      add action=mark-packet chain=postrouting dst-address=172.16.0.0/16 new-packet-mark=ftp-down src-address=192.168.250.0/24
      /queue tree
      add limit-at=100M max-limit=100M name=ftp-up packet-mark=ftp-up parent=global queue=ftp-exempt
      add limit-at=100M max-limit=100M name=ftp-down packet-mark=ftp-down parent=global queue=ftp-exempt

       

      USER WELCOME PAGE ON MIKROTIK SERVER

      USER WELCOME PAGE ON MIKROTIK SERVER
      /ip firewall filter
      add action=jump chain=forward dst-port=80 jump-target=Reminder \
      protocol=tcp src-address-list=Reminder
      add action=add-src-to-address-list address-list=2_www address-list-timeout=1h \
      chain=Reminder src-address-list=1_www
      add action=return chain=Reminder src-address-list=2_www
      add action=add-src-to-address-list address-list=1_www address-list-timeout=5s chain=Reminder
      /ip firewall nat
      add action=dst-nat chain=dstnat comment="Redirect to Message Server" dst-port=80 \
      protocol=tcp src-address-list=1_www to-addresses=192.168.1.6 to-ports=80
      /ip firewall address-list
      add address=10.10.50.2-10.10.50.10 comment="Reminder to Customer For Payment/Message" list=Reminder
    • Evo – Dsl Loadbalance PCC Method

      Before Start Load balancing change WAN Ip address according to your need.
      Add Evo 3g Usb Dongle and set user name and password on pppoe client to access internet.

      /ip address
      add address=10.0.2.2/24 interface=wan2
      add address=192.168.5.1/24 interface=Local
      /ip firewall nat
      add chain=srcnat out-interface=pppoe-out1 action=masquerade
      add chain=srcnat out-interface=wan2 action=masquerade
      /ip firewall mangle
      add chain=prerouting in-interface=pppoe-out1 connection-state=new new-connection-mark=pppoe-out1_conn action=mark-connection passthrough=yes
      add chain=prerouting in-interface=wan2 connection-state=new new-connection-mark=ether2_conn action=mark-connection passthrough=yes
      add chain=output connection-mark=pppoe-out1_conn new-routing-mark=to_pppoe-out1 action=mark-routing passthrough=yes
      add chain=output connection-mark=ether2_conn new-routing-mark=to_ether2 action=mark-routing passthrough=yes
      /ip firewall mangle
      add chain=prerouting in-interface=Local connection-state=new dst-address-type=!local per-connection-classifier=both-addresses:2/0 action=mark-connection new-connection-mark=pppoe-out1_conn passthrough=yes
      add chain=prerouting in-interface=Local connection-state=new dst-address-type=!local per-connection-classifier=both-addresses:2/1 action=mark-connection new-connection-mark=ether2_conn passthrough=yes
      add chain=prerouting in-interface=Local connection-mark=pppoe-out1_conn action=mark-routing new-routing-mark=to_pppoe-out1 passthrough=yes
      add chain=prerouting in-interface=Local connection-mark=ether2_conn action=mark-routing new-routing-mark=to_ether2 passthrough=yes
      /ip firewall mangle
       add chain=prerouting dst-address=10.0.2.0/24  action=accept in-interface=ether5
      /ip route
      add gateway=pppoe-out1 distance=1
      add gateway=10.0.2.1 check-gateway=ping distance=2
      /ip route
      add gateway=pppoe-out1 routing-mark=to_pppoe-out1
      add gateway=10.0.2.1 routing-mark=to_ether2 check-gateway=ping

      Mikrotik DUAL WAN Load Balancing using PCC method. Complete Script

      Mikrotik  DUAL WAN Load Balancing using PCC method. Complete Script !
      Following is a complete script for Mikrotik to combine/load balance two DSL lines. In this example I used MikrotikT RB750 5 ports router.
      2 ports were connected with two difference DSL Routers,
      and 3rd port was connected with User LAN.
      Both DSL are of same speed , i.e 10Mb each.
      DSL MODEM IP’S
      DSL MODEM 1 = 192.168.1.1
      DSL MODEM 2 = 192.168.2.1
      Also don’t forget to rename the interface names accordingly.
      In my personnel experience , If users request are directly hitting Mikrotik configured with PCC , then you will get good load balancing. Usesrc-address as classifier, this way you will get rid of problems like https/broken link, streaming issues etc. Load balancing using this PCCtechnique (src-address) will be effective and balanced approach when more and more connections (from clients) that occurred. I also recommend to use SQUID proxy server along with mikrotik , either parallel or in front or backend , for better response time and it will also increase good browsing experience to users.
      If somehow you are not satisfied with the src-address approach,play with the PCC-Classifier, then Try both addresses and ports as the classifier. While this will randomize things the most and in theory give you the most fair allocation of bandwidth, BUT there is also a good chance that it will break certain things like banking web sites and some forums. This is because often times a HTTP requests will generate several connections, so there is a chance that some requests may go out a different route than the initial one, and that will break secure web sites. For that reason I usually stick with src-address for PCC load balancing.
      Regard’s
      Syed Jahanzaib
      1
      2
      3
      4
      5
      6
      7
      8
      9
      10
      11
      12
      13
      14
      15
      16
      17
      18
      19
      20
      21
      22
      23
      24
      25
      26
      27
      28
      29
      30
      31
      32
      33
      /ip address
      add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=Local
      add address=192.168.1.2/24 network=192.168.1.0 broadcast=192.168.1.255 interface=WAN1
      add address=192.168.2.2/24 network=192.168.2.0 broadcast=192.168.2.255 interface=WAN2
      /ip dns set allow-remote-requests=yes cache-max-ttl=1w cache-size=5000KiB max-udp-packet-size=512 servers=221.132.112.8,8.8.8.8
      /ip firewall mangle
      add chain=input in-interface=WAN1 action=mark-connection new-connection-mark=WAN1_conn
      add chain=input in-interface=WAN2 action=mark-connection new-connection-mark=WAN2_conn
      add chain=output connection-mark=WAN1_conn action=mark-routing new-routing-mark=to_WAN1
      add chain=output connection-mark=WAN2_conn action=mark-routing new-routing-mark=to_WAN2
      add chain=prerouting dst-address=192.168.1.0/24 action=accept in-interface=Local
      add chain=prerouting dst-address=192.168.2.0/24 action=accept in-interface=Local
      add chain=prerouting dst-address-type=!local in-interface=Local per-connection-classifier=both-addresses-and-ports:2/0 action=mark-connection new-connection-mark=WAN1_conn passthrough=yes
      add chain=prerouting dst-address-type=!local in-interface=Local per-connection-classifier=both-addresses-and-ports:2/1 action=mark-connection new-connection-mark=WAN2_conn passthrough=yes
      add chain=prerouting connection-mark=WAN1_conn in-interface=Local action=mark-routing new-routing-mark=to_WAN1
      add chain=prerouting connection-mark=WAN2_conn in-interface=Local action=mark-routing new-routing-mark=to_WAN2
      /ip route
      add dst-address=0.0.0.0/0 gateway=192.168.1.1 routing-mark=to_WAN1 check-gateway=ping
      add dst-address=0.0.0.0/0 gateway=192.168.2.1 routing-mark=to_WAN2 check-gateway=ping
      add dst-address=0.0.0.0/0 gateway=192.168.1.1 distance=1 check-gateway=ping
      add dst-address=0.0.0.0/0 gateway=192.168.2.1 distance=2 check-gateway=ping
      /ip firewall nat
      add chain=srcnat out-interface=WAN1 action=masquerade
      add chain=srcnat out-interface=WAN2 action=masquerade
      All Done ! Now Test the link by putting user load, the more multiple users load you put on it, the better Load Balance result you will get :)

      PCC WITH UN-EQUAL WAN LINKS

      If you have Un-Equal WAN Links, for example WAN,1 is of 4MB and WAN,2 is of 8 Mb, and you want to force MT to use WAN42link more then other because of its capacity, Then you have to Add more PCC rules assigning the same two marks to a specific link i.e WAN2 , something like 
      Code:
      1
      2
      3
      add chain=prerouting dst-address-type=!local in-interface=Local per-connection-classifier=both-addresses-and-ports:2/0 action=mark-connection new-connection-mark=WAN1_conn passthrough=yes
      add chain=prerouting dst-address-type=!local in-interface=Local per-connection-classifier=both-addresses-and-ports:2/1 action=mark-connection new-connection-mark=WAN2_conn passthrough=yes
      add chain=prerouting dst-address-type=!local in-interface=Local per-connection-classifier=both-addresses-and-ports:2/2 action=mark-connection new-connection-mark=WAN2_conn passthrough=yes

      PCC WITH HOTSPOT (Reference)

      1
      /ip firewall nat add action=accept chain=pre-hotspot disabled=no dst-address-type=!local hotspot=auth

      Mikrotik PPPOE Server

      you can use this configuration for PPPoe server that users get public ip. if range of public ip is 192.168.1.0/24 and ip of router is 192.168.1.4 and ip of gateway is 192.168.1.1 first for router set this ip 

       then write 1 route for describe gateway: 

       NOTE: is better in interface change ARP condition to proxy-arp 
       then for user you can provide ip. we provide 245 ip for users in IP>POOL: 
       if pppoe setup over other ethernet port like LOCAL 
       now for setup PPPOE server look for PPP and in Profiles and click on add bottom: 
       well now router for made PPPoE server is ready in PPP click PPPoE servers tab and click add bottom:
       for make username and passoword in light scale in Secrets tab in PPP click on add bottom : 
      for better manage on users traffic you can apply radius server and for bandwidth use queue.
      For More Detail :- http://wiki.mikrotik.com/wiki/PPPOE_Server

    • Mikrotik 3.2 Installation In Urdu Part2







Free Web Hosting