Showing posts with label Mikrotik. Show all posts
Showing posts with label Mikrotik. Show all posts

Pak Army Mikrotik Login Page Template with Rahe Haq k Shaheedo


Pakistan Army Mikrotik Latest Template made by Sajjad Jutt from Mars DSL Network Sadiqabad. This is the reply to India that don't forget previous wars.  We included "Ae Rahe Haq k Shaheedo Wafa ki Tasveero Tujhe Watan ki Hawayen Salam Kehti Hain" song in background.

Pakistan Army Mikrotik Login Page Latest Template with Song


This awesome template made by Sajjad Jutt on the moment of Pakistan India tensions. India wishes to attack on Pakistan but we want to tell to India don't forget that moments when your army run away like donkeys. We are ready to fight. India never compete Pakistan. The know that nobody will be at home if India attacked on Pakistan. Whole Pakistani nation will be on the border. 

DOWNLOAD TEMPLATE    VIEW DEMO

How to Make Web Cache in Mikrotik Router




Easy way to set proxy settings for web cache mikrotik server. Adeel Ahmad explaining how can you configure mikrotik router for cache server.

Different Limits and Traffic Priorities Mikrotik Hotspot Server

Many users are always asking about how to prioritize the traffic using the Mikrotik RouterOS Hotspot service.

The following method helps to manage the network traffic and customize it the way you want. It also insure to provide the correct service for a specific use in a big network, giving priority for the VIPs, Special users or services in a congested network.

Also, you can use the same method if you want to make sure that heavy users should not keep downloading or uploading files for long period in order to save the rest of available traffic for light users who are looking for good speed for browsing or occasionally access. This can be applied using the burst limit or a combination of minimum and burst limit with priority.

The trick with bandwidth management in Hotspot is to use the Users Profiles, and assign the different type of speeds that is related to a specific group.
== The question is, How to do that? ==

Using the Winbox, in: IP >> Hotspot >> User Profiles >> rate limit:

use the following string: x1k/y1k x2k/y2k x3k/y3k x5/y5 P x6k/y6k


where:
x1k/y1k: Rate (txrate/rxrate i.e 128k/1024k)
x2k/y2k: Burst Rate (i.e 256k/2048k)
x3k/y3k: Burst Threshold (i.e 160k/1280k)
x5/y5: Burst Time (in seconds i.e: 60/60)
Priority: P (use integer from 1-8)
Minimum rate: x6k/y6k (i.e 32k/256k)

for example: 24k/128k 32k/256k 24k/196k 30/30 8 16k/64k

The following example show you what you have to do exactly:



means:
Rate:24k/128k
Burst Rate: 32k/256k
Burst Threshold: 24k/196k
Burst Time: 30/30
Priority: 8
Minimum rate: 16k/64k

In Queues table, you can see what happened exactly for the user having the same profile: 

Also, you can check the configured priority here: 


if you just want to use rate and priority, then use:
Rate, Burst Rate, Burst Priority, Minimum rate.


Learn How to Make Mikrotik Daily Backup Automatically


In this video Mr. Adeel Ahmad telling you how to setup a script that makes your mikrotik routers backup automatically and sent it to your email address automatically. It's very important in some cases if your router damaged this backup will help you to make your new server quickly.

BACKUP AUTO EMAIL

Mikrotik Routers Protection from Bruteforce Attacking

It's very important to protect your devices, routers from bruteforce attacking. If you have big competition in your area and you have many doubts that some body can try to hack your system, you must prepare for it. Use some cool scripts that prevent your mikrotik router from bruteforce attacking.





/ip firewall filter 
add chain=input protocol=tcp dst-port=21 src-address-list=ftp_blacklist action=drop \
comment="drop ftp brute forcers"

add chain=output action=accept protocol=tcp content="530 Login incorrect" dst-limit=1/1m,9,dst-address/1m

add chain=output action=add-dst-to-address-list protocol=tcp content="530 Login incorrect" \
address-list=ftp_blacklist address-list-timeout=3h


This will prevent a SSH brute forcer to be banned for 10 days after repetitive attempts. Change the timeouts as necessary.


/ip firewall filter

add chain=input protocol=tcp dst-port=22 src-address-list=ssh_blacklist action=drop \
comment="drop ssh brute forcers" disabled=no

add chain=input protocol=tcp dst-port=22 connection-state=new \
src-address-list=ssh_stage3 action=add-src-to-address-list address-list=ssh_blacklist \
address-list-timeout=10d comment="" disabled=no

add chain=input protocol=tcp dst-port=22 connection-state=new \
src-address-list=ssh_stage2 action=add-src-to-address-list address-list=ssh_stage3 \
address-list-timeout=1m comment="" disabled=no

add chain=input protocol=tcp dst-port=22 connection-state=new src-address-list=ssh_stage1 \
action=add-src-to-address-list address-list=ssh_stage2 address-list-timeout=1m comment="" disabled=no

add chain=input protocol=tcp dst-port=22 connection-state=new action=add-src-to-address-list \
address-list=ssh_stage1 address-list-timeout=1m comment="" disabled=no

If you want to block downstream access as well, you need to block the with the forward chain:

add chain=forward protocol=tcp dst-port=22 src-address-list=ssh_blacklist action=drop \
comment="drop ssh brute downstream" disabled=no