分類彙整:ros

routeos disable address-list

在 address-list 裡搜尋 ip 或 comment 啟用 /ip firewall address-list set [ find address=192.168.88.88/32 ] disabled=yes /ip firewall address-list set [ find comment="My address #1" ] disabled=yes

發表於 ros | 發表迴響

mikrotik address findlist

{ :foreach addr in=[/ip firewall address-list find list=Ban_ip] do={ :local ipAddr [/ip firewall address-list get $addr address]; :put $ipAddr } }

發表於 ros | 已標籤 | 發表迴響

[ 2台mikrotik 跳線對串console 登入 ]

[ 2台mikrotik 跳線對串console 登入 ] https://www.youtube.com/watch?v=cBgpYkMqJXw /system/console pr #disable serial console set 0 disabled=yes # system serial-terminal serial0

發表於 ros | 發表迴響

winbox 在linux 使用 建立Desktop link

[wine winbox] 1.vi wine.desktop #!/usr/bin/env xdg-open [Desktop Entry] Exec=wine /home/osboxes/winbox64.exe Icon=/home/osboxes/Skull-Icon.svg.png Terminal=false Type=Application 2.chmod +x wine.desktop

發表於 linux, ros | 發表迴響

wireguard 需加入2個防火牆條例

ip/firewall/filter/ add action=accept chain=input comment="allow WireGuard" dst-port=13231 protocol=udp place-before=1 ip/firewall/filter/ add action=accept chain=input comment="allow WireGuard traffic" src-oaddress=192.168.100.0/24 blace-before=1 #192.168.100.0/24 WireGuard 所在網段

發表於 ros | 發表迴響

mikrotik knock door

#knock door_官方 /ip firewall filter add action=add-src-to-address-list address-list="port:9000″ \ address-list-timeout=1m chain=input dst-port=9000 protocol=tcp add action=add-src-to-address-list address-list="secure" address-list-timeout=1m \ chain=input dst-port=6000 protocol=tcp src-address-list="port:9000″ add chain=input src-address-list=secure action=accept add action=drop chain=input #knock door / ip firewall filter add chain=input protocol=tcp dst-port=1337 action=add-src-to-address-list … 繼續閱讀 →

發表於 ros | 發表迴響

mikrotik dhcp 偵測警告

if ($leaseActIP = "192.168.100.254″) do={ :log info "IP: $leaseActIP, MAC: $??leaseActMAC, Host: $"lease-hostname"" :tool e-mail send to= MIS@MISMAIL.COM subject="Violation alert!!! 網絡中有新的 DHCP 客戶端" body="MAC: $??leaseActMAC, IP: $leaseActIP, Host: $"lease-hostname", $leaseBound" }

發表於 ros | 發表迴響

wireguard-on and off

/interface wireguard enable 0 /interface wireguard disable 0 #分別停用及啟用 後面數字 代表第幾條規則 /interface wireguard peer enable 0 /interface wireguard peer disable 0 #分別 peer 停用及啟用 後面數字 代表第幾條規則 ——————————– #https://blog.spaps.de/mikrotik-routeros-wireguard-dynamic-dns-endpoint-refresh/ 或 #https://forum.mikrotik.com/viewtopic.php?t=182340 使用一個腳本來檢查對等端點地址是否仍然與 dns 名稱匹配,如果不匹配,則更新到 DNS 名稱的最新 ip 地址。 :local wgPeerComment :local … 繼續閱讀 →

發表於 ros | 發表迴響

ros moblie01 書籤

https://www.mobile01.com/topicdetail.php?f=110&t=3205444

發表於 ros | 發表迴響

wireguard設定檔

[Interface] PrivateKey = 預設新增會自動產生 Address = 192.168.x.2/32 填入routeos 的 vpn pool DNS = 就 DNS 你還想怎樣 [Peer] PublicKey = 填入 Routeos public AllowedIPs = 172.168.x.0/24, 192.168.x.0/24 #允許的ip網段 Endpoint = routs wan ip:13231 #ip:port PersistentKeepalive = 10 #每10秒自動偵測 # allowedips 設定內網段 … 繼續閱讀 →

發表於 ros | 發表迴響