protocol.be

User Tools

Site Tools

Trace:
routeros

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
routeros [2024/09/01 10:45] – protocolrouteros [2026/09/23 14:16] (current) – protocol
Line 1: Line 1:
-=== OSPF watchdog when default route vanishes, set your variables! ===+===== Known your IP ===== 
 +<code> 
 +/tool fetch https://wtfismyip.com/text output=user 
 +</code> 
 + 
 + 
 +===== Balance ===== 
 + 
 +[[balance]] 
 + 
 + 
 +===== OSPF watchdog when default route vanishes, set your variables! =====
  
 <code> <code>
Line 11: Line 22:
 }</code> }</code>
  
 +===== something about wifi reg tables =====
 +<code>
  
-=== Dirty block x.com with address-list (more granularity, takes more resources, make your own drop rules) === 
  
-<code> +:foreach ITEM in=[/interface wireless registration-table print] do={ 
-ip firewall address-list add list=x.com address=69.195.185.0/24 comment=x.com +  :local COMMENT [/interface wireless registration-table get $ITEM comment]; 
-ip firewall address-list add list=x.com address=192.133.76.0/22 comment=x.com +  :put "$COMMENT"; 
-ip firewall address-list add list=x.com address=69.195.187.0/24 comment=x.com +} 
-ip firewall address-list add list=x.com address=199.16.156.0/23 comment=x.com + 
-ip firewall address-list add list=x.com address=104.244.45.0/24 comment=x.com +:foreach a in=[/interface wireless registration-table] do={ 
-ip firewall address-list add list=x.com address=209.237.196.0/24 comment=x.com +  :put [interface wireless registration-table get $a comment] 
-ip firewall address-list add list=x.com address=69.195.184.0/24 comment=x.com +} 
-ip firewall address-list add list=x.com address=69.195.178.0/24 comment=x.com + 
-ip firewall address-list add list=x.com address=69.195.169.0/24 comment=x.com + 
-ip firewall address-list add list=x.com address=103.252.114.0/23 comment=x.com +:foreach i in [/interface wireless registration-table find] do={ 
-ip firewall address-list add list=x.com address=104.244.41.0/24 comment=x.com +  :find [/interface wireless registration-table get $i comment] 
-ip firewall address-list add list=x.com address=202.160.131.0/24 comment=x.com +:put "$i" 
-ip firewall address-list add list=x.com address=69.195.162.0/24 comment=x.com +  } 
-ip firewall address-list add list=x.com address=209.237.194.0/24 comment=x.com +} 
-ip firewall address-list add list=x.com address=104.244.47.0/24 comment=x.com + 
-ip firewall address-list add list=x.com address=103.252.112.0/23 comment=x.com +{ 
-ip firewall address-list add list=x.com address=202.160.130.0/24 comment=x.com + :local registration [/interface wireless registration-table print where interface=wlan2 count-only]; 
-ip firewall address-list add list=x.com address=69.195.180.0/24 comment=x.com +  :if ($registration > 0) do={ 
-ip firewall address-list add list=x.com address=104.244.40.0/24 comment=x.com +/tool fetch url="https://api.telegram.org/xx/sendMessage?chat_id=866143904&text=wlan2 up" keep-result=no 
-ip firewall address-list add list=x.com address=69.195.181.0/24 comment=x.com + } 
-ip firewall address-list add list=x.com address=202.160.128.0/24 comment=x.com +} 
-ip firewall address-list add list=x.com address=209.237.199.0/24 comment=x.com +
-ip firewall address-list add list=x.com address=69.195.179.0/24 comment=x.com +
-ip firewall address-list add list=x.com address=199.16.156.0/22 comment=x.com +
-ip firewall address-list add list=x.com address=104.244.46.0/24 comment=x.com +
-ip firewall address-list add list=x.com address=69.195.168.0/24 comment=x.com +
-ip firewall address-list add list=x.com address=69.195.182.0/24 comment=x.com +
-ip firewall address-list add list=x.com address=199.59.148.0/22 comment=x.com +
-ip firewall address-list add list=x.com address=64.63.0.0/18 comment=x.com +
-ip firewall address-list add list=x.com address=199.96.56.0/23 comment=x.com +
-ip firewall address-list add list=x.com address=69.195.175.0/24 comment=x.com +
-ip firewall address-list add list=x.com address=69.195.174.0/24 comment=x.com +
-ip firewall address-list add list=x.com address=209.237.192.0/24 comment=x.com +
-ip firewall address-list add list=x.com address=69.195.160.0/24 comment=x.com +
-ip firewall address-list add list=x.com address=69.195.166.0/24 comment=x.com +
-ip firewall address-list add list=x.com address=209.237.198.0/24 comment=x.com +
-ip firewall address-list add list=x.com address=69.195.183.0/24 comment=x.com +
-ip firewall address-list add list=x.com address=209.237.195.0/24 comment=x.com +
-ip firewall address-list add list=x.com address=69.195.171.0/24 comment=x.com +
-ip firewall address-list add list=x.com address=104.244.42.0/24 comment=x.com +
-ip firewall address-list add list=x.com address=202.160.129.0/24 comment=x.com +
-ip firewall address-list add list=x.com address=69.195.160.0/19 comment=x.com +
-ip firewall address-list add list=x.com address=209.237.192.0/19 comment=x.com +
-ip firewall address-list add list=x.com address=104.244.44.0/24 comment=x.com +
-ip firewall address-list add list=x.com address=69.195.186.0/24 comment=x.com +
-ip firewall address-list add list=x.com address=209.237.193.0/24 comment=x.com +
-ip firewall address-list add list=x.com address=188.64.224.0/21 comment=x.com +
-ipv6 firewall address-list add list=x.com address=2400:6680:f000::/36 comment=x.com +
-ipv6 firewall address-list add list=x.com address=2a04:9d40:f000::/36 comment=x.com +
-ipv6 firewall address-list add list=x.com address=2606:1f80:f000::/36 comment=x.com+
 </code> </code>
  
 +===== MPLS basic =====
 +<code>
  
-=== Dirty block x.com with blackhole routes (least resources used, no firewall needed, no options) ===+/mpls ldp set enabled=yes lsr-id=172.26.0.101 transport-address=172.26.0.101 
 +/mpls ldp interface add interface=ether2 
 +/mpls ldp interface add interface=ether5 
 +/interface vpls add remote-peer=172.26.0.103 vpls-id=3012:3012 pw-type=tagged-ethernet 
 +/interface bridge port 
 +add bridge=vlan3012-bridge interface=vpls1 
 +add bridge=vlan3012-bridge interface=vpls2 
 +add bridge=vlan3012-bridge interface=ether1
  
 +</code>
 +
 +===== Automatic PPPoE creation local secrets =====
 <code> <code>
-ip route add type=blackhole dst-address=69.195.185.0/24 comment=x.com + 
-ip route add type=blackhole dst-address=192.133.76.0/22 comment=x.com +{ 
-ip route add type=blackhole dst-address=69.195.187.0/24 comment=x.com +    :put "Starting real-time PPPoE-only log monitor... Press [Ctrl+C] to stop."; 
-ip route add type=blackhole dst-address=199.16.156.0/23 comment=x.com +     
-ip route add type=blackhole dst-address=104.244.45.0/24 comment=x.com +    # Initialize the log pointer to the very last current entry 
-ip route add type=blackhole dst-address=209.237.196.0/24 comment=x.com +    :local terminalLogID [/log find] 
-ip route add type=blackhole dst-address=69.195.184.0/24 comment=x.com +    :local lastID "" 
-ip route add type=blackhole dst-address=69.195.178.0/24 comment=x.com +    :if ([:len $terminalLogID] > 0) do={ 
-ip route add type=blackhole dst-address=69.195.169.0/24 comment=x.com +        :set lastID ($terminalLogID->([:len $terminalLogID] - 1)) 
-ip route add type=blackhole dst-address=103.252.114.0/23 comment=x.com +    } 
-ip route add type=blackhole dst-address=104.244.41.0/24 comment=x.com + 
-ip route add type=blackhole dst-address=202.160.131.0/24 comment=x.com +    # Continuous loop 
-ip route add type=blackhole dst-address=69.195.162.0/24 comment=x.com +    :while (true) do={ 
-ip route add type=blackhole dst-address=209.237.194.0/24 comment=x.com +        # Filter logs containing authentication failure and include "user " 
-ip route add type=blackhole dst-address=104.244.47.0/24 comment=x.com +        :local logEntries [/log find where message~"authentication failed" and message~"user "] 
-ip route add type=blackhole dst-address=103.252.112.0/23 comment=x.com +         
-ip route add type=blackhole dst-address=202.160.130.0/24 comment=x.com +        :foreach entry in=$logEntries do={ 
-ip route add type=blackhole dst-address=69.195.180.0/24 comment=x.com +            # Process only newer entries than our saved marker 
-ip route add type=blackhole dst-address=104.244.40.0/24 comment=x.com +            :if ($entry > $lastID) do={ 
-ip route add type=blackhole dst-address=69.195.181.0/24 comment=x.com +                :local logTopics [/log get $entry topics] 
-ip route add type=blackhole dst-address=202.160.128.0/24 comment=x.com +                 
-ip route add type=blackhole dst-address=209.237.199.0/24 comment=x.com +                # STRICT TOPIC CHECK: Ensure the log contains the 'pppoe' topic 
-ip route add type=blackhole dst-address=69.195.179.0/24 comment=x.com +                :if ($logTopics ~ "pppoe") do={ 
-ip route add type=blackhole dst-address=199.16.156.0/22 comment=x.com +                    :local logMsg [/log get $entry message] 
-ip route add type=blackhole dst-address=104.244.46.0/24 comment=x.com +                    :local logTime [/log get $entry time] 
-ip route add type=blackhole dst-address=69.195.168.0/24 comment=x.com +                     
-ip route add type=blackhole dst-address=69.195.182.0/24 comment=x.com +                    :local startPos ([:find $logMsg "user "] + 5) 
-ip route add type=blackhole dst-address=199.59.148.0/22 comment=x.com +                    :local endPos [:find $logMsg " authentication failed" $startPos] 
-ip route add type=blackhole dst-address=64.63.0.0/18 comment=x.com +                     
-ip route add type=blackhole dst-address=199.96.56.0/23 comment=x.com +                    :if ($endPos > $startPos) do={ 
-ip route add type=blackhole dst-address=69.195.175.0/24 comment=x.com +                        :local pppoeUser [:pick $logMsg $startPos $endPos] 
-ip route add type=blackhole dst-address=69.195.174.0/24 comment=x.com +                         
-ip route add type=blackhole dst-address=209.237.192.0/24 comment=x.com +                        # Verify if it already exists 
-ip route add type=blackhole dst-address=69.195.160.0/24 comment=x.com +                        :if ([:len [/ppp secret find where name=$pppoeUser]] = 0) do={ 
-ip route add type=blackhole dst-address=69.195.166.0/24 comment=x.com +                            /ppp secret add name=$pppoeUser password="12345" service=pppoe comment="Auto-created via pppoe log monitor" 
-ip route add type=blackhole dst-address=209.237.198.0/24 comment=x.com +                            :put "[$logTime] [PPPoE Match] Created user: $pppoeUser" 
-ip route add type=blackhole dst-address=69.195.183.0/24 comment=x.com +                        } else={ 
-ip route add type=blackhole dst-address=209.237.195.0/24 comment=x.com +                            :put "[$logTime] [PPPoE Match] Missing user '$pppoeUser' detected, but secret already exists." 
-ip route add type=blackhole dst-address=69.195.171.0/24 comment=x.com +                        } 
-ip route add type=blackhole dst-address=104.244.42.0/24 comment=x.com +                    } 
-ip route add type=blackhole dst-address=202.160.129.0/24 comment=x.com +                } 
-ip route add type=blackhole dst-address=69.195.160.0/19 comment=x.com +                :set lastID $entry 
-ip route add type=blackhole dst-address=209.237.192.0/19 comment=x.com +            } 
-ip route add type=blackhole dst-address=104.244.44.0/24 comment=x.com +        } 
-ip route add type=blackhole dst-address=69.195.186.0/24 comment=x.com +        # 2-second delay before checking the log buffer again 
-ip route add type=blackhole dst-address=209.237.193.0/24 comment=x.com +        :delay 2s; 
-ip route add type=blackhole dst-address=188.64.224.0/21 comment=x.com +    } 
-ipv6 route add type=unreachable dst-address=2400:6680:f000::/36 comment=x.com +} 
-ipv6 route add type=unreachable dst-address=2a04:9d40:f000::/36 comment=x.com +
-ipv6 route add type=unreachable dst-address=2606:1f80:f000::/36 comment=x.com+
 </code> </code>
 +
routeros.1725198345.txt.gz · Last modified: by protocol