To prevent your users from accessing blacklist IP addresses, you need to create the following firewall rules. Thus, we protect our users from unnecessary sites.

In order to use any of the following lists you will want to add a rule to your input or forward chains like the following:

/ip firewall  filter add action=drop chain=input 
comment=" Drop new connectionsfrom blacklisted IP's to this router" 
connection-state=new  in-interface=ether1 src-address-list=blacklist

or

/ip firewall filter
add action=drop chain=forward comment=" Drop new connectionsfrom blacklisted 
IP's to this router"  dst-address-list=blacklist

SpamHaus

“Spamhaus Don’t Route Or Peer List (DROP)”

The DROP list will not include any IP address space under the control of any legitimate network – even if being used by “the spammers from hell”. DROP will only include netblocks allocated directly by an established Regional Internet Registry (RIR) or National Internet Registry (NIR) such as ARIN, RIPE, AFRINIC, APNIC, LACNIC or KRNIC or direct RIR allocations.”

To send an email with a regular backup of all system settings, three steps are needed. Firstly you must ensure you have set the outgoing email SMTP server settings in “tool email”, then create the script that generates the backup file itself, lastly is to create a schedule to run that backup script on a regular basis.

First of all, we need to set up email in MikroTik.

winbox the following code we need to write the new terminal.

Hello there,

The UBNT EdgeSwitch and EdgePoint EP-S16 models were experiencing many revolutions in the past over MAC Discovery Access.

If you have a problem with the mac-discovery protocol (L2) between Romon Mikrotik uygulan s devices (L2), the following steps must be implemented by connecting to your Ubnt Edge Series Switches via SSH, TELNET or CONSOLE .;

1- enable // (type and press enter)
// depending on the software version you use, you may be asked for your login password again,
// enter your login password and press enter (default password: ubnt)
2- configure 
// (type and press enter)
3- mac access-list extended global 
// (type and press enter)
4- permit any any 
// (type and press enter)
5- exit 
// (type and press enter)
6- mac access-group global vlan 1 
// in (type and enter)
// in the above step you grant 1 e RoMon packet pass, which is the default VLAN ID of your Switch,
// If you want to enable RoMon relay for different VLANs on the switch,
// run the command again by replacing 1 in the above code with the desired VLAN ID.
// Example command: mac access-group global vlan 200 in7- exit 
// (type and press enter)
8- quit // (type and press enter)Would you like to save them now? (y / n) 
// warning,// press the letter y to save your changes,
// your command line connection will be closed automatically after saving your changes.

NOTE: This application has been performed in the test environment and has not been tested on active working systems,
Do not forget to take the backup just in case before applying the rules!

How to Create Hotspots Mikrotik

Setting basic Hotspot Mikrotik Mikrotik Router is a router that has full features. One feature that is quite popular and widely used of Mikrotik Router itself is Hotspot. Do you know the difference regular sharing internet with Hotspot? Perhaps you often find wifi internet signal in the password using WPA or WEP. You will be able to surf if you enter the password correctly. So anyone can access the wifi if know his password because the password is only one. Unlike the methods Hotspot, which is where most of the wifi hotspots in the password and any user can connect then be directed to a login page in the Web Browser. Each user can log in with the username and password are different. Such a method is often found in wifi Cafe, school, college, or other public areas.

And Why Do I Need One?

When you set up a small network that interconnects to another network, the assignment of IP addresses and the “netmask” are very important. A lot of people get confused about this part, so here’s a short explanation of what’s going on.

IP Addresses
On a TCP/IP network, which is what you are building, every machine has a unique IP address, consisting of a total of 32-bits. The address is usually expressed as four decimal numbers separated by dots, where each number represents 8 bits of address. Each number therefore ranges from 0 to 255. (Note: the world is running out of IP addresses, so a new address scheme called IPng is being developed that uses six numbers instead of four. It is not yet actually in use.)