Hi there, how we can set 2 wan on microtik, for example, we have 2 wan or 2 internet connection and we want to set it up these 2 internet connections on microtik, if 1 connection drop or stop working we have get Internet from secend wan or internet connection?
If it is faster I would like to know by how much. That is do a test before and after to various sites and provide the DNS lookup timings so we can see how much difference this makes. Also if it makes so much difference it would suggest the router is under a lot of load which might imply upgrading to better hardware. As mentioned running a local DNS server or configuring the DNS lookups to be done via the Mikrotik router where they will be cached would probably also help here.
Hi there, i'm having a problem when i try to watch live show on facebook it always buff and sometimes disconnect me from the streamer while when i'm connected to the main internet (not in mikrotek) i can watch it smoothly
Hmm, I typically have to allow access to router DNS services on the input chain, are you saying this is only valid for DNS direct to external sources or for router DNS Services as well??
Can you use the same Filter Rule -> FastTrack for ICMP packets? Or is this better done using Mangle Rules? ... Amazing videos by the way! Greetings from UK!
hey man, thanks for the videos! Does this also bypass the queues for bandwidth? let's say I have an X device with an IP 192.168.1.124 and set a simple queue to only use 2mbps does this intervene or not?
Thanks sir for your useful information but.. can I just be helped with my issue I got stuck with . Well actually I did exactly what was mentioned there but it exceeds user transfer limit .and I do not want that to happen I need to limit them was they are configured in user_manager ..one point here to add is that time limit is ok ..but transfer limit is just free although I limited them perfectly. Thank you again and hopefully you get my point right.
is it safe? router can be attacked with 53 port (dns flood also). with fasttrack any firewall rule for unexpected/unrelated traffic (on 53 port) will not be working. Router is not safe.
If you're not running a dns server, which in this video is not the case, there's nothing dangerous with having the port be fasttracked. The *destination* port is not inwardly available. Nothing is listening on it, besides, there's also a NAT masquerading all internal addressing.
DNS is only tiny bits of information so not much to gain by fasttracking it. It are responses to your resolve requests and so statefull. Fasttrack should inspect the first package and time to time also packages in the stream. DNS exists in one or two packets returning so Fasttracking those is useless. Looking from your side it is also useless to fasttrack this traffic.
I dont know that it makes a difference. I am seeing UDP packets even though its at the bottom of the list past my drop actions which usually are the last thing you enter.
Hi sir! I'm newbie in mikrotik world. May I know if there is a way to bypass or improve my internet line connection which is under cgnat? My area is pretty congested thats why time to time my internet is getting slower and slower. Thanks in advance.
is it necessary to specify the connection type of established and related for the fasttrack in order to be safe ?
That Was Awesome Dear
thank you very much to share quit useful training
i hope you share a video - how to configure BGP and set ASN on Mikrotik router CCR720
hey your solution works pretty well but my concern is the allocated speeds I was to use does it bypass my capped speeds?
Hi there, how we can set 2 wan on microtik, for example, we have 2 wan or 2 internet connection and we want to set it up these 2 internet connections on microtik, if 1 connection drop or stop working we have get Internet from secend wan or internet connection?
If it is faster I would like to know by how much. That is do a test before and after to various sites and provide the DNS lookup timings so we can see how much difference this makes. Also if it makes so much difference it would suggest the router is under a lot of load which might imply upgrading to better hardware. As mentioned running a local DNS server or configuring the DNS lookups to be done via the Mikrotik router where they will be cached would probably also help here.
can u teach me how to add for the queque tree you used.
Great videos, thank you. Can you upload a video on connecting a MikroTik SXT LTE through a hAP AC2 router? Configuration of LTE 4G and so on?
Hi there, i'm having a problem when i try to watch live show on facebook it always buff and sometimes disconnect me from the streamer while when i'm connected to the main internet (not in mikrotek) i can watch it smoothly
Hmm, I typically have to allow access to router DNS services on the input chain, are you saying this is only valid for DNS direct to external sources or for router DNS Services as well??
Does it affect the config bandwidth of a router?
Can I specify it for certain MAC adressess?
Hello. If I have set up load balancing for two WANs, will I still be able to set up this fasttracking for DNS or any other fasttracking?
Does it work with packet marks when I have defconf fasttrack rule on?
Do you have a solution for DNS cache poisoning?
Can you use the same Filter Rule -> FastTrack for ICMP packets? Or is this better done using Mangle Rules? ...
Amazing videos by the way! Greetings from UK!
Hi there, it was very useful and interesting video tutorial video. Thnx. Keep it up
hey man, thanks for the videos! Does this also bypass the queues for bandwidth? let's say I have an X device with an IP 192.168.1.124 and set a simple queue to only use 2mbps does this intervene or not?
can u help me setting my mikrotik?
Thanks
It worked
Thanks sir for your useful information but.. can I just be helped with my issue I got stuck with .
Well actually I did exactly what was mentioned there but it exceeds user transfer limit .and I do not want that to happen I need to limit them was they are configured in user_manager ..one point here to add is that time limit is ok ..but transfer limit is just free although I limited them perfectly.
Thank you again and hopefully you get my point right.
hello sir.. is this good for hotspot users?
tnx so much
I don't have "queue tree"...how to set?
i did that and worked for a few days, speed almost doubled but now its back to normal like before... any explanation?
What about DNS cache?
Perfect
awesome
But maybe it will proceed hotspot accounting
Looks, that the resolving of the addresses is really faster, but is it really safe? Isn't it security break?
why the port is 53?
Thanks alot
* Thanks. ...
For me it doesn't show on que trees
I wish I had more thumbs
Does this rule bypass the internal DNS cache?
is it safe? router can be attacked with 53 port (dns flood also). with fasttrack any firewall rule for unexpected/unrelated traffic (on 53 port) will not be working. Router is not safe.
@@orgind7778 Ну есть и интересные у него идеи, но это полный треш. Это урок как из микротика сделать TP-Link ))
If you're not running a dns server, which in this video is not the case, there's nothing dangerous with having the port be fasttracked. The *destination* port is not inwardly available. Nothing is listening on it, besides, there's also a NAT masquerading all internal addressing.
DNS is only tiny bits of information so not much to gain by fasttracking it.
It are responses to your resolve requests and so statefull. Fasttrack should inspect the first package and time to time also packages in the stream.
DNS exists in one or two packets returning so Fasttracking those is useless.
Looking from your side it is also useless to fasttrack this traffic.
well, I think you are right about this, do u have another way to make internet fast on mikrotik?
Can you leave both fasttrack rules at the bottom or is it better to move them up to the beginning for faster firewall processing?
I dont know that it makes a difference. I am seeing UDP packets even though its at the bottom of the list past my drop actions which usually are the last thing you enter.
I was going to ask the same question. Especially considering its a firewall rule, I believe it should be on top
Any security issue with this rule? and is there any workaround ?/
None that I know of.
are these rules work on CHR? , mikrotik says that CHR Doesn't support fasttrack ?
No they don't
Hi sir! I'm newbie in mikrotik world. May I know if there is a way to bypass or improve my internet line connection which is under cgnat? My area is pretty congested thats why time to time my internet is getting slower and slower. Thanks in advance.
If your ISP is congested then there is no way for you to bypass it.
@@TKSJa Hi again sir. I suspected that my isp is throttling my internet connection speed. Is there another way aside using vpn?
@@TITORANNY I don't think so
This won't make a significant difference.
You have to FastTrack all traffic in forward chain.
where did 53 came from sir...im sorry im studying im not really good for this
same question here
Look up "DNS ports" in Google.
Your making the router vulnerable for dns attack.
friend, you can make a script to free the memory of the routerboard, I thank you.
am still waiting free radius
Yep, me too!
go for SAS Radius 100% free upto 100 clients.
انها خدعه ياشباب
لا تصدقوه