mikrotik

In this long blog I try to sum-up some features which you should disable before running MikroTik in any environment. First of all is an backup interface, so in case you lock yourself up, you will always have a way to login. Other points include creating custom user, disabling unused services in various places throughout the RouterOS ;). [...] Read more

MikroTik has a simple interface for managing certificates, but lacks the ability to notify you when such cert expires. For this reason I created a simple script insipired by forum question and modified for my purpose. [...] Read more

Recently I discovered a package in RouterOS, which enables you to monitor connected UPS through USB cable. In this post I explain a simple script which sends an email if the electricity goes down. [...] Read more

Simple Ethernet, VLAN, bonding and WiFi configuration with some notes on security. Please use the following decision table to decide which sections of this post to read. [...] Read more

Syslog even as an older technology is still required. For machines or appliances that can't (or I don't want to) install XDR (Wazuh, ...) this variant of monitoring is one of fewer ones left. [...] Read more

In this post I focus on firewall rules required between multiple proxmox nodes and various settings of a firewall on each layer of Proxmox VE (datacenter, node, virtual machine). Network Below is a table containing rules which I have between my Proxmox servers, users and the rest of the network. [...] Read more

What ? This post focuses on HTTP/+s certificate creation with local certificate authority using MikroTik device and software which had to have additional configuration modified in order to accept the [...] Read more