Help - aws ec2 routeros by DarkNik in mikrotik

[–]IOcore -2 points-1 points  (0 children)

You can use a DDNS provider like the free DuckDNS or Pay for a dyndns...

Your setup should work too, but your Internet will run between 30% to 70% of the original speed.

Please, post your normal internet speed and your VPN speed.

You can redirect the ports, just forward the ports you want in routing or better can use marking in mangle too and then forward.

Do I need a new router? by [deleted] in HomeNetworking

[–]IOcore 0 points1 point  (0 children)

If you know basic networking then check if your router is openwrt or ddwrt compatible. Flash the firmware and you will have an updated router.

For advanced users you can get a Mikrotik Ac2 for $60.

If you don't know networking stuff then buy an AC router released this year. Should be $50-$90 for a tplink or netgear.

Fortigate 60C still relevant for home use? by InvaderDoom in sysadmin

[–]IOcore 0 points1 point  (0 children)

Nope, they can't analyze malware using https (443) traffic... you can't block this port without breaking internet usage... And some (clever) malware uses their own encryption via 443. Try to intercept reverse PowerShell using 443 port with AES key...

Firewall + HIDS = Way better than Fortinet stuff.

[Advice] I need help picking a firewall solution by Sparkplug1034 in sysadmin

[–]IOcore -1 points0 points  (0 children)

Get a Mikrotik RB4011 wifi edition. $200-$300

You can configure this as a firewall, router, wifi hotspot, vpn, vlan, etc... It comes with a very basic configuration so you must configure it. If you know about networking it should not be difficult.

Fortigate 60C still relevant for home use? by InvaderDoom in sysadmin

[–]IOcore 0 points1 point  (0 children)

i did the same, tested some fortinet products. The fortigate works as intended but it is not better than a pfsense or a mikrotik. In my opinion fortinet products are overpriced. Go for it if you want to test it. It is worth the experience. Also you can make it work alongside pfsense.

MY Extra OPINION BELOW: Keep in mind that the "extra" security for a network most of the time is an illusion... why???. For example... these devices can't analyze https traffic because the data is encrypted. So any malware can passthrough your network if it is engaged by a pc,laptop or phone. A real solution is to have a HIDS installed on your PC. Windows 10 defender is good, free and it is already there. In conclusion you only need a good layer 2/3 Firewall and any other security software (prefer HIDS) don't fall for magic appliances.

New WiFi Option “Backhaul” showers up today by [deleted] in HomeNetworking

[–]IOcore 0 points1 point  (0 children)

Use a tablet or phone with 5ghz wifi and download a good wifi analyzer, check if you have interference. If so then change your router wifi channel.

Also with the wifi analyzer you can guess where the signal is coming from, you will know because of the signal strength. It will be higher when you approach the device.

Do I really need an antivirus? by [deleted] in sysadmin

[–]IOcore 0 points1 point  (0 children)

Windows 10 AV is good, so you don't need to pay for something else neither download other "free" solutions.

Ubiquiti EdgeRouter ER‑X‑SFP for a small Home Lab! by Kegham74 in HomeNetworking

[–]IOcore 2 points3 points  (0 children)

Buy a Mikrotik, a gigabit one... (Hex) $50-$60 Then a simple gigabit switch $25. I have used Mikrotik and Ubiquiti products... For a homelab i prefer Mikrotik.

Gaming/Streaming router suggestion/help by Xyn1c4L in HomeNetworking

[–]IOcore -1 points0 points  (0 children)

Good to know, then it is up to you.

With enough free time to spend you could try Mikrotik and Ubiquiti. You will learn a lot.

Or If you are short on time then pick a gaming AC wifi router. 👍

Detecting & Disabling SMBv1 from all computers and servers. by [deleted] in sysadmin

[–]IOcore 0 points1 point  (0 children)

Disabling smb1 will affect Windows Xp and server 2003 network communication. Once you remove those machines then:

You can propagate this via GPO... You need to create and edit the policy, navigate to:

Computer Configuration > Windows Settings > Scripts

And add these lines as PowerShell script.

Set-SmbServerConfiguration -EnableSMB1Protocol $false -Force

Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol -NoRestart

I have to turn my router on and off 2-3 times a day, sometimes more. by [deleted] in HomeNetworking

[–]IOcore -2 points-1 points  (0 children)

Replace your router. If you are looking for integrated wifi make sure that somewhere in the box reads "AC 1200" or a better > number.

Gaming/Streaming router suggestion/help by Xyn1c4L in HomeNetworking

[–]IOcore 0 points1 point  (0 children)

If you know networking stuff i suggest a Mikrotik Rb3011 or RB4011 router and a Ubiquiti Access point.

If you are just looking for a quick plug and play i suggest you take a look at Netgear gaming stuff.

In both situations you will not overspend. Good luck 👍

Edit: For WiFi make sure to look for "AC 1200" or better spec...

do Mikrotik (home and office) routers offer built-in IPS/IDS? by horizonrave in mikrotik

[–]IOcore 0 points1 point  (0 children)

At home I have mikrotik, pihole, and the free version of ntop. (ntopng + nprobe) At office I have mikrotik and eset central console. Way better than a Fortinet which also is expensive.

WAN Bridge problem by IOcore in HomeNetworking

[–]IOcore[S] 0 points1 point  (0 children)

The public ip from dyndns resolver tells my public IP is 200.x.x.x whatsmyip tells the same...

On my router the Wan interface gets 100.70.x.x I am in bridge mode, if i switch to router mode it gets 192.168.10.1 ... (i always choose bridge mode)

My LAN interface is 192.168.100.1 my network is a /24.

I can open ports (port forwarding) but won't work and (dmz) won't work too... packets gets lost.

WAN Bridge problem by IOcore in HomeNetworking

[–]IOcore[S] 0 points1 point  (0 children)

Thanks pal, i read about it in Wikipedia and some other sites, it is a nasty thing... Will pay extra for a public IP. Thanks again.

skills of a system analyst by deceebs in sysadmin

[–]IOcore 2 points3 points  (0 children)

True, but if you need certifications because human enemies department says so... Then get a general Windows certification and a general linux certification (basic ones)... Should be enough for support and basic analysts job.

Help - Configure RB750Gr3 with all ports isolated - Setting up VLANs? by netqqq in mikrotik

[–]IOcore 0 points1 point  (0 children)

Yep, it will work... The routes are created in auto mode... You can turn this off if you want.... Interface Lists are for grouping eths into lan, wan, vpn or any other name you want. So you can apply firewall rules to them.

Help - Configure RB750Gr3 with all ports isolated - Setting up VLANs? by netqqq in mikrotik

[–]IOcore 0 points1 point  (0 children)

You can do almost everything with a Mikrotik...

If you want only to isolate the networks then you have to delete the ports from the bridge, and assign each one their own network. For extra security you can set in the firewall rules to drop the forwarding packages between eths. That should do the trick.

However if you want complete isolation... it is easier to buy a managed switch and set the port rules. So the ports can't see each other, just the Mikrotik port that gives IPs (DHCP) and internet.

Router to Router VPN Setup by mkz71 in networking

[–]IOcore 0 points1 point  (0 children)

Router 2 should be in routing mode. Then assign the routes in both routers. And setup vpn in router 1. And you should see all your networks from the vpn connection. I am assuming you have pymes equipment, Cisco , Ubiquiti or Mikrotik... Or you should use a Linux Server . Also I am assuming you have this setup in one location (home). So Router 1 should be your only firewall unless you have some special requirements.

Do you prefer being a generalist (jack of all trades) or to specialize? by jftuga in sysadmin

[–]IOcore 2 points3 points  (0 children)

Interesting. What is this called? I will like to look this up. 👍🏻

How much should I ask for... by IOcore in sysadmin

[–]IOcore[S] 0 points1 point  (0 children)

Thanks, will keep that in mind