電腦茶包 Blog » RouterOS

RouterOS 自動更新版本的 Script

jason — Tue, 20 Dec 2011 10:01:34 +0000

RouterOS要更新版本除了可以手動更新外(請參考更新與升級RouterOS的版本)，也可以利用Script來進行更新。

參考mikrotik官方的wiki後，我把Script修改了一下，方便使用。

要使用前，要修改的地方只有1個:local upgradeTo "5.11"，

把版本改成你想要更新的版本即可，例如:local upgradeTo "5.13"

執行後，Script會自動去官方網站下載符合該平台的更新檔下來，

下載完會自動重開機進行更新。

請注意：系統更新都有其風險，更新前請自行斟酌

#Script在RouterOS 5.7中測試過
#Date:2011/12/20
#Script Descript:半自動更新RouterOS的系統版本
#reference:http://wiki.mikrotik.com/wiki/Auto_upgrade_script_V3.x

#----------------------------------
#要更新到那一個版本請在這邊設定
:local upgradeTo "5.11";
#----------------------------------

# newest version
:local lMajor;
:local lMinor;

# current version
:local vMajor;
:local vMinor;

:local myVer [/system resource get version];

:for i from=0 to=([:len $myVer] - 1) do={
:if ( [:pick $myVer $i] = ".") do={
:set vMajor [:tonum [:pick $myVer 0 $i]];
:set vMinor [:tonum [:pick $myVer ($i + 1) [:len $myVer]]] ;
}
}
......以下略

完整程式碼可參考(編碼為BIG5)http://www.minitw.com/download/UpgradeROS.txt

自動刪除RouterOS上無效的IP位置

jason — Thu, 01 Sep 2011 05:37:45 +0000

正常的狀況下，RouterOS會自動管理系統上的IP位置。

像是使用VPN撥接上ROS後，ROS系統會自動給予1個IP位置，斷線後該IP位置會自動刪除。

但有的時候，撥接上來的VPN發生異常斷線後，該IP並沒有自動刪除。

這時就會導致該帳號永遠無法再撥接上來(帳號使用固定VPN IP)

為了解決這狀況，所以需要一個小Script搭配Scheduler來自動刪除ROS上這些無效的IP位置

Script內容如下

#Script TestOS:RouterOS 5.6
#Date:2011/09/01
#Script Description:刪除無效的IP位置

# 把無效的IP位置資料全部讀出來
:foreach i in=[/ip address find invalid=yes] do={
#刪除無效的IP
    /ip address remove $i
}

.
.
懶人包如下，於winbox中開啟Terminal，貼上下面的指令
系統會完成新增上面的Script並每5分鐘於Scheduler中自動執行1次

/system script
add name=DeleteInvalidIP policy=\
    ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api source="#Script T\
    estOS:RouterOS 5.6\r\
    \n#Date:2011/09/01\r\
    \n#Script Description:\A7R\B0\A3\B5L\AE\C4\AA\BAIP\A6\EC\B8m\r\
    \n\r\
    \n# \A7\E2\B5L\AE\C4\AA\BAIP\A6\EC\B8m\B8\EA\AE\C6\A5\FE\B3\A1\C5\AA\A5X\A8\D3\r\
    \n:foreach i in=[/ip address find invalid=yes] do={\r\
    \n#\A7R\B0\A3\B5L\AE\C4\AA\BAIP\r\
    \n    /ip address remove \$i  \r\
    \n}"

/system scheduler
add disabled=no interval=5m name=AutoDeleteIP on-event=\
    "/system script run DeleteInvalidIP" policy=\
    ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api start-date=\
    aug/19/2011 start-time=02:08:36

更新與升級RouterOS的版本

jason — Sun, 31 Jul 2011 11:06:47 +0000

一直以來好像很少看到升級RouterOS的文章

今天就記錄一下過程吧

首先是先下載RouterOS的升級npk檔

可以到官方網站下載

如果你需要之前的版本，可以到本站的這邊下載

依照自已的RouterOS系統別下載好後，打開winbox

把升級的npk檔拖到winbox的Files中

檔案上傳中.....

確認檔案上傳完成

重開RouterOS

選擇確定重開後，會花一點時間，此時請勿關閉電源。開機完成後，系統即完成升級

RouterOS 2 WAN Mapping to 1 LAN，多個WAN對映到單一內部Server

jason — Mon, 09 May 2011 13:41:34 +0000

當你有多個外面線路想要同時間對映到內部的某一台Server時

或許你是為了備援或Load Balance的考量。在RouterOS下你可以很簡單的達成

首先，我們本次範例的網路架構圖如下，目標是把2條PPPoE對映到內部的那台Server

先給大家Script，大家可以再對照下面的圖，不難的

/interface pppoe-client
add ac-name="" add-default-route=no allow=pap,chap,mschap1,mschap2 \
dial-on-demand=no disabled=no interface=LAN max-mru=1480 max-mtu=1480 \
mrru=disabled name=ISP1 password=99999999 profile=default service-name="" \
use-peer-dns=no user=99999999@hinet.net
add ac-name="" add-default-route=no allow=pap,chap,mschap1,mschap2 \
dial-on-demand=no disabled=no interface=LAN max-mru=1480 max-mtu=1480 \
mrru=disabled name=ISP2 password=99999999 profile=default service-name="" \
use-peer-dns=no user=99999999@hinet.net

/ip firewall mangle
add action=mark-connection chain=prerouting disabled=no in-interface=ISP1 \
new-connection-mark=ISP1_conn passthrough=yes
add action=mark-connection chain=prerouting disabled=no in-interface=ISP2 \
new-connection-mark=ISP2_conn passthrough=yes
add action=mark-routing chain=prerouting connection-mark=ISP1_conn disabled=no \
in-interface=LAN new-routing-mark=to_ISP1 passthrough=yes src-address=\
192.168.55.200
add action=mark-routing chain=prerouting connection-mark=ISP2_conn disabled=no \
in-interface=LAN new-routing-mark=to_ISP2 passthrough=yes src-address=\
192.168.55.200

/ip firewall nat
add action=dst-nat chain=dstnat disabled=no dst-port=80 in-interface=ISP1 \
protocol=tcp to-addresses=192.168.55.200 to-ports=80
add action=dst-nat chain=dstnat disabled=no dst-port=80 in-interface=ISP2 \
protocol=tcp to-addresses=192.168.55.200 to-ports=80
add action=masquerade chain=srcnat disabled=no out-interface=ISP1
add action=masquerade chain=srcnat disabled=no out-interface=ISP2

/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=ISP2 routing-mark=\
to_ISP2 scope=30 target-scope=10
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=ISP1 routing-mark=\
to_ISP1 scope=30 target-scope=10
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=ISP2,ISP1 scope=30 \
target-scope=10

最後我們實驗一下，確認2個外面的IP都連的進來，並且對映到內部的同一個IP位置，收工

參考資料：Manual:PCC

在RouterOS中加入Port Mapping

jason — Tue, 15 Feb 2011 07:33:46 +0000

之前幫 RouterOS 加上 IP分享器功能(NAT)這篇文章教大家怎麼把RouterOS當成Gateway

讓內部的IP可以透過RouterOS上網

那如果外部的電腦想連到內部電腦的服務(例如：Web、SSH、SQL Server...等)

這時候就需要轉Port的功能(Port Mapping)

實作的方式也很簡單，使用winbox的介面就可以達成了

首先開啟winbox後，IP -> Firewall -> NAT -> 加入一筆新的規則

接下來就看圖操作吧，要注意的是如果你是ADSL撥接上網的，In Interface請選該ADSL的介面

Action的部份則是選dst-nat，IP與Port則是依自已的需求填寫

最後記得把該新建立的規則拉到masquerade的上面

在RouterOS中使用網路喚醒(Wake on LAN)

jason — Mon, 17 Jan 2011 02:51:36 +0000

網路喚醒(WOL)是一個可以透過網路傳送封包，來達成遠端開機的技術。
詳細可以參考維基百科--網路喚醒或是如何透過網際網路遙控電腦開機 (Software: WOL magic packet sender)

使用前，請確認電腦的BIOS有開啟此項功能。不然你試半天，電腦也是不會理你的。

把以下的Script存到ROS裡面(請參考讓RouterOS自動把Log檔email出去)，並把MAC改成你想啟動電腦的網卡MAC位置。

#Script在RouterOS 4.15中測試通過
#Date:2011/01/17
#Script Name:BootPCwithWOL
#Script Description:使用Wake on Lan的方式遠端啟動PC

#網卡的MAC請依照下面的格式填入
:local MACADDR "00:11:22:33:44:55";

:foreach eth in=[/interface ethernet find] do={
  /tool wol interface=$eth  mac=$MACADDR
}

接下來執行就可以了。

RouterOS 全版本下載

jason — Sun, 19 Dec 2010 16:13:19 +0000

花了一些時間，下載RouterOS歷史的版本
有需要的人就請自取吧。請到http://rosdl.minitw.com/下載
請大家別用多點續傳的方式下載，本小站只有200kByte的上傳能力而已
RouterOS版本若有更新，一樣是在此頁面更新資訊

目前提供的版本如下，如果需要更詳細的檔案清單，請點這邊(檔案有點大，請有心理準備)

Please upgrade your browser

RouterOS All Version Download

MikroTik RouterBoard RB750 開箱分享

jason — Thu, 01 Jul 2010 15:56:09 +0000

MikroTik RouterBoard RB750 這是一台內含RouterOS Level 4的路由器
RouterOS相信有在玩軟體路由的同好，應該都有聽過它的名字才對
之前在玩網路的時候，也在選擇一套好用的路由軟體
有試過現在很熱門的DD-WRT、pfSense、WinGate、Linux的iptables
試來試去總是感覺上缺少了那一點點，每套都有每套的好處
功能強的，沒有友善的介面使用
有好用介面的，但就是吃多了點資源
穩定的系統，有些功能又沒提供
真是有一好，而沒二好

直到發現RouterOS這個好東西，為什麼說是好東西呢?當然不是隨便說說的
RouterOS是一個基於Linux上開發的系統
而MikroTik公司也針對RouterOS設計了一個設定程式，供設定RouterOS使用
這真是魚與熊掌兼得呀
有Linux其穩定不吃資源的核心，又有完善的程式介面可以使用
你說，這叫尋尋覓覓己久的我，怎麼能不心動呢

於是一頭就栽進了RouterOS的世界
越玩，才越知道RouterOS的強大
但玩RouterOS最大的缺點就是，入門的門檻很高
至少要有一點網路的基礎跟Linux iptables的觀念，玩起來，才不會那麼痛苦
不是網頁點一點、勾一勾，就會有你想要的功能了(如果你堅持用RouterOS提供的WEB設定，你會很失望的)

如果要用個東西來比喻的話
一般的無線分享器、路由器就像房車
只要會踩油門，會轉方向盤，就可以上路了

刷了DD-WRT後，就像改裝後的房車
油缸加大、馬力加大、加入自動導航，狠一點再加個渦輪系統
我想有這台車，應該沒什麼問題了。應付一般的需求很足夠了

RouterOS，就像是一台全配的戰車
要在上面架個機槍，甚至裝個飛彈系統都沒問題
你要開去買菜、開去打戰都沒問題
唯一的問題，就是你得知道怎麼使用這台戰車，這就是門檻

這樣子說，大家應該對RouterOS有點認識了吧
不過在台灣，玩RouterOS的人真的算是少數
可能是入門的門檻高與硬體取得不易，再加上RouterOS的文章很少使得找資料不便
目前可以找到RouterOS資料的，在台灣就屬小弟的電腦茶包Blog自嗨，跟台灣代理商立誠電腦資訊有限公司了
至於大家最關心的價錢問題，就留到文尾再跟大家交待吧

看完了上面的廢話，接下來就開始正文的開箱文了

開箱後第一眼看到的就是廠商附的簡易使用說明書，教你怎麼進行設定RouterOS

說明書的下面就是裝本文的主角RouterBoard RB750了，有看到那個連線數32786可不是騙人的

進入系統看，NAT Connection真的可以到32768條

盒子旁側的簡易設定說明，這邊我要補充說明一下。電腦插在port1，預設僅能使用IP方式的設定
也就是說你可以在IE上打IP進入，可以用Winbox打IP進入。但你用Winbox的掃瞄，是掃不到的
要讓Winbox掃瞄的到，請插Port2~5任一個。解決的設定方式，會在之後寫相關的文章跟大家分享

盒子側面的硬體相關資訊。RB750的Port 1有支援PoE供電
RAM是32MB。可用的儲存空間是64MB(RouterOS作業系統佔去了32MB，剩32MB可使用)
Port 1預設是GateWay Port
Port2~5預設是Switch Port

盒子的背面，說明RB750的功能。這邊寫的，我想只有RouterOS功能的10分之1
你就知道RouterOS的功能有多麼的多了

正面的特寫，讓大家看清楚一點

開盒了，很簡單的就是RB750一台，加上變壓器一個

變壓器可插100v~240v的電，當然110V，也是沒問題的

驗明正身RouterBoard 750

RB750的背面，很簡單，就網卡的卡號跟機身序號

這樣就完了嗎?當然還沒，接下來要把RB750脫光光

有散熱片的那個是CPU

電源處理的部份，可吃8V~28V的電

D2516AETA-5B-E 是 32MB的RAM

左邊的是CPU，右邊的是64MB的Flash

整個RB750的大小就是一片1.44MB磁片加上1個10元的大小

平放後的高度也只有1個50元高度

RB750不偷料，請看下面那台，Port裡面只給你4根必要的針腳。RB750則是完整的8根

坦白的說，這台RB750 CP值真的很高，別的不說，光是RouterOS Level 4，就要USD$45元了
版本的比較與價格請看http://wiki.mikrotik.com/wiki/Manual:License_levels
等於是硬體送給你，軟體再折扣一次了。如果需要Giga Port的，請自行參考RB750G

這次的開箱文就到這邊了，接下來會接連寫一些RouterOS相關的文章(設定、使用.......等)
就請有興趣的同好期待吧.........此文同步發表於電腦茶包Blog

如果你想玩玩看RouterOS可以到官網下載x86版的ISO檔，然後用VMWare或VirtueBox裝起來玩看看
相信你會有另一種體驗的

RouterOS 動態更新IP到 DynDNS

jason — Sun, 11 Apr 2010 14:18:05 +0000

這篇文章主要是針對RouterOS更新到DynDNS上所寫的

如果你要更新到ChangeIP.com的話，請參考RouterOS 動態更新IP到 ChangeIP.com

請先到RouterOS 動態更新IP到 ChangeIP.com看一下其他的相關的設定
再把主要的Script換成本文的Script即可。

相關的Script如下

#Script在RouterOS 5.0rc11中測試過
#Date:2010/04/11
#Script Name:DynDNSUpdate
#Script Describe：更新IP到DynDNS上面去

#定義使用者相關的變數，請於下面自行輸入
:local ddnsuser "你的DynDNS帳號"
:local ddnspass "你的DynDNS密碼"
:local ddnshost "你的完整網址名(例如:abcd.ath.cx)"
:local ddnsinterface "要更新的介面名稱(例如:pppoe-out1)"

#定義IP變數
:global ddnsipADSL1
:global ddnslastipADSL1
:if ([ :typeof $ddnslastipADSL1 ] = nil ) do={ $ddnslastipADSL1 "0" }

#取得介面的IP位置
:set ddnsipADSL1 [ /ip address get [/ip address find interface=$ddnsinterface ] address ]
#去掉IP的網段
:set ddnsipADSL1 [:pick $ddnsipADSL1 0 [:find $ddnsipADSL1 "/"]]

#判斷是否需要進行更新
:if ([ :typeof $ddnsipADSL1 ] = nil ) do={
   :log info ("DynDNS: " . $ddnsinterface . "介面上沒有IP，請確認")
} else={
  :if ($ddnsipADSL1 != $ddnslastipADSL1) do={
    :log info ("DynDNS:" . $ddnsinterface . "更新IP" . $ddnsipADSL1)
	:local str "/nic/update?hostname=$ddnshost&myip=$ddnsipADSL1&wildcard=NOCHG&mx=NOCHG&backmx=NOCHG"
    /tool fetch address=members.dyndns.org src-path=$str mode=http user=$ddnsuser password=$ddnspass dst-path=("/DynDNS.".$ddnshost)
	:delay 1
    :local str [/file find name="DynDNS.$ddnshost"];
    /file remove $str
#更新後把IP設為最新的IP
    :global ddnslastipADSL1 $ddnsipADSL1
  }
}

參考資料：
MikroTik RouterOS: DynDNS Update Script
DynDNS Perform Update

在RouterOS中建立台灣地區IP列表

jason — Wed, 20 Jan 2010 09:50:59 +0000

要取得相關的的IP位置可以到TWNIC的查詢功能-IPv4核發分配情形

先把資料貼到Excel中處理一下，把我們要的東西取出來

再補上一些前置資料，就可以在RouterOS上使用了

請到winbox開啟管理RouterOS，在左邊的功能列上點選New Terminal

接下來直接把下面的資料貼上。然後到IP -> Firewall -> Address List看就有了

因為相關的IP資料過長，請點選本篇文章全文，才會顯示


/ip firewall address-list add list=TaiwanIPList address=211.79.208.0-211.79.223.255
/ip firewall address-list add list=TaiwanIPList address=202.8.14.0-202.8.15.255
/ip firewall address-list add list=TaiwanIPList address=61.67.0.0-61.67.15.255
/ip firewall address-list add list=TaiwanIPList address=61.65.192.0-61.65.255.255
/ip firewall address-list add list=TaiwanIPList address=203.118.224.0-203.118.239.255
/ip firewall address-list add list=TaiwanIPList address=119.31.176.0-119.31.191.255
/ip firewall address-list add list=TaiwanIPList address=113.21.80.0-113.21.95.255
/ip firewall address-list add list=TaiwanIPList address=119.75.240.0-119.75.255.255
/ip firewall address-list add list=TaiwanIPList address=203.121.224.0-203.121.239.255
/ip firewall address-list add list=TaiwanIPList address=124.109.112.0-124.109.127.255
/ip firewall address-list add list=TaiwanIPList address=203.121.240.0-203.121.255.255
/ip firewall address-list add list=TaiwanIPList address=61.60.192.0-61.60.207.255
/ip firewall address-list add list=TaiwanIPList address=180.214.176.0-180.214.191.255
/ip firewall address-list add list=TaiwanIPList address=61.61.240.0-61.61.255.255
/ip firewall address-list add list=TaiwanIPList address=202.169.160.0-202.169.175.255
/ip firewall address-list add list=TaiwanIPList address=117.103.96.0-117.103.111.255
/ip firewall address-list add list=TaiwanIPList address=220.129.0.0-220.143.255.255
/ip firewall address-list add list=TaiwanIPList address=211.23.0.0-211.23.255.255
/ip firewall address-list add list=TaiwanIPList address=210.65.0.0-210.65.255.255
/ip firewall address-list add list=TaiwanIPList address=221.120.0.0-221.120.95.255
/ip firewall address-list add list=TaiwanIPList address=168.95.0.0-168.95.255.255
/ip firewall address-list add list=TaiwanIPList address=218.160.0.0-218.163.255.255
/ip firewall address-list add list=TaiwanIPList address=210.242.0.0-210.242.127.255
/ip firewall address-list add list=TaiwanIPList address=111.70.0.0-111.71.255.255
/ip firewall address-list add list=TaiwanIPList address=60.249.0.0-60.249.255.255
/ip firewall address-list add list=TaiwanIPList address=61.217.0.0-61.217.255.255
/ip firewall address-list add list=TaiwanIPList address=211.75.0.0-211.75.127.255
/ip firewall address-list add list=TaiwanIPList address=118.160.0.0-118.167.255.255
/ip firewall address-list add list=TaiwanIPList address=218.166.0.0-218.167.255.255
/ip firewall address-list add list=TaiwanIPList address=175.41.48.0-175.41.63.255
/ip firewall address-list add list=TaiwanIPList address=59.112.0.0-59.119.255.255
/ip firewall address-list add list=TaiwanIPList address=203.69.0.0-203.69.255.255
/ip firewall address-list add list=TaiwanIPList address=111.240.0.0-111.255.255.255
/ip firewall address-list add list=TaiwanIPList address=59.120.0.0-59.123.255.255
/ip firewall address-list add list=TaiwanIPList address=210.62.248.0-210.62.255.255
/ip firewall address-list add list=TaiwanIPList address=210.71.128.0-210.71.255.255
/ip firewall address-list add list=TaiwanIPList address=116.59.0.0-116.59.255.255
/ip firewall address-list add list=TaiwanIPList address=60.250.0.0-60.251.255.255
/ip firewall address-list add list=TaiwanIPList address=61.228.0.0-61.231.255.255
/ip firewall address-list add list=TaiwanIPList address=210.242.128.0-210.242.255.255
/ip firewall address-list add list=TaiwanIPList address=122.116.0.0-122.117.255.255
/ip firewall address-list add list=TaiwanIPList address=61.218.0.0-61.219.255.255
/ip firewall address-list add list=TaiwanIPList address=211.75.128.0-211.75.255.255
/ip firewall address-list add list=TaiwanIPList address=118.168.0.0-118.171.255.255
/ip firewall address-list add list=TaiwanIPList address=218.168.0.0-218.175.255.255
/ip firewall address-list add list=TaiwanIPList address=203.78.176.0-203.78.191.255
/ip firewall address-list add list=TaiwanIPList address=211.20.0.0-211.20.255.255
/ip firewall address-list add list=TaiwanIPList address=203.75.0.0-203.75.255.255
/ip firewall address-list add list=TaiwanIPList address=175.111.192.0-175.111.255.255
/ip firewall address-list add list=TaiwanIPList address=59.124.0.0-59.127.255.255
/ip firewall address-list add list=TaiwanIPList address=202.39.0.0-202.39.95.255
/ip firewall address-list add list=TaiwanIPList address=210.61.0.0-210.61.255.255
/ip firewall address-list add list=TaiwanIPList address=114.136.0.0-114.137.255.255
/ip firewall address-list add list=TaiwanIPList address=125.224.0.0-125.231.255.255
/ip firewall address-list add list=TaiwanIPList address=220.128.64.0-220.128.255.255
/ip firewall address-list add list=TaiwanIPList address=210.241.224.0-210.241.255.255
/ip firewall address-list add list=TaiwanIPList address=122.118.0.0-122.118.255.255
/ip firewall address-list add list=TaiwanIPList address=61.224.0.0-61.227.255.255
/ip firewall address-list add list=TaiwanIPList address=211.72.128.0-211.72.255.255
/ip firewall address-list add list=TaiwanIPList address=202.39.128.0-202.39.255.255
/ip firewall address-list add list=TaiwanIPList address=114.32.0.0-114.47.255.255
/ip firewall address-list add list=TaiwanIPList address=220.128.0.0-220.128.63.255
/ip firewall address-list add list=TaiwanIPList address=114.30.32.0-114.30.47.255
/ip firewall address-list add list=TaiwanIPList address=211.22.0.0-211.22.255.255
/ip firewall address-list add list=TaiwanIPList address=203.74.0.0-203.74.255.255
/ip firewall address-list add list=TaiwanIPList address=211.79.32.0-211.79.47.255
/ip firewall address-list add list=TaiwanIPList address=60.248.0.0-60.248.255.255
/ip firewall address-list add list=TaiwanIPList address=61.220.0.0-61.223.255.255
/ip firewall address-list add list=TaiwanIPList address=210.59.128.0-210.59.255.255
/ip firewall address-list add list=TaiwanIPList address=111.80.0.0-111.83.255.255
/ip firewall address-list add list=TaiwanIPList address=125.232.0.0-125.233.255.255
/ip firewall address-list add list=TaiwanIPList address=61.216.0.0-61.216.255.255
/ip firewall address-list add list=TaiwanIPList address=211.72.0.0-211.72.127.255
/ip firewall address-list add list=TaiwanIPList address=122.120.0.0-122.127.255.255
/ip firewall address-list add list=TaiwanIPList address=218.164.0.0-218.165.255.255
/ip firewall address-list add list=TaiwanIPList address=203.160.224.0-203.160.255.255
/ip firewall address-list add list=TaiwanIPList address=211.21.0.0-211.21.255.255
/ip firewall address-list add list=TaiwanIPList address=203.66.0.0-203.66.255.255
/ip firewall address-list add list=TaiwanIPList address=114.24.0.0-114.27.255.255
/ip firewall address-list add list=TaiwanIPList address=61.67.112.0-61.67.127.255
/ip firewall address-list add list=TaiwanIPList address=116.212.80.0-116.212.95.255
/ip firewall address-list add list=TaiwanIPList address=61.57.192.0-61.57.207.255
/ip firewall address-list add list=TaiwanIPList address=61.67.128.0-61.67.255.255
/ip firewall address-list add list=TaiwanIPList address=61.63.32.0-61.63.95.255
/ip firewall address-list add list=TaiwanIPList address=58.86.0.0-58.86.255.255
/ip firewall address-list add list=TaiwanIPList address=61.63.0.0-61.63.31.255
/ip firewall address-list add list=TaiwanIPList address=61.57.176.0-61.57.191.255
/ip firewall address-list add list=TaiwanIPList address=61.57.160.0-61.57.175.255
/ip firewall address-list add list=TaiwanIPList address=202.151.48.0-202.151.63.255
/ip firewall address-list add list=TaiwanIPList address=122.99.0.0-122.99.63.255
/ip firewall address-list add list=TaiwanIPList address=123.252.0.0-123.252.127.255
/ip firewall address-list add list=TaiwanIPList address=115.43.0.0-115.43.255.255
/ip firewall address-list add list=TaiwanIPList address=124.155.128.0-124.155.159.255
/ip firewall address-list add list=TaiwanIPList address=119.14.0.0-119.14.255.255
/ip firewall address-list add list=TaiwanIPList address=220.157.112.0-220.157.127.255
/ip firewall address-list add list=TaiwanIPList address=210.62.160.0-210.62.175.255
/ip firewall address-list add list=TaiwanIPList address=210.244.224.0-210.244.255.255
/ip firewall address-list add list=TaiwanIPList address=211.76.240.0-211.76.255.255
/ip firewall address-list add list=TaiwanIPList address=122.254.0.0-122.254.63.255
/ip firewall address-list add list=TaiwanIPList address=114.198.160.0-114.198.175.255
/ip firewall address-list add list=TaiwanIPList address=211.76.32.0-211.76.63.255
/ip firewall address-list add list=TaiwanIPList address=211.76.64.0-211.76.79.255
/ip firewall address-list add list=TaiwanIPList address=123.0.32.0-123.0.63.255
/ip firewall address-list add list=TaiwanIPList address=115.165.192.0-115.165.255.255
/ip firewall address-list add list=TaiwanIPList address=61.58.112.0-61.58.127.255
/ip firewall address-list add list=TaiwanIPList address=61.61.208.0-61.61.239.255
/ip firewall address-list add list=TaiwanIPList address=124.6.0.0-124.6.31.255
/ip firewall address-list add list=TaiwanIPList address=119.77.128.0-119.77.255.255
/ip firewall address-list add list=TaiwanIPList address=180.218.0.0-180.218.255.255
/ip firewall address-list add list=TaiwanIPList address=61.58.96.0-61.58.111.255
/ip firewall address-list add list=TaiwanIPList address=61.60.208.0-61.60.223.255
/ip firewall address-list add list=TaiwanIPList address=122.100.64.0-122.100.127.255
/ip firewall address-list add list=TaiwanIPList address=114.198.176.0-114.198.191.255
/ip firewall address-list add list=TaiwanIPList address=61.56.160.0-61.56.191.255
/ip firewall address-list add list=TaiwanIPList address=61.64.0.0-61.64.31.255
/ip firewall address-list add list=TaiwanIPList address=202.5.8.0-202.5.11.255
/ip firewall address-list add list=TaiwanIPList address=61.60.240.0-61.60.255.255
/ip firewall address-list add list=TaiwanIPList address=180.92.0.0-180.92.15.255
/ip firewall address-list add list=TaiwanIPList address=61.58.48.0-61.58.63.255
/ip firewall address-list add list=TaiwanIPList address=61.58.16.0-61.58.31.255
/ip firewall address-list add list=TaiwanIPList address=61.57.208.0-61.57.223.255
/ip firewall address-list add list=TaiwanIPList address=61.57.240.0-61.57.255.255
/ip firewall address-list add list=TaiwanIPList address=202.6.104.0-202.6.105.255
/ip firewall address-list add list=TaiwanIPList address=211.76.144.0-211.76.159.255
/ip firewall address-list add list=TaiwanIPList address=123.99.32.0-123.99.63.255
/ip firewall address-list add list=TaiwanIPList address=124.29.128.0-124.29.159.255
/ip firewall address-list add list=TaiwanIPList address=115.80.0.0-115.83.255.255
/ip firewall address-list add list=TaiwanIPList address=124.29.160.0-124.29.191.255
/ip firewall address-list add list=TaiwanIPList address=180.204.0.0-180.207.255.255
/ip firewall address-list add list=TaiwanIPList address=123.99.0.0-123.99.31.255
/ip firewall address-list add list=TaiwanIPList address=117.19.0.0-117.19.255.255
/ip firewall address-list add list=TaiwanIPList address=219.80.0.0-219.80.255.255
/ip firewall address-list add list=TaiwanIPList address=210.62.32.0-210.62.63.255
/ip firewall address-list add list=TaiwanIPList address=60.199.0.0-60.199.255.255
/ip firewall address-list add list=TaiwanIPList address=210.63.160.0-210.63.191.255
/ip firewall address-list add list=TaiwanIPList address=175.96.0.0-175.99.255.255
/ip firewall address-list add list=TaiwanIPList address=210.243.96.0-210.243.127.255
/ip firewall address-list add list=TaiwanIPList address=61.57.0.0-61.57.31.255
/ip firewall address-list add list=TaiwanIPList address=219.86.0.0-219.87.255.255
/ip firewall address-list add list=TaiwanIPList address=210.62.192.0-210.62.223.255
/ip firewall address-list add list=TaiwanIPList address=124.8.0.0-124.11.255.255
/ip firewall address-list add list=TaiwanIPList address=210.63.128.0-210.63.159.255
/ip firewall address-list add list=TaiwanIPList address=211.79.0.0-211.79.31.255
/ip firewall address-list add list=TaiwanIPList address=210.67.192.0-210.67.207.255
/ip firewall address-list add list=TaiwanIPList address=210.67.160.0-210.67.191.255
/ip firewall address-list add list=TaiwanIPList address=219.81.0.0-219.81.255.255
/ip firewall address-list add list=TaiwanIPList address=210.67.208.0-210.67.223.255
/ip firewall address-list add list=TaiwanIPList address=124.12.0.0-124.12.255.255
/ip firewall address-list add list=TaiwanIPList address=210.243.64.0-210.243.95.255
/ip firewall address-list add list=TaiwanIPList address=211.78.208.0-211.78.223.255
/ip firewall address-list add list=TaiwanIPList address=61.31.0.0-61.31.255.255
/ip firewall address-list add list=TaiwanIPList address=210.62.0.0-210.62.31.255
/ip firewall address-list add list=TaiwanIPList address=60.198.0.0-60.198.255.255
/ip firewall address-list add list=TaiwanIPList address=210.67.144.0-210.67.159.255
/ip firewall address-list add list=TaiwanIPList address=124.108.128.0-124.108.191.255
/ip firewall address-list add list=TaiwanIPList address=203.65.160.0-203.65.191.255
/ip firewall address-list add list=TaiwanIPList address=61.30.0.0-61.30.255.255
/ip firewall address-list add list=TaiwanIPList address=122.255.80.0-122.255.95.255
/ip firewall address-list add list=TaiwanIPList address=61.58.32.0-61.58.47.255
/ip firewall address-list add list=TaiwanIPList address=61.67.16.0-61.67.47.255
/ip firewall address-list add list=TaiwanIPList address=116.118.128.0-116.118.191.255
/ip firewall address-list add list=TaiwanIPList address=61.58.128.0-61.58.159.255
/ip firewall address-list add list=TaiwanIPList address=58.99.64.0-58.99.127.255
/ip firewall address-list add list=TaiwanIPList address=211.73.160.0-211.73.191.255
/ip firewall address-list add list=TaiwanIPList address=61.60.224.0-61.60.239.255
/ip firewall address-list add list=TaiwanIPList address=58.99.0.0-58.99.63.255
/ip firewall address-list add list=TaiwanIPList address=203.84.144.0-203.84.151.255
/ip firewall address-list add list=TaiwanIPList address=211.73.96.0-211.73.127.255
/ip firewall address-list add list=TaiwanIPList address=203.119.3.0-203.119.3.255
/ip firewall address-list add list=TaiwanIPList address=61.64.128.0-61.64.255.255
/ip firewall address-list add list=TaiwanIPList address=219.85.0.0-219.85.255.255
/ip firewall address-list add list=TaiwanIPList address=61.64.64.0-61.64.127.255
/ip firewall address-list add list=TaiwanIPList address=61.56.128.0-61.56.143.255
/ip firewall address-list add list=TaiwanIPList address=61.62.0.0-61.62.255.255
/ip firewall address-list add list=TaiwanIPList address=61.56.144.0-61.56.159.255
/ip firewall address-list add list=TaiwanIPList address=219.84.0.0-219.84.255.255
/ip firewall address-list add list=TaiwanIPList address=123.110.0.0-123.110.255.255
/ip firewall address-list add list=TaiwanIPList address=61.63.96.0-61.63.127.255
/ip firewall address-list add list=TaiwanIPList address=123.240.0.0-123.241.255.255
/ip firewall address-list add list=TaiwanIPList address=61.58.64.0-61.58.79.255
/ip firewall address-list add list=TaiwanIPList address=61.57.64.0-61.57.127.255
/ip firewall address-list add list=TaiwanIPList address=210.202.56.0-210.202.63.255
/ip firewall address-list add list=TaiwanIPList address=61.58.80.0-61.58.95.255
/ip firewall address-list add list=TaiwanIPList address=123.0.192.0-123.0.255.255
/ip firewall address-list add list=TaiwanIPList address=61.58.160.0-61.58.191.255
/ip firewall address-list add list=TaiwanIPList address=203.65.224.0-203.65.255.255
/ip firewall address-list add list=TaiwanIPList address=210.241.0.0-210.241.63.255
/ip firewall address-list add list=TaiwanIPList address=61.60.0.0-61.60.31.255
/ip firewall address-list add list=TaiwanIPList address=61.57.32.0-61.57.63.255
/ip firewall address-list add list=TaiwanIPList address=210.241.64.0-210.241.127.255
/ip firewall address-list add list=TaiwanIPList address=61.60.32.0-61.60.127.255
/ip firewall address-list add list=TaiwanIPList address=117.56.0.0-117.56.255.255
/ip firewall address-list add list=TaiwanIPList address=210.69.0.0-210.69.255.255
/ip firewall address-list add list=TaiwanIPList address=211.79.128.0-211.79.159.255
/ip firewall address-list add list=TaiwanIPList address=61.67.64.0-61.67.95.255
/ip firewall address-list add list=TaiwanIPList address=124.199.64.0-124.199.95.255
/ip firewall address-list add list=TaiwanIPList address=163.29.0.0-163.29.255.255
/ip firewall address-list add list=TaiwanIPList address=211.79.160.0-211.79.191.255
/ip firewall address-list add list=TaiwanIPList address=61.56.0.0-61.56.15.255
/ip firewall address-list add list=TaiwanIPList address=124.199.96.0-124.199.111.255
/ip firewall address-list add list=TaiwanIPList address=203.65.0.0-203.65.127.255
/ip firewall address-list add list=TaiwanIPList address=203.65.128.0-203.65.159.255
/ip firewall address-list add list=TaiwanIPList address=111.125.128.0-111.125.135.255
/ip firewall address-list add list=TaiwanIPList address=111.235.192.0-111.235.255.255
/ip firewall address-list add list=TaiwanIPList address=60.245.64.0-60.245.95.255
/ip firewall address-list add list=TaiwanIPList address=60.245.96.0-60.245.127.255
/ip firewall address-list add list=TaiwanIPList address=115.30.64.0-115.30.127.255
/ip firewall address-list add list=TaiwanIPList address=211.79.192.0-211.79.207.255
/ip firewall address-list add list=TaiwanIPList address=210.67.64.0-210.67.95.255
/ip firewall address-list add list=TaiwanIPList address=210.241.128.0-210.241.159.255
/ip firewall address-list add list=TaiwanIPList address=210.63.64.0-210.63.127.255
/ip firewall address-list add list=TaiwanIPList address=211.73.192.0-211.73.223.255
/ip firewall address-list add list=TaiwanIPList address=203.65.192.0-203.65.223.255
/ip firewall address-list add list=TaiwanIPList address=211.73.224.0-211.73.255.255
/ip firewall address-list add list=TaiwanIPList address=61.58.192.0-61.58.255.255
/ip firewall address-list add list=TaiwanIPList address=60.245.0.0-60.245.63.255
/ip firewall address-list add list=TaiwanIPList address=61.60.128.0-61.60.159.255
/ip firewall address-list add list=TaiwanIPList address=61.63.160.0-61.63.255.255
/ip firewall address-list add list=TaiwanIPList address=122.201.128.0-122.201.255.255
/ip firewall address-list add list=TaiwanIPList address=210.62.176.0-210.62.191.255
/ip firewall address-list add list=TaiwanIPList address=61.60.160.0-61.60.191.255
/ip firewall address-list add list=TaiwanIPList address=61.65.0.0-61.65.127.255
/ip firewall address-list add list=TaiwanIPList address=118.99.128.0-118.99.255.255
/ip firewall address-list add list=TaiwanIPList address=211.73.0.0-211.73.31.255
/ip firewall address-list add list=TaiwanIPList address=61.63.128.0-61.63.159.255
/ip firewall address-list add list=TaiwanIPList address=61.65.128.0-61.65.191.255
/ip firewall address-list add list=TaiwanIPList address=211.79.64.0-211.79.95.255
/ip firewall address-list add list=TaiwanIPList address=211.76.96.0-211.76.111.255
/ip firewall address-list add list=TaiwanIPList address=203.201.32.0-203.201.47.255
/ip firewall address-list add list=TaiwanIPList address=203.207.32.0-203.207.47.255
/ip firewall address-list add list=TaiwanIPList address=203.207.0.0-203.207.15.255
/ip firewall address-list add list=TaiwanIPList address=210.200.0.0-210.200.255.255
/ip firewall address-list add list=TaiwanIPList address=218.35.0.0-218.35.255.255
/ip firewall address-list add list=TaiwanIPList address=218.187.0.0-218.187.255.255
/ip firewall address-list add list=TaiwanIPList address=218.34.0.0-218.34.255.255
/ip firewall address-list add list=TaiwanIPList address=60.244.0.0-60.244.127.255
/ip firewall address-list add list=TaiwanIPList address=210.202.32.0-210.202.47.255
/ip firewall address-list add list=TaiwanIPList address=210.63.224.0-210.63.255.255
/ip firewall address-list add list=TaiwanIPList address=210.201.0.0-210.201.255.255
/ip firewall address-list add list=TaiwanIPList address=210.58.0.0-210.58.255.255
/ip firewall address-list add list=TaiwanIPList address=219.91.0.0-219.91.127.255
/ip firewall address-list add list=TaiwanIPList address=222.250.0.0-222.250.255.255
/ip firewall address-list add list=TaiwanIPList address=124.218.0.0-124.218.255.255
/ip firewall address-list add list=TaiwanIPList address=210.202.48.0-210.202.55.255
/ip firewall address-list add list=TaiwanIPList address=210.63.192.0-210.63.223.255
/ip firewall address-list add list=TaiwanIPList address=210.202.0.0-210.202.31.255
/ip firewall address-list add list=TaiwanIPList address=210.85.0.0-210.85.255.255
/ip firewall address-list add list=TaiwanIPList address=222.156.0.0-222.156.255.255
/ip firewall address-list add list=TaiwanIPList address=222.251.0.0-222.251.127.255
/ip firewall address-list add list=TaiwanIPList address=124.219.0.0-124.219.127.255
/ip firewall address-list add list=TaiwanIPList address=210.202.64.0-210.202.127.255
/ip firewall address-list add list=TaiwanIPList address=203.79.128.0-203.79.255.255
/ip firewall address-list add list=TaiwanIPList address=202.178.128.0-202.178.255.255
/ip firewall address-list add list=TaiwanIPList address=210.203.0.0-210.203.127.255
/ip firewall address-list add list=TaiwanIPList address=218.184.0.0-218.184.255.255
/ip firewall address-list add list=TaiwanIPList address=222.157.0.0-222.157.255.255
/ip firewall address-list add list=TaiwanIPList address=60.244.128.0-60.244.255.255
/ip firewall address-list add list=TaiwanIPList address=210.202.128.0-210.202.255.255
/ip firewall address-list add list=TaiwanIPList address=211.78.0.0-211.78.15.255
/ip firewall address-list add list=TaiwanIPList address=211.78.32.0-211.78.63.255
/ip firewall address-list add list=TaiwanIPList address=211.78.16.0-211.78.31.255
/ip firewall address-list add list=TaiwanIPList address=61.61.0.0-61.61.191.255
/ip firewall address-list add list=TaiwanIPList address=211.78.96.0-211.78.127.255
/ip firewall address-list add list=TaiwanIPList address=203.111.208.0-203.111.223.255
/ip firewall address-list add list=TaiwanIPList address=203.160.144.0-203.160.159.255
/ip firewall address-list add list=TaiwanIPList address=119.30.16.0-119.30.31.255
/ip firewall address-list add list=TaiwanIPList address=61.56.16.0-61.56.31.255
/ip firewall address-list add list=TaiwanIPList address=116.50.32.0-116.50.47.255
/ip firewall address-list add list=TaiwanIPList address=61.56.64.0-61.56.79.255
/ip firewall address-list add list=TaiwanIPList address=61.56.80.0-61.56.95.255
/ip firewall address-list add list=TaiwanIPList address=61.247.160.0-61.247.175.255
/ip firewall address-list add list=TaiwanIPList address=210.67.96.0-210.67.111.255
/ip firewall address-list add list=TaiwanIPList address=113.21.160.0-113.21.191.255
/ip firewall address-list add list=TaiwanIPList address=113.61.128.0-113.61.255.255
/ip firewall address-list add list=TaiwanIPList address=119.15.192.0-119.15.255.255
/ip firewall address-list add list=TaiwanIPList address=211.79.112.0-211.79.127.255
/ip firewall address-list add list=TaiwanIPList address=111.67.48.0-111.67.63.255
/ip firewall address-list add list=TaiwanIPList address=112.78.64.0-112.78.95.255
/ip firewall address-list add list=TaiwanIPList address=110.50.128.0-110.50.191.255
/ip firewall address-list add list=TaiwanIPList address=202.144.208.0-202.144.223.255
/ip firewall address-list add list=TaiwanIPList address=180.217.0.0-180.217.255.255
/ip firewall address-list add list=TaiwanIPList address=116.89.128.0-116.89.143.255
/ip firewall address-list add list=TaiwanIPList address=211.76.128.0-211.76.143.255
/ip firewall address-list add list=TaiwanIPList address=121.50.176.0-121.50.191.255
/ip firewall address-list add list=TaiwanIPList address=61.56.96.0-61.56.111.255
/ip firewall address-list add list=TaiwanIPList address=211.76.80.0-211.76.95.255
/ip firewall address-list add list=TaiwanIPList address=211.78.240.0-211.78.255.255
/ip firewall address-list add list=TaiwanIPList address=203.145.192.0-203.145.207.255
/ip firewall address-list add list=TaiwanIPList address=203.145.208.0-203.145.223.255
/ip firewall address-list add list=TaiwanIPList address=115.42.112.0-115.42.119.255
/ip firewall address-list add list=TaiwanIPList address=124.150.128.0-124.150.135.255
/ip firewall address-list add list=TaiwanIPList address=61.57.224.0-61.57.239.255
/ip firewall address-list add list=TaiwanIPList address=192.83.188.0-192.83.188.255
/ip firewall address-list add list=TaiwanIPList address=192.83.173.0-192.83.173.255
/ip firewall address-list add list=TaiwanIPList address=140.134.0.0-140.134.255.255
/ip firewall address-list add list=TaiwanIPList address=210.67.248.0-210.67.255.255
/ip firewall address-list add list=TaiwanIPList address=192.83.192.0-192.83.192.255
/ip firewall address-list add list=TaiwanIPList address=192.83.177.0-192.83.177.255
/ip firewall address-list add list=TaiwanIPList address=140.120.0.0-140.127.255.255
/ip firewall address-list add list=TaiwanIPList address=140.110.0.0-140.110.255.255
/ip firewall address-list add list=TaiwanIPList address=192.83.196.0-192.83.196.255
/ip firewall address-list add list=TaiwanIPList address=203.71.0.0-203.71.255.255
/ip firewall address-list add list=TaiwanIPList address=192.83.181.0-192.83.181.255
/ip firewall address-list add list=TaiwanIPList address=192.83.166.0-192.83.166.255
/ip firewall address-list add list=TaiwanIPList address=140.115.0.0-140.115.255.255
/ip firewall address-list add list=TaiwanIPList address=210.60.0.0-210.60.255.255
/ip firewall address-list add list=TaiwanIPList address=192.83.185.0-192.83.185.255
/ip firewall address-list add list=TaiwanIPList address=192.83.170.0-192.83.170.255
/ip firewall address-list add list=TaiwanIPList address=140.131.0.0-140.131.255.255
/ip firewall address-list add list=TaiwanIPList address=210.62.240.0-210.62.247.255
/ip firewall address-list add list=TaiwanIPList address=192.83.189.0-192.83.189.255
/ip firewall address-list add list=TaiwanIPList address=192.83.174.0-192.83.174.255
/ip firewall address-list add list=TaiwanIPList address=140.135.0.0-140.135.255.255
/ip firewall address-list add list=TaiwanIPList address=163.13.0.0-163.28.255.255
/ip firewall address-list add list=TaiwanIPList address=192.83.193.0-192.83.193.255
/ip firewall address-list add list=TaiwanIPList address=192.83.178.0-192.83.178.255
/ip firewall address-list add list=TaiwanIPList address=140.136.0.0-140.137.255.255
/ip firewall address-list add list=TaiwanIPList address=140.111.0.0-140.111.255.255
/ip firewall address-list add list=TaiwanIPList address=120.96.0.0-120.127.255.255
/ip firewall address-list add list=TaiwanIPList address=203.72.0.0-203.72.255.255
/ip firewall address-list add list=TaiwanIPList address=192.83.182.0-192.83.182.255
/ip firewall address-list add list=TaiwanIPList address=192.83.167.0-192.83.167.255
/ip firewall address-list add list=TaiwanIPList address=140.128.0.0-140.128.255.255
/ip firewall address-list add list=TaiwanIPList address=210.59.0.0-210.59.127.255
/ip firewall address-list add list=TaiwanIPList address=192.83.186.0-192.83.186.255
/ip firewall address-list add list=TaiwanIPList address=192.83.171.0-192.83.171.255
/ip firewall address-list add list=TaiwanIPList address=140.132.0.0-140.132.255.255
/ip firewall address-list add list=TaiwanIPList address=210.62.224.0-210.62.239.255
/ip firewall address-list add list=TaiwanIPList address=192.83.190.0-192.83.190.255
/ip firewall address-list add list=TaiwanIPList address=192.83.175.0-192.83.175.255
/ip firewall address-list add list=TaiwanIPList address=140.138.0.0-140.138.255.255
/ip firewall address-list add list=TaiwanIPList address=163.30.0.0-163.32.255.255
/ip firewall address-list add list=TaiwanIPList address=203.68.0.0-203.68.255.255
/ip firewall address-list add list=TaiwanIPList address=192.83.194.0-192.83.194.255
/ip firewall address-list add list=TaiwanIPList address=192.83.179.0-192.83.179.255
/ip firewall address-list add list=TaiwanIPList address=140.114.0.0-140.114.255.255
/ip firewall address-list add list=TaiwanIPList address=140.112.0.0-140.112.255.255
/ip firewall address-list add list=TaiwanIPList address=210.70.0.0-210.70.255.255
/ip firewall address-list add list=TaiwanIPList address=192.83.183.0-192.83.183.255
/ip firewall address-list add list=TaiwanIPList address=192.83.168.0-192.83.168.255
/ip firewall address-list add list=TaiwanIPList address=140.129.0.0-140.129.255.255
/ip firewall address-list add list=TaiwanIPList address=210.240.0.0-210.240.255.255
/ip firewall address-list add list=TaiwanIPList address=192.83.187.0-192.83.187.255
/ip firewall address-list add list=TaiwanIPList address=192.83.172.0-192.83.172.255
/ip firewall address-list add list=TaiwanIPList address=140.133.0.0-140.133.255.255
/ip firewall address-list add list=TaiwanIPList address=210.62.64.0-210.62.95.255
/ip firewall address-list add list=TaiwanIPList address=192.83.191.0-192.83.191.255
/ip firewall address-list add list=TaiwanIPList address=192.83.176.0-192.83.176.255
/ip firewall address-list add list=TaiwanIPList address=140.116.0.0-140.119.255.255
/ip firewall address-list add list=TaiwanIPList address=140.109.0.0-140.109.255.255
/ip firewall address-list add list=TaiwanIPList address=192.83.195.0-192.83.195.255
/ip firewall address-list add list=TaiwanIPList address=203.64.0.0-203.64.255.255
/ip firewall address-list add list=TaiwanIPList address=192.83.180.0-192.83.180.255
/ip firewall address-list add list=TaiwanIPList address=192.192.0.0-192.192.255.255
/ip firewall address-list add list=TaiwanIPList address=140.113.0.0-140.113.255.255
/ip firewall address-list add list=TaiwanIPList address=210.71.0.0-210.71.127.255
/ip firewall address-list add list=TaiwanIPList address=192.83.184.0-192.83.184.255
/ip firewall address-list add list=TaiwanIPList address=192.83.169.0-192.83.169.255
/ip firewall address-list add list=TaiwanIPList address=140.130.0.0-140.130.255.255
/ip firewall address-list add list=TaiwanIPList address=210.243.0.0-210.243.63.255
/ip firewall address-list add list=TaiwanIPList address=202.5.12.0-202.5.15.255
/ip firewall address-list add list=TaiwanIPList address=211.79.48.0-211.79.63.255
/ip firewall address-list add list=TaiwanIPList address=211.73.64.0-211.73.95.255
/ip firewall address-list add list=TaiwanIPList address=211.76.160.0-211.76.175.255
/ip firewall address-list add list=TaiwanIPList address=202.5.4.0-202.5.5.255
/ip firewall address-list add list=TaiwanIPList address=211.73.32.0-211.73.63.255
/ip firewall address-list add list=TaiwanIPList address=211.79.96.0-211.79.111.255
/ip firewall address-list add list=TaiwanIPList address=211.76.192.0-211.76.223.255
/ip firewall address-list add list=TaiwanIPList address=211.78.64.0-211.78.79.255
/ip firewall address-list add list=TaiwanIPList address=61.67.48.0-61.67.63.255
/ip firewall address-list add list=TaiwanIPList address=210.241.160.0-210.241.191.255
/ip firewall address-list add list=TaiwanIPList address=211.76.176.0-211.76.191.255
/ip firewall address-list add list=TaiwanIPList address=211.78.80.0-211.78.95.255
/ip firewall address-list add list=TaiwanIPList address=211.76.112.0-211.76.127.255
/ip firewall address-list add list=TaiwanIPList address=118.232.0.0-118.233.255.255
/ip firewall address-list add list=TaiwanIPList address=180.176.0.0-180.177.255.255
/ip firewall address-list add list=TaiwanIPList address=123.192.0.0-123.195.255.255
/ip firewall address-list add list=TaiwanIPList address=122.146.0.0-122.147.255.255
/ip firewall address-list add list=TaiwanIPList address=221.169.0.0-221.169.255.255
/ip firewall address-list add list=TaiwanIPList address=210.64.0.0-210.64.255.255
/ip firewall address-list add list=TaiwanIPList address=192.72.4.0-192.72.7.255
/ip firewall address-list add list=TaiwanIPList address=218.210.0.0-218.210.255.255
/ip firewall address-list add list=TaiwanIPList address=210.243.128.0-210.243.255.255
/ip firewall address-list add list=TaiwanIPList address=192.72.240.0-192.72.247.255
/ip firewall address-list add list=TaiwanIPList address=61.59.0.0-61.59.255.255
/ip firewall address-list add list=TaiwanIPList address=192.72.128.0-192.72.191.255
/ip firewall address-list add list=TaiwanIPList address=218.32.0.0-218.32.255.255
/ip firewall address-list add list=TaiwanIPList address=203.67.0.0-203.67.255.255
/ip firewall address-list add list=TaiwanIPList address=123.204.0.0-123.205.255.255
/ip firewall address-list add list=TaiwanIPList address=220.228.0.0-220.228.255.255
/ip firewall address-list add list=TaiwanIPList address=210.66.0.0-210.66.255.255
/ip firewall address-list add list=TaiwanIPList address=192.72.3.0-192.72.3.255
/ip firewall address-list add list=TaiwanIPList address=218.211.0.0-218.211.255.255
/ip firewall address-list add list=TaiwanIPList address=211.74.0.0-211.74.127.255
/ip firewall address-list add list=TaiwanIPList address=192.72.248.0-192.72.251.255
/ip firewall address-list add list=TaiwanIPList address=61.56.224.0-61.56.255.255
/ip firewall address-list add list=TaiwanIPList address=192.72.64.0-192.72.127.255
/ip firewall address-list add list=TaiwanIPList address=61.66.0.0-61.66.255.255
/ip firewall address-list add list=TaiwanIPList address=203.70.0.0-203.70.255.255
/ip firewall address-list add list=TaiwanIPList address=192.72.16.0-192.72.31.255
/ip firewall address-list add list=TaiwanIPList address=220.229.0.0-220.229.255.255
/ip firewall address-list add list=TaiwanIPList address=210.68.0.0-210.68.255.255
/ip firewall address-list add list=TaiwanIPList address=113.196.0.0-113.196.255.255
/ip firewall address-list add list=TaiwanIPList address=192.72.252.0-192.72.252.255
/ip firewall address-list add list=TaiwanIPList address=211.78.128.0-211.78.159.255
/ip firewall address-list add list=TaiwanIPList address=192.72.224.0-192.72.239.255
/ip firewall address-list add list=TaiwanIPList address=211.78.160.0-211.78.191.255
/ip firewall address-list add list=TaiwanIPList address=192.72.32.0-192.72.63.255
/ip firewall address-list add list=TaiwanIPList address=139.175.0.0-139.175.255.255
/ip firewall address-list add list=TaiwanIPList address=203.73.0.0-203.73.255.255
/ip firewall address-list add list=TaiwanIPList address=192.72.8.0-192.72.15.255
/ip firewall address-list add list=TaiwanIPList address=59.104.0.0-59.105.255.255
/ip firewall address-list add list=TaiwanIPList address=210.244.0.0-210.244.127.255
/ip firewall address-list add list=TaiwanIPList address=123.51.128.0-123.51.255.255
/ip firewall address-list add list=TaiwanIPList address=112.104.0.0-112.105.255.255
/ip firewall address-list add list=TaiwanIPList address=211.74.128.0-211.74.255.255
/ip firewall address-list add list=TaiwanIPList address=192.72.192.0-192.72.223.255
/ip firewall address-list add list=TaiwanIPList address=61.56.192.0-61.56.223.255
/ip firewall address-list add list=TaiwanIPList address=121.50.144.0-121.50.151.255
/ip firewall address-list add list=TaiwanIPList address=202.160.64.0-202.160.95.255
/ip firewall address-list add list=TaiwanIPList address=203.190.16.0-203.190.23.255
/ip firewall address-list add list=TaiwanIPList address=211.76.0.0-211.76.31.255
/ip firewall address-list add list=TaiwanIPList address=210.244.192.0-210.244.223.255
/ip firewall address-list add list=TaiwanIPList address=202.148.208.0-202.148.223.255
/ip firewall address-list add list=TaiwanIPList address=211.77.0.0-211.77.63.255
/ip firewall address-list add list=TaiwanIPList address=211.77.128.0-211.77.255.255
/ip firewall address-list add list=TaiwanIPList address=110.24.0.0-110.31.255.255
/ip firewall address-list add list=TaiwanIPList address=211.73.128.0-211.73.159.255
/ip firewall address-list add list=TaiwanIPList address=61.20.0.0-61.20.255.255
/ip firewall address-list add list=TaiwanIPList address=210.241.192.0-210.241.223.255
/ip firewall address-list add list=TaiwanIPList address=118.231.0.0-118.231.255.255
/ip firewall address-list add list=TaiwanIPList address=211.77.64.0-211.77.127.255
/ip firewall address-list add list=TaiwanIPList address=114.140.0.0-114.140.255.255
/ip firewall address-list add list=TaiwanIPList address=210.67.16.0-210.67.31.255
/ip firewall address-list add list=TaiwanIPList address=210.67.128.0-210.67.143.255
/ip firewall address-list add list=TaiwanIPList address=210.67.32.0-210.67.63.255
/ip firewall address-list add list=TaiwanIPList address=210.63.0.0-210.63.31.255
/ip firewall address-list add list=TaiwanIPList address=202.39.96.0-202.39.111.255
/ip firewall address-list add list=TaiwanIPList address=210.63.32.0-210.63.63.255
/ip firewall address-list add list=TaiwanIPList address=210.67.0.0-210.67.15.255
/ip firewall address-list add list=TaiwanIPList address=210.67.112.0-210.67.127.255
/ip firewall address-list add list=TaiwanIPList address=202.168.192.0-202.168.207.255
/ip firewall address-list add list=TaiwanIPList address=61.64.48.0-61.64.63.255
/ip firewall address-list add list=TaiwanIPList address=115.85.144.0-115.85.159.255
/ip firewall address-list add list=TaiwanIPList address=202.174.16.0-202.174.31.255
/ip firewall address-list add list=TaiwanIPList address=123.50.32.0-123.50.63.255
/ip firewall address-list add list=TaiwanIPList address=124.155.160.0-124.155.191.255
/ip firewall address-list add list=TaiwanIPList address=61.57.144.0-61.57.159.255
/ip firewall address-list add list=TaiwanIPList address=61.57.128.0-61.57.143.255
/ip firewall address-list add list=TaiwanIPList address=122.200.152.0-122.200.159.255

在RouterOS中更新PPTP VPN的撥接IP

jason — Sun, 17 Jan 2010 04:15:54 +0000

在RouterOS中，如果你有使用PPTP VPN連線的話，然後撥接的位置又是不固定IP

那麼你就會遇到這個問題

第一次的時候是可以撥接成功的，但後面因為IP變了，接下來你就撥接不上去了

如果用winbox這個工具進去管理RouterOS，你會發現要連到那一台主機那邊，可以打Domain Name

不過很抱歉，你儲存的時候winbox會把你的Domain Name轉成IP

所以說，就算你的Domain Name內的解析有變了，RouterOS還是不知道新的IP

這時候就需要一個固定更新的的Script來解決問題

流程很簡單：
1.找出目前RouterOS使用中的PPTP IP
2.反解相關Domain Name的IP
3.如果不一樣，就更新

相關的Script如下，請享用。相關說明看一下註解，應該不難

有問題的話再詢問吧

#Script在RouterOS 4.4中測試通過
#Date:2010/01/17
#Script Name:自動更新Domain Name的IP到PPTP的位置

#要設定的PPTP撥接名稱
:local pptpName "PPTP_Home"
#要撥接的DoaminName
:local pptpDomainName "xxxx.minitw.com"
#取得目前的撥接IP
:local systemPPTPIP [/interface pptp-client get $pptpName connect-to ]
#經由DNS取得新的PPTP Server IP
:local currentPPTPIP [:resolve $pptpDomainName]

:if ($systemPPTPIP != $currentPPTPIP) do={
    /interface pptp-client set $pptpName connect-to=$currentPPTPIP
    :log info "PPTP_DNS_Update: $currentPPTPIP (CHT:更新PPTP的DomainIP)"
}

解決於 RouterOS 中使用負載平衡時，RapidShare 不能下載的問題

jason — Fri, 17 Jul 2009 00:32:49 +0000

如果你於RouterOS中使用負載平衡時，你會發現要從RapidShare下載檔案有很大的機會失敗

這是因為當你第1次連到RapidShare上的IP，然後等完看廣告的時間之後要下載檔案的IP不一樣所造成的

舉個例來說，假設第1次連上到RapidShare上的IP是123.1.1.1，但是要下載檔案時

因為負載平衡的關係，使得本次連到RapidShare 的已經變成123.1.1.2

這時就會發生無法下載的情況。

最簡單的解決方式就是，把要連到RapidShare上的連線全部走同1條線路

那麼要怎麼判斷那些連線是要到RapidShare的呢

就是看RouterOS DNS快取裡的Doman與IP的對照表

這個時候就需要使用Script來自動把RapidShare相關的IP濾出來，放到Address List供我們使用

相關的Script如下。新增Script的方式為到Winbox裡 System -> Scripts -> 按介面上的 +

把下面這個Script命名為 Update_RapidShare_IP ，後面會用到

# 把DNS快取裡資料全部讀出來
:foreach i in=[/ip dns cache find] do={
    :local bNew "true";
# 檢查DNS快取裡是否有包含rapidshare的關鍵字
    :if ([:find [/ip dns cache get $i name] "rapidshare"] != 0) do={
        :local tmpAddress [/ip dns cache get $i address] ;

# 轉換rapidshare的IP到"/16"的網段
        :local mjesto ([:find $tmpAddress "."]);
        :set mjesto ([:find $tmpAddress "." $mjesto]);
        :local tmpAddress ([:pick $tmpAddress 0 $mjesto]);
        :set tmpAddress ($tmpAddress . ".0.0/16");

#---- 如果address list是空的就不用查檢了(直接把IP加入)
        :if ( [/ip firewall address-list find ] = "") do={
            /ip firewall address-list add address=$tmpAddress list=RapidShare_IP disabled=no;
        } else={
#------- 檢查每一列的值
            :foreach j in=[/ip firewall address-list find ] do={
#---------- 如果IP已經存在address list就不用新增了
                :if ( [/ip firewall address-list get $j address] = $tmpAddress ) do={
                    :set bNew "false";
                }
            }
#------- 如果IP不存在就新增一筆上去address list
            :if ( $bNew = "true" ) do={
                /ip firewall address-list add address=$tmpAddress list=RapidShare_IP disabled=no
            }
        }
    }
}

接下來則是設定每30秒自動執行1次(相關設定如圖所示)，隨時更新

System -> Scheduler -> 按介面上的 +

把這個 Scheduler 命名為 Auto_Update_RapidShare_IP

/system script run Update_RapidShare_IP

最後一個步驟就是判斷只要目的位置是在RapidShare_IP這個Address List裡的話

就強迫走單一路由。怎麼設定就因人而異了，不過大方向是不變的

有了RapidShare的相關IP，要針對RapidShare做限速、擋掉....等，都很方便了

相關參考資料：
Fight against P2P on port 80

RouterOS的流量控制(QoS/PCQ)

jason — Wed, 24 Jun 2009 03:29:06 +0000

要在RouterOS上實作QoS是不難的

實作之前首先要先知道什麼是PCQ (Per Connection Queue)

說的白話一點，PCQ就是一個最佳化後的QoS系統

如果你對PCQ的詳細技後有興趣可以到這邊觀看技術文件

強烈建議一定要去看一下PCQ的技術文件，裡面有很多很好的觀念

如果要實作PCQ可以參考這篇文章PCQ Examples

如果你有在RouterOS上啟用Web-Proxy，而且要使用PCQ的話請參考
Queue with Masquerading and Internal Web-Proxy

PCQ除了可以實作一般的限流外，也可以配合Burst這個參數來讓網頁開啟更順暢

怎麼說呢?我舉個例子：

假設我們想讓使用者下載檔案時速度限制在10KB/s，但是如果連開網頁也限制在10KB/s，豈不是等到瘋掉。

這時候Burst這個參數就派上用場了。我們知道一般網頁的檔案都很小，下載不需要花費很多時間。而一般的檔案都很大，下載需要花很多時間。

這時候我們是不是可以多一個功能，在一開始的時候速度限制在50KB，

但是如果這個連線一直持續下載超過5MB時，就開始限速10KB/s，該怎麼做呢?就是用前面所說的Burst參數

在RouterOS中Winbox的介面如下

其中Queue Type 的設定如下圖示所

如果你需要更詳細的PCQ參數設定，可以參考這份文件 MikroTik RouterOS Workshop QoS Best Practice

這邊補充說明一下~~RouterOS裡 1M bits/s = 1,000,000 bits/s = 125,000 Bytes/s = 122KB/s

Max Limit ：常態時的速度限制

Burst Limit：瞬時的最高速度限制

Burst Threshold：平均流量(需與Burst Time搭配使用)到達多少時開始停止使用Burst Limit

以上面這張圖片的設定檔來做說明的話

****************************************************************
一開始流量可以衝到4M bits/s

但是如果流量維持在 1Mbits/s 以上，而且在5秒內下載量達到 610KB (1M bits/s * 5)時

就停止使用Burst Limit而開始啟用Max Limit，此後速度會一直限速在2M bits/s
****************************************************************

以圖片來說明的話，流量會像下面的圖一樣

綠色的線就是使用者可以感受到的網路速度

在RouterOS中實做雙ADSL負載平衡，與ADSL斷線自動備援

jason — Wed, 03 Jun 2009 09:41:12 +0000

首先先說明一下實做的環境，如下圖

要在 RouterOS 中實現多條 ADSL 負載平衡與自動備援並不困難

但是主要的問題會是 ADSL 的閘道(Gateway)，都是同一個位置(假設是同一家ISP)

要解決這個問題必需使用 Mangle 裡的標記(mark) 且配合 nth，請看以下範例

使用 Mangle 裡的標記(mark) 且配合 nth 可以解決ADSL 負載平衡的問題。

而自動備援的問題，則是在 NAT 裡加入一行不指定條件的 masquerade 即可(需放置於正常有指定條件masquerade的後面)

設定檔的使用方式很簡單，先在 Winbox 的左邊點選 New Terminal

然後把下面的設定檔貼上就可以了


#以下設定檔在 RouterOS 3.20 下測試通過

/interface pppoe-client
add ac-name="" add-default-route=no allow=pap,chap,mschap1,mschap2 comment=\
"" dial-on-demand=no disabled=no interface=掛載ADSL-1的網卡 max-mru=1480 max-mtu=1480 \
mrru=disabled name=ADSL-1 password=ADSL-1密碼 profile=default service-name="" \
use-peer-dns=yes user=ADSL-1帳號
add ac-name="" add-default-route=no allow=pap,chap,mschap1,mschap2 comment=\
"" dial-on-demand=no disabled=no interface=掛載ADSL-2的網卡 max-mru=1480 max-mtu=1480 \
mrru=disabled name=ADSL-2 password=ADSL-2密碼 profile=default service-name="" \
use-peer-dns=yes user=ADSL-2帳號

/ip firewall mangle
#讓外部可以連通本機多條 ADSL
add action=mark-connection chain=input comment=\
"\C5\FD\A5~\B3\A1\A5i\A5H\B3s\B3q\A5\BB\BE\F7\A6h\B1\F8 ADSL" disabled=no \
in-interface=ADSL-1 new-connection-mark=from_adsl_1 passthrough=yes
add action=mark-routing chain=output comment="" connection-mark=from_adsl_1 \
disabled=no new-routing-mark=to_adsl_1 passthrough=yes
add action=mark-connection chain=input comment="" disabled=no in-interface=\
ADSL-2 new-connection-mark=from_adsl_2 passthrough=yes
add action=mark-routing chain=output comment="" connection-mark=from_adsl_2 \
disabled=no new-routing-mark=to_adsl_2 passthrough=yes

#內部網路負載平衡
add action=mark-connection chain=prerouting comment=\
"\A4\BA\B3\A1\BA\F4\B8\F4\ADt\B8\FC\A5\AD\BF\C5" connection-state=new \
disabled=no in-interface=請改成你的內部網卡 new-connection-mark=nth_1 nth=2,1 \
passthrough=yes
add action=mark-routing chain=prerouting comment="" connection-mark=nth_1 \
disabled=no in-interface=請改成你的內部網卡 new-routing-mark=to_adsl_1 passthrough=no
add action=mark-connection chain=prerouting comment="" connection-state=new \
disabled=no in-interface=請改成你的內部網卡 new-connection-mark=nth_2 passthrough=yes
add action=mark-routing chain=prerouting comment="" connection-mark=nth_2 \
disabled=no in-interface=請改成你的內部網卡 new-routing-mark=to_adsl_2 passthrough=no

/ip firewall nat
#線路正常時，依負載平衡走不一樣的 ADSL 線路出去
add action=masquerade chain=srcnat comment="\BDu\B8\F4\A5\BF\B1`\AE\C9\A1A\A8\
\CC\ADt\B8\FC\A5\AD\BF\C5\A8\AB\A4\A3\A4@\BC\CB\AA\BA ADSL \BDu\B8\F4\A5X\
\A5h" disabled=no out-interface=ADSL-1 routing-mark=to_adsl_1
add action=masquerade chain=srcnat comment="" disabled=no out-interface=\
ADSL-2 routing-mark=to_adsl_2

#ADSL 斷線自動備援
add action=masquerade chain=srcnat comment=\
"ADSL \C2_\BDu\A6\DB\B0\CA\B3\C6\B4\A9" disabled=no

/ip route
#設定 ADSL 路由
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=ADSL-1 \
routing-mark=to_adsl_1
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=ADSL-2 \
routing-mark=to_adsl_2
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
ADSL-1,ADSL-2

/ip route print

在RouterOS 3.x 中加入top指令

jason — Mon, 06 Apr 2009 03:50:26 +0000

top 是一個在 linux 中監看系統狀況的指令

要在 RouterOS 3.x 中加入top，首先請先下載這個封裝檔 (原作者：ksw520)

如果還沒把 RouterOS 的 ftp 功能打開，先到 IP -> Service 把 ftp 開啟

解開壓縮後利用 ftp 把 procps3.x.npk 丟到RouterOS 上去

重新啟動 RouterOS ，就會自動安裝了

接下來使用 pietty 或 putty 來連線

IP：RouterOS 的位置

Port：12345

帳號：metro

密碼：2911911

進去後可用 top 指令來監看系統狀況

如果要改密碼，輸入 password 就可以改密碼了

參考資料：ros下的top命令補丁

幫 RouterOS 加上 IP分享器功能(NAT)

jason — Mon, 30 Mar 2009 15:52:41 +0000

先把 RouterOS 的管理工具 Winbox 開起來

點選 IP ==> Firewall ==> NAT

接下來就看圖說故事吧

進入 NAT 後，加入一條規則(就是按那個 + )

在 General 裡，Chain 選擇 srcnat

Action 中選擇 masquerad，接下來按下 OK

最後結果如下圖

收工，簡單又快樂。

如果有需要轉Port的功能請參考在RouterOS中加入Port Mapping這篇文章

SyntaxHighlighter-Plus for RouterOS Template

jason — Fri, 20 Mar 2009 06:21:18 +0000

RouterOS 看來應該是會一直玩下去了。越玩越順手

先補上在 WordPress 中可以讓 RouterOS 語法高亮的 SyntaxHighlighter-Plus 樣版

使用的方法可以參考之前的文章幫SyntaxHighlighter-Plus加上新的語言樣版

程式碼另存為shBrushRouterOS.js

SyntaxHighlighter.brushes.RouterOS = function()
{

    var keywords =  'global local do else for from to step in foreach ' +
                    'if put while environment nothing set';

    var commands =  'add comment disable enable export get move remove unset ' +
                    'delay edit blink monitor beep find led len  ' +
                    'list log pick resolve time print toid totime tonum';

        this.regexList = [
                { regex: /#.*$/gm, css: 'comments' },
                { regex: SyntaxHighlighter.regexLib.doubleQuotedString,                 css: 'string' },                // double quoted strings
                { regex: new RegExp(this.getKeywords(keywords), 'gm'),                  css: 'keyword' },               // keywords
                { regex: new RegExp(this.getKeywords(commands), 'gm'),                  css: 'functions' }              // commands
                ];
}

SyntaxHighlighter.brushes.RouterOS.prototype    = new SyntaxHighlighter.Highlighter();
SyntaxHighlighter.brushes.RouterOS.aliases      = ['ros'];

記得要在/wp-content/plugins/syntaxhighlighter-plus/syntaxhighlighter.php
大約在在112行的位置加入樣版的名子

'RouterOS'=> array('ros'),

讓RouterOS自動把Log檔email出去

jason — Sat, 14 Mar 2009 15:42:23 +0000

讓RouterOS自動把Log檔Mail出去，這個動作可以拆成2個步驟來執行

1.在System->Script建立相關的Script(產生Log檔案，發送mail)

2.在System->Scheduler建立排程(判斷Log的行數到達我們的設定值就Mail出去)

第1個部份，先建立2個Script

建立一個名為MailLog的Script

請修改SMTP伺服器位置(記得ROS的DNS要有，才可以解析)、寄件人、收件人的資訊


#Script在RouterOS 3.20中測試通過
#Date:2009/03/14
#Script Name:MailLog

#SMTP伺服器位置
:local SMTP "xxx.smtp.com"

#寄件人
:local MailFrom "ROSLog"

#收件人
:local MailTo "REC@xxxxxxxxx.com"

#Log檔的名稱(位於/file)
:local LogFileName

#寄出後是否刪除已存檔的Log(/file裡的檔案)
#0=保留  1=刪除
:local DeleteLogFile 1

:set LogFileName ([/system identity get name] . "Log-" . [:pick [/system clock get date] 7 11] . [:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 4 6] . ".txt");

/tool e-mail set from=$MailFrom;

/log print file=[$LogFileName];

/tool e-mail send to=$MailTo server=[:resolve $SMTP] subject=([/system identity get name] . " Log " . [/system clock get date]) file=[$LogFileName];

:delay 10;

:if ($DeleteLogFile =1) do={
/file rem [/file find name=($LogFileName)];
}

:log info ("System Log emailed at " . [/sys cl get time] . " " . [/sys cl get date]);

接下來建立名為AutoMailLog的Script

超過幾條就把Log寄出去請依照你的實際需要設置

寄出後會自動清空Log，如果你想保留Log

那就把:local IsClearLog 1 改為:local IsClearLog 0

不過這樣子會造成每次都會寄發Mail，請特別注意


#Script在RouterOS 3.20中測試通過
#Date:2009/03/14
#Script Name:AutoMailLog

#超過幾條就把Log寄出去
:local MaxLine 300

#寄出後是否要清空現有的Log資訊
#0=保留  1=清空
:local IsClearLog 1

:if ([/log print count-only] >= $MaxLine) \
do={
/system script run MailLog;
:if ($IsClearLog = 1) \
do={/system script run ClearMemoryLog;}
}

第2個部份是建立Scheduler排程

在System->Scheduler 新增一個名為MailLog的排程

內容只有一行，時間是我是設定為5分鍾跑一次


/system script run AutoMailLog

最後總結一下，整個流程如下圖

參考資料：http://forum.mikrotik.com/viewtopic.php?f=9&t=29122

外部程式利用 API 與 RouterOS 溝通

jason — Thu, 12 Mar 2009 15:09:17 +0000

RouterOS 在3.0版以後推出了API可以讓外部程式存取

這樣子功能性真的是延伸了很多

目前API支援以下幾種程式語言

in Perl - forum thread by cheesegrits
in Delphi - forum thread and wiki by rodolfo
in PHP - wiki link by Denis Basta
Java sample methods - forum post
in Python - wiki link by Mikrotik staff
in C# - wiki link by wiki user Gregy

可惜沒有VB.NET的版本。不過只要有C#的版本，一切就好辦事了

以下是轉換過後VB.NET版的API

不過傳送或讀取的值如果是中文的話會變成亂碼，這部份要再研究一下

使用前記得先開啟API的服務

/ip service enable api

或是利用圖型介面開啟 IP->Service

VB.NET版本的RouterOS API程式碼如下

Imports System.Net.Sockets
Imports System.IO
Imports System.Text

Class MK_ROS
    Private connection As Stream
    Private con As TcpClient

    Public Sub New(ByVal ip As String)
        con = New TcpClient()
        con.Connect(ip, 8728)
        connection = DirectCast(con.GetStream(), Stream)
    End Sub
    Public Sub Close()
        connection.Close()
        con.Close()
    End Sub
    Public Function Login(ByVal username As String, ByVal password As String) As Boolean
        Send("/login", True)
        Dim hash As String = Read()(0).Split(New String() {"ret="}, StringSplitOptions.None)(1)
        Send("/login")
        Send("=name=" & username)
        Send("=response=00" & EncodePassword(password, hash), True)
        If Read()(0) = "!done" Then
            Return True
        Else
            Return False
        End If
    End Function
    Public Sub Send(ByVal co As String)
        Dim bajty As Byte() = Encoding.ASCII.GetBytes(co.ToCharArray())
        Dim velikost As Byte() = EncodeLength(bajty.Length)

        connection.Write(velikost, 0, velikost.Length)
        connection.Write(bajty, 0, bajty.Length)
    End Sub
    Public Sub Send(ByVal co As String, ByVal endsentence As Boolean)
        Dim bajty As Byte() = Encoding.ASCII.GetBytes(co.ToCharArray())
        Dim velikost As Byte() = EncodeLength(bajty.Length)
        connection.Write(velikost, 0, velikost.Length)
        connection.Write(bajty, 0, bajty.Length)
        connection.WriteByte(0)
    End Sub
    Public Function Read() As List(Of String)
        Dim output As New List(Of String)()
        Dim o As String = ""
        Dim tmp As Byte() = New Byte(3) {}
        Dim count As Long
        While True
            tmp(3) = CByte(connection.ReadByte())
            'if(tmp[3] == 220) tmp[3] = (byte)connection.ReadByte(); it sometimes happend to me that
            'mikrotik send 220 as some kind of "bonus" between words, this fixed things, not sure about it though
            If tmp(3) = 0 Then
                output.Add(o)
                If o.Substring(0, 5) = "!done" Then
                    Exit While
                Else
                    o = ""
                    Continue While
                End If
            Else
                If tmp(3) < &H80 Then
                    count = tmp(3)
                Else
                    If tmp(3) < &HC0 Then
                        Dim tmpi As Integer = BitConverter.ToInt32(New Byte() {CByte(connection.ReadByte()), tmp(3), 0, 0}, 0)
                        count = tmpi Xor &H8000
                    Else
                        If tmp(3) < &HE0 Then
                            tmp(2) = CByte(connection.ReadByte())
                            Dim tmpi As Integer = BitConverter.ToInt32(New Byte() {CByte(connection.ReadByte()), tmp(2), tmp(3), 0}, 0)
                            count = tmpi Xor &HC00000
                        Else
                            If tmp(3) < &HF0 Then
                                tmp(2) = CByte(connection.ReadByte())
                                tmp(1) = CByte(connection.ReadByte())
                                Dim tmpi As Integer = BitConverter.ToInt32(New Byte() {CByte(connection.ReadByte()), tmp(1), tmp(2), tmp(3)}, 0)
                                count = tmpi Xor &HE0000000
                            Else
                                If tmp(3) = &HF0 Then
                                    tmp(3) = CByte(connection.ReadByte())
                                    tmp(2) = CByte(connection.ReadByte())
                                    tmp(1) = CByte(connection.ReadByte())
                                    tmp(0) = CByte(connection.ReadByte())
                                    count = BitConverter.ToInt32(tmp, 0)
                                Else
                                    'Error in packet reception, unknown length
                                    Exit While
                                End If
                            End If
                        End If
                    End If
                End If
            End If

            For i As Integer = 0 To count - 1
                o += ChrW(connection.ReadByte())
            Next
        End While
        Return output
    End Function
    Private Function EncodeLength(ByVal delka As Integer) As Byte()
        If delka < &H80 Then
            Dim tmp As Byte() = BitConverter.GetBytes(delka)
            Return New Byte(0) {tmp(0)}
        End If
        If delka < &H4000 Then
            Dim tmp As Byte() = BitConverter.GetBytes(delka Or &H8000)
            Return New Byte(1) {tmp(1), tmp(0)}
        End If
        If delka < &H200000 Then
            Dim tmp As Byte() = BitConverter.GetBytes(delka Or &HC00000)
            Return New Byte(2) {tmp(2), tmp(1), tmp(0)}
        End If
        If delka < &H10000000 Then
            Dim tmp As Byte() = BitConverter.GetBytes(delka Or &HE0000000)
            Return New Byte(3) {tmp(3), tmp(2), tmp(1), tmp(0)}
        Else
            Dim tmp As Byte() = BitConverter.GetBytes(delka)
            Return New Byte(4) {&HF0, tmp(3), tmp(2), tmp(1), tmp(0)}
        End If
    End Function

    Public Function EncodePassword(ByVal Password As String, ByVal hash As String) As String
        Dim hash_byte As Byte() = New Byte(hash.Length / 2 - 1) {}
        For i As Integer = 0 To hash.Length - 2 Step 2
            hash_byte(i / 2) = [Byte].Parse(hash.Substring(i, 2), System.Globalization.NumberStyles.HexNumber)
        Next
        Dim heslo As Byte() = New Byte(1 + Password.Length + (hash_byte.Length - 1)) {}
        heslo(0) = 0
        Encoding.ASCII.GetBytes(Password.ToCharArray()).CopyTo(heslo, 1)
        hash_byte.CopyTo(heslo, 1 + Password.Length)

        Dim hotovo As Byte()
        Dim md5 As System.Security.Cryptography.MD5

        md5 = New System.Security.Cryptography.MD5CryptoServiceProvider()

        hotovo = md5.ComputeHash(heslo)

        'Convert encoded bytes back to a 'readable' string
        Dim navrat As String = ""
        For Each h As Byte In hotovo
            navrat += h.ToString("x2")
        Next
        Return navrat
    End Function
End Class

使用方式如下

Dim mikrotik As New MK_ROS("主機位置(可為IP或Domain)")
If Not mikrotik.Login("帳號", "密碼") Then
    TextBox1.Text &= ("連線失敗")
    mikrotik.Close()
    Return
End If
'要下的指令
mikrotik.Send("/system/identity/print", True)
For Each h As String In mikrotik.Read()
    TextBox1.Text &= h
Next

參考資料：

Mikrotik RouterOS v3.x features

RouterOS API

RouterOS Community Support [Scripting]

清空RouterOS所產生的Log檔

jason — Tue, 10 Mar 2009 14:37:55 +0000

在RouterOS裡，把以下Script建立起來，執行就可以清空Log檔了

#Script在RouterOS 3.7中測試通過
#Date:2009/03/10
:local memoryline [:put [/sys logg action get "memory" "memory-lines" ] ]
/system logging action set memory memory-lines=1
/system logging action set memory memory-lines=$memoryline
:log info "清空Memory Log"