If you haven't already patched your MikroTik router for vulns, then if you could go do that, that would be greeeeaat

Re: Would anyone...

I don't. But i've heard good things about them and i know a one-man-band IT guy who's rolled out a dozen or so.

Re: Would anyone...

Plenty of people I would imagine. A lot of smaller WISPs around the world use almost exclusively MicroTik kit. The real WTF is people leaving the admin interface open to the internet in the first place. Any competent admin would at least use a VPN to administer them or at the very least restrict with ACLs.

Re: Would anyone...

Yup. I've got a bunch of them around the place.

The only one I have actually directly connected to the internet is regularly updated and has pretty minimal functionality enabled. The others are blocked by firewalls except when I'm updating them.

That being said, they are very nice flexible cheap little boxes.

Re: Would anyone...

I have. I bought it in 2012 as it was, at that time, the only sensibly priced router that would give me IPv6. I have not had any problems with it, a few small bugs but nothing really bad. It is highly configurable but not for a novice user -- eg you need to have an idea of how Linux IpTables works.

However: usual story, I can't get any updates, they were available for a couple of years and then ... zilch, nada. As with most hardware vendors they rapidly lose interest, expect you to buy a new box.

A new one would cost me some £40-£70ish, but then you add in:

* time to work out what new model I need

* time to configure the thing (IPv4 & IPv6 filtering, forwarding, etc)

I have another firewall on my main (Linux) desktop - so potential damage would largely be stealing bandwidth.

Re: Would anyone...

who regularly reads here, admit to owning a MicroTik router?

Yes!

The Mikrotik CCR1036-8G-2S+ is a rackmount box with 8 x 1G and 2 x 10G ports, and costs under £1K, with no charge for software upgrades or for turning on features.

A Cisco 4431 will cost you upwards of £5K once you've paid for the "performance licence" to unlock it from 500M to 1G. Plus you pay software maintenance every year on top of that.

If you want 10G ports in a Cisco you're talking at least an ASR1001-X at £12K+ (and that is locked to 2.5Gbps until you pay more)

There are a few foibles in RouterOS, but equally there are some very nice aspects to it as well. Cisco are just having a laugh with their 1990's pricing.

Re: Would anyone...

Going on for 5 years now after the makers of the old consumer gear we had stopped providing updates. I don't rely solely on the e-mail reminders to let me know updates are available, but check manually every week. It could be scripted (everything is scriptable with ROS, unlike the consumer stuff). Can't imagine why anyone would remove the default rules that will defeat most exploits (my own rule mods tighten security). After thinking a lot about it I confined admin access to ssh, but recently turned webfig back on, https only (Let's Encrypt is a wonderful thing). These Mikrotiks have served us well over the years, and should continue to do so for years to come.

Re: Would anyone...

>Would anyone... who regularly reads here, admit to owning a MicroTik router?

I did in the thousands for a business and I personally have 10-20 devices at home for testing & whatever (e.g. true 500Gbps duplex radio bridge)

ROI for suitable applications was excellent in comparison with big vendors.

This company only employs 150 people and their equipment can be found operating in most places on Earth (and in the air).

Re: Router OS?

MikroTik - I'm guessing it sounds a lot better in Latvian.

Re: Router OS?

> Router OS?

>What a name ... as if MicroTik wasn't enough!

MicroSoft Windows?

Cisco IOS?

And that's spelt Mikrotik like in a non-English name of a non-English company

Re: MikroTik Updates

You should be able to just download the source, and patch it. But Microtik don't publish the source for the code that is affected by GPL. Oddly enough.