Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2024-12-09 | netwatch-notify: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -1/+5 | |
2024-12-09 | netwatch-dns: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -1/+8 | |
2024-12-09 | mode-button: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -1/+4 | |
2024-12-09 | log-forward: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -1/+6 | |
2024-12-09 | lease-script: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -1/+7 | |
2024-12-09 | ipv6-update: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -1/+7 | |
2024-12-09 | ipsec-to-dns: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -1/+5 | |
2024-12-09 | hotspot-to-wpa: use $ExitError to indicate unintentional error | Christian Hesse | 3 | -3/+21 | |
2024-12-09 | hotspot-to-wpa-cleanup: use $ExitError to indicate unintentional error | Christian Hesse | 3 | -3/+15 | |
2024-12-09 | gps-track: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -1/+5 | |
2024-12-09 | fw-addr-lists: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -1/+5 | |
2024-12-09 | firmware-upgrade-reboot: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -1/+7 | |
2024-12-09 | dhcp-to-dns: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -1/+5 | |
2024-12-09 | dhcp-lease-comment: use $ExitError to indicate unintentional error | Christian Hesse | 4 | -4/+20 | |
2024-12-09 | daily-psk.capsman: use $ExitError to indicate unintentional error | Christian Hesse | 4 | -4/+20 | |
2024-12-09 | collect-wireless-mac: use $ExitError to indicate unintentional error | Christian Hesse | 4 | -4/+20 | |
2024-12-09 | check-routeros-update: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -2/+25 | |
2024-12-09 | check-lte-firmware-upgrade: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -1/+5 | |
2024-12-09 | check-health: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -1/+6 | |
2024-12-09 | check-certificates: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -1/+5 | |
2024-12-09 | certificate-renew-issued: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -1/+5 | |
2024-12-09 | capsman-rolling-upgrade: use $ExitError to indicate unintentional error | Christian Hesse | 3 | -3/+15 | |
2024-12-09 | capsman-download-packages: use $ExitError to indicate unintentional error | Christian Hesse | 3 | -3/+21 | |
2024-12-09 | backup-upload: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -1/+7 | |
2024-12-09 | backup-partition: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -1/+11 | |
2024-12-09 | accesslist-duplicates: use $ExitError to indicate unintentional error | Christian Hesse | 4 | -4/+16 | |
2024-12-09 | backup-email: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -1/+9 | |
2024-12-09 | backup-cloud: use $ExitError to indicate unintentional error | Christian Hesse | 1 | -1/+6 | |
2024-12-09 | global-functions: $ExitError: give script name in message | Christian Hesse | 1 | -1/+1 | |
2024-12-09 | global-functions: introduce $ExitError... | Christian Hesse | 1 | -0/+13 | |
... as a simple macro to print error message on unintentional error. | |||||
2024-12-09 | global-functions: $FetchHuge: passing boolean to function is still broken... โต | Christian Hesse | 1 | -4/+4 | |
๐คจ | |||||
2024-11-27 | netwatch-dns: explicitly expect type=A...routeros-7.16-7 | Christian Hesse | 2 | -3/+3 | |
... which is provided since 7.16beta7 (but require next stable release 7.16 as that is available meanwhile). | |||||
2024-11-27 | dhcp-to-dns: explicitly expect type=A...routeros-7.16-6 | Christian Hesse | 2 | -5/+5 | |
... which is provided since 7.16beta7 (but require next stable release 7.16 as that is available meanwhile). I had this on my wishlist for a long time, and opened an issue in March 2023 about it (SUP-111312). Back then I changed the code to support both, see commit 779b3b8872b23b784c331d7a454c86439046f5d3. | |||||
2024-11-27 | mod/ssh-keys-import: require RouterOS 7.16routeros-7.16-5 | Christian Hesse | 2 | -2/+2 | |
Actually the requirement bumped with the change in commits: * 9c945b1a3283bb352707c69630c579cf82484dcb mod/ssh-keys-import: $SSHKeysImportFile: simplify looping lines * 1f526b356121749991fee69cee5a6c728855c8f2 mod/ssh-keys-import: $SSHKeysImport: split with `:deserialize` | |||||
2024-11-27 | fw-addr-lists: require RouterOS 7.16routeros-7.16-4 | Christian Hesse | 2 | -2/+2 | |
Actually the requirement bumped with the change in commit: * 084c246ef0cab329fe981732089277fa8398800b fw-addr-lists: simplify looping lines | |||||
2024-11-22 | fw-addr-lists: spamhaus.org returned to 'GTS Root R4' | Christian Hesse | 2 | -3/+3 | |
2024-11-15 | mode-button: do not act on disabled LED | Christian Hesse | 1 | -1/+2 | |
2024-11-15 | mode-button: catch runtime errors in executed code | Christian Hesse | 1 | -1/+5 | |
2024-11-15 | mode-button: fix the caller parameter to $LogPrint | Christian Hesse | 1 | -3/+3 | |
This is inside a function, so use just $0 here. | |||||
2024-11-14 | packages-update: drop check for device-mode downgrade...routeros-7.17beta5-1 | Christian Hesse | 1 | -6/+0 | |
... as things have been revised and this specific setting was removed. | |||||
2024-11-13 | hotspot-to-wpa-cleanup: revert display of timeout value... | Christian Hesse | 3 | -3/+3 | |
... as the timeout is a time value, and showing "4w00:00:00" (with lots of zeros) is not any better. ๐ This reverts commit f1533b8962bc67d17e9f6b5666ae51ee4d1e1ff4. | |||||
2024-11-13 | hotspot-to-wpa-cleanup: prepare real timeout value in variable... | Christian Hesse | 3 | -6/+6 | |
... to make sure it is not re-calculated for every single lease. | |||||
2024-11-12 | hotspot-to-wpa-cleanup: clean up daily only | Christian Hesse | 3 | -3/+6 | |
2024-11-12 | hotspot-to-wpa-cleanup: use the timeout in message... | Christian Hesse | 3 | -3/+3 | |
... not the actual value. | |||||
2024-11-12 | check-routeros-update: always exit early if up to date... | Christian Hesse | 1 | -2/+4 | |
... and just make the output and log dependent on terminal. | |||||
2024-11-12 | check-routeros-update: make invalid version string a warning | Christian Hesse | 1 | -1/+1 | |
2024-11-12 | check-routeros-update: add specific message for empty version string | Christian Hesse | 1 | -0/+5 | |
2024-11-12 | check-routeros-update: replace hard-coded version | Christian Hesse | 1 | -1/+1 | |
2024-11-08 | mod/ssh-keys-import: $SSHKeysImport: split with `:deserialize`routeros-7.16-3 | Christian Hesse | 1 | -2/+1 | |
2024-11-08 | mod/ssh-keys-import: $SSHKeysImportFile: let `:deserialize` split the fields | Christian Hesse | 1 | -6/+3 | |
2024-11-08 | mod/ssh-keys-import: $SSHKeysImportFile: simplify looping linesrouteros-7.16-2 | Christian Hesse | 1 | -5/+4 | |
2024-11-06 | fw-addr-lists: simplify looping linesrouteros-7.16-1 | Christian Hesse | 1 | -4/+3 | |
With `:deserialize` the **record** separator is always a new line. The property `delimiter=` is a **field** reparator, so you can parse a lines into an array. We do not want (or need) that, so use new line as field separator. This will result in an array with just one element, and we use that. Also convert the data to line feed explicitly, just to be sure. | |||||
2024-11-02 | doc/netwatch-dns: link to 'certificate name from browser' | Christian Hesse | 2 | -2/+4 | |
2024-11-02 | doc/fw-addr-lists: link to 'certificate name from browser' | Christian Hesse | 2 | -3/+8 | |
2024-11-02 | doc/mod/notification-ntfy: link to 'certificate name from browser' | Christian Hesse | 2 | -0/+6 | |
2024-11-02 | doc/mod/notification-matrix: link to 'certificate name from browser' | Christian Hesse | 2 | -0/+8 | |
2024-11-02 | introduce CERTIFICATES, guide to find root certificate | Christian Hesse | 5 | -0/+74 | |
2024-10-30 | global-functions: $CertificateAvailable: fail without CommonName | Christian Hesse | 1 | -0/+5 | |
2024-10-29 | certs: check cert for matrix.org | Christian Hesse | 1 | -0/+1 | |
2024-10-29 | doc/mod/notification-matrix: better document certificate import | Christian Hesse | 1 | -0/+7 | |
2024-10-25 | ipv6-update: create a dynamic address-list entry only | Christian Hesse | 2 | -6/+10 | |
This should make sure that the script runs once after reboot, even if the prefix does not change. An existing static entry needs to be removed to make this work! https://github.com/eworm-de/routeros-scripts/issues/85 | |||||
2024-10-23 | ipv6-update: ignore if address was acquired | Christian Hesse | 1 | -0/+6 | |
https://github.com/eworm-de/routeros-scripts/issues/85 | |||||
2024-10-23 | fw-addr-lists: spamhaus.org requires 'ISRG Root X1' now | Christian Hesse | 2 | -3/+3 | |
2024-10-23 | packages-update: check for explicit state...routeros-7.17beta4-2 | Christian Hesse | 1 | -3/+1 | |
... as all device-mode properties are given since RouterOS 7.14beta4. Let's assume we do not have to care about RouterOS 7.14beta2 any more... As older versions will not match the check we can now merge right away. | |||||
2024-10-22 | backup-partition: drop warning on lock in device-moderouteros-7.17beta4-1 | Christian Hesse | 1 | -8/+0 | |
... as switching partitions is possible again in RouterOS 7.17beta4. | |||||
2024-10-10 | doc/netwatch-notify: fix typo(s) | Christian Hesse | 1 | -3/+3 | |
2024-10-10 | doc/netwatch-notify: give an extra example for resolving AAAA records | Christian Hesse | 1 | -1/+6 | |
2024-10-10 | doc/netwatch-notify: always give a host... | Christian Hesse | 1 | -2/+2 | |
... as that is a required property. Any ip address is fine, it is changed anyway. | |||||
2024-10-09 | backup-partition: log the warning just once | Christian Hesse | 1 | -1/+2 | |
2024-10-02 | update list of contributors | Christian Hesse | 1 | -0/+1 | |
2024-10-01 | update list of contributors | Christian Hesse | 1 | -0/+1 | |
2024-10-01 | mod/notification-ntfy: fix ntfy overrides | Ignacio Serrano | 1 | -2/+2 | |
2024-09-30 | log-forward: get last message from log... | Christian Hesse | 1 | -2/+3 | |
... not only from matched massages. | |||||
2024-09-30 | packages-update: give warning on lock in device-moderouteros-7.17beta2-2 | Christian Hesse | 1 | -0/+8 | |
RouterOS 7.17beta2 introduced some extra security measures, including some to prevent downgrade attacks for the installation. Detect early and exit with message and error. https://help.mikrotik.com/docs/display/ROS/Device-mode | |||||
2024-09-30 | backup-partition: give warning on lock in device-moderouteros-7.17beta2-1 | Christian Hesse | 1 | -0/+7 | |
RouterOS 7.17beta2 introduced some extra security measures, including some to prevent downgrade attacks for the installation. Thus switching partitions (which can hold quite old installations) is denied by device-mode now by default. Warn about that... https://help.mikrotik.com/docs/display/ROS/Device-mode | |||||
2024-09-26 | global-functions: $CertificateDownload: add another check... | Christian Hesse | 1 | -0/+6 | |
... that the certificate is really available. Turns out that mkcert.org ships certificates where OU or whatever matches - that's not what we want. | |||||
2024-09-25 | hotspot-to-wpa-cleanup: only match access-list with mac-address | Christian Hesse | 3 | -3/+3 | |
2024-09-16 | check-routeros-update: use $VersionToNum to calculate bitmask | Christian Hesse | 1 | -2/+5 | |
2024-09-13 | backup-partition: use $VersionToNum to calculate bitmask | Christian Hesse | 1 | -1/+2 | |
2024-09-13 | global-functions: $VersionToNum: support "zero"... | Christian Hesse | 1 | -1/+2 | |
... to have a clean way to generate bitmasks. [admin@mikrotik] > :put [ $VersionToNum 0.255zero0 ] 16711680 [admin@mikrotik] > :put 0x00ff0000 16711680 Once implemented everywhere the internal calculation could be changed easily. | |||||
2024-09-11 | fw-addr-lists: use lists in JSON format for spamhaus.org | Christian Hesse | 1 | -1/+3 | |
2024-09-11 | fw-addr-lists: handle JSON format from spamhaus.org | Christian Hesse | 1 | -1/+6 | |
Closes: https://github.com/eworm-de/routeros-scripts/issues/79 | |||||
2024-09-05 | netwatch-dns: give warning on CRL use | Christian Hesse | 1 | -0/+4 | |
2024-09-04 | certs: add poor man's check ๐ | Christian Hesse | 1 | -0/+31 | |
2024-08-28 | certs: drop 'Baltimore CyberTrust Root' | Christian Hesse | 1 | -28/+0 | |
2024-08-28 | fw-addr-lists: drop edrop.txt, which does no longer exist | Christian Hesse | 1 | -2/+0 | |
2024-08-28 | fw-addr-lists: spamhaus.org requires 'GTS Root R4' now | Christian Hesse | 1 | -2/+2 | |
Fixes: https://github.com/eworm-de/routeros-scripts/issues/78 | |||||
2024-08-27 | certs: drop 'DigiCert Global Root CA' | Christian Hesse | 1 | -29/+0 | |
2024-08-27 | doc/netwatch-dns: 'DigiCert Global Root G3' for Quad9 | Christian Hesse | 1 | -1/+1 | |
2024-08-27 | certs: add 'DigiCert Global Root G3'... | Christian Hesse | 1 | -0/+22 | |
... for quad9.net which can be used for DoH: $CertificateAvailable "DigiCert Global Root G3"; /ip/dns/set use-doh-server=https://9.9.9.9/dns-query verify-doh-cert=yes; | |||||
2024-08-20 | check-routeros-update: support switching to stable channel... | Christian Hesse | 1 | -0/+9 | |
... with a feature update in testing channel. | |||||
2024-08-19 | netwatch-dns: disable DoH if time not sync... | Christian Hesse | 1 | -0/+8 | |
... as it is possible that time is off, DNS via DoH fails (cert invalid), and finally syncing time fails due to failing DNS. | |||||
2024-08-19 | INITIAL-COMMANDS: match the certificate file name from Let's Encrypt website... | Christian Hesse | 1 | -2/+2 | |
... and our README. ๐ | |||||
2024-08-19 | README: match the certificate file name from Let's Encrypt website... | Christian Hesse | 2 | -2/+2 | |
... so import from manually downloaded and transferred file works out of the box as well. | |||||
2024-08-19 | README: make the QR code a link | Christian Hesse | 1 | -1/+1 | |
2024-07-25 | telegram-chat: drop extra conversionrouteros-7.15-3 | Christian Hesse | 2 | -3/+3 | |
The JSON parser was actually fixed in RouterOS 7.15beta4, but let's bump the required version to next stable release instead. | |||||
2024-07-25 | daily-psk: drop workaround for old RouterOSrouteros-7.15-2 | Christian Hesse | 5 | -11/+7 | |
2024-07-25 | netwatch-notify: do not switch type when resolvingrouteros-7.15-1 | Christian Hesse | 2 | -3/+4 | |
This requires RouterOS 7.15beta4, but let's bump the required version to next stable release instead. | |||||
2024-07-25 | INITIAL-COMMANDS: drop command to remove certificate file... | Christian Hesse | 1 | -1/+0 | |
... as this is done automatically with RouterOS 7.15rc1 and later. | |||||
2024-07-25 | README: drop command to remove certificate file... | Christian Hesse | 2 | -2/+1 | |
... as this is done automatically with RouterOS 7.15rc1 and later. Not bumping the required RouterOS version (badge) here... Worst thing that can happen is a stale certificate file left on storage. |