Here is my “mik_collector.py” script:

all you need to change is router_ip variable to match your router IP

after that you can run this script simply with this command:

python mik_collector.py

this will collect data from mikrotik every 5 seconds and store it in data.db sqlite3 database in the same directory as the script is.

All you need to do at mikrotik side is to enable accounting feature:

If you want to analyze your collected data you can do it with sqlite3 command from Ubuntu command prompt:

sqlite3 data.db "select * from sum_per_month order by month"

like this:

you can write your own queries, all data is stored in a table named accounting. You can share your query in the comments :)

I created a simple script (SendToTelegram) that allows you to send messages to telegram:

:global telegramMessage
:local botid
:local chatid

set botid "sdfzgasf7126jwsd7a8s12>" # <- change this
set chatid "21156423187"            # <- change this

if ($telegramMessage != "") do={
   /tool fetch url="https://api.telegram.org/bot$botid/sendMessage\?chat_id=$chatid&text=$telegramMessage" keep-result=no
   set telegramMessage ""
}

Usage:

set your message to telegramMessage global variable

global telegramMessage "Wolfy was here"

run script

/system script run SendToTelegram

You can use this in combination with netwach:

you should recieve a message to your telegram :)

How to use

in my script fill array with port aliases:

:global PFVports {http="80";ssh="22";https="443";ftp=23};

add a comment to your NAT rule, that starts with “PFV_” and folows with port alias like that:

Now run my script and it will automatically set dst-port to whatever you set (in script) http port value… in my example port 80.

Next time you need to change some ports, you don’t need to change one by one, just update PFVports array and re-run this script.

Note:

dst-port is just one of many things that can be changed with this script… it can be easily changed to do whatever you need.

Hope you like it :)

E-mail tool is the utility that allows to send e-mails from the router. Tool can be used to send regular configuration backups and exports to network administrator.
Email tool uses only plain authentication and tls encryption. Other methods are not supported.

All data that you need is here:

Server:   74.125.136.108 [smtp.gmail.com] <- you can't use hostname
Port:     587
From:     <your name> <- nice name
User:     <gmail username> <- without @gmail.com
Password: <gmail password>

Configuring this tool is very simple, all you need to do is fill your data as shown in the picture

or you can do this in one step from the terminal:

/tool e-mail set address=74.125.136.108 from="<your name>" password=<gmail password> port=587 start-tls=yes user=<gmail username>

This is all you need to do… next time I will write some usage example. If you have some your example, you can leave it in a comment ;)

Before I started to wrote this post, I thought that would be nice to say some word about PPTP VPN and Mikrotik RouterOS, but then I realized that if you are reading this, there is no need to explain what is PPTP VPN server or Mikrotik RouterOS.

Here is a simple step by step tutorial with images and all information that you need to get a fully working PPTP VPN server…

Step 1: create VPN pool

IP pools are used to define range of IP addresses that will be used for your PPTP VPN server

[admin@MikroTik] > /ip pool print
 NAME      RANGES
 VPN-pool  192.168.1.101-192.168.1.110

Step 2: create a VPN user

In this step you will create a user that can connect to your VPN Server. In this example only one user is created, but you can add as many user as you need…

[admin@MikroTik] > /ppp secret print
 # NAME SERVICE CALLER-ID PASSWORD PROFILE     REMOTE-ADDRESS
 0 ppp1 pptp    ppp1      ****     VPN-profile

Step 3: create a VPN profile

From wiki.mikrotik.com

PPP profiles are used to define default values for user access records stored under /ppp secret submenu. Settings in /ppp secret User Database override corresponding /ppp profile settings except that single IP addresses always take precedence over IP pools when specified as local-address or remote-address parameters.

[admin@MikroTik] > /ppp profile print
 1    name="VPN-profile" local-address=192.168.1.1 remote-address=VPN-pool bridge=br1 use-mpls=default
      use-compression=default use-vj-compression=default use-encryption=yes only-one=default
      change-tcp-mss=yes address-list="" dns-server=8.8.8.8,8.8.4.4

Step 4: Create PPTP Server Binding (Optional)

This step is optional, because your VPN server will work even if you skip this.

In this step you bind user ppp1 to interface pptp-in1. This is very useful if you need to create firewall rules for a specific user.

Step 5: Enable VPN Server

In this step we just need to enable our PPTP server and set default profile…

[admin@MikroTik] > /interface pptp-server server print
           enabled: yes
           max-mtu: 1450
           max-mru: 1450
              mrru: 1600
    authentication: mschap1,mschap2
 keepalive-timeout: 30
   default-profile: VPN-profile

Step 6: Configure bridge (Optional)

Like step 4, even this step is optional. This step is the main reason that I’m writing this tutorial, so it deserves a few word :)

If you skip this step, you will be able to connect to your VPN server, you will have the same public IP as your VPN server, but you will not see any other devices connected on this subnet. If this is OK for you, you don’t need to do anything else.

If you want to see other devices in your subnet, you must change ARP mode for your Bridge. For more details about ARP modes go to mikrotik documentation

[admin@MikroTik] > /interface bridge print
Flags: X - disabled, R - running
  0    R name="br1" mtu=1500 l2mtu=1598 arp=proxy-arp mac-address=4C:5E:0C:21:A4:85 protocol-mode=rstp
         priority=0x8000 auto-mac=no admin-mac=4C:5E:0C:21:A4:85 max-message-age=20s forward-delay=15s
         transmit-hold-count=6 ageing-time=5m

Step 7: Finish

If you did all right, you now have a working PPTP VPN server.

Important: Don’t forget to open port 1723 (tcp) in your firewall settings:

/ip firewall filter add chain=input comment="PPTP VPN" dst-port=1723 protocol=tcp

If you need any help or I did something wrong, leave a comment and I will try to do my best to help you.