groove/routeros-scripts-main
1
0
Fork 0
mirror of https://github.com/eworm-de/routeros-scripts.git synced 2026-01-18 06:59:32 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
3367 commits 4 branches 247 tags 10 MiB
Commit graph

41 commits

Author SHA1 Message Date
Christian Hesse
0fffb5198e netwatch-dns: support multiple certificates 
Some services use certificates issued by differnt CA certificates,
depending on geolocation. One example is dns.google, which may require
either of 'GTS Root R1' or 'GTS Root R4'.

    /tool/netwatch/add comment="doh, dns, name=google-dns-ipv4, doh-cert=GTS Root R1:GTS Root R4" host=8.8.8.8 type=simple;
 2026-01-16 13:52:18 +01:00
Christian Hesse
6fd28bf8f7 netwatch-dns: check the certificate is available for fetch 
That trust is not needed for DNS functionality (that was checked before),
but for our hacky check with fetch.
 2026-01-14 15:05:07 +01:00
Christian Hesse
2b8dfec2f7 bump required RouterOS version for all scripts 2026-01-12 10:00:30 +01:00
Christian Hesse
623f96d94a update copyright for 2026 2026-01-01 13:50:07 +01:00
Christian Hesse
222404535b netwatch-dns: drop declaration of unused function 2025-12-10 16:29:20 +01:00
Christian Hesse
c697c321e6 netwatch-dns: drop early check... 
... as the later check should handle that just fine.
 2025-12-09 21:48:16 +01:00
Christian Hesse
96896c37e5 netwatch-dns: update wording to reflect the extra check 2025-12-08 09:36:03 +01:00
Christian Hesse
6e37bab481 netwatch-dns: add active check to keep DoH server 2025-12-08 09:33:07 +01:00
Christian Hesse
7772fbb22d netwatch-dns: define certificate use 2025-11-19 16:19:59 +01:00
Christian Hesse
b068f86995 netwatch-dns: fix indention 2025-06-25 10:47:12 +02:00
Christian Hesse
d46574b4fe netwatch-dns: retry doh server... 
... for more resilience on bad connectivity or saturated link.
 2025-06-25 10:30:26 +02:00
Christian Hesse
a523f97938 netwatch-dns: :do ... on-error=... -> :onerror ... do=... 2025-05-22 10:13:52 +02:00
Christian Hesse
2d39dbdf7c netwatch-dns: check for global config to be ready 2025-05-08 09:51:08 +02:00
Christian Hesse
2374be9a21 netwatch-dns: fail if global functions do not become ready 2025-05-08 09:51:07 +02:00
Christian Hesse
2d41ad718d netwatch-dns: use :onerror for outer block 2025-05-08 09:51:07 +02:00
Christian Hesse
3ef4588601 netwatch-dns: add dependencies on device-mode 2025-01-30 09:00:02 +01:00
Christian Hesse
299b34883f netwatch-dns: use short url rsc.eworm.de 2025-01-29 14:14:27 +01:00
Christian Hesse
9e3729c279 update copyright for 2025 2025-01-02 00:04:06 +01:00
Christian Hesse
d89a369485 netwatch-dns: use $ExitError to indicate unintentional error 2024-12-09 11:49:50 +01:00
Christian Hesse
09e8b1d219 netwatch-dns: explicitly expect type=A... 
... which is provided since 7.16beta7 (but require next stable release
7.16 as that is available meanwhile).
 2024-11-27 11:56:44 +01:00
Christian Hesse
09dcd51feb netwatch-dns: give warning on CRL use 2024-09-05 09:54:35 +02:00
Christian Hesse
d360cc05be netwatch-dns: disable DoH if time not sync... 
... as it is possible that time is off, DNS via DoH fails (cert invalid),
and finally syncing time fails due to failing DNS.
 2024-08-19 15:10:37 +02:00
Christian Hesse
6fbafe76ba bump RouterOS requirement for all scripts and modules... 
... now that global-functions requires RouterOS 7.14 anyway.
 2024-07-16 13:50:22 +02:00
Christian Hesse
009674b5bc bump RouterOS requirement for all scripts and modules... 
... now that global-functions requires RouterOS 7.13 anyway.
 2024-04-07 22:51:24 +02:00
Christian Hesse
8ea24540c4 netwatch-dns: switch to $LogPrint 2024-03-12 20:37:57 +01:00
Christian Hesse
8fcb8efbea netwatch-dns: drop main function, use :do with on-error 2024-03-12 15:27:15 +01:00
Christian Hesse
1e8918fdaa global-functions: $ScriptLock: do not exit from global function 2024-03-12 15:27:15 +01:00
Christian Hesse
5af8b95444 netwatch-dns: do not exit with error 2024-03-12 15:27:15 +01:00
Christian Hesse
458fd1fdcd netwatch-dns: move code into function 2024-03-04 21:40:34 +01:00
Christian Hesse
80f587ddb5 netwatch-dns: use :jobname to get script name 2024-01-30 00:52:21 +01:00
Christian Hesse
0ad1a79d67 netwatch-dns: be move verbose on time to settle 2024-01-18 21:07:52 +01:00
Christian Hesse
5fd8c8a760 netwatch-dns: check DoH server with fetch 
This way we do not have to configure possibly non-functional servers to
check. The query is for doh-check.eworm.de of type TXT, the expected
answer is 'doh-check-OK'.

% dig TXT doh-check.eworm.de +https @1.1.1.1

; <<>> DiG 9.18.21 <<>> TXT doh-check.eworm.de +https @1.1.1.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42226
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;doh-check.eworm.de.		IN	TXT

;; ANSWER SECTION:
doh-check.eworm.de.	63791	IN	TXT	"doh-check-OK"

;; Query time: 16 msec
;; SERVER: 1.1.1.1#443(1.1.1.1) (HTTPS)
;; WHEN: Mon Jan 15 13:55:36 CET 2024
;; MSG SIZE  rcvd: 72
 2024-01-15 14:07:38 +01:00
Christian Hesse
85aeeadcee netwatch-dns: check DoH server functionality... 
... and try all servers one after another.
 2024-01-11 15:33:03 +01:00
Christian Hesse
80db12a3e9 netwatch-dns: enable DoH certificate verification... 
... if a certificate is named in configuration.
 2024-01-11 09:22:32 +01:00
Christian Hesse
9a73fc526f update copyright for 2024 2024-01-01 15:25:25 +01:00
Christian Hesse
81a86ee043 netwatch-dns: get doh host name from static dns 2023-11-27 18:21:47 +01:00
Christian Hesse
f60c72dc78 netwatch-dns: match on word boundary 2023-10-27 22:55:15 +02:00
Christian Hesse
313e026229 netwatch-dns: increase startup delay 
In RouterOS 7.9 netwatch itself comes with a (default) startup-delay of five
minutes. Increase our delay to make sure netwatch is active.
 2023-06-28 11:29:02 +02:00
Christian Hesse
42c658e1d4 netwatch-dns: reorder variables 2023-06-01 09:53:33 +02:00
Christian Hesse
007d1ff7b8 netwatch-dns: handle status 'up' only 2023-06-01 09:53:33 +02:00
Christian Hesse
a832fd04ef rename scripts and add file extension ".rsc" 
No functional change for the user... The migration is done
automatically.
 2023-03-07 22:26:01 +01:00