Hello :) I'm excited to share the biggest update yet for integrating MikroTik routers with network detection and response systems.
What's new in v3.0.0:
The biggest change is the completely redesigned interactive installer, added compatibility with Clean NDR and added a proper uninstall option too.
Just run:
./easyinstall.sh
...and follow the prompts.
You now get to choose your NDR platform:
- SELKS - The trusted classic that many of us have relied on.
- Clean NDR - The next evolution with modernized architecture.
The installer handles Docker, dependencies, interfaces, and services automatically. You'll still need to manually configure your MikroTik credentials and Telegram settings in the generated Python scripts afterward, but the heavy lifting is done for you.
For existing users: Due to the major changes in how everything works, a fresh install on Debian 12 is recommended rather than trying to upgrade. The new approach is worth it though - much cleaner and easier to manage.
Multi-device support remains strong for SELKS installations (Clean NDR is single-device for now), so if you're managing multiple MikroTik routers, you're covered.
The project keeps the same lightweight approach - monitor TZSP traffic, analyze with Suricata, automatically block threats on your MikroTik firewall, get Telegram notifications. Simple but effective.
Available now on GitHub: https://github.com/angolo40/mikrocata2selks
Anyone who's been using this for network security, I'd love to hear how the new installer works for you.
