From c40db98513ac56666b4c3595155450668353e13f Mon Sep 17 00:00:00 2001
From: Pothi Kalimuthu <1254302+pothi@users.noreply.github.com>
Date: Thu, 10 Aug 2023 08:09:27 +0530
Subject: [PATCH] Script to alert upon unknown device

---
 scripts/unknown-device.rsc | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 scripts/unknown-device.rsc

diff --git a/scripts/unknown-device.rsc b/scripts/unknown-device.rsc
new file mode 100644
index 0000000..4531f43
--- /dev/null
+++ b/scripts/unknown-device.rsc
@@ -0,0 +1,22 @@
+# Modified from https://forum.mikrotik.com/viewtopic.php?t=181433
+
+:global adminEmail
+
+# :log info "Success"
+
+/ip dhcp-server lease
+:if (($leaseBound=1) && ([find where dynamic mac-address=$leaseActMAC]!="")) do {
+    :local leaseHostName $"lease-hostname"
+    :do {
+        :tool e-mail send \
+            to=$adminEmail \
+            subject="Unknown Device Alert [MAC: $leaseActMAC]" \
+            body="The following unknown device received a dynamic IP address:
+                Mac: $leaseActMAC
+                Ip: $leaseActIP,
+                Host: $leaseHostName,
+                Bound: $leaseBound"
+        :log info "Unknown Device: $leaseActMAC, $leaseActIP, $leaseHostName"
+    } on-error={:log error "Failed to send alert email upon unknown device."}
+}}
+