mikrotik rage - routes

Sinbad

Honorary Master
Joined
Jun 5, 2006
Messages
88,940
Reaction score
41,636
wtf.
This used to work, I'm sure of it.

/ip firewall mangle
add action=mark-routing chain=prerouting log=yes new-routing-mark=VPN src-address=10.0.0.98 # Mark packets from media server with routing mark
add action=mark-routing chain=prerouting dst-port=119 new-routing-mark=main protocol=tcp #unmark packets for nntp
/ip firewall nat
add action=masquerade chain=srcnat out-interface=pptp-ipvanish routing-mark=VPN
add action=dst-nat chain=dstnat dst-port=53 protocol=udp src-address=10.0.0.2-10.0.0.254 to-addresses=10.0.0.1
add action=masquerade chain=srcnat out-interface=ether5-FTTH to-addresses=0.0.0.0
add action=dst-nat chain=dstnat dst-port=34567 protocol=tcp to-addresses=10.0.0.3 to-ports=34567
/ip route
add distance=1 gateway=pptp-ipvanish routing-mark=VPN #send VPN traffic down the pptp vpn



[admin@MikroTik] /ip route> print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADS 0.0.0.0/0 196.212.61.1 0
1 S 0.0.0.0/0 pptp-ipvanish 1
2 ADC 10.0.0.0/24 10.0.0.1 bridge-local 0
3 ADC 10.112.112.135/32 172.20.0.1 pptp-ipvanish 0
4 DC 192.168.0.0/24 192.168.0.1 Guest 255
5 ADC 196.212.61.0/24 196.212.61.xx ether5-FTTH 0


[admin@MikroTik] /interface pptp-client> print
Flags: X - disabled, R - running
0 R name="pptp-ipvanish" max-mtu=1420 max-mru=1420 mrru=disabled connect-to=jnb-c03.ipvanish.com user="ipx" password="xx" profile=default-encryption
keepalive-timeout=disabled add-default-route=no dial-on-demand=no allow=pap,chap,mschap1,mschap2


Why doesn't that route go active? It is set with routing-mark VPN, though it doesn't show here
 
Last edited:
weird. Rebooted the router
[admin@MikroTik] /ip route> print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 pptp-ipvanish 1
1 ADS 0.0.0.0/0 196.212.61.1 0


k.
 
Could that dynamic route be causing it? It has a cost of 0, but i do see you have a preferred source on it :confused:

Still there...

[admin@MikroTik] /ip route> print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 pptp-ipvanish 1
1 ADS 0.0.0.0/0 196.212.61.1 0
2 ADC 10.0.0.0/24 10.0.0.1 bridge-local 0
3 ADC 10.112.112.133/32 172.20.0.7 pptp-ipvanish 0
4 DC 192.168.0.0/24 192.168.0.1 Guest 255
5 ADC 196.212.61.0/24 196.212.61.fokjou ether5-FTTH 0


I think that's just the directly-connected route created by the pptp connection
 
Last edited:
Does Mikrotik support OpenVPN? (bit off-topic but curious as to why PPTP is being used here)
 
Does Mikrotik support OpenVPN? (bit off-topic but curious as to why PPTP is being used here)

probably yes. Just going with something simple to hide the origin of my torrentz.
 
Top
Sign up to the MyBroadband newsletter
X