Sinbad
Honorary Master
- Joined
- Jun 5, 2006
- Messages
- 88,940
- Reaction score
- 41,636
wtf.
This used to work, I'm sure of it.
/ip firewall mangle
add action=mark-routing chain=prerouting log=yes new-routing-mark=VPN src-address=10.0.0.98 # Mark packets from media server with routing mark
add action=mark-routing chain=prerouting dst-port=119 new-routing-mark=main protocol=tcp #unmark packets for nntp
/ip firewall nat
add action=masquerade chain=srcnat out-interface=pptp-ipvanish routing-mark=VPN
add action=dst-nat chain=dstnat dst-port=53 protocol=udp src-address=10.0.0.2-10.0.0.254 to-addresses=10.0.0.1
add action=masquerade chain=srcnat out-interface=ether5-FTTH to-addresses=0.0.0.0
add action=dst-nat chain=dstnat dst-port=34567 protocol=tcp to-addresses=10.0.0.3 to-ports=34567
/ip route
add distance=1 gateway=pptp-ipvanish routing-mark=VPN #send VPN traffic down the pptp vpn
[admin@MikroTik] /ip route> print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADS 0.0.0.0/0 196.212.61.1 0
1 S 0.0.0.0/0 pptp-ipvanish 1
2 ADC 10.0.0.0/24 10.0.0.1 bridge-local 0
3 ADC 10.112.112.135/32 172.20.0.1 pptp-ipvanish 0
4 DC 192.168.0.0/24 192.168.0.1 Guest 255
5 ADC 196.212.61.0/24 196.212.61.xx ether5-FTTH 0
[admin@MikroTik] /interface pptp-client> print
Flags: X - disabled, R - running
0 R name="pptp-ipvanish" max-mtu=1420 max-mru=1420 mrru=disabled connect-to=jnb-c03.ipvanish.com user="ipx" password="xx" profile=default-encryption
keepalive-timeout=disabled add-default-route=no dial-on-demand=no allow=pap,chap,mschap1,mschap2
Why doesn't that route go active? It is set with routing-mark VPN, though it doesn't show here
This used to work, I'm sure of it.
/ip firewall mangle
add action=mark-routing chain=prerouting log=yes new-routing-mark=VPN src-address=10.0.0.98 # Mark packets from media server with routing mark
add action=mark-routing chain=prerouting dst-port=119 new-routing-mark=main protocol=tcp #unmark packets for nntp
/ip firewall nat
add action=masquerade chain=srcnat out-interface=pptp-ipvanish routing-mark=VPN
add action=dst-nat chain=dstnat dst-port=53 protocol=udp src-address=10.0.0.2-10.0.0.254 to-addresses=10.0.0.1
add action=masquerade chain=srcnat out-interface=ether5-FTTH to-addresses=0.0.0.0
add action=dst-nat chain=dstnat dst-port=34567 protocol=tcp to-addresses=10.0.0.3 to-ports=34567
/ip route
add distance=1 gateway=pptp-ipvanish routing-mark=VPN #send VPN traffic down the pptp vpn
[admin@MikroTik] /ip route> print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADS 0.0.0.0/0 196.212.61.1 0
1 S 0.0.0.0/0 pptp-ipvanish 1
2 ADC 10.0.0.0/24 10.0.0.1 bridge-local 0
3 ADC 10.112.112.135/32 172.20.0.1 pptp-ipvanish 0
4 DC 192.168.0.0/24 192.168.0.1 Guest 255
5 ADC 196.212.61.0/24 196.212.61.xx ether5-FTTH 0
[admin@MikroTik] /interface pptp-client> print
Flags: X - disabled, R - running
0 R name="pptp-ipvanish" max-mtu=1420 max-mru=1420 mrru=disabled connect-to=jnb-c03.ipvanish.com user="ipx" password="xx" profile=default-encryption
keepalive-timeout=disabled add-default-route=no dial-on-demand=no allow=pap,chap,mschap1,mschap2
Why doesn't that route go active? It is set with routing-mark VPN, though it doesn't show here
Last edited: