you can't use MikroTik ssh client in script.
sorry.

Hi! Is there any way to determine my current ssh or web session in /user active? I.e. I want to run script which adds my local machine (from which I connect to Mikrotik) ip address to specific address-list. Something like: /ip firewall address-list add list=FreeInternet address=[/user active get [fi...

Are you really understand picture provided in the article? OSPF is only tool, convenient but not necessary here.

And so, ECMP has nothing to do with it.

OSPF don't, but ECMP do.

it appears that my bridges are combining all the tagged and untagged traffic together

Sure, unless you have assigned ports especially to vlan2.

Try to disable RSTP on all bridges with trunk ports.
What ROS version are you using?

Yes, until next reboot new DR or BDR.
This is by design.

The problem is still persists. CCR1009-8G-1S-1S+, 6.37.1.

On small packets (like ACKs) overhead of GRE may be noticeable...

No, it's not possible. example: address list 1: block_scanner address list 2: block_permanent_blacklisted When there are two rules (first one only allows IP addresses which are not in block_scanner , this rule will be taken without checking the second one if the IP is maybe on the block_permanent_b...

Or can I add two identically destination NAT rules but only the address list is different?

Sure.

JFYI: accept action in raw table does not mean to bypass all others.

@normis, thank you. Sad but "do not argue with weather". Probably it would be wise to issue an error when entering not continuous netmask instead of convert it to the wrong range... This is a situation where the bitmap address lists I mentioned at the Amsterdam MUM could be useful. Could y...

[***-router] > /ip firewall filter add chain=forward src-address=10.10.0.137/255.255.0.255 [***-router] > /ip firewall filter export # jan/04/2017 09:13:52 by RouterOS 6.37.1 # software id = P3RE-KFSV # /ip firewall filter add chain=forward src-address=10.10.0.137-10.10.255.137 Easy to see that 10....

Are you sure your queued packets are not fasttracked?

On the occasion I have written functional analogue of ipcalc. This is my near the first Mikrotik script, so don't hesitate to comment. :global ipcalc do={ # # GL(c), 2016 # :local pOpt $1 :local pIpaddr $2 :local pNetmask $3 :if ([:len $pOpt] = 0) do={ :error "ipcalc usage:\n\r \$ipcalc [-m|-p|...

Try to use src-nat with dst-nat to guarantee DNS answer passed through the router and then de-nated rightly.

What RouterOS version are you using?
In contemporary ones

In my AS I have more than 10 different ways between some of routers. Links have different speed, many of them is redundant. OSPF costs are assigned based on link speed, which is from 100kbps to 10Gbps.
Sorry, but your solution is very inconvient for my case.

Is there a way to disable ECMP automagical behavior of OSPF?

+1
Please, add DNS zone forwarding feature in the next release!