Hello normis, thank you for help, here is config (i mask sensitive data)
oct/25/2013 21:24:37 by RouterOS 6.0
software id = 342G-2XBV
/interface l2tp-server
add name=xxx user=xxx
/interface bridge
add name=natBridge
add name=torBridge
/interface ethernet
set 0 name=Lan1
set 1 master-port=Lan1 name=Lan2
set 2 master-port=Lan1 name=Lan3
set 3 name=Lan4
set 4 mac-address=xxx name=WAN
/interface wireless
set 0 antenna-gain=12 country=serbia disabled=no frequency-mode=
regulatory-domain l2mtu=2290 mode=ap-bridge name=Wifi ssid=xxx
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk,wpa2-eap mode=
dynamic-keys wpa2-pre-shared-key=xxx
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m
mac-cookie-timeout=3d
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des,aes-256 pfs-group=none
/port
set 0 name=usb1
/interface ppp-client
add apn=xxx data-channel=2 info-channel=2 name=3G password=xxx
phone=*99# port=usb1 use-peer-dns=no user=xxx
/ppp profile
set 1 dns-server=192.168.x.40,8.8.4.4 use-encryption=required
/snmp community
set [ find default=yes ] security=private write-access=yes
add addresses=192.168.x.0/24 authentication-password=xxx encryption-password=xxx
name=xxx
/interface l2tp-server server
set authentication=mschap2 enabled=yes max-mru=1460 max-mtu=1460
/ip address
add address=192.168.x.1/24 interface=Lan1 network=192.168.x.0
add address=192.168.x.1/24 interface=Wifi network=192.168.x.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=WAN
/ip dhcp-server
add address-pool=lan disabled=no interface=Lan1 name=lan
add address-pool=wifi disabled=no interface=Wifi name=wifi
/ip dhcp-server network
add address=192.168.x.0/24 dns-server=192.168.x.40,85.126.4.170,77.93.223.198
gateway=192.168.x.1
add address=192.168.x.0/24 dns-server=77.93.223.198,85.126.4.170 gateway=
192.168.x.1
/ip firewall filter
add chain=input connection-state=established in-interface=WAN
add chain=input connection-state=established in-interface=3G
add chain=input connection-state=new dst-port=xxx in-interface=WAN
protocol=udp
add action=drop chain=input in-interface=WAN
add action=drop chain=input in-interface=3G
add action=add-src-to-address-list address-list=“port scanners”
address-list-timeout=2w chain=input comment=“NMAP NULL scan” protocol=tcp
tcp-flags=!fin,!syn,!rst,!psh,!ack,!urg
add action=drop chain=input comment=“dropping port scanners” src-address-list=
“port scanners”
/ip firewall nat
add action=masquerade chain=srcnat out-interface=WAN
add action=masquerade chain=srcnat out-interface=3G
add action=masquerade chain=srcnat connection-type=“” out-interface=Lan1
add action=dst-nat chain=dstnat dst-port=xxx in-interface=WAN protocol=tcp
to-addresses=192.168.x.40 to-ports=xxxx
add action=dst-nat chain=dstnat disabled=yes dst-port=xxx in-interface=WAN
protocol=tcp to-addresses=192.168.x.40 to-ports=xxx
add action=dst-nat chain=dstnat disabled=yes dst-port=xxx in-interface=WAN
protocol=udp to-addresses=192.168.x.40 to-ports=xxx
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
/ip ipsec peer
add exchange-mode=main-l2tp generate-policy=port-override hash-algorithm=sha1
nat-traversal=yes secret=“xxx”
/ip pool
add name=lan next-pool=lan ranges=192.168.x.10-192.168.x.254
add name=wifi next-pool=wifi ranges=192.168.x.10-192.168.x.254
/ip route
add check-gateway=ping distance=1 gateway=WAN
add distance=2 gateway=3G
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh port=
set winbox port=
/ppp secret
add local-address=192.168.x.1 name=xxx password=“xxx”
profile=default-encryption remote-address=192.168.x.1 service=l2tp
/snmp
set contact=xxx enabled=yes location=xxx trap-community=xxx
trap-version=2
/system clock
set time-zone-name=Europe/Belgrade
/system leds
set 0 interface=Wifi
/system logging
add topics=e-mail,debug
/system ntp client
set enabled=yes primary-ntp=85.252.162.7 secondary-ntp=213.151.89.43
/system ntp server
set broadcast=yes broadcast-addresses=192.168.x.1 enabled=yes
/tool e-mail
set address=193.243.x.x from=x password=xxx user=> xxx@xxx.copm
/tool sms
set channel=2 port=usb1
And if you have some suggestions for everything in configuration, please advice 