Code: Select all
/ip firewall mangle add action=mark-connection chain=output comment="VPN Routing" dst-address-list=OpenDNS new-connection-mark=VPN
/ip firewall mangle add action=mark-connection chain=output comment="VPN Routing" dst-address-list=OpenDNS new-connection-mark=VPN
imho, a PC CPU is way more powerful than (lower end) MT CPUs. Hardware tricks like fast-path make up for that and this resembles ASICMikrotik routers are generic CPUs like a PC would be, ASICs you will find in higher end gear like Cisco.
Forward to what? I'd expect keep-alive response ending up in input chainSo whereas the keepalive request packet is handled by chain output, the keepalive response packet is handled by chain forward.
I'd define it as: has passed traffic in one direction.established = state tracking has seen traffic in both directions.