You are doing it the hard way.
Block packets dst-port = 123 in-interface=WAN
You dont have to rate limit / drop all the ntp packets originating from LAN destined to WAN.
[admin@Mikrotik] > routing ospf instance set 0 redistribute-connected=as-type-2
Man ...We plan to make a new Dude release this year, it should fix this, and many other bugs that have been gathered over the last years. Please post about RouterOS v6.33 and make new Dude posts in a separate thread.
This can be a game changer for most of us and put RouterOS on the high end leauge of the routers.LAC/LNS is currently unsupported.
Let me fix this for you:We have not released any new version since v6.7 !
[admin@MikroTik] > /sys ssh 10.20.2.8 DH_compute_key failed err: error:05066066:lib(5):func(102):reason(102)
What about ip>firewall>mangle ?Nearly everything utilizes the cores now. Just upgrade to v6.3 and check the "/tool profile" menu to see how load is distributed.
If there are "known issues", please state them in your change_log or at least make a known issues thread !graphing reset for interface data transfer speeds will be fixed in next release.
http://info.iet.unipi.it/~luigi/netmap/I actually wonder how fastpath is implemented without using ASIC chips.