If I were you, I would just do something like this:

Thank you. Burned too much time on this for now... Will revisit later. Something about my config makes it all or nothing regardless.

Does something like this do the trick? /ip firewall mangle add action=mark-connection chain=prerouting dst-port=!80,443 new-connection-mark=under_nordvpn passthrough=yes protocol=tcp Thank you. Yes, I think, as you wrote it, that would work for global ports like that, or one specific destination, b...

Great thread. Thank you. I am trying to do the opposite of Use-case #2... with SurfShark which appears to have a similar ip sec setup Use-case #4: Specific traffic (by destination address and/or destination port preferably) routed AROUND (bypass)VPN server Intent is for all traffic to go through the...

https://forum.mikrotik.com/viewtopic.php?f=23&t=169273 Appreciate the link, but it is exactly the opposite of the scenario I am describing. I need a Use-case #4: Specific traffic (by destination and/or destination port preferably) routed AROUND VPN server I'll see if I can tweek their use-case ...

Followed this tutorial to get my SurfShark IPSec VPN handling all outbound traffic, but want my outbound SSL VPN traffic for work to go straight out my ISP. I've read a bunch of bypass VPN for Netflix and such articles and came up with... Added a new default route with a routing-Mark and a Mangle ba...

Same here, 6.42.1