It's likely your firewall misconfigured.
Use my firewall which I tried my best to conform to various IETF specs, built from scratch: viewtopic.php?f=2&t=172360
Use a separate device. I use a Pi, with dnscrypt-proxy running for DoH and Pi-Hole as the DNS Sinkhole. Uptime more than 8 months excluding updates/firmware patches/reboots.Problem with DoH was not fixed ?! omg
I use PCC+Nth mangle load balancing + recursive routes just fine. I've shared the config in previous posts.as far as I among other folks on this topic have checked recursive route for the purpose of failover does not come along with PCC load balancing if two or more route marks are being used.
Web Caching proxy tools still exist in 2021? Crazy.Caching proxies in 2021 with most websites running TLS nowadays, is... oxymoron.
That is also correct. Do keep us updated.I'll wait from support, the behaviour ain't quite right.
Any user that has a pppoe-client as WAN out there is using a 12 bytes lower MTU than his provider supports, if everything is left to auto/defaults that is.
I wonder if those values need tweaking to give a potentially better outcome.Same as yours:
5 sec and 1514 bytes
@SiBThis FailOver was public at MikroTik WIKI, now it's moved/re-write here: https://help.mikrotik.com/docs/display/ ... upOverview
Great, now I know they reworked my article without even mentioning me... That's a bit depressing :)
add action=mark-connection chain=prerouting comment="Force Pi to ISP1" disabled=yes dst-address-type=!local dst-address-list=!not_in_internet in-interface=LAN new-connection-mark=ISP1_conn passthrough=yes src-address=192.168.88.91
Check in IP>Firewall>NATIn the LAN behind the router 192.168.88.1 is an LAN-connected device PC with the address 192.168.88.254.
Is there a way to check whether port 502 is open on PC by RouterOS means?
Does absolutely nothing. "No results found" in 0.1msEnter your public IP into the search form field and press the magnifying glass.Go check Shodan for your public IP space to see what they've discovered.
I disagree with this. Quick Set is very useful to get online in 5 seconds after a clean install/first time install to get up and running.... and Quick Setmaybe a separate soho.npk that includes the torrent client, kid-control and SMB server.. :)
No forum rule is violated by quoting anything dudeYou don't have to quote at all, I suggest you try it sometimes.I can't bother to quote everything cleanly, so I'll reply in paragraph wise.
Is that even possible Normis? To remove the ethernet interface itself?What kind of device do you have (model)?
How did you remove the interface ?
add action=mark-connection chain=prerouting comment="Force my laptop to ISP2" dst-address-type=!local disabled=yes dst-address-list=!not_in_internet in-interface=LAN new-connection-mark=ISP2_conn passthrough=yes src-address=192.168.88.103
RouterOS is enterprise-grade. OpenWRT is consumer-grade. Why would people ever want to use OpenWRT over RouterOS?I also see that some users instead load OpenWRT - is there a comparison of issues or features somewhere?
Seems likely, it coincides with IP>Cloud issues people were facing including me along with the forum timing out just about a week ago hahaha...Or the whole MikroTik team was hacked :D
Exactly, like MikroTik markets itself towards WISPs and ISPs, not Wi-Fi.Lol mikrotik barely have Wifi 5 and you want them to start doing FXS
I have two PPPoE clients from two different ISPs, whereby I use PCC to load balance. The issue is widely known, ROS's UPnP implementation does not work with multi-WAN setup.Hello,
could you please share your configuration to try understand :)
Best regards
Also be sure to configure the "cable modem" in bridge mode, to allow the MikroTik to handle WAN interface completely.Status Report: so far the "sluggishness" of the network is gone.
Thanks for all hints.
Mauricio
Yeah, I tried it via address. Does not work.I mean, not via PPP Profile but directly, with /ipv6 address add