What doesn't work is the Client-to-Client setting in Capsman>Datapath. If you select this in a datapath configuration, then select that configuration in Capsman>Configuration, then set that Configuration in Capsman>Provisioning...the setting doesn't carry all the way up. It only gets picked up if yo...

you don't need nothing. bridge will forward (flood) multicast frames. airprint uses bonjour (mdns) for service discovery only. but you need default forward=on on your wireless to enable c2c communication FWIW, this also solved my Apple HomePod problem where there was no "Now Playing" card...

Well, well, turns out 6.39 fixed this long standing problems!! My guess it was "ppp - implemented internal algorithm for "change-mss", no mangle rules necessary;"

(admin please delete) --- Turns out my ISP authentication served borked at the same time I updated FW and I assumed the wrong thing.

You can configure a rule in the postrouting chain on the Mangle page of the firewall that matches TCP traffic to your PPPoE interface and that does the change MSS and then clamp MSS to PMTU action. :D ok, this is the closest I've come to solving this issue...I still get a couple time out messages b...

MTU of your internet connection is less than 1500 and you have not configured the "clamp TCP MSS to MTU". Hmm, that may be the most viable clue yet, thanks. My MTU is <1500 on my PPPoE interface (which itself is an MLPPP DSL connection) I don't see the clamp option on any of my existing i...

OK, I'm completely at a loss at this point. My certified Mikrotik dealer says my DNS is correctly configured, and I did a fresh net install on this recommendation but no luck. I even created a firewall rule on the input chain to accept all and put it at the top of the list.

None of these suggestions work for me, and I don't see anything in my firewall (v4 or v6) trapping packets. :( [admin@T-Bone] /system package update> check-for-updates channel: current current-version: 6.35 latest-version: 6.35 status: ERROR: connection timed out [admin@T-Bone] /system package updat...

My rb2011 always returns a connection timed error on update, and I think it's because there's no package sources specified. Problem is, I can't find an address for a server.

Any help?

Following the instructions from Manual:Interface/L2TP for L2TP/IPSec setup, I have run into what I think is a firewall problem. The reason I suspect this is because I can connect to the VPN server fine from inside the network, but not from outside. Here's the ports I opened: add chain=input protocol...