access two networks via same interface

Hey … I’m beginner , my English isn’t good enough … and I hope you to help me in my problem
I have RB750Gl
My ADSL modem IP is = 192.168.1.1 … WAN (Interface)
My customers network is = 10.20.20.1/24 LAN

IP > Addresses is
192.168.1.100/24 … WAN
10.20.20.1/24 … LAN
IP > Routes
192.168.1.1 … Gateway for internet

I have 23 piece of UBNT M5 Products … such as … Rocket M5 … Nanostation M5 … all of UBNT products in the range of network … 192.168.2.0/24
rocket … 192.168.2.50
nanostaion … 192.168.2.51
nanostaion loco … 192.168.2.52
…etc .
My PC’s IP is = 10.20.20.65 and its static

The question is … how to setup mikrotik to access and open UBNT product’s pages when my PC is 10.20.20.65 and access the internet in the same interface and same time …
I did it before long time and succeeded … but it was by luck
Thanks

If you know what 192.168.2.x address those devices use as default gateway, simply add it to interface where you connect them:

/ip address
add address=192.168.2.x/24 interface=<interface with UBNT devices>

If you don’t know it, or if they don’t have any, just pick one address and then also add masquerade rule:

/ip firewall nat
add action=masquerade chain=srcnat dst-address=192.168.2.0/24

Thanks for helping me
But I did it now … but in vain

You realize that all we know here is what you tell us, right? If you want better answer, you need to provide some new information. There are many possible reasons why something doesn’t work. For example, it might be blocked by firewall. But nobody here knows what you have there, only you do.

Exporting configuration (“/export hide-sensitive” in terminal) and posting it often helps.

streaming89 parent=global-out priority=8 queue=default
add burst-limit=1k burst-threshold=1k burst-time=1m[] comment=“Streamin Telb”
disabled=no limit-at=0 max-limit=1k name=XNXXIn packet-mark=streaming89
parent=global-in priority=8 queue=default
/routing bgp instance
set default as=65530 client-to-client-reflection=yes disabled=no
ignore-as-path-len=no name=default out-filter=“” redistribute-connected=
no redistribute-ospf=no redistribute-other-bgp=no redistribute-rip=no
redistribute-static=no router-id=0.0.0.0 routing-table=“”
/routing ospf instance
set [ find default=yes ] disabled=no distribute-default=never in-filter=
ospf-in metric-bgp=auto metric-connected=20 metric-default=1
metric-other-ospf=auto metric-rip=20 metric-static=20 name=default
out-filter=ospf-out redistribute-bgp=no redistribute-connected=no
redistribute-other-ospf=no redistribute-rip=no redistribute-static=no
router-id=0.0.0.0
/routing ospf area
set [ find default=yes ] area-id=0.0.0.0 disabled=no instance=default name=
backbone type=default
/routing ospf-v3 instance
set [ find default=yes ] disabled=no distribute-default=never metric-bgp=auto
metric-connected=20 metric-default=1 metric-other-ospf=auto metric-rip=20
metric-static=20 name=default redistribute-bgp=no redistribute-connected=
no redistribute-other-ospf=no redistribute-rip=no redistribute-static=no
router-id=0.0.0.0
/routing ospf-v3 area
set [ find default=yes ] area-id=0.0.0.0 disabled=no instance=default name=
backbone type=default
/snmp community
set [ find default=yes ] addresses=0.0.0.0/0 authentication-protocol=MD5
encryption-protocol=DES name=public read-access=yes security=none
write-access=no
/system logging action
set 0 memory-lines=100 memory-stop-on-full=no name=memory target=memory
set 1 disk-file-count=2 disk-file-name=log disk-lines-per-file=100
disk-stop-on-full=no name=disk target=disk
set 2 name=echo remember=yes target=echo
set 3 bsd-syslog=no name=remote remote=:: remote-port=514 src-address=0.0.0.0
syslog-facility=daemon syslog-severity=auto target=remote
/user group
set read name=read policy=“local,telnet,ssh,reboot,read,test,winbox,password,w
eb,sniff,sensitive,api,!ftp,!write,!policy” skin=default
set write name=write policy=“local,telnet,ssh,reboot,read,write,test,winbox,pa
ssword,web,sniff,sensitive,api,!ftp,!policy” skin=default
set full name=full policy=“local,telnet,ssh,ftp,reboot,read,write,policy,test,
winbox,password,web,sniff,sensitive,api” skin=default
/interface bridge filter
add action=log chain=input comment=“Block DHCP servers on 192.168.0.0/16”
disabled=no dst-address=255.255.255.255/32 ip-protocol=udp log-prefix=“\DE
\DD\E1\C9 \D1\C7\E6\CA\D1 \DE\DD\E1\C9 \D1\C7\E6\C9\CA\D1 \DE\DD\E1\C9 \D1
\C7\E6\CA\D1 \DE\DD\E1\C9 \D1\C7\E6\CA\D1 \DE\DD\E1\C9 \D1\C7\E6\CA\D1”
mac-protocol=ip src-address=192.168.0.0/16 src-port=67-68
add action=log chain=input comment=“Block DHCP servers on 10.10.0.0/16”
disabled=no dst-address=255.255.255.255/32 ip-protocol=udp log-prefix=“\DE
\DD\E1\C9 \D1\C7\E6\CA\D1 \DE\DD\E1\C9 \D1\C7\E6\C9\CA\D1 \DE\DD\E1\C9 \D1
\C7\E6\CA\D1 \DE\DD\E1\C9 \D1\C7\E6\CA\D1 \DE\DD\E1\C9 \D1\C7\E6\CA\D1”
mac-protocol=ip src-address=10.10.0.0/16 src-port=67-68
add action=log chain=input comment=“Block DHCP servers on 10.30.0.0/16”
disabled=no dst-address=255.255.255.255/32 ip-protocol=udp log-prefix=“\DE
\DD\E1\C9 \D1\C7\E6\CA\D1 \DE\DD\E1\C9 \D1\C7\E6\C9\CA\D1 \DE\DD\E1\C9 \D1
\C7\E6\CA\D1 \DE\DD\E1\C9 \D1\C7\E6\CA\D1 \DE\DD\E1\C9 \D1\C7\E6\CA\D1”
mac-protocol=ip src-address=10.30.0.0/16 src-port=67-68
add action=drop chain=input comment=“Block DHCP servers on 192.168.0.0/16”
disabled=no dst-address=255.255.255.255/32 ip-protocol=udp mac-protocol=
ip src-address=192.168.0.0/16 src-port=67-68
add action=drop chain=input comment=“Block DHCP servers on 10.10.0.0/16”
disabled=no dst-address=255.255.255.255/32 ip-protocol=udp mac-protocol=
ip src-address=10.10.0.0/16 src-port=67-68
add action=drop chain=input comment=“Block DHCP servers on 10.30.0.0/16”
disabled=no dst-address=255.255.255.255/32 ip-protocol=udp mac-protocol=
ip src-address=10.30.0.0/16 src-port=67-68
/interface bridge port
add bridge=DHCP disabled=no edge=auto external-fdb=auto horizon=none
interface=Out path-cost=10 point-to-point=auto priority=0x80
/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-pppoe=no
use-ip-firewall-for-vlan=yes
/interface l2tp-server server
set authentication=pap,chap,mschap1,mschap2 default-profile=
default-encryption enabled=no max-mru=1460 max-mtu=1460 mrru=disabled
/interface ovpn-server server
set auth=sha1,md5 certificate=none cipher=blowfish128,aes128 default-profile=
default enabled=no keepalive-timeout=60 mac-address=FE:ED:0F:02:F7:49
max-mtu=1500 mode=ip netmask=24 port=1194 require-client-certificate=no
/interface pppoe-server server
add authentication=pap,chap,mschap1,mschap2 default-profile=Master disabled=
no interface=DHCP keepalive-timeout=10 max-mru=1480 max-mtu=1492
max-sessions=0 mrru=disabled one-session-per-host=yes service-name=PPPOE
/interface pptp-server server
set authentication=mschap1,mschap2 default-profile=default-encryption
enabled=no keepalive-timeout=30 max-mru=1460 max-mtu=1460 mrru=disabled
/interface sstp-server server
set authentication=pap,chap,mschap1,mschap2 certificate=none default-profile=
default enabled=no keepalive-timeout=60 max-mru=1500 max-mtu=1500 mrru=
disabled port=443 verify-client-certificate=no
/interface wireless align
set active-mode=yes audio-max=-20 audio-min=-100 audio-monitor=
00:00:00:00:00:00 filter-mac=00:00:00:00:00:00 frame-size=300
frames-per-second=25 receive-all=no ssid-all=no
/interface wireless sniffer
set channel-time=200ms file-limit=10 file-name=“” memory-limit=10
multiple-channels=no only-headers=no receive-errors=no streaming-enabled=
no streaming-max-rate=0 streaming-server=0.0.0.0
/interface wireless snooper
set channel-time=200ms multiple-channels=yes receive-errors=no
/ip accounting
set account-local-traffic=no enabled=no threshold=256
/ip accounting web-access
set accessible-via-web=no address=0.0.0.0/0
/ip address
add address=100.100.100.1/24 disabled=no interface=DHCP network=100.100.100.0
add address=5.5.5.5/32 disabled=no interface=DHCP network=5.5.5.5
add address=10.20.20.1/22 disabled=no interface=Out network=10.20.20.0
add address=192.168.22.2/24 comment=“4407546\E3\DA\C7\CF\E5 28” disabled=yes
interface=“Built In” network=192.168.22.0
add address=192.168.24.2/24 comment=“4405488\E3\DA\C7\CF\E5 \ED\E6\E324”
disabled=yes interface=“Built In” network=192.168.24.0
add address=192.168.23.2/24 comment=“4402171\E3\DA\C7\CF\E5 \ED\E6\E3 26”
disabled=yes interface=“Built In” network=192.168.23.0
add address=192.168.25.200/24 comment=
“4409069 ----- 10 \E3\CD\E3\E6\CF \D8\E1\C8” disabled=no interface=
“Built In” network=192.168.25.0
add address=192.168.21.2/24 comment=“4403466\E3\DA\C7\CF\E5 \ED\E6\E3 20”
disabled=yes interface=“Built In” network=192.168.21.0
add address=192.168.26.2/24 comment=“4406411 ---- 19 TE-DATA
_ 3180978@tedata.net.eg 23681476”
disabled=yes interface=“Built In” network=192.168.26.0
add address=192.168.2.99/24 disabled=no interface=DHCP network=192.168.2.0
add address=192.168.2.99/24 disabled=no interface=Out network=192.168.2.0
/ip arp
add address=20.20.22.252 disabled=no interface=DHCP mac-address=
00:EB:2D:B8:A4:E7
/ip dhcp-client
add add-default-route=no disabled=no interface=Out use-peer-dns=no
use-peer-ntp=no
/ip dhcp-server config
set store-leases-disk=5m
/ip dhcp-server lease
add address=10.20.20.10 comment=“\C7\E1\CC\E5\C7\D2 \C7\E1\D1\C6\ED\D3\ED”
disabled=no mac-address=94:DE:80:F0:8D:4E
add address=10.20.20.9 always-broadcast=yes comment=“\E3\E6\C8\C7\ED\E1\ED”
disabled=no mac-address=10:30:47:FC:91:13
add address=10.20.20.11 always-broadcast=yes comment=
“\CC\E5\C7\D2 \D1\DE\E3 1” disabled=no mac-address=00:24:1D:0B:A5:8D
add address=10.20.20.12 always-broadcast=yes comment=
“\CC\E5\C7\D2 \D1\DE\E3 2” disabled=no mac-address=00:24:1D:0B:93:B3
add address=10.20.20.13 always-broadcast=yes comment=
“\CC\E5\C7\D2 \D1\DE\E3 3” disabled=no mac-address=18:A9:05:C2:0B:64
add address=10.20.20.14 comment=“\CC\E5\C7\D2 \D1\DE\E3 4” disabled=no
mac-address=B4:B5:2F:AF:0C:BC
add address=10.20.20.15 comment=“\CC\E5\C7\D2 \D1\DE\E3 5” disabled=no
mac-address=00:21:86:2E:48:3A
add address=10.20.20.16 comment=“\CC\E5\C7\D2 \D1\DE\E3 6” disabled=no
mac-address=00:24:1D:0B:A7:D4
add address=10.20.20.17 always-broadcast=yes comment=
“\CC\E5\C7\D2 \D1\DE\E3 7” disabled=no mac-address=00:23:24:0A:92:BA
add address=10.20.20.19 comment=“\CC\E5\C7\D2 \D1\DE\E3 9” disabled=no
mac-address=1C:6F:65:DF:28:97
add address=10.20.21.110 always-broadcast=yes comment=
“\C7\E3 \C7\C8\C7\E4\E6\C8 \E3\E6\C8\C7\ED\E1” disabled=no mac-address=
90:21:81:D5:E1:5A server=dhcp1
add address=10.20.20.18 comment=“\CC\E5\C7\D2 \D1\DE\E3 8” disabled=no
mac-address=00:0F:FE:F5:36:2E server=dhcp1
add address=10.20.20.8 always-broadcast=yes disabled=no mac-address=
60:D9:A0:56:03:49 server=dhcp1
add address=10.20.21.13 comment=“Telb Toshiba” disabled=no mac-address=
B8:88:E3:0F:74:B9 server=dhcp1
add address=10.20.20.65 comment=Telb disabled=no mac-address=
00:24:21:85:52:15 server=dhcp1
add address=10.20.20.75 comment=“Telb 10/100/1000” disabled=no mac-address=
78:54:2E:20:B7:8C server=dhcp1
add address=10.20.20.226 comment=Mikrotik disabled=no mac-address=
00:E0:1C:3C:4F:5A server=dhcp1
add address=10.20.21.183 comment=“Telb Mobile” disabled=no mac-address=
F0:34:04:3A:BB:33 server=dhcp1
add address=10.20.21.238 comment=“Telb Toshiba WIFI” disabled=no mac-address=
E0:CA:94:F2:89:FD server=dhcp1
add address=10.20.22.252 disabled=no mac-address=00:EB:2D:B8:A4:E7
/ip dhcp-server network
add address=10.20.20.0/22 dhcp-option=“” dns-server=“” gateway=10.20.20.1
ntp-server=“” wins-server=“”
/ip dns
set allow-remote-requests=yes cache-max-ttl=1w cache-size=4294967295KiB
max-udp-packet-size=4096 servers=“8.8.8.8,8.8.4.4,209.244.0.3,209.244.0.4,
4.2.2.1,4.2.2.2,4.2.2.3,4.2.2.4,4.2.2.5,4.2.2.6,4.2.2.7,4.2.2.8,4.2.2.9,41
.128.225.225,41.128.225.226”
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s
tcp-close-wait-timeout=10s tcp-established-timeout=1d
tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s
tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no
tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s
/ip firewall filter
add action=passthrough chain=forward disabled=no
add action=drop chain=forward comment=“\CD\CC\C8 \E3\E6\DE\DA \E1\ED\E4\DF”
disabled=no layer7-protocol=Link
add action=passthrough chain=unused-hs-chain comment=
“place hotspot rules here” disabled=yes
add action=add-dst-to-address-list address-list=XNXX-List
address-list-timeout=0s chain=forward comment=Dst-XNXX-List content=
xnxx.com disabled=no
/ip firewall mangle
add action=accept chain=prerouting disabled=no dst-address=100.100.100.0/24
in-interface=DHCP
add action=accept chain=prerouting disabled=no dst-address=192.168.21.0/24
in-interface=DHCP
add action=accept chain=prerouting disabled=no dst-address=192.168.22.0/24
in-interface=DHCP
add action=accept chain=prerouting disabled=no dst-address=192.168.23.0/24
in-interface=DHCP
add action=accept chain=prerouting disabled=no dst-address=192.168.24.0/24
in-interface=DHCP
add action=accept chain=prerouting disabled=no dst-address=192.168.25.0/24
in-interface=DHCP
add action=accept chain=prerouting disabled=no dst-address=192.168.26.0/24
in-interface=DHCP
add action=mark-connection chain=input comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\C7\E6\E1” disabled=yes in-interface=
“Built In” new-connection-mark=In1_conn passthrough=yes
add action=mark-connection chain=input comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CB\C7\E4\ED” disabled=yes in-interface=
“Built In” new-connection-mark=In2_conn passthrough=yes
add action=mark-connection chain=input comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CB\C7\E1\CB” disabled=yes in-interface=
“Built In” new-connection-mark=In3_conn passthrough=yes
add action=mark-connection chain=input comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\D1\C7\C8\DA” disabled=yes in-interface=
“Built In” new-connection-mark=In4_conn passthrough=yes
add action=mark-connection chain=input comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CE\C7\E3\D3” disabled=yes
in-interface=“Built In” new-connection-mark=In5_conn passthrough=yes
add action=mark-connection chain=input comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\D3\C7\CF\D3” disabled=yes
in-interface=“Built In” new-connection-mark=In6_conn passthrough=yes
add action=mark-routing chain=output comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\C7\E6\E1” connection-mark=In1_conn
disabled=yes hotspot=auth new-routing-mark=In1 passthrough=yes
add action=mark-routing chain=output comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CB\C7\E4\ED” connection-mark=In2_conn
disabled=yes hotspot=auth new-routing-mark=In2 passthrough=yes
add action=mark-routing chain=output comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CB\C7\E1\CB” connection-mark=In3_conn
disabled=yes hotspot=auth new-routing-mark=In3 passthrough=yes
add action=mark-routing chain=output comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\D1\C7\C8\DA” connection-mark=In4_conn
disabled=yes hotspot=auth new-routing-mark=In4 passthrough=yes
add action=mark-routing chain=output comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CE\C7\E3\D3” connection-mark=In5_conn
disabled=yes hotspot=auth new-routing-mark=In5 passthrough=yes
add action=mark-routing chain=output comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\D3\C7\CF\D3” connection-mark=In6_conn
disabled=yes hotspot=auth new-routing-mark=In6 passthrough=yes
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\C7\E6\E1” disabled=yes
dst-address-type=!local in-interface=DHCP new-connection-mark=In1_conn
passthrough=yes per-connection-classifier=both-addresses-and-ports:9/0
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\C7\E6\E1” disabled=yes
dst-address-type=!local new-connection-mark=In1_conn passthrough=yes
per-connection-classifier=both-addresses-and-ports:9/0 src-address=
100.100.100.0/24
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\C7\E6\E1” disabled=yes
dst-address-type=!local in-interface=DHCP new-connection-mark=In1_conn
passthrough=yes per-connection-classifier=both-addresses-and-ports:9/1
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\C7\E6\E1” disabled=yes
dst-address-type=!local new-connection-mark=In1_conn passthrough=yes
per-connection-classifier=both-addresses-and-ports:9/1 src-address=
100.100.100.0/24
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CB\C7\E4\ED” disabled=yes
dst-address-type=!local in-interface=DHCP new-connection-mark=In2_conn
passthrough=yes per-connection-classifier=both-addresses-and-ports:9/2
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CB\C7\E4\ED” disabled=yes
dst-address-type=!local new-connection-mark=In2_conn passthrough=yes
per-connection-classifier=both-addresses-and-ports:9/2 src-address=
100.100.100.0/24
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CB\C7\E4\ED” disabled=yes
dst-address-type=!local in-interface=DHCP new-connection-mark=In2_conn
passthrough=yes per-connection-classifier=both-addresses-and-ports:9/3
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CB\C7\E4\ED” disabled=yes
dst-address-type=!local new-connection-mark=In2_conn passthrough=yes
per-connection-classifier=both-addresses-and-ports:9/3 src-address=
100.100.100.0/24
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CB\C7\E1\CB” disabled=yes
dst-address-type=!local in-interface=DHCP new-connection-mark=In3_conn
passthrough=yes per-connection-classifier=both-addresses-and-ports:9/4
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CB\C7\E1\CB” disabled=yes
dst-address-type=!local new-connection-mark=In3_conn passthrough=yes
per-connection-classifier=both-addresses-and-ports:9/4 src-address=
100.100.100.0/24
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CB\C7\E1\CB” disabled=yes
dst-address-type=!local in-interface=DHCP new-connection-mark=In3_conn
passthrough=yes per-connection-classifier=both-addresses-and-ports:9/5
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CB\C7\E1\CB” disabled=yes
dst-address-type=!local new-connection-mark=In3_conn passthrough=yes
per-connection-classifier=both-addresses-and-ports:9/5 src-address=
100.100.100.0/24
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\D1\C7\C8\DA” disabled=yes
dst-address-type=!local in-interface=DHCP new-connection-mark=In4_conn
passthrough=yes per-connection-classifier=both-addresses-and-ports:9/6
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\D1\C7\C8\DA” disabled=yes
dst-address-type=!local new-connection-mark=In4_conn passthrough=yes
per-connection-classifier=both-addresses-and-ports:9/6 src-address=
100.100.100.0/24
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\D1\C7\C8\DA” disabled=yes
dst-address-type=!local in-interface=DHCP new-connection-mark=In4_conn
passthrough=yes per-connection-classifier=both-addresses-and-ports:9/7
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\D1\C7\C8\DA” disabled=yes
dst-address-type=!local new-connection-mark=In4_conn passthrough=yes
per-connection-classifier=both-addresses-and-ports:9/7 src-address=
100.100.100.0/24
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CE\C7\E3\D3” disabled=yes
dst-address-type=!local in-interface=DHCP new-connection-mark=In5_conn
passthrough=yes per-connection-classifier=both-addresses-and-ports:11/8
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CE\C7\E3\D3” disabled=yes
dst-address-type=!local new-connection-mark=In5_conn passthrough=yes
per-connection-classifier=both-addresses-and-ports:11/8 src-address=
100.100.100.0/24
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CE\C7\E3\D3” disabled=yes
dst-address-type=!local in-interface=DHCP new-connection-mark=In5_conn
passthrough=yes per-connection-classifier=both-addresses-and-ports:11/9
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CE\C7\E3\D3” disabled=yes
dst-address-type=!local new-connection-mark=In5_conn passthrough=yes
per-connection-classifier=both-addresses-and-ports:11/9 src-address=
100.100.100.0/24
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\D3\C7\CF\D3” disabled=yes
dst-address-type=!local in-interface=DHCP new-connection-mark=In6_conn
passthrough=yes per-connection-classifier=both-addresses-and-ports:9/8
add action=mark-connection chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\D3\C7\CF\D3” disabled=yes
dst-address-type=!local new-connection-mark=In6_conn passthrough=yes
per-connection-classifier=both-addresses-and-ports:9/8 src-address=
100.100.100.0/24
add action=mark-routing chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\C7\E6\E1” connection-mark=In1_conn
disabled=yes in-interface=DHCP new-routing-mark=In1 passthrough=yes
add action=mark-routing chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\C7\E6\E1” connection-mark=In1_conn
disabled=yes new-routing-mark=In1 passthrough=yes src-address=
100.100.100.0/24
add action=mark-routing chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CB\C7\E4\ED” connection-mark=In2_conn
disabled=yes in-interface=DHCP new-routing-mark=In2 passthrough=yes
add action=mark-routing chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CB\C7\E4\ED” connection-mark=In2_conn
disabled=yes new-routing-mark=In2 passthrough=yes src-address=
100.100.100.0/24
add action=mark-routing chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CB\C7\E1\CB” connection-mark=In3_conn
disabled=yes in-interface=DHCP new-routing-mark=In3 passthrough=yes
add action=mark-routing chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CB\C7\E1\CB” connection-mark=In3_conn
disabled=yes new-routing-mark=In3 passthrough=yes src-address=
100.100.100.0/24
add action=mark-routing chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\D1\C7\C8\DA” connection-mark=In4_conn
disabled=yes in-interface=DHCP new-routing-mark=In4 passthrough=yes
add action=mark-routing chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\D1\C7\C8\DA” connection-mark=In4_conn
disabled=yes new-routing-mark=In4 passthrough=yes src-address=
100.100.100.0/24
add action=mark-routing chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CE\C7\E3\D3” connection-mark=In5_conn
disabled=yes in-interface=DHCP new-routing-mark=In5 passthrough=yes
add action=mark-routing chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\CE\C7\E3\D3” connection-mark=In5_conn
disabled=yes new-routing-mark=In5 passthrough=yes src-address=
100.100.100.0/24
add action=mark-routing chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\D3\C7\CF\D3” connection-mark=In6_conn
disabled=yes in-interface=DHCP new-routing-mark=In6 passthrough=yes
add action=mark-routing chain=prerouting comment=
“Telb PCC \C7\E1\CE\D8 \C7\E1\D3\C7\CF\D3” connection-mark=In6_conn
disabled=yes new-routing-mark=In6 passthrough=yes src-address=
100.100.100.0/24
add action=mark-connection chain=prerouting comment=jpg content=jpg disabled=
no new-connection-mark=jpg passthrough=yes
add action=mark-packet chain=prerouting comment=jpg connection-mark=jpg
disabled=no new-packet-mark=jpg passthrough=yes
add action=mark-connection chain=prerouting comment=gif content=gif disabled=
no new-connection-mark=gif passthrough=yes
add action=mark-packet chain=prerouting comment=gif connection-mark=gif
disabled=no new-packet-mark=gif passthrough=yes
add action=mark-connection chain=prerouting comment=png content=png disabled=
no new-connection-mark=png passthrough=yes
add action=mark-packet chain=prerouting comment=png connection-mark=png
disabled=no new-packet-mark=png passthrough=yes
add action=mark-connection chain=prerouting comment=bmp content=bmp disabled=
no new-connection-mark=bmp passthrough=yes
add action=mark-packet chain=prerouting comment=bmp connection-mark=bmp
disabled=no new-packet-mark=bmp passthrough=yes
add action=mark-connection chain=prerouting comment=ico content=ico disabled=
no new-connection-mark=ico passthrough=yes
add action=mark-packet chain=prerouting comment=ico connection-mark=ico
disabled=no new-packet-mark=ico passthrough=yes
add action=mark-connection chain=prerouting comment=jpg content=jpg disabled=
no new-connection-mark=jpg passthrough=yes
add action=mark-packet chain=prerouting comment=jpg connection-mark=jpg
disabled=no new-packet-mark=jpg passthrough=yes
add action=mark-connection chain=prerouting comment=gif content=gif disabled=
no new-connection-mark=gif passthrough=yes
add action=mark-packet chain=prerouting comment=gif connection-mark=gif
disabled=no new-packet-mark=gif passthrough=yes
add action=mark-connection chain=prerouting comment=png content=png disabled=
no new-connection-mark=png passthrough=yes
add action=mark-packet chain=prerouting comment=png connection-mark=png
disabled=no new-packet-mark=png passthrough=yes
add action=mark-connection chain=prerouting comment=bmp content=bmp disabled=
no new-connection-mark=bmp passthrough=yes
add action=mark-packet chain=prerouting comment=bmp connection-mark=bmp
disabled=no new-packet-mark=bmp passthrough=yes
add action=mark-connection chain=prerouting comment=ico content=ico disabled=
no new-connection-mark=ico passthrough=yes
add action=mark-packet chain=prerouting comment=ico connection-mark=ico
disabled=no new-packet-mark=ico passthrough=yes
add action=mark-packet chain=prerouting disabled=no dscp=12 new-packet-mark=
proxy-hit passthrough=no
add action=mark-connection chain=prerouting comment=“IDM Telb” disabled=no
layer7-protocol=“IDM Telb” new-connection-mark=IDM passthrough=yes
add action=mark-packet chain=prerouting connection-mark=IDM disabled=no
new-packet-mark=idm passthrough=yes
add action=mark-connection chain=prerouting comment=SKYPE disabled=no
layer7-protocol=Skype new-connection-mark=Skype-Con passthrough=yes
add action=mark-packet chain=postrouting connection-mark=Skype-Con disabled=
no new-packet-mark=Skype passthrough=no
add action=mark-packet chain=forward comment=ShadySoft
Youtube disabled=no
layer7-protocol=Youtube new-packet-mark=Youtube_Packet passthrough=no
protocol=tcp
add action=mark-packet chain=forward comment=ShadySoftFacebook disabled=no
layer7-protocol=Facebook new-packet-mark=Facebook_Packet passthrough=no
protocol=tcp
add action=mark-packet chain=forward comment=ShadySoft
Browseing disabled=no
layer7-protocol=Browseing new-packet-mark=Browseing_Packet passthrough=no
protocol=tcp
add action=mark-packet chain=forward comment=ShadySoftDownload disabled=no
layer7-protocol=Download new-packet-mark=Download_Packet passthrough=no
protocol=tcp
add action=mark-connection chain=prerouting comment=“\C7\E1\CA\D5\DD\CD”
disabled=no layer7-protocol=jpg new-connection-mark=Browsing passthrough=
yes
add action=mark-connection chain=prerouting disabled=no layer7-protocol=gif
new-connection-mark=Browsing passthrough=yes
add action=mark-connection chain=prerouting disabled=no layer7-protocol=png
new-connection-mark=Browsing passthrough=yes
add action=mark-packet chain=postrouting connection-mark=Browsing disabled=no
new-packet-mark=Browsing passthrough=no
add action=mark-packet chain=prerouting comment=“Mark Packet Streaming”
disabled=no layer7-protocol=streaming new-packet-mark=streaming
passthrough=no
add action=mark-packet chain=prerouting comment=“Mark Packet Streaming”
disabled=no layer7-protocol=www.xnxx.com new-packet-mark=streaming89
passthrough=no
add action=mark-packet chain=prerouting comment=“Mark Packet Streaming”
disabled=no layer7-protocol=streaming1 new-packet-mark=streaming1
passthrough=no
add action=mark-packet chain=postrouting comment=shadyup disabled=no
new-packet-mark=shadysoft-up out-interface=DHCP passthrough=yes
add action=mark-connection chain=forward comment=XNXX.com connection-state=
new disabled=no dst-address-list=XNXX-List new-connection-mark=XNXX-conn
passthrough=yes src-address-list=XNXX-List
add action=mark-packet chain=forward connection-mark=XNXX-conn disabled=no
new-packet-mark=XNXX-conn passthrough=no
/ip firewall nat
add action=masquerade chain=srcnat disabled=no dst-address=192.168.2.0/24
add action=masquerade chain=srcnat comment=“masquerade hotspot network”
disabled=no out-interface=“Built In” to-addresses=0.0.0.0
add action=masquerade chain=srcnat disabled=no src-address=100.100.100.0/24
add action=passthrough chain=unused-hs-chain comment=
“place hotspot rules here” disabled=yes to-addresses=0.0.0.0
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061 sip-direct-media=yes
set pptp disabled=no
/ip hotspot ip-binding
add address=10.20.20.10 comment=“\C7\E1\CC\E5\C7\D2 \C7\E1\D1\C6\ED\D3\ED”
disabled=no mac-address=94:DE:80:F0:8D:4E server=hotspot1 to-address=
10.20.20.10 type=bypassed
add address=10.20.20.16 comment=“\CC\E5\C7\D2 \D1\DE\E3 6” disabled=no
mac-address=00:24:1D:0B:A7:D4 server=hotspot1 to-address=10.20.20.16
type=bypassed
add address=10.20.20.15 comment=“\CC\E5\C7\D2 \D1\DE\E3 5” disabled=no
mac-address=00:21:86:2E:48:3A server=hotspot1 to-address=10.20.20.15
type=bypassed
add address=10.20.20.11 comment=“\CC\E5\C7\D2 \D1\DE\E3 1” disabled=no
mac-address=00:24:1D:0B:A5:8D server=hotspot1 to-address=10.20.20.11
type=bypassed
add address=10.20.20.14 comment=“\CC\E5\C7\D2 \D1\DE\E3 4” disabled=no
mac-address=B4:B5:2F:AF:0C:BC server=hotspot1 to-address=10.20.20.14
type=bypassed
add address=10.20.20.17 comment=“\CC\E5\C7\D2 \D1\DE\E3 7” disabled=no
mac-address=00:23:24:0A:92:BA server=hotspot1 to-address=10.20.20.17
type=bypassed
add address=10.20.20.13 comment=“\CC\E5\C7\D2 \D1\DE\E3 3” disabled=no
mac-address=18:A9:05:C2:0B:64 server=hotspot1 to-address=10.20.20.13
type=bypassed
add address=10.20.20.8 comment=“\CC\E6” disabled=no mac-address=
60:D9:A0:56:03:49 server=hotspot1 to-address=10.20.20.8 type=bypassed
add address=10.20.20.19 comment=“\CC\E5\C7\D2 \D1\DE\E3 9” disabled=no
mac-address=1C:6F:65:DF:28:97 server=hotspot1 to-address=10.20.20.19
type=bypassed
add address=10.20.20.9 comment=“\E3\E6\C8\C7\ED\E1\ED” disabled=no
mac-address=10:30:47:FC:91:13 server=hotspot1 to-address=10.20.20.9 type=
bypassed
add address=10.20.20.12 comment=“\CC\E5\C7\D2 \D1\DE\E3 2” disabled=no
mac-address=00:24:1D:0B:93:B3 server=hotspot1 to-address=10.20.20.12
type=bypassed
add address=10.20.21.110 comment=
“\C7\E3 \C7\C8\C7\E4\E6\C8 \E3\E6\C8\C7\ED\E1” disabled=no mac-address=
A0:F3:C1:A6:F4:24 server=hotspot1 to-address=10.20.21.110 type=bypassed
add address=10.20.20.18 comment=“\CC\E5\C7\D2 \D1\DE\E3 8” disabled=no
mac-address=00:0F:FE:F5:36:2E server=hotspot1 to-address=10.20.20.18
type=bypassed
add address=10.20.21.13 comment=“Telb Toshiba” disabled=yes mac-address=
B8:88:E3:0F:74:B9 server=hotspot1 to-address=10.20.21.13 type=bypassed
add address=10.20.20.65 comment=Telb disabled=no mac-address=
00:24:21:85:52:15 server=hotspot1 to-address=10.20.20.65 type=bypassed
add address=10.20.20.75 comment=“Telb 10/100/1000” disabled=yes mac-address=
78:54:2E:20:B7:8C server=hotspot1 to-address=10.20.20.75 type=bypassed
add address=10.20.21.183 comment=“Telb Mobile” disabled=no mac-address=
F0:34:04:3A:BB:33 server=hotspot1 to-address=10.20.21.183 type=bypassed
add address=10.20.21.238 comment=“Telb Toshiba WIFI” disabled=no mac-address=
E0:CA:94:F2:89:FD server=hotspot1 to-address=10.20.21.238 type=bypassed
/ip hotspot service-port
set ftp disabled=no ports=21
/ip hotspot user
add disabled=no name=“\DA\C7\CF\E1” profile=2084_2
add comment=“\CE\D8 2-\E3\ED\CC\C7 30 \CC\ED\CC\C7” disabled=no name=
“\E3\DA\E6\D6 \D2\ED\E4” profile=2084
add disabled=no name=“\E3\CD\E3\CF \DA\D5\C7\E3” profile=4096
add disabled=no limit-bytes-total=12000000000 name=
“\E6\C7\C6\E1 \E4\C7\D5\D1” profile=1024_2
add disabled=no name=“\DD\ED\D5\E1 \CD\D3\E4” profile=1024
add disabled=no name=“\C7\D4\D1\DD” profile=1024
add comment=“\DA\E1\C7\C1 \DD\D1\C7\CC” disabled=no name=“\C8\CF\D1” profile=
1024_2
add disabled=no name=“\CC\E3\DA\E5” profile=2084
add comment=“\DA\E1\ED \D4\DA\C8\C7\E4” disabled=no name=“\DA\E1\ED” profile=
1024
add comment=“\DA\E3\D1 \E6\D5\DD\ED” disabled=no name=hoho profile=512_2
add comment=“\E3\CD\E3\CF \E6\D5\DD\ED” disabled=no mac-address=
F4:42:8F:AB:9C:04 name=“\E3\E1\DF” profile=512
add comment=“\DA\D5\C7\E3 \D1\E3\D6\C7\E4” disabled=no mac-address=
5C:F8:A1:40:CF:E0 name=5C:F8:A1:40:CF:E0 profile=1024
add disabled=no name=“\E3\D5\D8\DD\ED \DB\ED\CA\E5” profile=1024_2
add comment=“\C8\DF\D1\ED \CC\E3\ED\E1” disabled=no mac-address=
A4:44:D1:4A:66:0A name=99 profile=1024
add comment=“\D3\E3\C8\E1” disabled=no name=4 profile=1024
add disabled=no name=“\D4\E5\C7\C8” profile=1024
add disabled=no name=moawad profile=2084
add disabled=no limit-bytes-total=12000000000 name=“\CC\E3\C7\E1 \CD\D3\E4”
profile=1024_2
add comment=“\D3\ED\CF \CC\C8\E1\C7\E6\ED” disabled=no name=“\D3\ED\CF”
profile=1024
add comment=“\C7\ED\E3\C7\E4” disabled=no name=“\C7\ED\E3\ED” profile=2084
add disabled=no name=“\E3\CD\E3\CF \D5\E1\C7\CD” profile=512
add comment=“\E3\CD\E3\E6\CF \C7\C8\E6 \DA\E1\ED\E6\E5” disabled=no name=1987
profile=2084
add comment=“\D1\E3\D6\C7\E4 \DA\ED\CF” disabled=no limit-bytes-total=
12000000000 name=“\D1\E3\D6\C7\E4” profile=1024_2
add comment=“\CC\E3\DA\E5 \C7\D3\DF\E4\CF\D1” disabled=no name=10 profile=
1024
add disabled=no name=“\E3\D5\D8\DD\EC \C7\D4\D1\DD” profile=2084
add disabled=no mac-address=00:19:B9:24:E6:22 name=“\E3\CD\D3\E4” profile=
1024
add disabled=no name=“\DA\D5\E3\CA \CD\D3\E4” profile=1024
add comment=“\D3\ED\CF \C7\E1\E3\CD\D8\E5” disabled=no name=
“\D3\ED\CF \C7\CD\E3\CF” profile=1024
add comment=“\E3\CD\E3\CF \CE\D6\D1” disabled=no limit-bytes-total=
15000000000 name=“\DF\D1\ED\E3” profile=1024_2
add comment=“\CE\C7\E1\ED \E3\CD\E3\E6\CF” disabled=no name=5 profile=1024
add comment=“\C7\D3\E1\C7\E3 \D3\DA\CF \DF\E3\C8\ED\E6\CA\D1” disabled=no
mac-address=64:31:50:47:DD:71 name=64:31:50:47:DD:71 profile=1024
add comment=“\DA\D5\C7\E3 \DA\E4\CA\D1” disabled=no limit-bytes-total=
12000000000 name=2 profile=1024_2
add comment=
“\E3\CD\E3\CF \C7\CD\E3\CF \C8\ED\E5 - \CC\E4\C8 \C7\E1\CA\D1\DA\E5”
disabled=no name=24 profile=2084
add comment=“\CE\C7\E1\CF \D3\E6\C8\D1 \E3\C7\D1\DF\CA” disabled=no name=
“\ED\E6\D3\DD” profile=1024
add disabled=no name=“\C8\CF\E6\ED” profile=1024
add comment=“\E3\D5\D8\DD\ED \D3\D1\C7\E3\ED\DF” disabled=no name=
“\C7\E1\CD\E3\CF” profile=1024
add comment=“\E3\CD\E3\CF \D1\E3\D6\C7\E4” disabled=no name=“\E3\CD\E3\CF”
profile=2084_2
add disabled=no name=“\DA\E1\ED \C7\E3\C7\E3” profile=1024_2
add comment=“\E3\E4\C7\E1 \D5\C7\E1\CD” disabled=no name=34 profile=512_2
add disabled=no name=taha profile=1024_2
add comment=“\D1\E3\D6\C7\E4 \CD\D3\ED\E4-\DD\E6\DE \E3\DA\D1\E6\DD”
disabled=no name=44 profile=1024_2
add comment=“\D1\DD\DA\CA \D5\C7\E1\CD” disabled=no name=70 profile=1024
add disabled=no name=esraa profile=512
add comment=“\E3\CD\E3\E6\CF \D1\CC\C8 \D4\C7\D1\DA \C7\E1\E3\D3\CA\D4\DD\ED”
disabled=no name=“\C7\E1\E3\D3\E1\E3” profile=1024
add comment=“\C7\C8\D1\C7\E5\ED\E3 \CC\C8\E1\C7\E6\ED” disabled=no
mac-address=2C:AE:2B:67:9E:11 name=2C:AE:2B:67:9E:11 profile=1024
add comment=“\D8\E5 \E3\CD\E3\E6\CF - \D4\C7\D1\DA \C7\E1\E3\D3\CA\D4\DD\ED”
disabled=no mac-address=70:F3:95:08:95:7D name=70:F3:95:08:95:7D profile=
1024
add comment=“\CE\C7\E1\CF \D4\C8\E1” disabled=no name=90 profile=1024_2
add disabled=no name=“\C8\E6\CD\E5” profile=512_2
add disabled=no limit-bytes-total=12000000000 name=mahmoud profile=2084_2
add comment=“\E3\D5\D8\DD\ED \E3\D1\C7\CF” disabled=no mac-address=
64:31:50:25:CE:B2 name=64:31:50:25:CE:B2 profile=1024
add comment=“\D1\C8\ED\DA \E3\CD\E3\CF” disabled=no mac-address=
34:14:5F:59:74:3B name=34:14:5F:59:74:3B profile=1024
add comment=“\DA\C8\CF \C7\E1\D1\CD\E3\E4 \E3\E4\D5\E6\D1” disabled=no
mac-address=4C:72:B9:7E:44:86 name=25 profile=1024
add disabled=no name=“\C7\E1\CF\DF\CA\E6\D1” profile=1024/4
add comment=“\D3\ED\CF \ED\CD\ED” disabled=no name=80 profile=512
add comment=“\E6\CD\ED\CF \C7\E1\D3\E6\ED\DD\ED” disabled=no name=
08:EE:8B:5E:CF:F5 profile=1024
add comment=“\CE\C7\E1\ED \CD\D3\ED\E4” disabled=no mac-address=
90:FB:A6:1B:14:E1 name=90:FB:A6:1B:14:E1 profile=1024
add disabled=no name=“\D3\ED\CF \CE\E1\DD” profile=512
add disabled=no name=“\C7\CD\E3\CF \DA\C8\CF \C7\E1\D1\D3\E6\E1” profile=1024
add comment=“\ED\E6\D3\DD \C7\ED\E3\E4” disabled=no mac-address=
20:CF:30:A9:0A:64 name=20:CF:30:A9:0A:64 profile=2084
add disabled=no name=aya profile=2084
add comment=“\D4\CD\C7\CA\E5 \D3\E1\D8\C7\E4” disabled=no mac-address=
00:0D:60:F5:FD:21 name=3 profile=1024
add disabled=no name=“\E3\CD\E3\E6\CF \CC\E3\DA\E5” profile=1024
add comment=“\C7\C8\E6 \CD\E4\ED\E4” disabled=no mac-address=
00:18:71:6B:12:3C name=00:18:71:6B:12:3C profile=1024
add disabled=no name=“\D5\C7\C8\D1” profile=1024
add comment=“\DA\C8\CF\C7\E1\E1\E5 \C8\DF\D1\ED” disabled=no name=
“\DA\C8\CF\C7\E1\E1\E5” profile=512
add comment=“\CC\E3\C7\E1 \C7\E1\DA\DD\D1\ED\CA” disabled=no mac-address=
00:23:24:33:8E:AC name=00:23:24:33:8E:AC profile=1024
add comment=“\DA\E3\C7\CF \E6\D2\ED\D1” disabled=no name=“\D3\E3\D3\E3”
profile=1024
add comment=“\CD\D3\C7\E3 \E4\C8\ED\E1” disabled=no name=“\CD\D3\C7\E3”
profile=1024
add comment=“\C7\CD\E3\CF \DA\D5\C7\E3 \D1\E3\D6\C7\E4” disabled=no name=
9C:D3:5B:8A:44:25 profile=1024
add disabled=no name=“\D4\DA\C8\C7\E4” profile=512
add disabled=no name=“\CD\D3\E4 \DA\E1\ED” profile=1024
add disabled=no name=“\E4\E6\D1” profile=1024
add comment=“\C7\CD\E3\CF \D5\C7\E1\CD” disabled=no mac-address=
18:21:95:2F:DB:93 name=18:21:95:2F:DB:93 profile=1024
add disabled=no name=“\C7\CD\E3\CF\CC\E3\DA\E5” profile=2084
add comment=“\C7\ED\E3\E4 \D1\C7\DD\CA” disabled=no name=18:3B:D2:50:74:50
profile=512
add comment=“\DA\C8\CF\C7\E1\E1\E5 \E3\D1\C7\CF” disabled=no name=333
profile=1024
add comment=“\CD\D3\ED\E4 \D1\E3\D6\C7\E4” disabled=no limit-bytes-total=
5000000000 mac-address=C8:38:70:DD:11:99 name=“\CD\D3\ED\E4” profile=512
add comment=“\C7\E1\D4\ED\CE \E3\D3\E1\E3” disabled=no name=21 profile=512
add comment=“\C7\CD\E3\CF \CC\E1\C7\E1” disabled=no mac-address=
38:94:96:88:5B:FD name=38:94:96:88:5B:FD profile=4096
add comment=“\E3\CD\E3\E6\CF \D8\E1\C8 - \E3\CD\E3\CF \CC\E3\C7\E1 1”
disabled=no mac-address=60:D9:A0:57:38:DB name=60:D9:A0:57:38:DB profile=
512
add comment=“\E3\CD\E3\E6\CF \D8\E1\C8 - \E3\CD\E3\CF \CC\E3\C7\E1 2”
disabled=no mac-address=40:F3:08:87:D4:B1 name=40:F3:08:87:D4:B1 profile=
512
add comment=“\E3\CD\E3\CF \CC\C7\C8\D1 \D4\C7\D1\DA \C7\E1\E3\D3\CA\D4\DD\ED”
disabled=no name=58:48:22:EF:D8:F3 profile=1024
add comment=“\C7\CD\E3\CF \DF\E3\C7\E1 \DA\C8\CF\C7\E1\CD\DF\ED\E3” disabled=
no name=“\DF\D1\C7\E3\E5” profile=2084
add comment=“\C7\C8\D1\C7\E5\ED\E3 - \C7\ED\E6\C8” disabled=no name=1
profile=2084
add comment=“\E3\CD\E3\E6\CF \D4\DA\C8\C7\E4” disabled=no name=
“\E3\CD\E3\E6\CF” profile=2084
add comment=“\C7\D3\E1\C7\E3 \D3\DA\CF \E3\E6\C8\C7\ED\E1” disabled=no
mac-address=20:6E:9C:C8:49:7F name=20:6E:9C:C8:49:7F profile=2084
add comment=“\E3\CD\E3\E6\CF \DD\DF\D1\ED” disabled=no name=
“\E3\CD\E3\E6\CF \C7\CD\E3\CF” profile=1024
add comment=“\CD\E3\C7\CF\E5 \DE\E5\E6\E5” disabled=no name=11 profile=1024_2
add comment=“\CE\C7\E1\CF \E3\CD\D1\E6\D3” disabled=no name=simba profile=
2084
add comment=“\C7\CD\E3\CF \E3\CD\D1\E6\D3” disabled=no name=ahmed profile=
1024
add comment=“\E3\CD\E3\CF \E3\CD\E3\E6\CF” disabled=no mac-address=
F0:72:8C:2A:90:D0 name=F0:72:8C:2A:90:D0 profile=1024
add comment=“\E3\CD\E3\CF \C7\E1\D1\C7\ED\D3 \C7\E1\C8\D1\DF\E5” disabled=no
limit-bytes-total=11000000000 name=12 profile=1024_2
add comment=“\C7\E1\C3\D3\CA\C7\D0 \E3\CC\CF\ED \C7\E1\C8\D1\DF\E5” disabled=
no limit-bytes-total=11000000000 name=100 profile=1024_3
add comment=“\E3\CD\E3\CF \D3\DA\CF - \C7\E1\C8\D1\DF\E5” disabled=no
limit-bytes-total=11000000000 name=13 profile=1024_2
add comment=“\E3\CD\E3\CF \D5\ED\CF\E1\ED\E5” disabled=no name=130 profile=
1024
/ip hotspot walled-garden
add action=allow comment=“place hotspot rules here” disabled=yes dst-port=“”
/ip hotspot walled-garden ip
add action=accept disabled=yes dst-address=192.168.1.0/24
/ip neighbor discovery
set DHCP disabled=no
set “Built In” disabled=yes
set Out disabled=no
/ip proxy
set always-from-cache=no cache-administrator=webmaster cache-hit-dscp=4
cache-on-disk=no enabled=no max-cache-size=none max-client-connections=
600 max-fresh-time=3d max-server-connections=600 parent-proxy=0.0.0.0
parent-proxy-port=0 port=8080 serialize-connections=no src-address=
0.0.0.0
/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.21.1
routing-mark=In1 scope=30 target-scope=10
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.22.1
routing-mark=In2 scope=30 target-scope=10
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.23.1
routing-mark=In3 scope=30 target-scope=10
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.24.1
routing-mark=In4 scope=30 target-scope=10
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.26.1
routing-mark=In6 scope=30 target-scope=10
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=“192.168.21.1,192.168
.25.1,192.168.24.1,192.168.23.1,192.168.22.1,192.168.26.1” scope=30
target-scope=10
/ip service
set telnet address=“” disabled=no port=23
set ftp address=“” disabled=no port=21
set www address=“” disabled=no port=80
set ssh address=“” disabled=no port=22
set www-ssl address=“” certificate=none disabled=yes port=443
set api address=“” disabled=no port=8728
set winbox address=“” disabled=no port=8291
/ip smb
set allow-guests=yes comment=MikrotikSMB domain=MSHOME enabled=no interfaces=
all
/ip smb shares
set [ find default=yes ] comment=“default share” directory=/pub disabled=no
max-sessions=10 name=pub
/ip smb users
set [ find default=yes ] disabled=no name=guest read-only=yes
/ip socks
set connection-idle-timeout=2m enabled=no max-connections=200 port=1080
/ip traffic-flow
set active-flow-timeout=30m cache-entries=4k enabled=no
inactive-flow-timeout=15s interfaces=all
/ip upnp
set allow-disable-external-interface=yes enabled=no show-dummy-rule=yes
/ipv6 nd
set [ find default=yes ] advertise-dns=no advertise-mac-address=yes disabled=
no hop-limit=unspecified interface=all managed-address-configuration=no
mtu=unspecified other-configuration=no ra-delay=3s ra-interval=3m20s-10m
ra-lifetime=30m reachable-time=unspecified retransmit-interval=
unspecified
/ipv6 nd prefix default
set autonomous=yes preferred-lifetime=1w valid-lifetime=4w2d
/mpls
set dynamic-label-range=16-1048575 propagate-ttl=yes
/mpls interface
set [ find default=yes ] disabled=no interface=all mpls-mtu=1508
/mpls ldp
set distribute-for-default-route=no enabled=no hop-limit=255 loop-detect=no
lsr-id=0.0.0.0 path-vector-limit=255 transport-address=0.0.0.0
use-explicit-null=no
/port firmware
set directory=firmware ignore-directip-modem=no
/ppp aaa
set accounting=yes interim-update=0s use-radius=no
/ppp secret
add caller-id=“” disabled=no limit-bytes-in=0 limit-bytes-out=0 name=osama
profile=512 routes=“” service=pppoe
add caller-id=“” disabled=no limit-bytes-in=0 limit-bytes-out=0 name=mm
profile=Master routes=“” service=pppoe
add caller-id=“” disabled=no limit-bytes-in=0 limit-bytes-out=0 name=marof
profile=1024 routes=“” service=pppoe
add caller-id=“” comment=“\E3\CC\CF\ED \C7\E1\C8\D1\DF\E5” disabled=no
limit-bytes-in=0 limit-bytes-out=0 name=99 profile=1024 remote-address=
100.100.100.229 routes=“” service=pppoe
add caller-id=“” disabled=no limit-bytes-in=0 limit-bytes-out=0
local-address=100.100.100.1 name=sho profile=Master remote-address=
100.100.100.200 routes=“” service=pppoe
/queue interface
set “Built In” queue=ethernet-default
set Out queue=ethernet-default
/radius incoming
set accept=no port=3799
/routing bfd interface
set [ find default=yes ] disabled=no interface=all interval=0.2s min-rx=0.2s
multiplier=5
/routing igmp-proxy
set query-interval=2m5s query-response-interval=10s quick-leave=no
/routing mme
set bidirectional-timeout=2 gateway-class=none gateway-keepalive=1m
gateway-selection=no-gateway origination-interval=5s preferred-gateway=
0.0.0.0 timeout=1m ttl=50
/routing pim
set switch-to-spt=yes switch-to-spt-bytes=0 switch-to-spt-interval=1m40s
/routing rip
set distribute-default=never garbage-timer=2m metric-bgp=1 metric-connected=1
metric-default=1 metric-ospf=1 metric-static=1 redistribute-bgp=no
redistribute-connected=no redistribute-ospf=no redistribute-static=no
routing-table=main timeout-timer=3m update-timer=30s
/routing ripng
set distribute-default=never garbage-timer=2m metric-bgp=1 metric-connected=1
metric-default=1 metric-ospf=1 metric-static=1 redistribute-bgp=no
redistribute-connected=no redistribute-ospf=no redistribute-static=no
timeout-timer=3m update-timer=30s
/snmp
set contact=“” enabled=no engine-id=“” location=“” trap-generators=“”
trap-target=“” trap-version=1
/system clock
set time-zone-name=Africa/Cairo
/system clock manual
set dst-delta=+00:00 dst-end=“jan/01/1970 00:00:00” dst-start=
“jan/01/1970 00:00:00” time-zone=+00:00
/system console
set [ find port=serial0 ] channel=0 disabled=no port=serial0 term=vt102
set [ find vcno=1 ] channel=0 disabled=no term=linux
set [ find vcno=2 ] channel=0 disabled=no term=linux
set [ find vcno=3 ] channel=0 disabled=no term=linux
set [ find vcno=4 ] channel=0 disabled=no term=linux
set [ find vcno=5 ] channel=0 disabled=no term=linux
set [ find vcno=6 ] channel=0 disabled=no term=linux
set [ find vcno=7 ] channel=0 disabled=no term=linux
set [ find vcno=8 ] channel=0 disabled=no term=linux
/system console screen
set blank-interval=10min line-count=25
/system gps
set channel=0 enabled=no set-system-time=no
/system hardware
set multi-cpu=yes
/system health
set state-after-reboot=enabled
/system identity
set name=“Telb 01140119530”
/system lcd
set contrast=0 enabled=no port=parallel type=24x4
/system lcd page
set time disabled=yes display-time=5s
set resources disabled=yes display-time=5s
set uptime disabled=yes display-time=5s
set packets disabled=yes display-time=5s
set bits disabled=yes display-time=5s
set version disabled=yes display-time=5s
set identity disabled=yes display-time=5s
set Out disabled=yes display-time=5s
set “Built In” disabled=yes display-time=5s
set DHCP disabled=yes display-time=5s
set disabled=yes display-time=5s
set disabled=yes display-time=5s
/system logging
set 0 action=memory disabled=no prefix=“” topics=info
set 1 action=memory disabled=no prefix=“” topics=error
set 2 action=memory disabled=no prefix=“” topics=warning
set 3 action=echo disabled=no prefix=“” topics=critical
/system note
set note=“” show-at-login=yes
/system ntp client
set enabled=yes mode=unicast primary-ntp=41.231.7.85 secondary-ntp=8.8.8.8
/system ntp server
set broadcast=no broadcast-addresses=“” enabled=no manycast=yes multicast=no
/system resource irq
set 0 cpu=auto
set 1 cpu=auto
set 2 cpu=auto
set 3 cpu=auto
set 4 cpu=auto
set 5 cpu=auto
set 6 cpu=auto
set 7 cpu=auto
set 8 cpu=auto
set 9 cpu=auto
set 10 cpu=auto
set 11 cpu=auto
set 12 cpu=auto
/system scheduler
add disabled=no interval=3d name=Backup on-event=Backup policy=
ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api
start-time=startup
add disabled=no interval=55m name=“Wan IP” on-event=“Wan IP” policy=
ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api
start-time=startup
add disabled=no interval=1h name=“E-Mail Wan IP” on-event=“E-Mail Wan IP”
policy=
ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api
start-time=startup
add disabled=yes interval=2s name=“Block Differance IP” on-event=“{\r
\n:local startadd 10.20.20.0\r
\n:local endadd 10.20.23.255\r
\n:local a\r
\n:foreach i in=[/ip hotspot host find ] do={\r
\n:set a [/ip hotspot host get value-name=address $i]\r
\n:if (($a<$startadd)||($a>$endadd)) do={\r
\nip hotspot host make-binding type=blocked $i\r
\n}}}” policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive
start-time=startup
add comment=limit-ppp-and-hotspot disabled=no interval=3m name=
limit-ppp-and-hotspot on-event=limit-ppp-and-hotspot policy=
ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api
start-time=startup
/system script
add name=Backup policy=
ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api
source=“/ system backup save\r
\n”
add name=“Wan IP” policy=
ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api
source=“/tool fetch url="http://myip.dnsomatic.com/\” mode=http dst-path=
wan-ip.txt\r
\n :local ip [file get wan-ip.txt contents ]"
add name=“E-Mail Wan IP” policy=
ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api
source=“/tool e-mail send tls=yes from="hassanteto20010@gmail.com" to="
hassanteto20010@gmail.com" subject="Hassan" body="Wan-IP" file=wan-ip
.txt”
add name=limit-ppp-and-hotspot policy=
ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api
source=“:global b1 "5"\r
\n:global b2 "10"\r
\n/ppp active\r
\n:foreach h in=[find] do={\r
\n:global pname [get $h name]\r
\n:global paddress [get $h address]\r
\n:global pprofile [/ppp secret get $pname profile]\r
\n:global plimit [/ppp profile get $profile address-list]\r
\n/ip hotspot active\r
\n:foreach i in=[find] do={\r
\n:global name [get $i user]\r
\n:global address [get $i address]\r
\n:global profile [/ip hotspot user get $name profile]\r
\n:global limit [/ip hotspot user get $profile on-login]\r
\n/queue simple;\r
\n:foreach r in=[find dynamic=no] do={\r
\n:global namqueue [get $r name]\r
\n:global bytes [get $r tatal-bytes]\r
\n:global allbyte [get $r comment]\r
\n:if ( $namqueue =! $name ) do={add name=$name comment="0" target=$
address max-limit=$limit total=default}\r
\n:if ( $namqueue =! $pname ) do={add name=$pname comment="0" target=
$paddress max-limit=$plimit total=default}\r
\n:if ( $bytes > 1000) do={\\r
\nset $r comment=($bytes+$allbyte)\r
\nreset-counters $r}}}}\r
\n:delay 2s\r
\n/queue simple;\r
\n:foreach m in=[find dynamic=no] do={\r
\n:global mlimit ([get $m comment] /1024 /1024 /1024)\r
\n:global mname [get $m name]\r
\n:global nmax [get $m max-limit]\r
\n:global mprofile [/ip hotspot user get $mname profile]\r
\n:global mlimit [/ip hotspot user profile get $mprofile on-login]\r
\n:if (($mlimit < $b1) && ($mmax =! $mlimit)) do={set $m max-limit=$
mlimit}\r
\n:if (( $mlimit > $b1) && ($mlimit < $b2)) do={set $m max-limit=128k
/256k}\r
\n:if ( $mlimit > $b2 ) do={set $m max-limit=1k/1k\r
\n}”
/system upgrade mirror
set check-interval=1d enabled=no primary-server=0.0.0.0 secondary-server=
0.0.0.0 user=“”
/system watchdog
set auto-send-supout=no automatic-supout=yes no-ping-delay=5m watch-address=
none watchdog-timer=yes
/tool bandwidth-server
set allocate-udp-ports-from=2000 authenticate=yes enabled=yes max-sessions=
100
/tool e-mail
set address=74.125.68.109 from= password=
****** port=587
starttls=no user=hassanteto20010
/tool graphing
set page-refresh=300 store-every=5min
/tool mac-server
set [ find default=yes ] disabled=no interface=all
/tool mac-server mac-winbox
set [ find default=yes ] disabled=no interface=all
/tool mac-server ping
set enabled=yes
/tool sms
set allowed-number=“” channel=0 keep-max-sms=0 receive-enabled=no
/tool sniffer
set file-limit=1000KiB file-name=“” filter-ip-address=“” filter-ip-protocol=
“” filter-mac-address=“” filter-mac-protocol=“” filter-port=“”
filter-stream=yes interface=all memory-limit=100KiB memory-scroll=yes
only-headers=no streaming-enabled=no streaming-server=0.0.0.0
/tool traffic-generator
set latency-distribution-scale=10 test-id=0
/tool user-manager customer
add backup-allowed=yes disabled=no login=admin parent=admin
paypal-accept-pending=no paypal-allowed=no paypal-secure-response=no
permissions=owner signup-allowed=no time-zone=-00:00
/user aaa
set accounting=yes default-group=read exclude-groups=“” interim-update=0s
use-radius=no
[admin0@Telb 01140119530] >
supout.zip (343 KB)

That’s a long config, and it looks like it’s not even complete. One obvious mistake is 192.168.2.99/24 on two interfaces at the same time, that’s not a good idea, you need it only once. Other than that, unless it’s blocked by second filter rule with layer7-protocol=Link (no idea what that is), I’d expect it to work. But it’s very easy to get lost in all that. So I’d recommend to look closely at what happens. Use Tools->Torch to see where your packets go. Or add some logging rules to prerouting/forward/postrouting to catch them. You know the source and destination, it should be easy to do on live router.