Advanced Routing Failover without Scripting

A9691 · March 12, 2025, 12:11pm

I've just tested it. *0 is special, it would not work with *1:

[admin@MikroTik] /routing/table> /ip firewall filter
[admin@MikroTik] /ip/firewall/filter> print
Flags: X - disabled, I - invalid; D - dynamic 
[admin@MikroTik] /ip/firewall/filter> add action=passthrough chain=forward place-before=*0
[admin@MikroTik] /ip/firewall/filter> print
Flags: X - disabled, I - invalid; D - dynamic 
 0    chain=forward action=passthrough 
[admin@MikroTik] /ip/firewall/filter>

I've got the idea from someone you might know:

Script placement of firewall rules to the first position.

Simply use place-before=*****0 with or without already defined rules.

Example:

/ip firewall mangle
add action=add-dst-to-address-list address-list=Netflix address-list-timeout=30m chain=prerouting comment="Limit Netflix (Address List)" \
    content=nflxvideo.net place-before=*0