Good day friends!
I ve got a local area space 192.168.0.0/24
And got a White address learning by PPPoE
ip address print
0 172.21.139.2/16 172.21.0.0 ether1
1 192.168.0.254/24 192.168.0.0 LAN-bridge
2 10.72.74.66/27 10.72.74.64 ether2
3 D 89.250.146.160/32 10.92.127.254 domru-ppppoeAlso on interface ether1 configured secondary ip addr for City's LAN
On ether2 we've got a connection with secon ISP
Configured Mangle:
/ip firewall mangle
add action=mark-connection chain=input in-interface=domru-ppppoe log-prefix=inpt_mark_domru
new-connection-mark=domru-conmark passthrough=yes
add action=mark-connection chain=input in-interface=ether1 new-connection-mark=domru-conmark passthrough=yes
add action=mark-routing chain=prerouting connection-mark=domru-conmark dst-address-list=!workspace
log-prefix=pr_rout new-routing-mark=domru-pppoe passthrough=no src-address-list=platniy
add action=mark-routing chain=output connection-mark=domru-conmark new-routing-mark=domru-pppoe passthrough=
no
add action=mark-connection chain=forward connection-nat-state=dstnat dst-address=192.168.0.183 in-interface=
domru-ppppoe new-connection-mark=domru-connmark-f passthrough=yes
add action=mark-connection chain=forward comment="FWD traffic Mark" in-interface=domru-ppppoe log-prefix=
fwd_con new-connection-mark=domru-connmark-f passthrough=yes
add action=mark-connection chain=forward in-interface=ether1 new-connection-mark=domru-connmark-f
passthrough=yes
add action=mark-routing chain=prerouting connection-mark=domru-connmark-f dst-address-list=!workspace
log-prefix=rt_mark new-routing-mark=domru-pppoe passthrough=no src-address-list=platniy
add action=mark-routing chain=prerouting dst-address-list=!workspace new-routing-mark=rtk passthrough=no
src-address-list=rtkConfigured NAT:
/ip firewall nat
add action=dst-nat chain=dstnat dst-address=89.250.146.160 dst-port=80 in-interface=domru-ppppoe log-prefix=
dst_natlog protocol=tcp to-addresses=192.168.0.183
add action=masquerade chain=srcnat out-interface=domru-ppppoe
add action=masquerade chain=srcnat out-interface=ether1
add action=masquerade chain=srcnat out-interface=ether2If i try to get access on 89.250.146.160 by web-browser, i watch that counters are increase, but web page only request error
Keep's warning on:
In LAN, i ve got 2 IP addr's 192.168.0.183 and 192.168.0.188, there are contains in address list "platniy", however if i try traceroute from addr 89.250.146.160 ive got next output:
tool traceroute src-address=89.250.146.160 address=192.168.0.183 max-hops=10
ADDRESS LOSS SENT LAST AVG BEST WORST STD-DEV STATUS
1 100% 2 timeout
2 100% 2 timeout
3 100% 2 timeout
4 100% 2 timeout
5 100% 2 timeout
6 100% 2 timeout
7 100% 2 timeout
8 100% 2 timeout
9 100% 2 timeout
10 100% 1 timeouttool traceroute src-address=89.250.146.160 address=192.168.0.188 max-hops=10
ADDRESS LOSS SENT LAST AVG BEST WORST STD-DEV STATUS
1 192.168.0.188 0% 4 0.5ms 1 0.5 2.4 0.8How we can see, if we try tracert to 192.168.0.183 then path goes to some loop!
But tracert to 192.168.0.188 goes directly.
All brandmauers, firewalls and anti-viruses were disable.
Plz help, what can cause this problem ? Mangle? or some configuration mismatch ?