Dual WAN, Port based routing (sort of resolved)

[Pada]

Hi,

I’m struggling to get my port based routing to work.
I have a setup with 2 WAN interfaces (1x uncapped + 1x unshaped) and a few PPTP Clients. See diagram below:

I want to be able to use the uncapped for everything, except for my games (of which I know the destination IP address, port & protocol).
My issue is that I don’t want to use my unshaped account for HTTP traffic at all, and since the webserver and game is hosted on the same server IP address I’m in bit of a dilemma.

I’ve tried to setup mangling rules to set the routing mark for the unshaped account if the game destination address was matched, as well as a routing table entry with the unshaped routing mark. I got telnet to work for connecting to the game server, but for some reason my game is managing to authenticate itself and doesn’t want to continue any further. The tutorial/example that I used was http://blog.butchevans.com/2008/09/mikrotik-policy-routing-implementation-example/

Ideas/assistance would be appreciated, even if it’s just pseudo code.
Thanks in advance

[Pada]

Seems like some form of authentication/validation on the server that doesn’t like the policy based routing when using the Warcraft III client, since its working 100% with telnet to the same port.

Instead of switching between the routing entries manually, I’ve now:

1. mapped 123.123.123.123:6113 to 123.123.123.123:6112 with a dst-nat rule
2. marked the routing to 123.123.123.123:6113 to use the unshaped account with a prerouting mangle rule
   Its definitely not ideal, but at least I can telnet using the unshaped account and still connect with the game over the uncapped account.

David told me that only a mangle rule to mark the routing for 123.123.123.123:6112 would’ve been necessary for it to work, which is why I’m thinking that its something with the handshaking protocol of the game server that prevents the policy based routing to work properly.