Mikrotik blocks Office 365 translation service

Dear, I have not used your forum before.
I am asking a question because I have not been able to find a solution to the problem I have with Mikrotik.

The problem is that Mikrotik blocks the service from the Microsoft Office 365 package.

It is a service that is found in Word, Excel, Outlook. The service has the function of translating text or translating the entire document.

In Microsoft Word, that service is found on the Review\Translate tab. I will explain the same thing again, click on the Review tab, and then select the Translate option.

That option works when Mikrotik is disconnected from the network. When Mikrotik is working as the main router, that service is blocked.
The firewall rules are set and that service does not work when the rules are turned on. The same thing happens when the rules are turned off, the Office 365 service still does not work.

Mikrotik is in bridge mode, and we have no other problems except this on the network.
Does anyone of you have any idea how to help me with this problem?

I have no problems with it, also using MT router. Probably related to ROS configuration not device itself. Nothing specific for this service is configured on my side.

Having your router configuration to revise could help.
For me it "smells" as a typical MSS problem

1 Like

I exported the mikrotik settings. This is the current router settings. There are some settings that I have added to solve this problem. But so far I have not been able to solve the problem.
If anyone has the knowledge to help me, thank you in advance.

/interface bridge
add name=Bridge-LAN
/interface ethernet
set [ find default-name=ether1 ] l2mtu=1598 name=ISP
/interface pppoe-client
add add-default-route=yes disabled=no interface=ISP keepalive-timeout=
disabled name=pppoe-out1 user=*********
/ip ipsec proposal
add enc-algorithms=aes-256-cbc,aes-128-cbc,3des name=proposal6
/ip pool
add name=LAN-Pool ranges=192.168.88.2-192.168.88.254
add name=VPN-Pool ranges=10.1.1.2-10.1.1.11
/ip dhcp-server
add address-pool=LAN-Pool interface=Bridge-LAN name=LAN-DHCP
/ppp profile
set *0 change-tcp-mss=default only-one=yes use-encryption=yes
add dns-server=8.8.8.8 local-address=10.1.1.1 name=VPN-Profile only-one=yes
remote-address=VPN-Pool use-encryption=yes
set *FFFFFFFE only-one=no
/interface bridge port
add bridge=Bridge-LAN interface=ether2
add bridge=Bridge-LAN interface=ether4
add bridge=Bridge-LAN interface=ether5
add bridge=Bridge-LAN interface=ether3
/interface l2tp-server server
set accept-proto-version=l2tpv2 default-profile=VPN-Profile enabled=yes
use-ipsec=yes
/interface ovpn-server server
add mac-address= name=ovpn-server1
/ip address
add address=192.168.88.1/24 interface=Bridge-LAN network=192.168.88.0
/ip dhcp-server network
add address=192.168.88.0/24 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=8.8.4.4,8.8.8.8
/ip firewall address-list
add address=192.168.88.0/24 list=LAN
add address=10.1.1.0/24 list=vpn
/ip firewall filter
add action=drop chain=input connection-state=invalid
add action=accept chain=input connection-state=established,related,untracked
add action=accept chain=input connection-state=established,related,untracked
disabled=yes src-address-list=LAN
add action=drop chain=forward connection-state=invalid
add action=accept chain=input disabled=yes dst-port=161,162 protocol=udp
src-address-list=LAN
add action=accept chain=forward src-address-list=LAN
add action=accept chain=forward connection-state=established
add action=accept chain=forward connection-state=related
add action=drop chain=input comment="drop anything else"
add action=drop chain=forward comment="Drop anything else forward"
/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-out1
add action=dst-nat chain=dstnat disabled=yes dst-address=192.168.88.1
dst-port=443 protocol=tcp to-addresses=192.168.88.11 to-ports=443
add action=dst-nat chain=dstnat disabled=yes dst-address=192.168.88.1
dst-port=443 protocol=udp to-addresses=192.168.88.11 to-ports=443
/ip firewall service-port
set rtsp disabled=no
/ip hotspot profile
set [ find default=yes ] html-directory=hotspot
/ip ipsec profile
set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5
/ip service
set telnet disabled=yes
set www-ssl disabled=no
/ppp secret
add name=vpn14-profile=VPN-Profile service=l2tp
add name=vpn1-1profile=VPN-Profile service=l2tp
add name=vpn1-2profile=VPN-Profile service=l2tp
add name=vpn13 profile=VPN-Profile service=l2tp
/system clock
set time-zone-name=Europe/Belgrade
/system identity
set name=kopensa
/system ntp client
set enabled=yes
/system ntp client servers
add address=pool.ntp.org
add address=asia.pool.ntp.org

Please, format code with < / > code tag to make it easier to read.