Mikrotik cant access Internet but Clients can

I have an RB4011 with two default routes one with a metric of 1 and the other with 2, the clients can always access the internet but the RB4011 can only access the internet when route 2 is used as soon as I enable route 1 I’m unable to ping/traceroute/check for updates etc

I am using 7.12beta7 could this be a bug or is there anything else I could check?

silly mistake the firewall had a rule for forward traffic but not input

add action=accept chain=forward connection-state=established,related in-interface=vlan1010


The Missing Rule - add action=accept chain=input connection-state=established,related in-interface=vlan1010

If you share your config we can do some additional checking…I was not expecting the necessity of a filter rule on the input chain for having access to the internet.

I think its probably because this connection is doubled NAT