V 6.24 CCR1036-24G-4S
I set up PBR to send port 80 and 443 traffic to a content filter for my 10.5.5.0/16 subnet and a test workstation (10.10.1.15). For the most part this works fine. However, because I am using transparent proxy mode my exclusion list for HTTPS traffic does not work. I would like to create a PBR for a list of domains I want excluded from the filter and use the default gateway of the mikrotik router.
I tried my hand at it, but would get domain not found errors, etc…
Here is what I have, minus the needed rule:
chain=srcnat action=src-nat to-addresses=10.10.1.15 protocol=tcp
src-address=10.10.1.15 dst-port=80 log=no log-prefix=“”
chain=srcnat action=src-nat to-addresses=10.10.1.15 protocol=tcp
src-address=10.10.1.15 dst-port=443 log=no log-prefix=“”
chain=prerouting action=mark-routing new-routing-mark=verizon80
passthrough=yes protocol=tcp src-address=10.10.1.15 dst-port=80 log=no
log-prefix=“”
chain=prerouting action=mark-routing new-routing-mark=verizon443
passthrough=yes protocol=tcp src-address=10.10.1.15 dst-port=443 log=no
log-prefix=“”
dst-address=0.0.0.0/0 gateway=10.10.1.85
gateway-status=10.10.1.85 reachable via ether2 distance=1 scope=30
target-scope=10 routing-mark=verizon80
dst-address=0.0.0.0/0 gateway=10.10.1.85
gateway-status=10.10.1.85 reachable via ether2 distance=1 scope=30
target-scope=10 routing-mark=verizon443