Very strange situation.
VPN without default gateway. Adresses 10...146 - 10...1
/ip firewall mangle
add action=mark-routing chain=prerouting dst-address-list=blocked
in-interface=!wan new-routing-mark=vpn passthrough=yes
/ip firewall nat
add action=masquerade chain=srcnat routing-mark=vpn src-address=
192.168.0.0/16
/ip route
add comment=“Blocked to VPN” distance=1 gateway=vpn routing-mark=vpn
and … timeout…
I added 8.8.8.8 to blocked list and ping it - no reply. I see 10...1 in traceroute and no any host behind.
I captured file by packet sniffer and see reply from remote to 10...146, but no reply to client.
In maskquerade I see only first (suppose) packet from ping. It’s increase only when I start ping. Fasttrack enabled.
What is this? Where I can find error?