pcc weird behavior

RouterOS General
1

hello

i have 4 local network and two isp wan1, wan2 ping wont work from 192.168.101.100 (local computer) to 192.168.100.9 (database server) BUT if i disable in the mangle script both address is pingable. can you take a look maybe something with my script?

add action=mark-connection chain=input comment=pcc disabled=yes in-interface=WAN1 new-connection-mark=WAN1_conn
add action=mark-connection chain=input disabled=yes in-interface=WAN2 new-connection-mark=WAN2_conn
add action=mark-routing chain=output connection-mark=WAN1_conn disabled=yes new-routing-mark=to_WAN1
add action=mark-routing chain=output connection-mark=WAN2_conn disabled=yes new-routing-mark=to_WAN2
add chain=prerouting disabled=yes dst-address=122.54.243.0/24 in-interface=s.management_vlan
add chain=prerouting disabled=yes dst-address=112.198.30.0/24 in-interface=s.management_vlan
add chain=prerouting disabled=yes dst-address=122.54.243.0/24 in-interface=servers_vlan
add chain=prerouting disabled=yes dst-address=112.198.30.0/24 in-interface=servers_vlan
add chain=prerouting disabled=yes dst-address=122.54.243.0/24 in-interface=cctv_vlan
add chain=prerouting disabled=yes dst-address=112.198.30.0/24 in-interface=cctv_vlan
add chain=prerouting disabled=yes dst-address=122.54.243.0/24 in-interface=offices_vlan
add chain=prerouting disabled=yes dst-address=112.198.30.0/24 in-interface=offices_vlan
add action=mark-connection chain=prerouting disabled=yes dst-address-type=!local in-interface=s.management_vlan new-connection-mark=
WAN1_conn per-connection-classifier=both-addresses-and-ports:2/0
add action=mark-connection chain=prerouting disabled=yes dst-address-type=!local in-interface=s.management_vlan new-connection-mark=
WAN2_conn per-connection-classifier=both-addresses-and-ports:2/1
add action=mark-connection chain=prerouting disabled=yes dst-address-type=!local in-interface=servers_vlan new-connection-mark=WAN1_conn
per-connection-classifier=both-addresses-and-ports:2/0
add action=mark-connection chain=prerouting disabled=yes dst-address-type=!local in-interface=servers_vlan new-connection-mark=WAN2_conn
per-connection-classifier=both-addresses-and-ports:2/1
add action=mark-connection chain=prerouting disabled=yes dst-address-type=!local in-interface=cctv_vlan new-connection-mark=WAN1_conn
per-connection-classifier=both-addresses-and-ports:2/0
add action=mark-connection chain=prerouting disabled=yes dst-address-type=!local in-interface=cctv_vlan new-connection-mark=WAN2_conn
per-connection-classifier=both-addresses-and-ports:2/1
add action=mark-connection chain=prerouting disabled=yes dst-address-type=!local in-interface=offices_vlan new-connection-mark=WAN1_conn
per-connection-classifier=both-addresses-and-ports:2/0
add action=mark-connection chain=prerouting disabled=yes dst-address-type=!local in-interface=offices_vlan new-connection-mark=WAN2_conn
per-connection-classifier=both-addresses-and-ports:2/1
add action=mark-routing chain=prerouting connection-mark=WAN1_conn disabled=yes in-interface=s.management_vlan new-routing-mark=to_WAN1
add action=mark-routing chain=prerouting connection-mark=WAN2_conn disabled=yes in-interface=s.management_vlan new-routing-mark=to_WAN2
add action=mark-routing chain=prerouting connection-mark=WAN1_conn disabled=yes in-interface=servers_vlan new-routing-mark=to_WAN1
add action=mark-routing chain=prerouting connection-mark=WAN2_conn disabled=yes in-interface=servers_vlan new-routing-mark=to_WAN2
add action=mark-routing chain=prerouting connection-mark=WAN1_conn disabled=yes in-interface=cctv_vlan new-routing-mark=to_WAN1
add action=mark-routing chain=prerouting connection-mark=WAN2_conn disabled=yes in-interface=cctv_vlan new-routing-mark=to_WAN2
add action=mark-routing chain=prerouting connection-mark=WAN1_conn disabled=yes in-interface=offices_vlan new-routing-mark=to_WAN1
add action=mark-routing chain=prerouting connection-mark=WAN2_conn disabled=yes in-interface=offices_vlan new-routing-mark=to_WAN2


add check-gateway=ping distance=1 gateway=122.xx.xxx.1 routing-mark=to_WAN1
add check-gateway=ping distance=1 gateway=112.xx.xxx.1 routing-mark=to_WAN2
add check-gateway=ping distance=1 gateway=122.xx.xxx.1
add check-gateway=ping distance=2 gateway=112.xx.xxx.1

2

Sounds like your traffic is being sent through your PCC and out your WAN interfaces. Try adding an accept rule to accept traffic dst to your local networks. Be sure to place this rule at the top.

To test if this is the case you can run a traceroute from your computer and see where your traffic is being sent.