PP2P interface to bypass governments censorship

Hay Guys!
I’m trying to use MikroTik hap lite to bypass our governments’ censorship.
I used this article to config my router:
https://wiki.mikrotik.com/wiki/Policy_Base_Routing

Everything is OK but nothing is :slight_smile:. When I try to visit http://www.google.com, I can see that it’s under United Kingdom region, but when I try to visit http://www.facebook.com (which is filtered in our country) or any other filtered websites, nothing shows up and the page is not reachable.

By the way, creating a windows VPN connection and using the same PP2P host address (same username and pass) works like a horse.

If you’re sure that the Windows side is configured “the same” as the MikroTik side (in theory, they don’t use the exact same commands obviously), then you know it can work.

If it sort of works, then this implies some issue that may or may not be the router’s fault.

Have you tried a packet sniffer trace of the google site that works and then the facebook site that doesn’t?

I can’t think of a reason why it would work “halfway” instead of working or not working at all unless maybe:

  1. Your packet marks aren’t working as expected.
  2. Maybe MTU?

You need to be sure your VPN connection is established and running, then check to see that your policy route is properly setup with the vpn as the gateway for the appropriate connections to filtered sites. And your default gateway should be there for other traffic to follow.

If google.com is among censored sites but is reachable through the vpn, then your vpn is up and running. In that case, you have to concentrate on the matcher for facebook.com. Again, Maybe your dns request to the site is blocked, you may have to tunnel the dns request through vpn as well to external dns.