Questions on Wiki's PCC page

[olivier2831]

Hello,

I’m learning PCC reading [1].

May I ask the following questions:

/ ip address
add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=LAN

1. Shall I read “interface=bridge” anywhere “interface=LAN” is written or shall I use values such as “interface=ether1” ?

add chain=prerouting connection-mark=ISP1_conn in-interface=LAN action=mark-routing \ 
    new-routing-mark=to_ISP1

2. Shall I read “in-interface-list=LAN” anywhere “in-interface=LAN” is written ?

[1] https://wiki.mikrotik.com/wiki/Manual:PCC#Policy_routing

[olivier2831]

May I add the following question:

add chain=prerouting  in-interface=LAN connection-mark=no-mark dst-address-type=!local \
    per-connection-classifier=both-addresses:2/0 action=mark-connection new-connection-mark=ISP1_conn 
...
add chain=prerouting connection-mark=ISP1_conn in-interface=LAN action=mark-routing \ 
    new-routing-mark=to_ISP1

3. Is it necessary to add a passthrough=yes or passthrough=no in above statements ?
   If outbound packet (ie non local) must be connection-marked first, then routing-marked, is such passthrough=yes or passthrough=no mandatory ?
   Being explicit would help readers to understand.

[Sob]

1. LAN means local network, it depends on what your config uses. With default one, it’s bridge.
2. Same thing, you can use both bridge as individual interface, or interface list if it’s defined (I think default config has it).
3. Passthough tells router, when rule matches, if processing stops (passthrough=no) or continues (passthrough=yes). In this case, if one rule marks connection and following rule should mark routing for same packet, you want yes.

[anav]

Ahh but if only life was that simple!
Do you really want me to post here to PCC examples of PCC where in one case passthrough = no is used for everything and in the other passthrough = yes for everything from legitimate sources.

More importantly is there a default setting? IE if no such pronouncement is made passthrough = YES or NO, what is the default position of router in terms of passthrough - what does it assume?? It has to be one or the other right??

[Sob]

Did you know that some manuals are actually useful?

@https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Mangle

passthrough (yes|no; Default: yes)

[anav]

I find the manual less than useful, and I trust your word more than any MT wiki.

[olivier2831]

Do you really want me to post here to PCC examples of PCC where in one case passthrough = no is used for everything and in the other passthrough = yes for everything from legitimate sources.

IMHO, posting those examples should be helpful at least for me, as I couldn’t successfully the referenced one

[anav]

Take your pick LOL.
https://mum.mikrotik.com/archive
Select search type in pcc and have fun!!

[olivier2831]

1. LAN means local network, it depends on what your config uses. With default one, it’s bridge.
2. Same thing, you can use both bridge as individual interface, or interface list if it’s defined (I think default config has it).
3. Passthough tells router, when rule matches, if processing stops (passthrough=no) or continues (passthrough=yes). In this case, if one rule marks connection and following rule should mark routing for same packet, you want yes.

I could successfully run the Wiki page example as soon as I

1. replaced LAN with bridge, ISP1 with ether1, ISP2 with ether3
2. added the two routes bellow

add dst-address=0.0.0.0/0 gateway=10.111.0.1 distance=1 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=10.112.0.1 distance=2 check-gateway=ping

Thank you very much, Sob an Anav for your help.