Route only specific traffic through VPN works strange

RouterOS General
1

Hello everybody,

Today I faced with one strange problem on my Mikrotik RB951 router. Facebook is blocked in my country, so I set up VPN server on AWS and want to route only Facebook through it.

I configured PPTP client in Mikrotik and added static route to whatismyip.com site with default gateway as “pptp-out1” to check if routing through VPN is working. It works. When I visit whatismyip.com I can see IP of my AWS instance.

Now, when I add list of Facebook servers, it works very strange. In browser it says “Web page inaccessible, err_connection_refused”. But I am able to ping Facebook.com and when I do tracert it shows me that traffic goes through my Amazon instance. I’m completely frustrated by this.

Can anyone help me please why this happen and how I can avoid this? Thanks.

UPD: https://es-la.facebook.com is reachable, https://facebook.com is not reachable

2

Probably an MTU issue, take a look here ..

http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Mangle#Change_MSS

3

Hello bajodel,

thank you for advise. Problem was that ISP breaches DNS request and replace it with fake result. I tunnelled DNS traffic through VPN as well and it started to work. Thank you very much for your collaboration

4

You’re welcome, glad you solved it :smiley: