Routing through VPN connection using Mangle and mark routing

RouterOS General
1

Could you please help with the following issue?

I would like to route connections to several web sites through VPN connection because several sites are blocked in my country.

I created a VPN connection and it is working. But I cannot configure router so that it should redirect requests to the blocked sites through VPN connection using Mangle mark routing feature.

When I am using simple route without Mangle it is working (through VPN and my IP is seen as the IP of the VPN server).

  1. =================================================

nov/19/2016 17:00:50 by RouterOS 6.37.1

software id = XR1E-AM3R

/ip route
add distance=1 dst-address=23.22.128.188/32 gateway=pptp-out_VPN

/ip firewall nat
add action=masquerade chain=srcnat comment=
"NAT to use internet through VPN" out-interface=
pptp-out_VPN

But when I add Mangle rule as the following. There is no connection with the web site.
2) ========================================================
/ip firewall mangle
add action=mark-connection chain=prerouting dst-address-list=
through_VPN new-connection-mark=VPN_Connection_Mark
passthrough=yes
add action=mark-routing chain=prerouting connection-mark=
VPN_Connection_Mark new-routing-mark=VPN_routing_mark
passthrough=yes


/ip route
add distance=1 dst-address=23.22.128.188/32 gateway=pptp-out_VPN
routing-mark=VPN_routing_mark

What is wrong with the configuration?

Weird behaviour (slowness) of OpenVPN traffic routing in some cases
2

Hello!
Look at https://support.hidemyass.com/hc/en-us/articles/204558497-Mikrotik-C

3

Hi,

I tried this steps, I was able to established a connection to my company ISP using PPTP and get a local ip, but there’s no packet being routed to the VPN.

I am new this mikrotik device and your kindness would be a great help for me.


Thank you

4

The problem occurred because Fasttrack connection was enabled. After I disabled it the problem disappeared.

5

I think I found a little bit better solution than totally disabling fasttrack.