[SOLVED] Route only HTTP traffic into VPN

RouterOS Forwarding Protocols
1

Hello!
I am trying to route all HTTP (port 80) traffic coming from the local network into an OpenVPN tunnel between two MikroTik routers.
The reason is that there is a Firewall between the router and the internet that blocks all ports but 443 and 22.
Here you can see a diagram of my setup

All I want is to route all the HTTP traffic of both the Server (that I am calling Bill for clarity sake) and the Mikrotik router into the OpenVPN tunnel, while keeping all the HTTPS traffic on the ether1 interface.
I have read many articles here on the forum that are somewhat related to my problem but to no avail (actually I have just succeeded in locking me out of the Mikrotik).
If you need more info let me know.
Thank you
Giorgio
PS
The VPN is already tested and working

2

Simplest config can be something like:

/ip route
add dst-address=0.0.0.0/0 gateway=10.10.12.250 routing-mark=to-vpn
/ip firewall mangle
add chain=prerouting src-address=192.168.10.2 protocol=tcp dst-port=80 action=mark-routing new-routing-mark=to-vpn
add chain=output protocol=tcp dst-port=80 action=mark-routing new-routing-mark=to-vpn

Depending on other stuff you have, it may be better to first mark connections and then mark routing based od connection marks.

3

Thank you very much for the quick reply. I understand what you are doing and it worked like a charm. I only had to add a NAT masquerade rule for the VPN interface so that the answer from the OpenVPN server can find its way back. Thank you again.