Unable to auto update or ping update server from Router

Hi
I'm going a little mad trying to work out what is wrong with my configuration. Essentially the auto-upgrade, the sntp service and the cloud service do not work on the router. I've been manually updating the router. I have two WAN connections, when I try to ping the update server from within the router I get a host not available message, when I set the interface and routing table then I get a host timed out. When I ping the google dns (8.8.8.:sunglasses: I get a response. When I try to auto-update I get a could not resolve domain name. When I ping the update server from a PC it responds correctly.
Now and sure I've made a mistake in the configuration somewhere but I can't seem to see it. Any help will be appreciated.


[admin@MikroTik] > /export hide-sensitive

jan/29/2022 16:18:25 by RouterOS 6.48.3

software id = TKDJ-KLBF

model = RB760iGS

serial number = E2090EC858E8

/interface bridge
add admin-mac=2C:C8:1B:13:98:A1 auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether2 ] name=CountyBroadband
set [ find default-name=ether3 ] name=TVNow
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip kid-control
add fri=7h-23h mon=7h-22h name=Peter sat=6h-23h sun=6h-22h thu=7h-22h tue=7h-22h wed=7h-22h
/ip pool
add name=dhcp_pool1 ranges=10.66.66.60-10.66.66.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=bridge lease-time=12h10m name=dhcp1
/interface bridge port
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=sfp1
add bridge=bridge interface=ether1
/interface bridge settings
set use-ip-firewall=yes
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface detect-internet
set detect-interface-list=WAN wan-interface-list=WAN
/interface list member
add interface=ether1 list=LAN
add interface=CountyBroadband list=WAN
add interface=TVNow list=WAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=sfp1 list=LAN
/ip address
add address=192.168.1.2/24 interface=CountyBroadband network=192.168.1.0
add address=192.168.2.2/24 interface=TVNow network=192.168.2.0
add address=10.66.66.1/24 interface=bridge network=10.66.66.0
/ip cloud
set ddns-enabled=yes
/ip dhcp-client

DHCP client can not run on slave interface!

add comment=defconf disabled=no interface=ether1
/ip dhcp-server network
add address=10.66.66.0/24 dns-server=208.67.222.222,208.67.220.220 gateway=10.66.66.1
/ip dns
set allow-remote-requests=yes servers=208.67.220.220,208.67.222.222
/ip dns static
add address=192.168.2.2 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=
established,related,untracked
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new
in-interface-list=WAN
/ip firewall mangle
add action=accept chain=prerouting dst-address=192.168.1.0/24 in-interface=bridge
add action=accept chain=prerouting dst-address=192.168.2.0/24 in-interface=bridge
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=CountyBroadband new-connection-mark=County
passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=TVNow new-connection-mark=TVNow passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local in-interface=bridge
new-connection-mark=County passthrough=yes per-connection-classifier=both-addresses:2/0
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local in-interface=bridge
new-connection-mark=TVNow passthrough=yes per-connection-classifier=both-addresses:2/1
add action=mark-routing chain=prerouting connection-mark=County in-interface=bridge new-routing-mark=To_County passthrough=yes
add action=mark-routing chain=prerouting connection-mark=TVNow in-interface=bridge new-routing-mark=To_TVNow passthrough=yes
add action=mark-routing chain=output connection-mark=County new-routing-mark=To_County passthrough=yes
add action=mark-routing chain=output connection-mark=TVNow new-routing-mark=To_TVNow passthrough=yes
/ip firewall nat
add action=masquerade chain=srcnat disabled=yes
add action=masquerade chain=srcnat disabled=yes out-interface=CountyBroadband
add action=masquerade chain=srcnat disabled=yes out-interface=TVNow
add action=masquerade chain=srcnat out-interface-list=WAN
/ip firewall service-port
set ftp disabled=yes
set sip disabled=yes
/ip kid-control device
add mac-address=76:85:7E:8A:48:15 name=iPad
add mac-address=10:32:7E:89:7E:02 name="Peters phone" user=Peter
add mac-address=A4:93:3F:E5:2D:5C name="Maddy phone" user=Peter
add mac-address=40:A8:F0:43:27:9F name="Maddy PC" user=Peter
add mac-address=B4:2E:99:47:C4:7B name="Peters PC" user=Peter
add mac-address=34:1C:F0:D0:84:78 name="Peters other phone" user=Peter
add mac-address=8E:98:9F:E8:27:F0 name=PD user=Peter
add mac-address=86:93:89:77:CD:9B name=PTD user=Peter
add mac-address=D2:B2:64:66:88:FA name="pd comp" user=Peter
/ip route
add check-gateway=ping distance=1 gateway=192.168.1.1 routing-mark=To_County
add check-gateway=ping distance=1 gateway=192.168.2.1 routing-mark=To_TVNow
/system clock
set time-zone-name=Greenwich
/system ntp client
set enabled=yes primary-ntp=90.207.238.105 secondary-ntp=46.17.88.211 server-dns-names=ntp1.isp.sky.com
/system package update
set channel=testing
/system routerboard settings
set auto-upgrade=yes
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
/tool sniffer
set filter-ip-protocol=icmp
[admin@MikroTik] >

You need a route to your ISP(s) without routing marks. You can use distance to make one primary and other backup. Something like:

/ip route
add check-gateway=ping distance=1 gateway=192.168.1.1
add check-gateway=ping distance=2 gateway=192.168.2.1

That’s solved it! Thanks a lot