I have a very slow speed on my mikrotik router.
i have about 960Kbps down and 1mbps up, wich should be around 25Mbps/25Mpbs
i have a few nat rules for portfowarding, and a few pptp profiles for a VPN to the network
could you guys take a look at my config? see if i missed something since i am big noob with RouterOS
```text
[admin@kkeuter-rt01-01] > /export hide-sensitive
# jul/21/2020 22:20:15 by RouterOS 6.43.8
# software id = I1GS-X6EM
#
# model = 2011UiAS
# serial number = 51F304B39629
/interface bridge
add admin-mac=4C:5E:0C:65:25:87 arp=proxy-arp auto-mac=no comment=defconf name=bridge
add arp=proxy-arp name=bridge-vpn
/interface ethernet switch port
set 6 vlan-mode=fallback
set 7 vlan-mode=fallback
set 8 vlan-mode=fallback
set 9 vlan-mode=fallback
set 10 vlan-mode=fallback
set 12 vlan-mode=fallback
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=10.5.1.1-10.10.255.255
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/metarouter
add disabled=yes name=mr1
/ppp profile
add bridge=bridge-vpn local-address=dhcp name=pptp-profile remote-address=dhcp use-encryption=yes
/system logging action
set 3 remote=10.101.1.1 src-address=10.101.1.1
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=ether6
add bridge=bridge comment=defconf interface=ether7
add bridge=bridge comment=defconf interface=ether8
add bridge=bridge comment=defconf interface=ether9
add bridge=bridge comment=defconf interface=ether10
add bridge=bridge comment=defconf interface=sfp1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/interface pptp-server server
set default-profile=pptp-profile enabled=yes
/ip address
add address=10.1.1.1/8 comment=defconf interface=ether2 network=10.0.0.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no interface=ether1
/ip dhcp-server lease
add address=10.101.1.1 allow-dual-stack-queue=no client-id=1:0:1a:64:7:f5:be mac-address=00:1A:64:07:F5:BE
add address=10.10.0.250 client-id=1:0:c:29:85:94:60 mac-address=00:0C:29:85:94:60 server=defconf
add address=10.2.1.1 client-id=ff:bc:9a:4a:2d:0:2:0:0:ab:11:82:e3:6c:60:a:b:d8:f4 mac-address=00:0C:29:48:74:5C server=defconf
add address=10.101.1.2 client-id=1:18:a9:5:77:38:54 mac-address=18:A9:05:77:38:54 server=defconf
add address=10.2.1.2 client-id=ff:bc:9a:4a:2d:0:2:0:0:ab:11:82:6c:e9:ae:95:2e:52:34 disabled=yes mac-address=00:0C:29:F4:98:42 server=defconf
add address=10.50.1.1 client-id=ff:9f:6e:85:24:0:2:0:0:ab:11:af:96:3a:8a:bd:61:bf:f4 mac-address=00:0C:29:F4:04:6C server=defconf
add address=10.25.1.1 client-id=ff:9f:6e:85:24:0:2:0:0:ab:11:cb:8c:9e:19:db:5d:4:17 mac-address=00:0C:29:C8:64:C7 server=defconf
add address=10.2.1.2 allow-dual-stack-queue=no mac-address=00:0C:29:64:FC:80 server=defconf
/ip dhcp-server network
add address=10.0.0.0/8 comment=defconf gateway=10.1.1.1 netmask=8
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=10.1.1.1 name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=accept chain=input dst-port=1723 protocol=tcp
add action=accept chain=input dst-port=47 protocol=tcp
add action=accept chain=input protocol=gre
add action=accept chain=forward dst-port=3389 in-interface=all-ethernet out-interface=all-ethernet port=3389 protocol=tcp src-port=3389
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="PPTP VPN" disabled=yes dst-port=1723 protocol=tcp
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
/ip firewall mangle
add action=change-mss chain=forward disabled=yes new-mss=1400 passthrough=yes protocol=tcp tcp-flags=syn
add action=change-mss chain=forward disabled=yes new-mss=1400 passthrough=yes protocol=tcp tcp-flags=syn
add action=change-mss chain=forward disabled=yes new-mss=1400 passthrough=yes protocol=tcp tcp-flags=syn
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
add action=dst-nat chain=dstnat dst-port=3389 in-interface=all-ethernet protocol=tcp to-addresses=10.10.0.250 to-ports=3389
add action=dst-nat chain=dstnat dst-port=80 in-interface=all-ethernet protocol=tcp to-addresses=10.2.1.1 to-ports=80
add action=dst-nat chain=dstnat dst-port=25565 in-interface=all-ethernet protocol=tcp to-addresses=10.2.1.1 to-ports=25565
add action=dst-nat chain=dstnat dst-port=25565 in-interface=all-ethernet port="" protocol=udp to-addresses=10.2.1.1 to-ports=25565
add action=dst-nat chain=dstnat dst-port=8192 in-interface=all-ethernet protocol=tcp src-address-list="" src-port="" to-addresses=10.101.1.1 to-ports=8192
add action=dst-nat chain=dstnat dst-port=21 in-interface=all-ethernet protocol=tcp src-port="" to-addresses=10.101.1.1 to-ports=21
add action=dst-nat chain=dstnat dst-port=443 in-interface=ether1 protocol=tcp to-addresses=10.2.1.1 to-ports=443
add action=dst-nat chain=dstnat dst-port=3306 in-interface=ether1 protocol=tcp to-addresses=10.10.0.250 to-ports=3306
add action=dst-nat chain=dstnat dst-port=8080 in-interface=ether1 protocol=tcp to-addresses=10.2.1.1 to-ports=8080
add action=dst-nat chain=dstnat dst-port=902 in-interface=all-ethernet protocol=tcp to-addresses=10.101.1.1 to-ports=902
add action=dst-nat chain=dstnat dst-port=22 in-interface=all-ethernet protocol=tcp to-addresses=10.2.1.1 to-ports=22
add action=dst-nat chain=dstnat disabled=yes dst-port=23 in-interface=all-ethernet protocol=tcp to-addresses=10.101.1.1 to-ports=22
add action=dst-nat chain=dstnat dst-port=81 in-interface=all-ethernet protocol=tcp to-addresses=10.10.0.251 to-ports=81
add action=dst-nat chain=dstnat dst-port=4430 in-interface=all-ethernet protocol=tcp to-addresses=10.10.1.1 to-ports=4430
add action=dst-nat chain=dstnat dst-port=2022 in-interface=all-ethernet port="" protocol=tcp src-port="" to-addresses=10.2.1.1 to-ports=2022
add action=dst-nat chain=dstnat dst-port=8443 in-interface=all-ethernet protocol=tcp to-addresses=10.10.1.1 to-ports=8443
add action=dst-nat chain=dstnat dst-port=4430 in-interface=all-ethernet protocol=udp to-addresses=10.10.1.1 to-ports=4430
add action=dst-nat chain=dstnat disabled=yes dst-port=81 protocol=udp to-addresses=10.10.1.1 to-ports=81
add action=dst-nat chain=dstnat dst-port=903 in-interface=all-ethernet protocol=tcp to-addresses=10.101.1.1 to-ports=903
add action=dst-nat chain=dstnat dst-port=1234 in-interface=all-ethernet protocol=tcp to-addresses=10.2.1.1 to-ports=1234
add action=dst-nat chain=dstnat dst-port=25566 in-interface=all-ethernet protocol=tcp to-addresses=10.2.1.1 to-ports=25566
add action=dst-nat chain=dstnat dst-port=25567 in-interface=all-ethernet protocol=tcp to-addresses=10.2.1.1 to-ports=25567
add action=dst-nat chain=dstnat dst-port=25568 protocol=tcp to-addresses=10.2.1.1 to-ports=25568
add action=dst-nat chain=dstnat dst-port=26000 in-interface=all-ethernet protocol=tcp to-addresses=10.2.1.1 to-ports=26000
add action=dst-nat chain=dstnat dst-port=27000 in-interface=all-ethernet protocol=tcp to-addresses=10.2.1.2 to-ports=27000
add action=dst-nat chain=dstnat dst-port=8081 in-interface=all-ethernet protocol=tcp to-addresses=10.2.1.2 to-ports=8081
add action=dst-nat chain=dstnat dst-port=2023 in-interface=all-ethernet protocol=tcp to-addresses=10.2.1.2 to-ports=2023
add action=dst-nat chain=dstnat dst-port=30000 in-interface=all-ethernet protocol=tcp to-addresses=10.10.0.251 to-ports=30000
add action=dst-nat chain=dstnat dst-port=30001 in-interface=all-ethernet protocol=tcp to-addresses=10.10.0.251 to-ports=30001
add action=dst-nat chain=dstnat dst-port=26011 in-interface=ether1 protocol=tcp to-addresses=10.2.1.1 to-ports=26011
add action=dst-nat chain=dstnat dst-port=3000 protocol=tcp to-addresses=10.10.0.251 to-ports=3000
add action=dst-nat chain=dstnat dst-port=3001 protocol=tcp to-addresses=10.10.0.251 to-ports=3001
add action=dst-nat chain=dstnat dst-port=27001 in-interface=all-ethernet protocol=tcp to-addresses=10.2.1.2 to-ports=27001
add action=dst-nat chain=dstnat dst-port=54984 in-interface=all-ethernet protocol=tcp to-addresses=10.10.255.229 to-ports=54984
/lcd
set time-interval=weekly touch-screen=disabled
/ppp secret
add name=ppp1 profile=pptp-profile service=pptp
add name=ppp2 profile=pptp-profile
/routing rip interface
add send=v1-2
/system clock
set time-zone-name=Europe/Amsterdam
/system identity
set name=kkeuter-rt01-01
/system logging
add action=remote topics=info
add action=remote topics=error
add action=remote topics=warning
add action=remote topics=critical
add action=remote topics=account,async,backup,bfd,bgp,bridge,dhcp,ddns,e-mail,dns,firewall,interface,kvm,route,write
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
[admin@kkeuter-rt01-01] >