Hello,
MikroTik has two WANs (primary and backup). MikroTik has Connection Mangle rules for QoS (Queque tree). Idea is this: all traffic goes via Main WAN if it is down then All traffic goes via BACKUP WAN.
Problem arrises when MikroTik goes from PRIMARY to BACKUP WANs (I suspect the problem is other way around as well): in Firewall Connections i still see MikroTik doing Masquerading to “Previous” External WAN (only on Connection-Mark marked traffic): I need to manually remove that Connection for it to start working properly.
/ip firewall nat
add action=masquerade chain=srcnat dst-address=!192.168.213.0/24 out-interface-list=WANs_list src-address=192.168.213.0/24
/ip route
add dst-address=0.0.0.0/0 check-gateway=ping distance=2 gateway=WAN1_MAIN_GW
add dst-address=0.0.0.0/0 check-gateway=ping distance=3 gateway=WAN1_BACKUP_GW
/ip firewall mangle
add action=mark-connection chain=prerouting comment="IPPhones TCP^Connection mark" connection-state=new dst-port=5060-5061,10000-20000 new-connection-mark=VoIP-Connection passthrough=yes protocol=tcp src-address=192.168.213.0/24
add action=mark-connection chain=prerouting comment="IPPhones UDP^Connection mark" connection-state=new dst-port=5060-5061,10000-20000 new-connection-mark=VoIP-Connection passthrough=yes protocol=udp src-address=192.168.213.0/24
add action=mark-packet chain=prerouting comment="IPPhones^Packets marking" connection-mark=VoIP-Connection new-packet-mark=VoIP-Packet passthrough=no