Over sudden can’t access internet from LAN. While looking for the possible issues, noticed that when pinging gateway (ping 103.109.x.y), strange IPs appeared in output (see screenshot). Plus, packet-loss is -225%.
What does that mean? How comes that it tries to ping other IPs?? How comes that while sent out 4 packets, it received 13?? Never saw this weird ping output before…
Any ideas?
When I connect WAN cable directly to computer, it works fine and ping command works as usual. ISP said there is no problem from their side.
I plugged WAN cable to another RB port and configured it accordingly. It works. I connected it back to the original port and it shows the same as I described above.
You should fix the firewall section. There is no correct driving sequence, which accordingly affects the entire traffic operation. Always start with ‘’ add action=accept chain=input comment=“defconf: accept established,related,untracked”…
“Input” section - this is the section where incoming traffic comes from. The “Forward” section is the traffic that passes through the router.
The input section always ends with - add action=drop chain=input comment=“drop all else”
Forward section closes - add action=drop chain=forward comment=“drop all else”
I would recommend using this method as I have my own firewall built to this standard and have had no problems. https://forum.mikrotik.com/viewtopic.php?t=180838
OK, definitely I’ll consider your valuable advice. But with that config, everything was working without any issues for last year. At least, maybe even more than that. Then yesterday without any changes from my side it failed. I agree, correct FW setting will improve overall stability and efficiency. But still that does not explain the mystery of failure.