why can't use internal things when forward to another ISP

[tomislav91]

So i have connect my router to pfsense OpenVPN and have some routing things there and that’s work like its should. So problem is next, when I use this command to forward only 1 IP to another isp:

/ip firewall mangle
add action=mark-connection chain=prerouting \
    connection-mark=no-mark dst-address=!10.10.0.0/16 \
    new-connection-mark=pc passthrough=yes src-address=\
    10.10.155.5
add action=mark-routing chain=prerouting connection-mark=\
    pc dst-address=!10.10.0.0/16 new-routing-mark=pc \
    passthrough=yes src-address=10.10.155.5


/ip route
add distance=4 gateway=192.168.0.1 routing-mark=pc

I get what I want, that PC 10.10.155.5 go through another ISP with gateway 192.168.0.1, but now, routing that I made its not working, I cant go to some internal things, traceroute stops at routers end. Whan I did wrong?

[sindy]

What you did wrong when posting is that you haven’t given enough details:

• are the addresses of all the “internal things” within just 10.10.0.0/16 or are there any also in other private subnets?
• does the “I” in “I can’t go to some internal things” mean only 10.10.155.5 or it means any device in your LAN?

Answers to these questions might help you understand what is wrong with the configuration. If all “internal things” are in 10.10.0.0/16, I cannot see any mistake in the part you have posted.

[anav]

Network diagram and full config…

[tomislav91]

guys, there is nothing fancy in config.
All we did is just a simple failover and connect router to open vpn, and within routes we can see

Firewall doesn’t matter here, only routing. So, when I put that .5 address to another ISP via command I provided to you, traceroute stops in router itself.
Internal things is this 23.19 what i posted in image.

[tomislav91]

anyone