Hi All,

I'm using RouterOS 3.20 on a dual core 2.4GHz, 512MB, Gb interfaces box.
I'm experiencing slow network routing performance when I use a few basic firewall rules (port blocks to/from specific IP addresses).
This was proven by conducting simple network load with pings (6Kb, ~200 times) gave a 6% up to 10% loss, and when I test using file copy (~2-3Mb) gave me 50 seconds
Then after I disabled the firewall, the loss from the pings was down to 0% and the file copy is faster up to 20-30 seconds.

I was wondering is there anything I should to do to tune up the firewall performance? Since the box system resource showed a lot of idle resources (470Mb free memory, 30% CPU peaks)

Thanks for the responses guys....

The information given is too sketchy, please post your firewall rules for us to see and analyze

Hi guys,

attached is my firewall configuration. hopefully it's clear enough
thanks.

hi guys, any comment ?
how can we measure firewall effect to the performance ? by set of rules ?

Add these to the top of your list. It should help with performance.
You will also want to add them to your input chain.

-Louis

Louis, thanks! I added them to my firewall rules.
anyway, how can we measure on network throughput capability of mikrotik router?
Do the resource meters (CPU load, memory) can represent the actual network throughput performance?

The standard for measuring throughput for a mikrotik router is:

Download the bandwidth test tool from this page http://www.mikrotik.com/download.html onto 2 computers that are directly connected to the router. Start one up and go into settings and check 'Server Enabled'. Then on the second machine, run the tool and put in the IP of the first machine. You can change some of the settings (Protocol,Direction) for specific testing.

CPU of the RB will be the main limitation.

-Louis

Thanks... I try this on. great..!

you can read from this web http://mikrotik.unimedcenter.org/mikrotik-firewall