Hi

Please can someone help me with mangle rules and routing.

I have 2 wan:

ether1 - 172.2.2.2/24, gateway 172.2.2.1

ether5 - 10.0.0.2 gateway 10.0.0.1

lan - 192.168.0.0/24

I have sstp working fine when my default route is 0.0.0.0/24 via 172.2.2.1

problem is I want sstp vpn to be created by external clients through ether5. If i make my defualt route 0.0.0.0/24 via 10.0.0.1 that also works fine.

how do I setup that sstp connection are except through (incoming and outgoing) ether5 and all other traffic goes through ether1.

Thank you for any information.

Hey

actions:
* firewall inbound over eth1 / allow over eth5 (for sstp)
* mark connection coming in over eth1: connection mark
* set default route over eth5 (default table)
* sstp server on router itself: then in output, otherwise preroute: route mark outgoing traffic which has been connection-mark-ed
* define a specific route table in routing for route over eth1

Thanks I'll try shortly and post back