Community discussions

MikroTik App
 
shah76597
just joined
Topic Author
Posts: 4
Joined: Thu Sep 23, 2021 9:51 am

Can't ping mikrotik LAN gateway from internal end users devices

Fri Nov 26, 2021 9:52 am

Hi
I'm new to MikroTik so I hope someone can help me with my problem.

on my RB760igs Router, i cannot ping LAN gateway 192.168.1.10 from my LAN end users computer ..may be it cause i have set PBR load balancing on my router..?

here is my Config:
/ip firewall mangle print
;;; WAN1 and WAN2 load balancing Rule
chain=prerouting action=mark-routing new-routing-mark=to_WAN1 passthrough=no src-address-list=GroupA dst-address-list=!Local log=no log-prefix=""

10 ;;; Brain
chain=prerouting action=mark-routing new-routing-mark=to_WAN2 passthrough=no src-address-list=GroupB dst-address-list=!Local log=no log-prefix=""

/ip route print
0 A S ;;; Connectel Backup
0.0.0.0/0 103.105.208.225 1
1 A S ;;; Brain
0.0.0.0/0 122.129.78.254 1
2 S 0.0.0.0/0 103.105.208.225... 1
3 A S ;;; Connectel Backup
0.0.0.0/0 103.105.208.225 1
4 S ;;; Brain Backup
0.0.0.0/0 122.129.78.254%... 1
5 S ;;; Brain
0.0.0.0/0 122.129.78.254 2
6 ADC 103.105.208.224/29 103.105.208.226 WAN1 0
7 ADC 122.129.78.0/24 122.129.78.160 WAN2 0
8 ADC 192.168.1.0/24 192.168.1.10 bridge1-LAN 0
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19105
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Can't ping mikrotik LAN gateway from internal end users devices

Fri Nov 26, 2021 5:06 pm

A. You have an issue.
B. You are looking for help.
C. Yes you seem to know for sure what we need to see to solve your problem.

Something doesnt fit.

Please post entire config for review.
/export hide-sensitive file=anynameyouwish (if pppoe also remove any identifying details and any public WANIPs).
 
shah76597
just joined
Topic Author
Posts: 4
Joined: Thu Sep 23, 2021 9:51 am

Re: Can't ping mikrotik LAN gateway from internal end users devices

Sun Nov 28, 2021 12:33 pm

here is my /export

# nov/28/2021 15:31:22 by RouterOS 6.49.1
# software id = EQ9Z-XA1M
#
# model = RB760iGS
# serial number = D4500DE52C68
/interface bridge
add comment="LAN Bridge" name=bridge1-LAN
/interface ethernet
set [ find default-name=sfp1 ] name=Sfp-1
set [ find default-name=ether1 ] comment=Connectel name=WAN1
set [ find default-name=ether4 ] comment=Brain name=WAN2
set [ find default-name=ether3 ] comment="Connectel Backup" disabled=yes \
name=WAN3
set [ find default-name=ether5 ] comment="Brain Backup" disabled=yes name=\
WAN4
set [ find default-name=ether2 ] comment=LAN name=ether2-LAN
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip firewall layer7-protocol
add comment="Block Bit Torrent" name=layer7-bittorrent-exp regexp="^(\\x13bitt\
orrent protocol|azver\\x01\$|get /scrape\\\?info_hash=get /announce\\\?inf\
o_hash=|get /client/bitcomet/|GET /data\\\?fid=)|d1:ad2:id20:|\\x08'7P\\)[\
RP]"
/ip ipsec peer
# This entry is unreachable
add name=L2TP passive=yes
/ip ipsec profile
set [ find default=yes ] dh-group=modp1024
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-128-cbc
/ip pool
add comment="LAN DHCP" name=dhcp ranges=192.168.1.11-192.168.1.126
add comment=WAN name="dhcp_pool1 WAN" ranges=103.105.208.226-103.105.208.230
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge1-LAN name=dhcp1
/ppp profile
add address-list="" local-address=192.168.1.10 name="l2tp vpn" \
remote-address=dhcp
set *FFFFFFFE dns-server=8.8.8.8,8.8.4.4
/queue simple
add max-limit=256k/256k name="Sehar Mobile" target=192.168.1.28/32
add max-limit=1M/1M name="Burhan Sami Mobile" target=192.168.1.40/32
add max-limit=256k/256k name="Umar SEO Mobile" target=192.168.1.46/32
add max-limit=256k/256k name="Imtiaz Mobile" target=192.168.1.121/32
add max-limit=512k/512k name="Nosheen Mobile" target=192.168.1.35/32
add max-limit=512k/512k name="Ayesha Mobile" target=192.168.1.36/32
add max-limit=256k/256k name="Hafsa Mobile" target=192.168.1.38/32
add name="Mehroze Mobile" target=192.168.1.11/32
add max-limit=256k/256k name="Umar SEO " target=192.168.1.20/32
add max-limit=256k/256k name="Sania Mobile" target=192.168.1.17/32
add max-limit=256k/256k name="Hamza Mobile" target=192.168.1.31/32
add max-limit=256k/256k name="Rizwan Jilani" target=192.168.1.80/32
add name="Bilal Mobile " target=192.168.1.103/32
add max-limit=512k/512k name="kainat Mobile" target=192.168.1.34/32
/queue tree
add disabled=yes max-limit=60M name="All Bandwith " parent=global priority=1
add max-limit=60M name=Download packet-mark=client-dw-pk parent=\
"All Bandwith " priority=2 queue=pcq-download-default
add max-limit=50M name=http-dw packet-mark=http-dw-pk parent=Download \
priority=1 queue=pcq-download-default
add max-limit=60M name=other-dw packet-mark=other-dw-pk parent=Download \
priority=2 queue=pcq-download-default
add max-limit=60M name=Upload parent="All Bandwith " queue=pcq-upload-default
add max-limit=50M name=http-up packet-mark=http-up-pk parent=Upload priority=\
1 queue=pcq-upload-default
add max-limit=50M name=other-up packet-mark=other-up-pk parent=Upload \
priority=2 queue=pcq-upload-default
/interface bridge port
add bridge=bridge1-LAN interface=ether2-LAN
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/ip settings
set accept-redirects=yes accept-source-route=yes tcp-syncookies=yes
/interface detect-internet
set detect-interface-list=all
/interface l2tp-server server
set allow-fast-path=yes authentication=mschap1,mschap2 default-profile=\
"l2tp vpn" enabled=yes use-ipsec=yes
/interface list member
add interface=WAN1 list=WAN
add list=LAN
add interface=bridge1-LAN list=LAN
/interface ovpn-server server
set auth=sha1 certificate=server cipher=aes256 require-client-certificate=yes
/interface pptp-server server
set default-profile=default
/interface sstp-server server
set default-profile=default-encryption
/ip accounting
set account-local-traffic=yes enabled=yes
/ip accounting web-access
set accessible-via-web=yes address=192.168.1.68/32
/ip address
add address=103.105.208.226/29 comment="ISP Connectel" interface=WAN1 \
network=103.105.208.224
add address=192.168.1.10/24 comment=LAN interface=bridge1-LAN network=\
192.168.1.0
add address=103.105.208.226/29 comment="ISP Connectel Backup" interface=WAN3 \
network=103.105.208.224
add address=122.129.78.160/24 comment="WAN 3 Brain" interface=WAN2 network=\
122.129.78.0
add address=122.129.78.160/24 comment=" Brain Backup" interface=WAN4 network=\
122.129.78.0
/ip cloud
set ddns-enabled=yes
/ip dhcp-client
add interface=WAN1
/ip dhcp-server lease
add address=192.168.1.44 comment="Docker Virtual Machine" mac-address=\
00:15:5D:01:44:00 server=dhcp1
add address=192.168.1.108 client-id=1:90:9a:4a:3f:27:4d comment=\
"TPlink router" mac-address=90:9A:4A:3F:27:4D server=dhcp1
add address=192.168.1.22 client-id=1:f8:d0:27:59:61:9e comment=\
"Epson Printer" mac-address=F8:D0:27:59:61:9E server=dhcp1
add address=192.168.1.28 client-id=1:50:d4:f7:3c:79:f9 mac-address=\
50:D4:F7:3C:79:F9 server=dhcp1
add address=192.168.1.46 client-id=1:72:5f:99:d0:9b:39 comment=\
"Umar SEO Mobile" mac-address=72:5F:99:D0:9B:39 server=dhcp1
add address=192.168.1.48 client-id=1:d6:27:b5:5a:47:9b comment="Zia Iphone" \
mac-address=D6:27:B5:5A:47:9B server=dhcp1
add address=192.168.1.11 client-id=1:e8:5a:8b:36:fb:b4 comment=\
"Mehroze Mobile" mac-address=E8:5A:8B:36:FB:B4 server=dhcp1
add address=192.168.1.47 client-id=1:c0:a5:dd:21:6a:c7 comment=\
"Mercusys Router" mac-address=C0:A5:DD:21:6A:C7 server=dhcp1
add address=192.168.1.57 client-id=1:90:1b:e:36:4c:f5 mac-address=\
90:1B:0E:36:4C:F5 server=dhcp1
add address=192.168.1.24 client-id=1:ee:ef:18:88:8c:15 mac-address=\
EE:EF:18:88:8C:15 server=dhcp1
add address=192.168.1.18 client-id=1:0:e0:4c:36:c:fe comment="Hamza MacBook" \
mac-address=00:E0:4C:36:0C:FE server=dhcp1
add address=192.168.1.20 client-id=1:5e:e7:10:c0:f1:8d comment=\
"Umar SEO Mobile" mac-address=5E:E7:10:C0:F1:8D server=dhcp1
add address=192.168.1.31 client-id=1:14:d1:69:8b:0:aa comment="Hamza Mobile" \
mac-address=14:D1:69:8B:00:AA server=dhcp1
add address=192.168.1.23 client-id=1:7c:2a:db:ed:70:d9 comment="Noman Mobile" \
mac-address=7C:2A:DB:ED:70:D9 server=dhcp1
add address=192.168.1.16 client-id=1:ca:fc:ef:d7:b3:0 mac-address=\
CA:FC:EF:D7:B3:00 server=dhcp1
add address=192.168.1.17 client-id=1:b0:eb:57:f9:1c:83 comment="Sania Mobile" \
mac-address=B0:EB:57:F9:1C:83 server=dhcp1
add address=192.168.1.35 client-id=1:a4:7:b6:d:fa:61 comment="Nosheen Mobile" \
mac-address=A4:07:B6:0D:FA:61 server=dhcp1
add address=192.168.1.36 client-id=1:9e:51:1b:d1:7a:34 comment=\
"Ayesha Mobile" mac-address=9E:51:1B:D1:7A:34 server=dhcp1
add address=192.168.1.37 client-id=1:ac:7:5f:b8:31:56 comment="Sehar Mobile" \
mac-address=AC:07:5F:B8:31:56 server=dhcp1
add address=192.168.1.38 client-id=1:52:ec:b5:53:b2:fe comment="Hafsa Mobile" \
mac-address=52:EC:B5:53:B2:FE server=dhcp1
add address=192.168.1.19 client-id=1:60:f8:1d:c8:92:12 mac-address=\
60:F8:1D:C8:92:12 server=dhcp1
add address=192.168.1.41 client-id=1:50:3e:aa:8e:26:9d mac-address=\
50:3E:AA:8E:26:9D server=dhcp1
add address=192.168.1.27 client-id=1:20:26:81:a8:e5:c1 mac-address=\
20:26:81:A8:E5:C1 server=dhcp1
add address=192.168.1.103 comment="Bilal Mobile" mac-address=\
94:FE:22:B3:9C:9C server=dhcp1
add address=192.168.1.14 client-id=1:a4:1f:72:88:77:b6 mac-address=\
A4:1F:72:88:77:B6 server=dhcp1
add address=192.168.1.13 client-id=1:b8:ca:3a:8f:8d:2f mac-address=\
B8:CA:3A:8F:8D:2F server=dhcp1
add address=192.168.1.53 client-id=1:5c:f9:dd:6e:f6:48 mac-address=\
5C:F9:DD:6E:F6:48 server=dhcp1
add address=192.168.1.30 client-id=1:c8:1f:66:e:8b:8a mac-address=\
C8:1F:66:0E:8B:8A server=dhcp1
add address=192.168.1.42 client-id=1:dc:a2:66:7b:e8:d3 mac-address=\
DC:A2:66:7B:E8:D3 server=dhcp1
add address=192.168.1.40 comment="Burhan Sami Mobile" mac-address=\
44:04:44:80:4C:21 server=dhcp1
add address=192.168.1.106 client-id=1:d0:67:e5:e9:9f:c0 comment=DC02 \
mac-address=D0:67:E5:E9:9F:C0 server=dhcp1
add address=192.168.1.68 client-id=1:ec:f4:bb:bf:91:f8 comment=DC01 \
mac-address=EC:F4:BB:BF:91:F8 server=dhcp1
add address=192.168.1.109 client-id=1:0:17:61:12:85:a6 mac-address=\
00:17:61:12:85:A6 server=dhcp1
add address=192.168.1.121 client-id=1:e6:76:39:2f:d6:83 comment=\
"Imtiaz Mobile" mac-address=E6:76:39:2F:D6:83 server=dhcp1
add address=192.168.1.72 client-id=1:64:0:6a:72:2:2f comment="Burhan PC" \
mac-address=64:00:6A:72:02:2F server=dhcp1
add address=192.168.1.80 client-id=1:20:da:22:89:fc:9f mac-address=\
20:DA:22:89:FC:9F server=dhcp1
add address=192.168.1.55 client-id=1:8:0:27:ab:51:72 comment=\
"Dude Server For Network Monitring " mac-address=08:00:27:AB:51:72 \
server=dhcp1
add address=192.168.1.63 client-id=1:9c:14:63:20:6c:49 comment="Dahuwa XVR" \
mac-address=9C:14:63:20:6C:49 server=dhcp1
add address=192.168.1.34 client-id=1:2c:78:e:79:15:f9 comment="kainat Mobile" \
mac-address=2C:78:0E:79:15:F9 server=dhcp1
/ip dhcp-server network
add address=103.105.208.224/29 comment=WAN1-connectel gateway=103.105.208.225
add address=192.168.1.0/24 comment=LAN1 gateway=192.168.1.10 netmask=24
/ip dns
set allow-remote-requests=yes servers=192.168.1.68,8.8.8.8,192.168.1.106
/ip firewall address-list
add address=192.168.1.110 list="Block users "
add address=192.168.1.73 list="Block users "
add address=192.168.1.48 comment="Col Iphone" list="Active Wifi Client"
add address=192.168.1.125 comment="Fahad Mobile" list="Active Wifi Client"
add address=192.168.1.22 comment="Sania Mobile" list="Active Wifi Client"
add address=192.168.1.28 comment="Sehar Mobile" list="Active Wifi Client"
add address=192.168.1.72 comment="Burhan Sami Mobile" list=\
"Active Wifi Client"
add address=192.168.1.51 list="Active Wifi Client"
add address=192.168.1.76 comment="Burhan Sami Mobile" list=\
"Active Wifi Client"
add address=192.168.1.77 list="Active Wifi Client"
add address=192.168.1.0/25 comment="PBR Load Balncing List" list=GroupA
add address=192.168.1.128/25 list=GroupB
add address=192.168.0.0/24 list=Local
add address=192.168.1.46 comment="Umar SEO Mobile" list="Active Wifi Client"
add address=192.168.1.35 comment="Nosheen Mobile" list="Active Wifi Client"
add address=192.168.1.36 comment="Ayesha Mobile" list="Active Wifi Client"
add address=192.168.1.38 comment="Hafsa Mobile" list="Active Wifi Client"
add address=192.168.1.11 comment="Mehroze Mobile" list="Active Wifi Client"
add address=192.168.1.20 comment="Umar SEO mobile" list="Active Wifi Client"
add address=192.168.1.17 comment="Sania Mobile" list="Active Wifi Client"
add address=192.168.1.31 comment="Hamza Mobile" list="Active Wifi Client"
add address=192.168.2.0 list="l2tp Vpn"
add address=192.168.1.52 comment="Fahad Mobile" list="Active Wifi Client"
add address=192.168.1.103 comment="Bilal Mobile" list="Active Wifi Client"
add address=192.168.1.49 comment="Zias Iphone" list="Active Wifi Client"
add address=192.168.1.40 comment="burhan sami mobile" list=\
"Active Wifi Client"
add address=192.168.1.121 comment="Imtiaz Mobile" list="Active Wifi Client"
add address=192.168.1.80 comment="Rizwan Mobile" list="Active Wifi Client"
add address=157.240.218.17 list="Facebook_Address List"
add address=103.105.208.226 list="Facebook_Address List"
add address=103.105.208.226 list="Youtube_Address List"
add address=157.240.218.35 list="Facebook_Address List"
add address=157.240.27.35 list="Facebook_Address List"
add address=157.240.27.18 list="Facebook_Address List"
add address=216.58.207.14 list="Youtube_Address List"
add address=157.240.235.34 list="Facebook_Address List"
add address=157.240.15.35 list="Facebook_Address List"
add address=157.240.235.36 list="Facebook_Address List"
add address=157.240.235.16 list="Facebook_Address List"
add address=157.240.15.1 list="Facebook_Address List"
add address=157.240.15.19 list="Facebook_Address List"
add address=122.129.78.160 list="Youtube_Address List"
add address=103.111.33.126 list="Facebook_Address List"
add address=196.53.110.134 list="Facebook_Address List"
add address=196.53.110.110 list="Facebook_Address List"
add address=122.129.78.160 list="Facebook_Address List"
add address=157.240.227.34 list="Facebook_Address List"
add address=157.240.227.19 list="Facebook_Address List"
add address=157.240.218.37 list="Facebook_Address List"
add address=157.240.15.34 list="Facebook_Address List"
add address=157.240.218.10 list="Facebook_Address List"
add address=157.240.227.1 list="Facebook_Address List"
add address=157.240.227.35 list="Facebook_Address List"
add address=142.250.181.78 list="Youtube_Address List"
add address=157.240.27.11 list="Facebook_Address List"
add address=157.240.227.13 list="Facebook_Address List"
add address=103.111.33.123 list="Facebook_Address List"
add address=103.111.33.105 list="Facebook_Address List"
add address=185.60.216.19 list="Facebook_Address List"
add address=157.240.10.10 list="Facebook_Address List"
add address=157.240.10.35 list="Facebook_Address List"
add address=142.250.181.37 list="Gmail_Address List"
add address=157.240.218.34 list="Facebook_Address List"
add address=157.240.27.34 list="Facebook_Address List"
add address=157.240.10.18 list="Facebook_Address List"
add address=157.240.218.15 list="Facebook_Address List"
add address=142.250.13.138 list="Youtube_Address List"
add address=142.250.110.139 list="Youtube_Address List"
add address=108.177.15.198 list="Youtube_Address List"
add address=157.240.218.24 list="Facebook_Address List"
add address=142.250.181.14 list="Youtube_Address List"
add address=142.250.110.100 list="Youtube_Address List"
add address=157.240.7.20 list="Facebook_Address List"
add address=157.240.227.17 list="Facebook_Address List"
add address=142.250.110.138 list="Youtube_Address List"
add address=172.217.19.174 list="Youtube_Address List"
add address=142.250.110.113 list="Youtube_Address List"
add address=142.250.110.101 list="Youtube_Address List"
add address=122.129.78.160 list="Gmail_Address List"
add address=142.250.110.102 list="Youtube_Address List"
add address=157.240.227.36 list="Facebook_Address List"
add address=185.61.154.214 list="Facebook_Address List"
add address=142.250.13.113 list="Youtube_Address List"
add address=157.240.235.35 list="Facebook_Address List"
add address=216.58.208.238 list="Youtube_Address List"
add address=157.240.15.17 list="Facebook_Address List"
add address=172.217.21.46 list="Youtube_Address List"
add address=142.250.181.46 list="Youtube_Address List"
add address=157.240.195.36 list="Facebook_Address List"
add address=185.151.30.177 list="Facebook_Address List"
add address=198.23.60.210 list="Facebook_Address List"
add address=45.84.205.242 list="Facebook_Address List"
add address=142.250.181.110 list="Youtube_Address List"
add address=172.217.19.14 list="Youtube_Address List"
add address=172.253.120.100 list="Youtube_Address List"
add address=31.13.82.34 list="Facebook_Address List"
add address=31.13.82.1 list="Facebook_Address List"
add address=142.250.13.101 list="Youtube_Address List"
add address=157.240.10.13 list="Facebook_Address List"
add address=157.240.13.35 list="Facebook_Address List"
add address=179.60.194.20 list="Facebook_Address List"
add address=157.240.235.15 list="Facebook_Address List"
add address=142.250.13.139 list="Youtube_Address List"
add address=157.240.218.6 list="Facebook_Address List"
add address=142.250.13.102 list="Youtube_Address List"
add address=74.125.206.100 list="Youtube_Address List"
add address=157.240.20.35 list="Facebook_Address List"
add address=172.217.19.5 list="Gmail_Address List"
add address=157.240.13.32 list="Facebook_Address List"
add address=157.240.13.10 list="Facebook_Address List"
add address=166.62.6.79 list="Gmail_Address List"
add address=104.26.10.159 list="Facebook_Address List"
add address=172.67.222.229 list="Facebook_Address List"
add address=179.60.194.13 list="Facebook_Address List"
add address=157.240.10.23 list="Facebook_Address List"
add address=157.240.235.18 list="Facebook_Address List"
add address=157.240.217.17 list="Facebook_Address List"
add address=157.240.217.15 list="Facebook_Address List"
add address=151.106.121.148 list="Gmail_Address List"
add address=142.250.181.142 list="Youtube_Address List"
add address=152.89.162.194 list="Facebook_Address List"
add address=103.105.208.226 list="Gmail_Address List"
add address=199.87.208.143 list="Facebook_Address List"
add address=199.87.208.109 list="Facebook_Address List"
add address=152.89.162.178 list="Facebook_Address List"
add address=157.240.7.32 list="Facebook_Address List"
add address=179.60.194.32 list="Facebook_Address List"
add address=69.171.250.15 list="Facebook_Address List"
add address=13.35.20.40 list="Youtube_Address List"
add address=104.26.12.187 list="Facebook_Address List"
add address=179.60.194.35 list="Facebook_Address List"
add address=103.111.33.10 list="Facebook_Address List"
add address=157.240.7.13 list="Facebook_Address List"
add address=157.240.7.35 list="Facebook_Address List"
add address=157.240.27.13 list="Facebook_Address List"
add address=31.13.86.36 list="Facebook_Address List"
add address=157.240.15.36 list="Facebook_Address List"
add address=157.240.196.17 list="Facebook_Address List"
add address=157.240.195.17 list="Facebook_Address List"
add address=157.240.217.35 list="Facebook_Address List"
add address=31.13.68.1 list="Facebook_Address List"
add address=31.13.68.13 list="Facebook_Address List"
add address=157.240.15.13 list="Facebook_Address List"
add address=157.240.235.1 list="Facebook_Address List"
add address=142.250.185.238 list="Youtube_Address List"
add address=37.187.152.183 list="Facebook_Address List"
add address=192.142.128.103 list="Facebook_Address List"
add address=107.158.144.30 list="Facebook_Address List"
add address=192.142.128.112 list="Facebook_Address List"
add address=162.255.45.109 list="Facebook_Address List"
add address=172.217.168.78 list="Youtube_Address List"
add address=157.240.27.54 list="Whatsapp Web_Address List"
add address=157.240.195.10 list="Facebook_Address List"
add address=157.240.195.24 list="Facebook_Address List"
add address=47.89.88.76 list="Facebook_Address List"
add address=157.240.7.54 list="Whatsapp Web_Address List"
add address=157.240.7.16 list="Facebook_Address List"
add address=142.250.13.100 list="Youtube_Address List"
add address=157.240.7.36 list="Facebook_Address List"
add address=103.111.33.122 list="Facebook_Address List"
add address=196.53.110.106 list="Facebook_Address List"
add address=103.20.215.198 list="Facebook_Address List"
add address=157.240.10.32 list="Facebook_Address List"
add address=172.253.120.109 list="Gmail_Address List"
add address=196.53.110.13 list="Facebook_Address List"
add address=196.53.110.109 list="Facebook_Address List"
add address=179.60.194.27 list="Facebook_Address List"
add address=157.240.7.26 list="Facebook_Address List"
add address=173.194.76.109 list="Gmail_Address List"
add address=18.67.111.54 list="Youtube_Address List"
add address=74.125.140.108 list="Gmail_Address List"
add address=66.29.137.52 list="Facebook_Address List"
add address=31.13.64.16 list="Facebook_Address List"
add address=69.171.250.13 list="Facebook_Address List"
add address=64.233.167.108 list="Gmail_Address List"
add address=64.233.184.109 list="Gmail_Address List"
add address=47.254.56.66 list="Gmail_Address List"
add address=74.125.133.108 list="Gmail_Address List"
add address=157.240.196.35 list="Facebook_Address List"
add address=122.129.78.160 list="Whatsapp Web_Address List"
add address=128.52.130.229 list="Gmail_Address List"
add address=66.102.1.109 list="Gmail_Address List"
add address=172.253.120.113 list="Youtube_Address List"
add address=104.21.54.28 list="Facebook_Address List"
add address=23.185.0.3 list="Facebook_Address List"
add address=66.29.146.20 list="Facebook_Address List"
add address=69.171.250.37 list="Facebook_Address List"
add address=172.253.120.139 list="Youtube_Address List"
add address=64.233.166.108 list="Gmail_Address List"
add address=31.13.86.34 list="Facebook_Address List"
add address=74.125.133.109 list="Gmail_Address List"
add address=157.240.13.9 list="Facebook_Address List"
add address=108.177.15.108 list="Gmail_Address List"
add address=64.233.166.102 list="Youtube_Address List"
add address=31.13.86.2 list="Facebook_Address List"
add address=64.233.184.108 list="Gmail_Address List"
add address=172.253.120.138 list="Youtube_Address List"
add address=23.8.183.78 list="Facebook_Address List"
add address=172.253.120.102 list="Youtube_Address List"
add address=157.240.217.37 list="Facebook_Address List"
add address=216.58.207.110 list="Youtube_Address List"
add address=142.251.5.108 list="Gmail_Address List"
add address=13.35.20.36 list="Youtube_Address List"
add address=216.58.215.238 list="Youtube_Address List"
add address=66.102.1.108 list="Gmail_Address List"
add address=192.124.249.69 list="Facebook_Address List"
add address=142.250.203.110 list="Youtube_Address List"
add address=157.240.217.34 list="Facebook_Address List"
add address=172.217.18.110 list="Youtube_Address List"
add address=23.111.168.43 list="Gmail_Address List"
add address=23.227.38.74 list="Facebook_Address List"
add address=157.240.13.14 list="Facebook_Address List"
add address=74.125.140.109 list="Gmail_Address List"
add address=157.90.71.225 list="Facebook_Address List"
add address=157.240.218.33 list="Facebook_Address List"
add address=142.251.5.100 list="Youtube_Address List"
add address=142.251.5.113 list="Youtube_Address List"
add address=142.251.5.101 list="Youtube_Address List"
add address=142.251.5.198 list="Youtube_Address List"
add address=74.125.140.101 list="Youtube_Address List"
add address=157.240.227.60 list="Whatsapp Web_Address List"
add address=103.111.33.185 list="Facebook_Address List"
add address=104.243.212.115 list="Facebook_Address List"
add address=173.249.16.241 list="Facebook_Address List"
add address=116.206.231.91 list="Facebook_Address List"
add address=103.231.88.35 list="Facebook_Address List"
add address=79.98.182.103 list="Facebook_Address List"
add address=185.205.204.110 list="Facebook_Address List"
add address=45.9.249.228 list="Facebook_Address List"
add address=185.205.204.103 list="Facebook_Address List"
add address=173.194.76.108 list="Gmail_Address List"
add address=108.158.251.21 list="Youtube_Address List"
add address=172.67.183.178 list="Facebook_Address List"
add address=74.125.140.139 list="Youtube_Address List"
add address=116.206.231.92 list="Facebook_Address List"
add address=74.125.140.138 list="Youtube_Address List"
add address=64.233.167.109 list="Gmail_Address List"
add address=74.125.206.109 list="Gmail_Address List"
add address=74.125.140.113 list="Youtube_Address List"
add address=74.125.140.100 list="Youtube_Address List"
add address=74.125.140.102 list="Youtube_Address List"
add address=104.22.70.203 list="Facebook_Address List"
add address=157.240.13.19 list="Facebook_Address List"
add address=142.250.110.108 list="Gmail_Address List"
add address=172.253.120.198 list="Youtube_Address List"
add address=66.102.1.198 list="Youtube_Address List"
add address=108.177.15.138 list="Youtube_Address List"
add address=108.177.15.102 list="Youtube_Address List"
add address=108.177.15.113 list="Youtube_Address List"
add address=108.177.15.101 list="Youtube_Address List"
add address=108.177.15.139 list="Youtube_Address List"
add address=108.177.15.100 list="Youtube_Address List"
add address=173.194.76.100 list="Youtube_Address List"
add address=173.194.76.101 list="Youtube_Address List"
add address=173.194.76.102 list="Youtube_Address List"
add address=31.13.66.34 list="Facebook_Address List"
add address=173.194.76.138 list="Youtube_Address List"
add address=173.194.76.139 list="Youtube_Address List"
add address=173.194.76.113 list="Youtube_Address List"
add address=192.81.209.89 list="Youtube_Address List"
add address=198.187.29.102 list="Facebook_Address List"
add address=192.99.220.43 list="Facebook_Address List"
add address=185.60.216.32 list="Facebook_Address List"
add address=74.125.133.102 list="Youtube_Address List"
add address=157.240.195.35 list="Facebook_Address List"
add address=74.125.133.100 list="Youtube_Address List"
add address=157.240.195.56 list="Whatsapp Web_Address List"
add address=142.250.110.198 list="Youtube_Address List"
add address=157.240.195.34 list="Facebook_Address List"
add address=74.125.133.113 list="Youtube_Address List"
add address=185.205.204.102 list="Facebook_Address List"
add address=13.35.13.68 list="Youtube_Address List"
add address=64.233.166.109 list="Gmail_Address List"
add address=185.60.216.35 list="Facebook_Address List"
add address=31.13.84.8 list="Facebook_Address List"
add address=157.240.7.38 list="Facebook_Address List"
add address=31.13.84.36 list="Facebook_Address List"
add address=31.13.84.34 list="Facebook_Address List"
add address=185.60.216.15 list="Facebook_Address List"
add address=157.240.227.33 list="Facebook_Address List"
add address=103.105.210.2 list="Gmail_Address List"
add address=157.240.227.2 list="Facebook_Address List"
add address=103.111.33.12 list="Facebook_Address List"
add address=31.13.70.36 list="Facebook_Address List"
add address=172.67.207.14 list="Facebook_Address List"
add address=45.84.204.237 list="Gmail_Address List"
add address=157.240.19.35 list="Facebook_Address List"
add address=157.240.14.35 list="Facebook_Address List"
add address=31.13.67.16 list="Facebook_Address List"
add address=157.240.3.15 list="Facebook_Address List"
add address=142.250.13.198 list="Youtube_Address List"
add address=31.13.84.2 list="Facebook_Address List"
add address=104.122.9.200 list="Facebook_Address List"
add address=172.67.218.48 list="Facebook_Address List"
add address=157.240.220.35 list="Facebook_Address List"
add address=67.21.32.232 list="Facebook_Address List"
add address=185.205.204.100 list="Facebook_Address List"
add address=185.205.204.106 list="Facebook_Address List"
add address=50.3.224.10 list="Facebook_Address List"
add address=199.87.208.125 list="Facebook_Address List"
add address=54.93.38.117 list="Facebook_Address List"
add address=23.22.202.126 list="Facebook_Address List"
add address=173.194.76.198 list="Youtube_Address List"
add address=103.108.92.188 list="Facebook_Address List"
add address=185.209.178.49 list="Facebook_Address List"
add address=67.199.248.10 list="Youtube_Address List"
add address=208.91.198.74 list="Youtube_Address List"
add address=208.91.198.74 list="Gmail_Address List"
add address=50.3.188.34 list="Facebook_Address List"
add address=216.58.207.101 list="Gmail_Address List"
add address=67.219.150.108 list="Facebook_Address List"
add address=157.240.2.35 list="Facebook_Address List"
add address=142.250.190.46 list="Youtube_Address List"
add address=142.250.190.14 list="Youtube_Address List"
add address=142.250.190.110 list="Youtube_Address List"
add address=142.250.191.206 list="Youtube_Address List"
add address=172.217.4.46 list="Youtube_Address List"
add address=13.35.13.113 list="Youtube_Address List"
add address=156.67.73.48 list="Facebook_Address List"
add address=198.37.116.43 list="Facebook_Address List"
add address=103.83.81.68 list="Facebook_Address List"
add address=40.91.127.220 list="Gmail_Address List"
add address=185.60.216.53 list="Whatsapp Web_Address List"
add address=31.177.76.70 list="Facebook_Address List"
add address=162.218.230.220 list="Facebook_Address List"
add address=162.218.230.219 list="Facebook_Address List"
add address=162.218.230.221 list="Facebook_Address List"
add address=157.240.20.32 list="Facebook_Address List"
add address=207.180.198.156 list="Facebook_Address List"
add address=74.125.71.198 list="Youtube_Address List"
add address=142.250.191.142 list="Youtube_Address List"
add address=157.240.199.35 list="Facebook_Address List"
add address=31.13.84.23 list="Facebook_Address List"
add address=172.217.5.14 list="Youtube_Address List"
add address=142.250.191.110 list="Youtube_Address List"
add address=142.250.72.238 list="Youtube_Address List"
add address=142.250.68.78 list="Youtube_Address List"
add address=172.217.11.174 list="Youtube_Address List"
add address=31.13.92.52 list="Whatsapp Web_Address List"
add address=186.233.185.203 list="Facebook_Address List"
add address=31.13.77.35 list="Facebook_Address List"
add address=31.13.77.17 list="Facebook_Address List"
add address=157.240.199.11 list="Facebook_Address List"
add address=38.99.247.221 list="Facebook_Address List"
add address=38.99.247.219 list="Facebook_Address List"
add address=142.250.180.46 list="Youtube_Address List"
add address=185.60.216.10 list="Facebook_Address List"
add address=216.58.208.78 list="Youtube_Address List"
add address=142.250.180.37 list="Gmail_Address List"
add address=142.250.72.110 list="Youtube_Address List"
add address=66.115.182.34 list="Facebook_Address List"
add address=31.13.84.51 list="Whatsapp Web_Address List"
add address=157.240.20.15 list="Facebook_Address List"
add address=31.13.92.10 list="Facebook_Address List"
add address=157.240.20.52 list="Whatsapp Web_Address List"
add address=216.58.209.142 list="Youtube_Address List"
add address=196.53.110.111 list="Facebook_Address List"
add address=35.213.179.33 list="Facebook_Address List"
add address=142.250.185.46 list="Youtube_Address List"
add address=44.236.54.143 list="Facebook_Address List"
add address=66.154.110.180 list="Facebook_Address List"
add address=172.217.18.142 list="Youtube_Address List"
add address=13.35.175.26 list="Youtube_Address List"
add address=13.35.175.13 list="Youtube_Address List"
add address=50.3.224.11 list="Facebook_Address List"
add address=104.18.254.23 list="Facebook_Address List"
add address=207.188.7.130 list="Facebook_Address List"
add address=157.240.18.35 list="Facebook_Address List"
add address=157.240.199.17 list="Facebook_Address List"
add address=198.54.128.22 list="Facebook_Address List"
add address=157.240.22.35 list="Facebook_Address List"
add address=162.218.230.196 list="Facebook_Address List"
add address=108.177.15.109 list="Gmail_Address List"
add address=198.134.107.195 list="Facebook_Address List"
add address=15.197.142.173 list="Facebook_Address List"
add address=162.255.45.117 list="Facebook_Address List"
add address=204.27.63.179 list="Facebook_Address List"
add address=3.33.152.147 list="Facebook_Address List"
add address=166.62.26.2 list="Gmail_Address List"
add address=82.102.31.83 list="Facebook_Address List"
add address=103.105.208.226 list="Whatsapp Web_Address List"
add address=142.250.68.46 list="Youtube_Address List"
add address=142.250.188.238 list="Youtube_Address List"
add address=157.240.11.35 list="Facebook_Address List"
add address=142.250.68.14 list="Youtube_Address List"
add address=162.255.46.154 list="Facebook_Address List"
add address=104.243.213.102 list="Facebook_Address List"
add address=157.240.241.34 list="Facebook_Address List"
add address=31.13.71.34 list="Facebook_Address List"
add address=31.13.71.36 list="Facebook_Address List"
add address=194.163.142.38 list="Facebook_Address List"
add address=151.101.2.159 list="Gmail_Address List"
add address=31.13.71.1 list="Facebook_Address List"
add address=68.235.48.20 list="Facebook_Address List"
add address=64.233.184.138 list="Youtube_Address List"
add address=216.58.210.78 list="Youtube_Address List"
add address=173.44.34.5 list="Facebook_Address List"
add address=157.240.241.35 list="Facebook_Address List"
add address=162.215.249.107 list="Facebook_Address List"
add address=157.240.14.32 list="Facebook_Address List"
add address=192.142.128.117 list="Facebook_Address List"
add address=107.158.144.58 list="Facebook_Address List"
add address=104.193.240.131 list="Facebook_Address List"
add address=64.233.166.198 list="Youtube_Address List"
add address=157.240.196.34 list="Facebook_Address List"
add address=196.53.110.128 list="Facebook_Address List"
add address=185.209.178.10 list="Facebook_Address List"
add address=66.102.1.102 list="Youtube_Address List"
add address=108.177.125.102 list="Youtube_Address List"
add address=66.102.1.138 list="Youtube_Address List"
add address=66.102.1.113 list="Youtube_Address List"
add address=66.102.1.101 list="Youtube_Address List"
add address=66.102.1.139 list="Youtube_Address List"
add address=108.177.125.101 list="Youtube_Address List"
add address=3.223.115.185 list="Facebook_Address List"
add address=198.54.125.199 list="Facebook_Address List"
add address=143.204.109.87 list="Youtube_Address List"
add address=66.102.1.100 list="Youtube_Address List"
add address=162.218.230.195 list="Facebook_Address List"
add address=208.96.18.238 list="Gmail_Address List"
add address=142.250.190.78 list="Youtube_Address List"
add address=142.251.5.109 list="Gmail_Address List"
add address=157.240.3.35 list="Facebook_Address List"
add address=172.67.204.149 list="Facebook_Address List"
add address=172.253.120.108 list="Gmail_Address List"
add address=157.240.18.9 list="Facebook_Address List"
add address=104.21.48.45 list="Facebook_Address List"
add address=104.21.93.48 list="Facebook_Address List"
add address=184.154.83.101 list="Facebook_Address List"
add address=172.217.21.37 list="Gmail_Address List"
add address=119.160.98.79 list="Gmail_Address List"
add address=45.58.41.170 list="Gmail_Address List"
add address=143.204.109.31 list="Youtube_Address List"
add address=157.240.26.35 list="Facebook_Address List"
add address=74.125.133.198 list="Youtube_Address List"
add address=31.13.65.36 list="Facebook_Address List"
add address=157.240.18.15 list="Facebook_Address List"
add address=64.233.184.101 list="Youtube_Address List"
add address=64.233.184.139 list="Youtube_Address List"
add address=31.13.70.1 list="Facebook_Address List"
add address=104.21.34.124 list="Facebook_Address List"
add address=172.67.205.4 list="Facebook_Address List"
add address=103.231.88.36 list="Facebook_Address List"
add address=43.245.160.5 list="Facebook_Address List"
add address=192.142.128.113 list="Facebook_Address List"
add address=103.111.33.181 list="Facebook_Address List"
add address=198.143.164.254 list="Facebook_Address List"
add address=216.18.194.210 list="Facebook_Address List"
add address=172.67.203.252 list="Facebook_Address List"
add address=216.239.38.21 list="Facebook_Address List"
add address=142.250.181.19 list="Facebook_Address List"
add address=104.21.42.178 list="Facebook_Address List"
add address=64.233.167.101 list="Youtube_Address List"
add address=166.62.112.193 list="Facebook_Address List"
add address=198.143.164.254 list="Youtube_Address List"
add address=159.89.244.183 list="Youtube_Address List"
add address=185.201.11.10 list="Facebook_Address List"
add address=216.58.208.84 list="Facebook_Address List"
add address=185.214.127.158 list="Facebook_Address List"
add address=64.233.184.198 list="Youtube_Address List"
add address=31.13.67.35 list="Facebook_Address List"
add address=31.13.66.35 list="Facebook_Address List"
add address=179.60.192.2 list="Facebook_Address List"
add address=185.60.216.36 list="Facebook_Address List"
add address=142.250.114.91 list="Youtube_Address List"
add address=142.251.32.238 list="Youtube_Address List"
add address=142.251.32.174 list="Youtube_Address List"
add address=51.195.104.87 list="Facebook_Address List"
add address=159.65.72.135 list="Gmail_Address List"
add address=31.13.71.49 list="Whatsapp Web_Address List"
add address=185.60.216.11 list="Facebook_Address List"
add address=157.240.218.60 list="Whatsapp Web_Address List"
add address=204.14.73.171 list="Facebook_Address List"
add address=142.250.27.109 list="Gmail_Address List"
add address=142.250.102.109 list="Gmail_Address List"
add address=172.217.169.238 list="Youtube_Address List"
add address=156.67.222.95 list="Facebook_Address List"
add address=142.250.102.108 list="Gmail_Address List"
add address=143.204.46.73 list="Youtube_Address List"
add address=142.250.27.108 list="Gmail_Address List"
add address=160.153.131.150 list="Facebook_Address List"
add address=172.67.180.53 list="Facebook_Address List"
add address=31.170.160.33 list="Facebook_Address List"
add address=128.2.44.120 list="Gmail_Address List"
add address=172.67.177.248 list="Gmail_Address List"
add address=157.240.229.17 list="Facebook_Address List"
add address=104.21.47.72 list="Facebook_Address List"
add address=155.254.23.180 list="Facebook_Address List"
add address=104.21.77.74 list="Gmail_Address List"
add address=157.240.20.10 list="Facebook_Address List"
add address=31.13.93.53 list="Whatsapp Web_Address List"
add address=42.201.190.197 list="Youtube_Address List"
add address=31.13.86.8 list="Facebook_Address List"
add address=192.142.128.114 list="Facebook_Address List"
add address=196.53.110.129 list="Facebook_Address List"
add address=143.204.109.34 list="Youtube_Address List"
add address=162.0.229.55 list="Facebook_Address List"
add address=157.240.196.60 list="Whatsapp Web_Address List"
add address=50.3.188.36 list="Facebook_Address List"
add address=158.69.225.63 list="Facebook_Address List"
add address=142.250.13.108 list="Gmail_Address List"
add address=157.240.236.35 list="Facebook_Address List"
add address=156.67.73.189 list="Facebook_Address List"
add address=74.125.167.89 list="Youtube_Address List"
add address=74.125.12.72 list="Youtube_Address List"
add address=107.190.135.221 list="Facebook_Address List"
add address=172.217.168.14 list="Youtube_Address List"
add address=204.14.73.131 list="Facebook_Address List"
add address=157.240.20.9 list="Facebook_Address List"
add address=18.66.196.96 list="Youtube_Address List"
add address=172.217.168.46 list="Youtube_Address List"
add address=157.240.18.52 list="Whatsapp Web_Address List"
add address=157.240.2.53 list="Whatsapp Web_Address List"
add address=104.21.90.154 list="Facebook_Address List"
add address=179.60.194.12 list="Facebook_Address List"
add address=157.240.236.15 list="Facebook_Address List"
add address=157.240.28.51 list="Whatsapp Web_Address List"
add address=192.168.1.34 comment="kainat Mobile" list="Active Wifi Client"
add address=157.240.196.10 list="Facebook_Address List"
add address=151.101.2.152 list="Gmail_Address List"
add address=157.240.227.56 list="Facebook_Address List"
add address=111.119.187.11 list="Gmail_Address List"
add address=142.250.13.109 list="Gmail_Address List"
add address=172.217.16.142 list="Youtube_Address List"
add address=142.250.185.206 list="Youtube_Address List"
add address=142.250.186.78 list="Youtube_Address List"
add address=142.250.184.206 list="Youtube_Address List"
/ip firewall filter
add action=drop chain=forward comment="Block Wifi Clients" src-address-list=\
"Block users "
add action=drop chain=forward dst-port=\
!0-1024,8291,5900,5800,3389,14147,5222,59905 protocol=tcp \
src-address-list=Torrent-Conn
add action=drop chain=forward dst-port=\
!0-1024,8291,5900,5800,3389,14147,5222,59905 protocol=udp \
src-address-list=Torrent-Conn
add action=add-src-to-address-list address-list=Torrent-Conn \
address-list-timeout=2m chain=forward layer7-protocol=\
layer7-bittorrent-exp src-address=192.168.1.0/24 src-address-list=\
!allow-bit
add action=add-src-to-address-list address-list="TCPIP Block_List" \
address-list-timeout=1d chain=input comment=\
"Prevention DDoS Via TCP IP Connection Time out" connection-limit=32,32 \
protocol=tcp
add action=jump chain=forward comment="SYN Flood Protect FORWARD" \
connection-state=new jump-target=syn-attack protocol=tcp tcp-flags=syn
add action=jump chain=input comment="SYN Flood protect INPUT" \
connection-state=new jump-target=syn-attack protocol=tcp tcp-flags=syn
add action=accept chain=syn-attack connection-state=new limit=400,5:packet \
protocol=tcp tcp-flags=syn
add action=drop chain=syn-attck connection-state=new protocol=tcp tcp-flags=\
syn
add action=drop chain=forward comment="SMB Attack on DC-02" dst-port=445 \
protocol=tcp src-address=192.168.1.106
add action=add-src-to-address-list address-list="Port Scaning Attack" \
address-list-timeout=none-dynamic chain=forward comment=\
"Prevention from Port Scaning Attack FORWARD" protocol=tcp psd=21,3s,3,1
add action=add-src-to-address-list address-list="Port Scaning Attack UDP" \
address-list-timeout=none-dynamic chain=forward comment=\
"Prevention from Port Scaning Attack FORWARD" protocol=udp psd=21,3s,3,1
add action=add-src-to-address-list address-list="Port Scaning Attack" \
address-list-timeout=none-dynamic chain=input comment=\
"Prevention from Port Scaning Attack INPUT" protocol=tcp psd=21,3s,3,1
add action=add-src-to-address-list address-list="Port Scaning Attack UDP" \
address-list-timeout=none-dynamic chain=input comment=\
"Prevention from Port Scaning Attack INPUT" protocol=udp psd=21,3s,3,1
add action=drop chain=forward protocol=tcp src-address-list=\
"Port Scaning Attack"
add action=drop chain=forward protocol=udp src-address-list=\
"Port Scaning Attack"
add action=drop chain=input protocol=tcp src-address-list=\
"Port Scaning Attack"
add action=drop chain=input protocol=udp src-address-list=\
"Port Scaning Attack"
/ip firewall mangle
add action=mark-connection chain=forward comment=client-dw-conn in-interface=\
WAN1 new-connection-mark=client-dw-conn passthrough=yes
add action=mark-packet chain=forward comment=client-dw-pk connection-mark=\
client-dw-conn new-packet-mark=client-dw-pk passthrough=yes
add action=mark-connection chain=prerouting comment=client-up-conn \
in-interface=bridge1-LAN new-connection-mark=client-up-conn passthrough=\
yes
add action=mark-packet chain=prerouting comment=client-up-pk connection-mark=\
client-up-conn new-packet-mark=client-up-pk passthrough=yes
add action=mark-packet chain=forward comment=http-dw-pk new-packet-mark=\
http-dw-pk packet-mark=client-dw-pk passthrough=no port=80,443 protocol=\
tcp
add action=mark-packet chain=forward comment=http-up-pk dst-port=80,443 \
new-packet-mark=http-up-pk packet-mark=client-up-pk passthrough=no \
protocol=tcp
add action=mark-packet chain=forward comment=other-dw-pk new-packet-mark=\
other-dw-pk packet-mark=client-dw-pk passthrough=no
add action=mark-packet chain=forward comment=other-up-pk new-packet-mark=\
other-up-pk packet-mark=client-up-pk passthrough=no
add action=change-ttl chain=postrouting comment="Change TTL Rule" disabled=\
yes new-ttl=set:3 out-interface=bridge1-LAN passthrough=no
add action=mark-routing chain=prerouting comment=\
"WAN1 and WAN2 load balancing Rule" dst-address-list=!Local \
new-routing-mark=to_WAN1 passthrough=no src-address-list=GroupA
add action=mark-routing chain=prerouting comment=Brain dst-address-list=\
!Local new-routing-mark=to_WAN2 passthrough=no src-address-list=GroupB
/ip firewall nat
add action=dst-nat chain=dstnat comment="SMB 1" dst-port=445 in-interface=\
WAN1 protocol=tcp to-addresses=192.168.1.68 to-ports=445
add action=dst-nat chain=dstnat comment="SMB 5" dst-port=445 in-interface=\
WAN3 protocol=tcp to-addresses=192.168.1.68 to-ports=445
add action=dst-nat chain=dstnat comment="SMB 4" dst-port=139 in-interface=\
WAN1 protocol=tcp to-addresses=192.168.1.68 to-ports=139
add action=dst-nat chain=dstnat comment="SMB 4" dst-port=139 in-interface=\
WAN3 protocol=tcp to-addresses=192.168.1.68 to-ports=139
add action=dst-nat chain=dstnat comment="output messenger " dst-address=\
103.105.208.226 dst-port=14121 in-interface=WAN1 protocol=tcp \
to-addresses=192.168.1.106 to-ports=14121
add action=dst-nat chain=dstnat comment="output messenger " dst-address=\
122.129.78.160 dst-port=14121 in-interface=WAN2 protocol=tcp \
to-addresses=192.168.1.106 to-ports=14121
add action=dst-nat chain=dstnat comment="output messenger " dst-address=\
103.105.208.226 dst-port=14121 in-interface=WAN3 protocol=tcp \
to-addresses=192.168.1.106 to-ports=14121
add action=dst-nat chain=dstnat comment="RDP DC01" dst-port=3389 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.68 to-ports=3389
add action=dst-nat chain=dstnat comment="RDP DC01" dst-port=3389 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.68 to-ports=3389
add action=dst-nat chain=dstnat comment="RDP DC01" dst-port=3389 \
in-interface=WAN3 protocol=tcp to-addresses=192.168.1.68 to-ports=3389
add action=dst-nat chain=dstnat comment="RDP DC02" dst-port=3390 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.106 to-ports=3390
add action=dst-nat chain=dstnat comment="RDP DC02" dst-port=3390 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.106 to-ports=3390
add action=dst-nat chain=dstnat comment="RDP DC02" dst-port=3390 \
in-interface=WAN3 protocol=tcp to-addresses=192.168.1.106 to-ports=3390
add action=dst-nat chain=dstnat comment="Biomatric Machine" dst-address=\
103.105.208.226 dst-port=4370 in-interface=WAN1 protocol=tcp \
to-addresses=192.168.1.109 to-ports=4370
add action=dst-nat chain=dstnat comment="Biomatric Machine" dst-address=\
122.129.78.160 dst-port=4370 in-interface=WAN2 protocol=tcp to-addresses=\
192.168.1.109 to-ports=4370
add action=dst-nat chain=dstnat comment="Biomatric Machine" dst-address=\
103.105.208.226 dst-port=4370 in-interface=WAN3 protocol=tcp \
to-addresses=192.168.1.109 to-ports=4370
add action=dst-nat chain=dstnat comment=Winbox dst-port=8291 in-interface=\
WAN1 protocol=tcp to-addresses=192.168.1.10 to-ports=8291
add action=dst-nat chain=dstnat comment=Winbox dst-port=8291 in-interface=\
WAN2 protocol=tcp to-addresses=192.168.1.10 to-ports=8291
add action=dst-nat chain=dstnat comment=Winbox dst-port=8291 in-interface=\
WAN3 protocol=tcp to-addresses=192.168.1.10 to-ports=8291
add action=dst-nat chain=dstnat comment=Winbox dst-port=8291 in-interface=\
WAN4 protocol=tcp to-addresses=192.168.1.10 to-ports=8291
add action=masquerade chain=srcnat comment="NAT-ISP Connectel" out-interface=\
WAN1
add action=masquerade chain=srcnat comment="NAT-ISP Brain" out-interface=WAN2
add action=masquerade chain=srcnat comment="NAT-Backup Connectel" \
out-interface=WAN3
add action=masquerade chain=srcnat comment=Brain-Backup out-interface=WAN4
add action=dst-nat chain=dstnat comment=spicework dst-address=103.105.208.226 \
dst-port=9675 in-interface=WAN1 protocol=tcp to-addresses=192.168.1.106 \
to-ports=9675
add action=dst-nat chain=dstnat comment=spicework dst-address=122.129.78.160 \
dst-port=9675 in-interface=WAN2 protocol=tcp to-addresses=192.168.1.106 \
to-ports=9675
add action=dst-nat chain=dstnat comment=spicework dst-address=103.105.208.226 \
dst-port=9675 in-interface=WAN3 protocol=tcp to-addresses=192.168.1.106 \
to-ports=9675
add action=dst-nat chain=dstnat comment="Jellyfin Media Server" dst-address=\
103.105.208.226 dst-port=8096 in-interface=WAN1 protocol=tcp \
to-addresses=192.168.1.68 to-ports=8096
add action=dst-nat chain=dstnat comment="Jellyfin Media Server 2" dst-port=\
8096 in-interface=WAN2 protocol=tcp to-addresses=192.168.1.68 to-ports=\
8096
add action=dst-nat chain=dstnat comment="Jellyfin Media Server 2" \
dst-address=103.105.208.226 dst-port=8096 in-interface=WAN3 protocol=tcp \
to-addresses=192.168.1.68 to-ports=8096
add action=dst-nat chain=dstnat comment="EMP Andrew" dst-address=\
103.105.208.226 dst-port=4100 in-interface=WAN1 protocol=tcp \
to-addresses=192.168.1.250 to-ports=4100
add action=dst-nat chain=dstnat comment="EMP Imtiaz Ahmad" dst-port=4101 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.205 to-ports=4101
add action=dst-nat chain=dstnat comment="EMP Ayesha Saeed" dst-port=4103 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.203 to-ports=4103
add action=dst-nat chain=dstnat comment=" EMP Sania Mustafa " dst-address=\
103.105.208.226 dst-port=4104 in-interface=WAN1 protocol=tcp \
to-addresses=192.168.1.202 to-ports=4104
add action=dst-nat chain=dstnat comment="EMP Najam ul Sehar" dst-port=4105 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.201 to-ports=4105
add action=dst-nat chain=dstnat comment="EMP Muhammad Sheraz" dst-address=\
103.105.208.226 dst-port=4106 in-interface=WAN1 protocol=tcp \
to-addresses=192.168.1.206 to-ports=4106
add action=dst-nat chain=dstnat comment="EMP Shahan Sabir" dst-port=4107 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.207 to-ports=4107
add action=dst-nat chain=dstnat comment="EMP Muhammad Ali" dst-port=4108 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.208 to-ports=4108
add action=dst-nat chain=dstnat comment="EMP Burhan Sami" dst-port=4109 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.209 to-ports=4109
add action=dst-nat chain=dstnat comment="EMP Rizwan Jilani" dst-port=4110 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.210 to-ports=4110
add action=dst-nat chain=dstnat comment="EMP Saddam Hussain" dst-port=4111 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.211 to-ports=4111
add action=dst-nat chain=dstnat comment="EMP Haris Rasheed" dst-port=4112 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.212 to-ports=4112
add action=dst-nat chain=dstnat comment="EMP Abdullah Ahmad" dst-port=4113 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.213 to-ports=4113
add action=dst-nat chain=dstnat comment="EMP Umar Shahzad" dst-port=4114 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.214 to-ports=4114
add action=dst-nat chain=dstnat comment="EMP Naveed Iqbal" dst-port=4115 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.215 to-ports=4115
add action=dst-nat chain=dstnat comment="EMP Hafsa Nadeem" dst-port=4116 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.30 to-ports=4116
add action=dst-nat chain=dstnat comment="EMP Hasaan Baig" dst-port=4118 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.74 to-ports=4118
add action=dst-nat chain=dstnat comment="EMP Nosheen Mushtaq" dst-port=4119 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.56 to-ports=4119
add action=dst-nat chain=dstnat comment="EMP Mehroze Shahbaz" dst-port=4120 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.41 to-ports=4120
add action=dst-nat chain=dstnat comment="EMP Fahad Qayyum" dst-port=4122 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.14 to-ports=4122
add action=dst-nat chain=dstnat comment="EMP Hamza Farooq" dst-port=4123 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.59 to-ports=4123
add action=dst-nat chain=dstnat comment="EMP Noman Manzoor" dst-port=4124 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.13 to-ports=4124
add action=dst-nat chain=dstnat comment="EMP Uqba Manzoor" dst-port=4126 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.226 to-ports=4126
add action=dst-nat chain=dstnat comment="EMP Kainat Zawar" dst-port=4127 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.227 to-ports=4127
add action=dst-nat chain=dstnat comment="EMP Tahir Mehmood" dst-port=4128 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.228 to-ports=4128
add action=dst-nat chain=dstnat comment="EMP Tamoor Mir" dst-port=4129 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.229 to-ports=4129
add action=dst-nat chain=dstnat comment="EMP Imran Shoukat" dst-port=4130 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.230 to-ports=4130
add action=dst-nat chain=dstnat comment="EMP Sheeba Nasrullah " dst-port=4133 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.233 to-ports=4133
add action=dst-nat chain=dstnat comment=" EMP Bilal Mazahir" dst-port=4134 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.234 to-ports=4134
add action=dst-nat chain=dstnat comment=" EMP Adam" dst-port=4135 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.53 to-ports=4135
add action=dst-nat chain=dstnat comment=" EMP Aqib" dst-port=4131 \
in-interface=WAN1 protocol=tcp to-addresses=192.168.1.12 to-ports=4131
add action=dst-nat chain=dstnat comment="EMP Andrew" dst-port=4100 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.250 to-ports=4100
add action=dst-nat chain=dstnat comment="EMP Imtiaz Ahmad" dst-port=4101 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.205 to-ports=4101
add action=dst-nat chain=dstnat comment="EMP Ayesha Saeed" dst-port=4103 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.203 to-ports=4103
add action=dst-nat chain=dstnat comment=" EMP Sania Mustafa " dst-port=4104 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.202 to-ports=4104
add action=dst-nat chain=dstnat comment="EMP Najam ul Sehar" dst-port=4105 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.201 to-ports=4105
add action=dst-nat chain=dstnat comment="EMP Muhammad Sheraz" dst-port=4106 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.206 to-ports=4106
add action=dst-nat chain=dstnat comment="EMP Shahan Sabir" dst-port=4107 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.207 to-ports=4107
add action=dst-nat chain=dstnat comment="EMP Muhammad Ali" dst-port=4108 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.208 to-ports=4108
add action=dst-nat chain=dstnat comment="EMP Burhan Sami" dst-port=4109 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.209 to-ports=4109
add action=dst-nat chain=dstnat comment="EMP Rizwan Jilani" dst-port=4110 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.210 to-ports=4110
add action=dst-nat chain=dstnat comment="EMP Saddam Hussain" dst-port=4111 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.211 to-ports=4111
add action=dst-nat chain=dstnat comment="EMP Haris Rasheed" dst-port=4112 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.212 to-ports=4112
add action=dst-nat chain=dstnat comment="EMP Abdullah Ahmad" dst-port=4113 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.213 to-ports=4113
add action=dst-nat chain=dstnat comment="EMP Umar Shahzad" dst-port=4114 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.214 to-ports=4114
add action=dst-nat chain=dstnat comment="EMP Naveed Iqbal" dst-port=4115 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.215 to-ports=4115
add action=dst-nat chain=dstnat comment="EMP Hafsa Nadeem" dst-port=4116 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.30 to-ports=4116
add action=dst-nat chain=dstnat comment="EMP Hasaan Baig" dst-port=4118 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.74 to-ports=4118
add action=dst-nat chain=dstnat comment="EMP Nosheen Mushtaq" dst-port=4119 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.56 to-ports=4119
add action=dst-nat chain=dstnat comment="EMP Mehroze Shahbaz" dst-port=4120 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.41 to-ports=4120
add action=dst-nat chain=dstnat comment="EMP Fahad Qayyum" dst-port=4122 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.14 to-ports=4122
add action=dst-nat chain=dstnat comment="EMP Hamza Farooq" dst-port=4123 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.59 to-ports=4123
add action=dst-nat chain=dstnat comment="EMP Noman Manzoor" dst-port=4124 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.13 to-ports=4124
add action=dst-nat chain=dstnat comment="EMP Uqba Manzoor" dst-port=4126 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.226 to-ports=4126
add action=dst-nat chain=dstnat comment="EMP Kainat Zawar" dst-port=4127 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.227 to-ports=4127
add action=dst-nat chain=dstnat comment="EMP Tahir Mehmood" dst-port=4128 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.228 to-ports=4128
add action=dst-nat chain=dstnat comment="EMP Tamoor Mir" dst-port=4129 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.229 to-ports=4129
add action=dst-nat chain=dstnat comment="EMP Imran Shoukat" dst-port=4130 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.230 to-ports=4130
add action=dst-nat chain=dstnat comment="EMP Sheeba Nasrullah " dst-port=4133 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.233 to-ports=4133
add action=dst-nat chain=dstnat comment=" EMP Bilal Mazahir" dst-port=4134 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.234 to-ports=4134
add action=dst-nat chain=dstnat comment=" EMP Adam" dst-port=4135 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.53 to-ports=4135
add action=dst-nat chain=dstnat comment=" EMP Aqib" dst-port=4131 \
in-interface=WAN2 protocol=tcp to-addresses=192.168.1.12 to-ports=4131
add action=dst-nat chain=dstnat dst-port=4545 in-interface=WAN1 protocol=tcp \
to-addresses=192.168.1.152 to-ports=4545
add action=dst-nat chain=dstnat dst-port=4545 in-interface=WAN2 protocol=tcp \
to-addresses=192.168.1.152 to-ports=4545
/ip firewall raw
add action=add-dst-to-address-list address-list="Gmail_Address List" \
address-list-timeout=none-static chain=prerouting comment=\
"Gmail_Address List" content=gmail.com
add action=add-dst-to-address-list address-list="Whatsapp Web_Address List" \
address-list-timeout=none-static chain=prerouting comment=\
"Whatsapp Web_Address List" content=web.whatsapp.com src-address-list=""
add action=add-dst-to-address-list address-list="Facebook_Address List" \
address-list-timeout=none-static chain=prerouting comment=\
"Facebook_Address List" content=facebook.com
add action=add-dst-to-address-list address-list="Youtube_Address List" \
address-list-timeout=none-static chain=prerouting comment=\
"Youtube_Address List" content=youtube.com
add action=drop chain=prerouting comment=\
"Prevention UDP 53 DNS amplification Attack" dst-port=53 in-interface=\
WAN1 protocol=udp
add action=drop chain=prerouting comment=\
"Prevention TCP 53 DNS amplification Attack" dst-port=53 in-interface=\
WAN1 protocol=tcp
/ip ipsec identity
add peer=L2TP
/ip route
add check-gateway=ping comment="Connectel Backup" distance=1 gateway=\
103.105.208.225 routing-mark=to_WAN1
add check-gateway=ping comment=Brain distance=1 gateway=122.129.78.254 \
routing-mark=to_WAN2
add distance=1 gateway=103.105.208.225%WAN3
add check-gateway=ping comment="Connectel Backup" distance=1 gateway=\
103.105.208.225
add check-gateway=ping comment="Brain Backup" distance=1 gateway=\
122.129.78.254%WAN4
add check-gateway=ping comment=Brain distance=2 gateway=122.129.78.254
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip traffic-flow
set enabled=yes
/ip upnp
set allow-disable-external-interface=yes enabled=yes
/ip upnp interfaces
add interface=WAN1 type=external
add interface=ether2-LAN type=internal
add interface=WAN3 type=internal
/ppp secret
add name=l2tp profile="l2tp vpn" service=l2tp
/snmp
set enabled=yes
/system clock
set time-zone-name=Asia/Karachi
/system identity
set name="MikroTik Printing Circle"
/system logging
add topics=dhcp
/system scheduler
add interval=1d name="Mikrotik Config Backup" on-event="/export file=export\r\
\n/tool e-mail send to=\"mujahidshah164@yahoo.com\" subject=\"\$[/system i\
dentity get name] export\" \\\r\
\nbody=\" configuration file \$[/system clock get date]\" file=export.rsc" \
policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
start-date=aug/26/2021 start-time=10:00:41
/system script
add dont-require-permissions=no name=script1 owner=admin policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="{\
\r\
\n\t:local listName \"Youtube_Address List\"; #change this\r\
\n\t:local fileName \"exported.rsc\"; #change this\r\
\n\t:local buffer;\r\
\n\r\
\n\t:global filteredList [/ip firewall address-list print as-value where l\
ist=\$listName && dynamic=no];\r\
\n\t:foreach i in=\$filteredList do={\r\
\n\t\t:set \$buffer (\$buffer.\"add list=\".\$listName.\" address=\".\$i->\
\"address\".\"; \");\r\
\n\t};\r\
\n\t/file print file=\$fileName where name=\"Youtube_Address List\";\r\
\n\t:delay 1s;\r\
\n\t:set \$buffer (\"/ip firewall address-list; \".\$buffer);\r\
\n\t/file set \$fileName contents=\$buffer;"
/tool graphing interface
add store-on-disk=no
/tool graphing queue
add allow-target=no store-on-disk=no
/tool graphing resource
add store-on-disk=no
 
sindy
Forum Guru
Forum Guru
Posts: 10205
Joined: Mon Dec 04, 2017 9:19 pm

Re: Can't ping mikrotik LAN gateway from internal end users devices

Sun Nov 28, 2021 2:35 pm

  1. your current firewall rules do not prevent management access to the router from WAN - the action=drop rules in chain input in filter only drop flood traffic (and their copies in prerouting in raw), and the only other action=drop rules in chain prerouting in raw only drop DNS requests from WAN. But Winbox and https access is not restricted.
  2. please edit your previous post and put the exported configuration between [code] and [/code] tags. And remove the [SOLVED] flag from @anav's post recommending to post the configuration, it is misleading.
  3. there is indeed a mistake in your load distribution setup:

    /ip address
    ...
    add address=192.168.1.10/24 comment=LAN interface=bridge1-LAN network=192.168.1.0


    /ip firewall mangle
    ...
    add action=mark-routing chain=prerouting comment="WAN1 and WAN2 load balancing Rule" dst-address-list=!Local new-routing-mark=to_WAN1 \
    passthrough=no src-address-list=GroupA
    add action=mark-routing chain=prerouting comment=Brain dst-address-list=!Local new-routing-mark=to_WAN2 passthrough=no \
    src-address-list=GroupB


    /ip firewall address-list
    ..
    add address=192.168.0.0/24 list=Local


    However, this mistake doesn't affect anything, because
    • GroupA and GroupB match on lower and upper half of 192.168.1.0/24 and traffic between two addresses in the same subnet is not routed,
    • traffic towards own IPs of the router is not routed, so the routing-mark assigned by any of these rules is ignored.
  4. another mistake is in the SYN flood mitigation, a typo in the chain name, rendering the rule unused, also not related to the topic issue:

    /ip firewall filter
    ...
    add action=accept chain=syn-attack connection-state=new limit=400,5:packet protocol=tcp tcp-flags=syn
    add action=drop chain=syn-attack connection-state=new protocol=tcp tcp-flags=syn
  5. there is no IPsec policy that could intercept the packets
  6. other unusual thing I can see is:
    /ip settings
    set ... accept-source-route=yes

    but this is recommended for routers, so just worth trying, not necessarily the solution.
  7. the "detect internet" functionality has been seen to cause weird behaviour - try /interface detect-internet set detect-interface-list=none
What does /tool sniffer quick ip-address=192.168.1.10 ip-protocol=icmp show when you ping the router from a LAN client? And if you cannot see the responses to be leaving via any interface at all, what does /tool sniffer quick mac-protocol=arp show while you're pinging?
 
shah76597
just joined
Topic Author
Posts: 4
Joined: Thu Sep 23, 2021 9:51 am

Re: Can't ping mikrotik LAN gateway from internal end users devices

Thu Dec 02, 2021 7:37 pm

hey sindy!
you didn't get my point bro i just want to know why im not able to ping my router in my LAN after PBR load balancing is there any rule which is missing in my mangle section .?? i just want to know it
 
sindy
Forum Guru
Forum Guru
Posts: 10205
Joined: Mon Dec 04, 2017 9:19 pm

Re: Can't ping mikrotik LAN gateway from internal end users devices

Thu Dec 02, 2021 7:40 pm

hey sindy!
you didn't get my point bro i just want to know why im not able to ping my router in my LAN after PBR load balancing is there any rule which is missing in my mangle section .?? i just want to know it
It's you who did not get my point :D I wrote that I've found several points of concern but none of them explains why you cannot ping the router address from the LAN clients. That's why I have suggested what to try. Your mangle rules do not seem to be the reason, unless by "LAN gateway" you mean the router as a whole, and you're not pinging its address in the LAN subnet but some other own address of the router.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19105
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Can't ping mikrotik LAN gateway from internal end users devices

Thu Dec 02, 2021 10:04 pm

If you want to see how to mangle for load balance properly, look at this thread, yours looks nothing of the sort!!
https://mum.mikrotik.com/presentations/US12/steve.pdf

Who is online

Users browsing this forum: Ahrefs [Bot], hatred, svh79 and 73 guests