route all netflix traffic to ISP instead of VPN

tabraham · Thu Mar 23, 2017 1:25 pm

Hello everyone,

I have L2TP vpn tunnel set up for my local subnets. Unfortunately, when using NETFLIX, the detects that I am using VPN and blocks me. I want to route all NETFLIX traffic without VPN and all other traffics through VPN.

Can anyone guide me please?

My current setup
/ip route> print

/ip route> print
Flags: X - disabled, A - active, D - dynamic, 
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, 
B - blackhole, U - unreachable, P - prohibit 
 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 A S  0.0.0.0/0                          L2TP-ExpressVPN-04        1
 1 A S  0.0.0.0/0                          L2TP-ExpressVPN-01        1
 2 A S  0.0.0.0/0                          L2TP-ExpressVPN-02        1
 3 A S  0.0.0.0/0                          L2TP-ExpressVPN-03        1
 4   S  0.0.0.0/0                          HZBD                      1
 5 A S  0.0.0.0/0                          192.168.0.1               1
 6 ADC  1.0.0.1/32         10.0.1.228      L2TP-ExpressVPN-01        0
                                           L2TP-ExpressVPN-04
                                           L2TP-ExpressVPN-02
                                           L2TP-ExpressVPN-03
 7 ADC  192.168.0.0/24     192.168.0.11    WAN1                      0
 8 ADC  192.168.20.1/32    192.168.20.53   HZDE                      0
 9 ADC  192.168.99.0/24    192.168.99.1    bridge                    0
10 ADC  192.168.100.0/24   192.168.100.1   bridge                    0
11 ADC  192.168.101.0/24   192.168.101.1   bridge                    0
12 ADC  192.168.102.0/24   192.168.102.1   bridge                    0
13 ADC  192.168.103.0/24   192.168.103.1   bridge                    0

/ip firewall mangle> print

/ip firewall mangle> print
Flags: X - disabled, I - invalid, D - dynamic 
 0  D chain=forward action=change-mss new-mss=1410 tcp-flags=syn protocol=tcp 
      out-interface=all-ppp tcp-mss=1411-65535 

 1  D chain=forward action=change-mss new-mss=1410 tcp-flags=syn protocol=tcp 
      in-interface=all-ppp tcp-mss=1411-65535 

 2  D ;;; special dummy rule to show fasttrack counters
      chain=prerouting action=passthrough 

 3  D ;;; special dummy rule to show fasttrack counters
      chain=forward action=passthrough 

 4  D ;;; special dummy rule to show fasttrack counters
      chain=postrouting action=passthrough 

 5    ;;; Guest
      chain=prerouting action=mark-routing new-routing-mark=L2TP04 
      passthrough=yes src-address=192.168.100.0/24 dst-address-list=!guest 
      log=no log-prefix="" 

 6 XI  ;;; Abraham
      chain=prerouting action=mark-routing new-routing-mark=L2TP01 
      passthrough=yes src-address=192.168.101.0/24 dst-address-list=!dark.angel 
      log=no log-prefix="" 

 7    ;;; Sam
      chain=prerouting action=mark-routing new-routing-mark=L2TP02 
      passthrough=yes src-address=192.168.102.0/24 dst-address-list=!sam log=no 
      log-prefix="" 

 8    ;;; Alu
      chain=prerouting action=mark-routing new-routing-mark=L2TP03 
      passthrough=yes src-address=192.168.103.0/24 dst-address-list=!alu log=no 
      log-prefix=""