Hi,

We would like to give customers the option to allow their end users to visit certain IP addresses while logged into the captive portal, without it costing any data allowance.

I’ve tried it with the below rules:

/ip firewall address-list
add address=10.48.37.0/24 list=FASTTRACK
/ip firewall filter
add action=fasttrack-connection chain=forward comment=UNMETERED dst-address-list=FASTTRACK
add action=fasttrack-connection chain=forward comment=UNMETERED_SRC src-address-list=FASTTRACK

The 2 firewall rules are on the top most position, with the default hotspot settings.

The 10.48.37.0/24 subnet is on the WAN side of the router
Router LAN is on 192.168.8.0/24

I have a customer trialing this on CHR 6.49.13 on Hyper-V, where it doesn't seem to work.
On the Hyper-V insatll at home, with the same settings, it does seem to work, while it still counts some traffic..
Testing is done by streaming a video over HTTPS from 10.48.37.5

What could be the cause of the difference in test results?