pe1chl, Thanks for your reply. Here is my firewall mangle and route information. /ip firewall mangle add action=mark-connection chain=prerouting disabled=yes in-interface=\ ether9-WAN-DSL new-connection-mark=DSL_Conn_Mark passthrough=no add action=mark-routing chain=output connection-mark=DSL_Conn_M...

pe1chl, Thanks for your reply. I only use the DDNS url for management, so I have not put a lot of time into truly making incoming traffic work on WAN1. I am able to connect to the MikroTik there and manage it. I have tried to make getting to other devices that I manage, mainly 7 WiFi APs, connected ...

I require 3 knocks to access the router. Example: knock1 = 20000 knock2 = 30000 knock4 = 10000 Most port scanners scan from 1 to 65535. That is why I require 2 knocks going up and then 1 knock below them, all within 3 seconds. This requires 3 Firewall Filter Rules: 1. add action=add-src-to-address-l...

Sebastia, Thanks for the reply, but it does matter which IP the update is coming from. If I go out WAN1 I get the public IP for that GW. If I go out WAN2 I get the public IP for that GW. I want to leave the default route to WAN2 since it is much faster, but I want the ability to connect in via WAN1 ...

Why do you want to almost listen for a port knock?

I have implemented port knocking successfully and love it!

It is all done in the firewall rules, no scripts...

I have been using the code below for years successfully. I recently added another WAN interface (WAN2) which is now the default route since it is much faster. I need the DDNS request to go out interface WAN1. How do I modify this script to use ONLY WAN1? # Dynamic DNS for ChangeIP.com behind NAT # M...