Looking at [1], there are the following rules :
Code: Select all
/ ip firewall mangle
add chain=prerouting dst-address=10.111.0.0/24 action=accept in-interface=LAN
add chain=prerouting dst-address=10.112.0.0/24 action=accept in-interface=LAN
What does an accept target mean in a prerouting rules ? Does it mean "skippng other prerouting rules" ?With policy routing it is possible to force all traffic to the specific gateway, even if traffic is destined to the host (other that gateway) from the connected networks. This way routing loop will be generated and communications with those hosts will be impossible. To avoid this situation we need to allow usage of default routing table for traffic to connected networks.
[1] https://wiki.mikrotik.com/wiki/Manual:PCC
Best regards