Routing mark
Posted: Tue Sep 09, 2014 6:15 am
by RochieBatula
Hi,
I am new to mikrotik and i need your help. i have this problem, when my user trying to access the secured sites like bank, email hosting and some corporate sites, they being disconnected or denied because the public ip has been change or something. anyway im using 3 WAN with different telco. i heard something about mark routing, how its work or what should i do?
TIA
Regards,
Rochie Batula
Proudly Pinoy
Re: Routing mark
Posted: Wed Sep 10, 2014 4:06 pm
by adyb76
set up ip firewall rules so that all https traffic is routed down one connection only.
/ip firewall mangle add chain=prerouting action=mark-routing new-routing-mark=to-https-wan passthrough=yes protocol=tcp dst-port=443
/ip route add dst-address=<IP OF ROUTER> routing-mark=to-https-wan
That should sort it.
Adyb
Re: Routing mark
Posted: Thu Sep 11, 2014 5:17 am
by RochieBatula
set up ip firewall rules so that all https traffic is routed down one connection only.
/ip firewall mangle add chain=prerouting action=mark-routing new-routing-mark=to-https-wan passthrough=yes protocol=tcp dst-port=443
/ip route add dst-address=<IP OF ROUTER> routing-mark=to-https-wan
That should sort it.
Adyb
What about for specific destination or IP only?
Re: Routing mark
Posted: Thu Sep 11, 2014 12:36 pm
by RochieBatula
just to clarify and give you an idea of my problem is, im trying to connect to
https://clevvermail.com directly to one ISP i dont have any problem but when i connect connect my laptop under mikrotik, i have problem in login and sometimes when i already login and browsing from folder to folder my connection terminate and back to login page.
Since i have 3 ISP's in my Mikrotik, i was thinking that during the session its suddenly change IP address that is why clevvermail.com disconnect or terminate my session for security purposes. (i experience this several times with bank portal and other sites).
TIA
Rochie Batula
Proudly Pinoy