2.9.8 проблема с обновлением

http://forum.mikrotik.com/viewtopic.php?t=5480

Hey everyone,

Just wanted to share something I found that might be useful for some of you.

I’m running a Mikrotik router as a VPN server for my house, and I wanted to create a firewall rule that would allow access to certain websites only through the VPN. The goal was to have everything else use my regular internet connection.

I found this script by @kylemac that does exactly that! It checks the destination IP address of the traffic and routes it through the VPN tunnel if it matches a list of IPs.

Here's the script:

```routeros
/ip firewall filter
add chain=forward action=accept src-address=192.168.1.0/24 dst-address=8.8.8.8 comment="Allow DNS through VPN"
add chain=forward action=accept src-address=192.168.1.0/24 dst-address=1.1.1.1 comment="Allow DNS through VPN"
add chain=forward action=accept src-address=192.168.1.0/24 dst-address=some.website.com comment="Allow specific website through VPN"
add chain=forward action=accept src-address=192.168.1.0/24 dst-address=another.website.com comment="Allow another specific website through VPN"
add chain=forward action=drop chain=forward src-address=192.168.1.0/24 dst-address=8.8.8.8 comment="Drop DNS if not VPN"
add chain=forward action=drop chain=forward src-address=192.168.1.0/24 dst-address=1.1.1.1 comment="Drop DNS if not VPN"
```

It’s pretty simple but works really well.  You can modify the `src-address` to match your local network and the `dst-address` to match the websites you want to route through the VPN.

Huge thanks to @kylemac for sharing this!

Cheers,

[Your Name]

#mikrotik #firewall #vpn #script #howto