What I pasted was from a good and working period. Here is from a failed session. [admin@firewall] > /ip route print detail Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit 0 S dst-address=0.0.0.0/...

If had issues with 4.16, 4.17, and 5.0rc11 on an x86 system. It seems that it's not just the reboot that fixes it, but rather restoring from a backed up config. I can reboot and have it fail then restore the backup that I saved just before rebooting and it works again. Output you requested with the ...

I have two internet gateways which I am tracking their connection state with ping to an outside address using recursive routing and connection tracking. /ip route add check-gateway=ping comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=4.2.2.1 routing-mark=\ to_ether1 scope=3...

Awesome! I'm glad it worked out for you!

I believe that is what happened. It took 2 days for my response to get approved so it was inserted before.

-Nick

Did you not try the connection-state suggestion I posted? /ip firewall filter add action=drop chain=forward comment="Deny forwarding from Kids_Bridge" in-interface=Kids_Bridge out-interface=!ether1 connection-state=new add action=drop chain=forward comment="Deny forwarding from Guest_...

I just wanted to update this post to thank Mikrotik for their help and inform anyone looking for this same solution. It is tested and working.

5.0rc11 will have support for this particular modem (USB308 or AT&T Shockwave) and I assume any other modem supported by version 1.7.36 of their driver.

This will probably take a while for you to get. My posts still have to be moderator approved. The only thing I can think of is that with the rules I posted the traffic is being forwarded from LAN_Bridge to the others, but is being blocked on the return. Adding !LAN_Bridge on the out-interface would ...

I'll take a stab at it, but you need to add some filter rules to /ip firewall. /ip firewall filter add action=drop chain=forward comment="Deny forwarding from Kids_Bridge" in-interface=Kids_Bridge out-interface=!ether1 add action=drop chain=forward comment="Deny forwarding from Guest_...

Alternatively you could add NAT to your Mikrotik Gateway if you are unable to add routes in your ISP modem. Without being able to add routes to the ISP modem it won't know how to get back to the 10.x.x.x network. You'll be able to ping host Alpha from Beta after adding the subnet route to Alpha, but...

Please update the Sierra Wireless kernel drivers to support the AT&T Shockwave USB modem. These are the only modems that AT&T is currently handing out so being able to support them ASAP would be nice. This is a drop-in replacement for linux/drivers/usb/serial/sierra.c. Serial Driver Without ...

Please update the Sierra Wireless kernel drivers to support the AT&T Shockwave USB modem. These are the only modems that AT&T is currently handing out so being able to support them ASAP would be nice. link to drivers Without the updated sierra.c, the Shockwave (AT&T's 308 model) will not...