Here I've got it working with OSX and Iphone and android and using the following settings:

(...)
Hope this helps!

Thanks! a 2 year old post but i got my iPhone 7 working on VPN now

ok i finally found the rule that triggers the blacklist: chain=output action=add-dst-to-address-list protocol=tcp address-list=ftp_blacklist address-list-timeout=3h content="530 Login incorrect" log=yes log-prefix="black" Ok traffic is counting continous on this rule... btw. the ...

RB2011UAS on ROS 6.27 First a problem with VPN, i can not use VPN on my local network, unless i disable the firewall rule to block unwanted traffic. Then i can use it. So i guess i need a rule above it to allow VPN, but how? This is the rule, it's my final rule in the filter rules list: comment: Dro...

I have a Routerboard 2011UiAS-2HnD and want to use PoE with a Cisco PVC300 IP camera. The camera doesn't power up with just the ethernet cable plugged in port 10 and PoE activated on that port. Is this a compatibility issue and do i have to use the MikroTik RBPOE-CON-HP Power Over Ethernet PoE Conve...

Can not change the ip adress of the local network in quick settings?? The ip adress has changed form the original one to 192.168.2.250?? Edit2: fixed the above, my fault, wrong config. And what is WISP AP?? mk.jpg Edit: Some wireless settings where changed without touching them, like Channel Width.....

The DST-NAT rule only changes the incoming packet. If you have a default drop in the forward you need a rule above it to allow that incoming request.. you'll want something like: /ip firewall filter add chain=forward dst-address=192.168.0.5 protocol=tcp port=6080 That will actually allow the reques...

I can access almost everything from the outside. The only thing i can not access is my ip-camera?? I narrowed it down to one rule that is causing the problem: /ip firewall filter add action=drop chain=forward comment=\ "Drop all other traffic through the router" \ disabled=no If i enable t...

... Alternatively, you can add an accept rule for those ports above the NAT rule. Then those specific ports will terminate at the router.

Great! Thanx man, that solution worked!
I'm happy now

here are my firewall rules: /ip firewall filter add action=drop chain=input comment="Drop invalid connections" \connection-state=invalid add chain=input comment="VPN TEST" dst-port=1723 protocol=tcp add chain=input comment="VPN TEST" protocol=gre add chain=input comment...

I managed to get hairpin nat working and i managed to get VPN working. Only thing is i can't use them together... I checked all my NAT rules and this rule which i need for my hairpin nat is causing the problem: /ip firewall nat chain=dstnat add action=dst-nat dst-addresses=1.1.1.1 to-addresses=192.1...