Hi guys. I think it is time to move that to public.
We started to worry about future of mikrotik. Look like that they lost their leading developers who understand network technologies.
In October 2023 i reported to mikrotik problem that VPN4 packets from MPLS interface to VRF marked in firewall as packets from unknown interface to unknown interface. I passed endless discussions and after a while it become even worse. In Current ROS 7 beta such packets became not visible for firewall at all. It means that if you have in your CPE router rules :it will be completely ignored and packets from VPN4 to VRF will completely ignoring forward rules. It should be noted that in ROS 6 firewall working good.
Today morning i got an answer from Mikroitik support that :It is quite clearly shows that person who answered this question never seen packet flow diagram or not understand how packets flow have to go ( https://help.mikrotik.com/docs/display/ ... n+RouterOS ). And we really started to worry about mikrotik future. Do somebody else have same issue ?
We started to worry about future of mikrotik. Look like that they lost their leading developers who understand network technologies.
In October 2023 i reported to mikrotik problem that VPN4 packets from MPLS interface to VRF marked in firewall as packets from unknown interface to unknown interface. I passed endless discussions and after a while it become even worse. In Current ROS 7 beta such packets became not visible for firewall at all. It means that if you have in your CPE router rules :
Code:
/ip firewall filteradd action=accept chain=forward comment=ER connection state=established,relatedadd action=drop chain=forward log=yes log-prefix=dropToday morning i got an answer from Mikroitik support that :
Code:
I received information from our specialists that MPLS packet which should be routed in vrf is being sent from vrf interface and is seen in output chain (not forward). If you will set output filter you will see the packets.Statistics: Posted by uCZBpmK6pwoZg7LR — Tue Feb 06, 2024 10:12 am