Mikrotik why habr website is not loading?

Question

Mikrotik

Hello everyone, set up Mikrotik. The site habr and dou.ua are not loaded, others are loaded without problems. Checked on different clients in LAN. Direct connection to the provider showed that the sites are not blocked by the provider.
To search for problems, I tried:
- disable all Filter rules on the firewall,
- set DNS 8.8.8.8.
Did not help.
From "features":
- in iP->Services removed all protocols except SSH and WinBox.
- raised IPv6 via Hurricane Electric Tunnel Broker.
The Traceroute to 82.192.95.175 command goes through Hurricane Electric to assets.habranet.net (82.192.95.175)
The Traceroute to 178.248.233.33 – host unreachable from …
command ping habr.ru passes without loss 47ms
The :put [:resolve "habr.ru"] command gives the answer 82.192.95.175

The problem goes away if Quik Set -> Internet-> Address Acquisition is set to Automatic. In the Static position, the trouble returns. I would be grateful if you poke your nose where you can read about this setting and why it can cause some sites to fall out.

Answer 1

Wangyu, but I can be wrong, there is a DST-NAT rule on port 443 without specifying an interface ...

Answer 2

- raised IPv6 via Hurricane Electric Tunnel Broker.
Well, drop it and check it out.

Answer 3

The problem goes away if Quik Set -> Internet-> Address Acquisition is set to Automatic. In the Static position, the trouble returns

1) Are you sure that your static data is correct?
2) If you set static - specify the route rule for the "default gateway" of the Mikrotik itself.
3) Specify a NAT rule and a route to the Hurricane tunnel.
Part of the traffic may not go through the tunnel, or vice versa fall into the tunnel.
It seems that you either outplayed the rules, or did the routing incorrectly.
In general, so that we do not play "guess the solution" here, but quickly help - you need to give out as much information as possible.
Make a microt in the console: export file=problem.cfg
In notepad, replace personal information with asterisks (asterisks, not delete) and provide.

Answer 4

Link to the settings file for which it is not loaded