Setting up mikrotik for provider and vpn?

Question

Mikrotik

Hello everyone
The provider issues data on DHCL. For Internet access, the
question
is how to implement the scheme.
1. Connect from mikrotik to vpn server. So that some of the banned sites go through vpn. and all the rest of the traffic went through the Internet channel of the provider?

Answer 1

Do you need help visiting prohibited sites?) is it punishable

Answer 2

Of course, you can download registry dumps, for example here , process them, feed them to the address-list, mark traffic and route it through VPN, but MikroTik makes everything much easier and more beautiful. More about this - here.
In cases of other providers, you need to analyze the operation of locks and create appropriate rules. In principle, according to the recommendations posted on the website of Roskompozor, it is enough for the locks to work for the standard automatic configuration of subscriber equipment when connected to the operator's network. The easiest way to block that meets these requirements is to replace the IP addresses of prohibited resources in responses from the provider's DNS server with the IP address of the stub. In this case, you simply specify any public DNS server (for example, 8.8.8.8) in the network interface settings and that's it.
If your provider uses more sophisticated blocking methods, you should think about why this provider restricts its users to a greater extent than Roskompozor requires. In the case of Rostelecom, everything is extremely simple - it is a structure affiliated with the state, but even there they use a blocking method, to bypass which you need a little more knowledge about networks than the notorious prime minister)