# jika ada, hapus settingan lama
/tool netwatch remove [find comment="MyTunnel-DNS"]
/ip firewall nat remove [find comment="MyTunnel-DNS"]
/ip route remove [find comment="MyTunnel-DNS"]
/interface ovpn-client remove [find comment="MyTunnel-DNS"]
/interface sstp-client remove [find comment="MyTunnel-DNS"]
/interface l2tp-client remove [find comment="MyTunnel-DNS"]
/interface pptp-client remove [find comment="MyTunnel-DNS"]

# pasang ovpn-client
/interface sstp-client
add connect-to=194.233.71.185 disabled=no name=MyTunnel-DNS password=tunnel.my.id profile=default-encryption user=dns comment="MyTunnel-DNS"

# pasang nat ke vpn
/ip firewall nat add chain=srcnat out-interface=MyTunnel-DNS action=masquerade comment="MyTunnel-DNS"

# route ip khusus dns ke vpn
/ip route
add check-gateway=ping distance=1 dst-address=9.9.9.9/32 gateway=10.0.32.1 comment="MyTunnel-DNS"
add check-gateway=ping distance=1 dst-address=149.112.112.112/32 gateway=10.0.32.1 comment="MyTunnel-DNS"

# netwatch agar vpn tidak dc
/tool netwatch
add host=10.0.32.1 comment="MyTunnel-DNS"

# hapus cache dns di mikrotik
/ip dns cache flush

# set dns mikrotik
/ip dns
set allow-remote-requests=yes servers=9.9.9.9,149.112.112.112

# done