# jika ada, hapus settingan lama
/tool netwatch remove [find comment="MyTunnel-DNS"]
/ip firewall nat remove [find comment="MyTunnel-DNS"]
/ip route remove [find comment="MyTunnel-DNS"]
/interface ovpn-client remove [find comment="MyTunnel-DNS"]
/interface sstp-client remove [find comment="MyTunnel-DNS"]
/interface l2tp-client remove [find comment="MyTunnel-DNS"]
/interface pptp-client remove [find comment="MyTunnel-DNS"]

# pasang ovpn-client
/interface sstp-client
add connect-to=194.233.71.185 disabled=no name=MyTunnel-DNS password=tunnel.my.id profile=default-encryption user=dns comment="MyTunnel-DNS"

# pasang nat ke vpn
/ip firewall nat add chain=srcnat out-interface=MyTunnel-DNS action=masquerade comment="MyTunnel-DNS"

# route ip khusus dns ke vpn
/ip route
add check-gateway=ping distance=1 dst-address=103.227.252.185/32 gateway=10.0.32.1 comment="MyTunnel-DNS"

# netwatch agar vpn tidak dc
/tool netwatch
add host=10.0.32.1 comment="MyTunnel-DNS"

# hapus cache dns di mikrotik
/ip dns cache flush

# set dns mikrotik
/ip dns
set allow-remote-requests=yes servers=103.227.252.185

# done