So with Brians "pressure" on me (HI) i think i have found the problem ...
it it the tunnel keep alive
and now the questions
1)Does it necessary to turn it on ?
2) why this uses source address of amprGW and destination of my local address maybe its
a a bug in the Mikrotik tunnel ? what protocol keep alive uses ? is there anyone else
here with mikrotik that have a keep alive open and know if he get same errors from AMPGW
?
I have changed the keep alive timing from every 10 to 610 seconds and the errors
reduced to 2 every 15 minutes from about 100
Ronen - 4Z4ZQ