![]() ![]() ![]() In-interface=ether3-local protocol=tcp to-ports=8080 In-interface=ether2-local protocol=tcp to-ports=8080Īdd action=redirect chain=dstnat comment="web proxy allow to office network" disabled=no dst-port=80 \ Hi blake i have this following place orderĪdd action=netmap chain=dstnat comment="netmap test" disabled=no dst-address=xxx.xx.xxx.203 \Īdd action=netmap chain=srcnat comment="" disabled=no src-address=10.11.0.10 to-addresses=xxx.xx.xxx.203Īdd action=masquerade chain=srcnat comment=NAT disabled=no out-interface=Ether1-WANĪdd action=redirect chain=dstnat comment="web proxy allow to ether2 " disabled=no dst-port=80 \ e.g.Add chain=dstnat action=netmap dst-address=192.0.2.20 to-addresses=10.1.50.254 place-before=0Īdd chain=srcnat action=netmap src-address=10.1.50.254 to-addresses=192.0.2.20 place-before=0ĭo you have another rule which may be matching before the netmap rules? Try re-ordering your rules so the netmap rules match that host first, or just re-add them with place-before=0 to ensure they're at the top and processed first. However if the Mikrotik is behind another NAT router alternative ports can be configured to port forward through to these ports, provided NAT-Traversal is enabled on the Mikrotik. Note that the Mikrotik RouterOS can only listen on UDP ports 500
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |