Decided to write a simple guide on Hairpin NAT, because quite a lot of users struggle to understand how to set it up. I am not a networking professional and I am open to any criticism on how to implement it in a better way. Official wiki page by Mikrotik regarding Hairpin NAT: https://wiki.mikroti…

Sorry Zach, old habits LOL. When I used/sold Zyxel gear they had a checkbox for hairpin nat, called loopback. As for rextended, okay, why do I need those forcing DNS rules. What do they have to do with hairpin nat solutions?? Finally WHO in heck is using DNS that is not already on the routerboard…

I never say open the internal DNS to WAN side, simply force all LAN side to use RouterBOAD internal DNS.

I never say open the internal DNS to WAN side, simply force all LAN side to use RouterBOAD internal DNS. /ip firewall nat add chain=dstnat src-address=!192.168.88.1 dst-address=!192.168.88.1 dst-port=53 protocol=udp action=dst-nat to-addresses=192.168.88.1 add chain=dstnat src-address=!192.16…

I do not use hairpin nat and what I do is not any form of hairpin nat, and not have nothing to do about hairpin nat. Is like I must rewrite again what already I wrote on this topic… http://forum.mikrotik.com/t/hairpin-nat-the-easy-way/146718/1 http://forum.mikrotik.com/t/hairpin-nat-the-easy-…

I never say open the internal DNS to WAN side, simply force all LAN side to use RouterBOAD internal DNS. /ip firewall nat add chain=dstnat src-address=!192.168.88.1 dst-address=!192.168.88.1 dst-port=53 protocol=udp action=dst-nat to-addresses=192.168.88.1 add chain=dstnat src-address=!192.168.8…

Nat Masquerade 192.168.88.0/24 to 192.168.88.0/24 this works for every services at once. do not specify interfaces or port. internal port must be the same as the external port.

Thanks for the tutorial, but I have done it on different approach, so I don’t need to do hairpin nat. My config is like this: /ip firewall nat add action=dst-nat chain=dstnat comment="Port forward" dst-port=5001 protocol=tcp dst-address-type=local dst-address-list=!router to-addresses=192.16…

Thanks for the guide/tutorial. As https://wiki.mikrotik.com/wiki/Hairpin_NAT is just returning an Error (well for me it is), this post has become the de facto guide on the topic :slight_smile:

Nice approach… As @anav said, there are many ways to implement Hairpin NAT… @Easen take a look here https://help.mikrotik.com/docs/display/ROS/NAT#NAT-HairpinNAT

MikroTik community forum

Hairpin NAT - the easy way

RouterOS Useful user articles

anav September 12, 2021, 6:06pm 28

Thanks!

Problem with Ubiquiti cloud controller when APs are behind a Mikrotik

Cannot access server with public ip/domain within the same network