Community discussions

MikroTik App
 
edspoon
just joined
Topic Author
Posts: 17
Joined: Thu Mar 08, 2007 7:19 pm
Location: Louisiana
Contact:

DST-NAT Timeout

Wed Jan 13, 2010 9:23 pm

Tracking down a mail delay issue - mail server behind MT using dst-nat. Mail from the world frequently times out and doesn't make initial connection. I can duplicate this myself by getting outside of LAN and doing simple telnet - about 30% connection timeout. When on the LAN and using telnet, no timeouts. MT is used as edge router but CPU barely hits 5% (PC based).

Rule is simple dst-nat, there are no masquerades:
add action=dst-nat chain=dstnat comment="Mail Server" disabled=no dst-port=25 in-interface=ether1 protocol=tcp to-addresses=192.168.200.16 to-ports=25

Ideas?
Thanks
Ed
 
SurferTim
Forum Guru
Forum Guru
Posts: 4636
Joined: Mon Jan 07, 2008 10:31 pm
Location: Miramar Beach, Florida

Re: DST-NAT Timeout

Wed Jan 13, 2010 11:25 pm

If there is no srcnat rule or masquerade, then that is why it fails.

/ip firewall nat
add chain=srcnat action=masquerade out-interface=ether1

If ether1 is not the connection to the internet (should be by the dstnat rule), change to the appropriate interface.
 
edspoon
just joined
Topic Author
Posts: 17
Joined: Thu Mar 08, 2007 7:19 pm
Location: Louisiana
Contact:

Re: DST-NAT Timeout

Fri Jan 15, 2010 12:04 am

Sorry, didn't go far enough down in the config. There is srcnat translating the above local IP back to the correct (same as inbound) public IP.
Is there some debugging I can turn on or logging that might indicate why it frequently does not connect? Thanks
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: DST-NAT Timeout

Fri Jan 15, 2010 12:07 am

There is srcnat translating the above local IP back to the correct (same as inbound) public IP.
please post that rule

Who is online

Users browsing this forum: Ahrefs [Bot], Bing [Bot] and 93 guests