Community discussions

Search found 4 matches

by pragmat
Thu Nov 12, 2009 11:09 am
Forum: Beginner Basics
Topic: WAN services not available to local users, please help!
Replies: 11
Views: 31220

Re: WAN services not available to local users, please help!

I solved the problem. 8) Fewi, thanks for your hints mate! /1. Services hairpin to .10 chain=dstnat action=dst-nat to-addresses=192.168.10.10 protocol=tcp dst-address=!192.168.10.0/24 dst-address-type=local dst-port=80,21 /2. NAT all traffic from local to internet chain=srcnat action=masquerade src...
by pragmat
Thu Nov 12, 2009 7:18 am
Forum: Beginner Basics
Topic: WAN services not available to local users, please help!
Replies: 11
Views: 31220

Re: WAN services not available to local users, please help!

I prefer split horizon DNS where you serve inside and outside clients different IP adresses for the host names. A simple way to do that is to configure the DNS proxy on the router and make static entries for your servers with their inside IPs, and configure the inside clients to use the router as t...
by pragmat
Wed Nov 11, 2009 3:51 am
Forum: Beginner Basics
Topic: WAN services not available to local users, please help!
Replies: 11
Views: 31220

Re: WAN services not available to local users, please help!

Search the forums for "hairpin NAT" and "split horizon DNS". Fewi, thanks for advice mate but there is very little ref to hairpin NAT and split horizon DNS in the forums. I found though this one: http://forum.mikrotik.com/viewtopic.php?f=13&t=34679&p=170070&hilit=hairpin#p170070 and tried to workou...
by pragmat
Tue Nov 10, 2009 7:12 am
Forum: Beginner Basics
Topic: WAN services not available to local users, please help!
Replies: 11
Views: 31220

WAN services not available to local users, please help!

I need your help with some very basic setup which I couldn't figure out on my own... My router maps services for WAN ports to a LAN IP server as dstnat chains while my LAN users within the LAN subnet use one srcnat chain to NAT out. The problem is that while the rest of the world gains access to my ...