Hi all,
after using my Mikrotik only limited for a long time, I have now changed the setup of my network. I am using the more advanced features of the router.
My setup is the following:
4 external IP addressess: 92.64.122.164 - 92.64.122.167
Internal network: 192.168.88.xxx where there are webservers on 192.168.88.243 and 248
http://www.execconsultancy.com is on 192.168.88.243 and should get 92.64.122.167 as external ip
crm.execconsultancy.com is 192.168.88.248 and should get 92.64.122.165 as external ip
I can access both sites from the internal network,using the hostname, not using the ip address. I want the webservers to be available from tne internet using the hostname.
This is my firewall and NAT setup:
apr/21/2017 21:56:07 by RouterOS 6.38.5
software id = 2BXK-1C8B
/ip firewall filter
add action=fasttrack-connection chain=forward comment=
"defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment=
"defconf: accept established,related" connection-state=
established,related
add action=drop chain=forward comment="defconf: drop invalid"
connection-state=invalid
add action=drop chain=forward comment=
"defconf: drop all from WAN not DSTNATed" connection-nat-state=
!dstnat connection-state=new in-interface=ether1
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established
add action=accept chain=input connection-state=related
add action=drop chain=input in-interface=pppoe-out1
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade"
out-interface=pppoe-out1
add action=dst-nat chain=dstnat dst-address=192.168.88.248 dst-port=80
in-interface=all-ethernet protocol=tcp src-address=92.64.122.167
to-addresses=192.168.88.248 to-ports=80
add action=dst-nat chain=dstnat dst-address=192.168.88.243
in-interface=all-ethernet protocol=tcp src-address=92.64.122.165
src-port=80 to-addresses=192.168.88.243 to-ports=80
I have not setup the webproxy in the IP settings.
what do I miss?