When I update to 6.47 this stop working, I delete all and create a simple rule but dont work. I roll back to long term firmware and all start working againg. Some problem with 6.47?
PD: I reseet all config and start over againg but NAT nos work on 2 mikrotik router on two diferents places. In the two examples i roll back to long term and all work fine again.
Hi, there, there is a neater way of doing Hairpin Nat thats cleaner and less error prone (config line also makes more sense).
Your rules are actually bloated and potentially causing the problem for example you only need one dst nat rule.
.
Recommend the following
add chain=srcnat action=masquerade src-address=192.168.88.0/24 dst-address=192.168.88.0/24
For dst nat rule.
add chain=srcnat(wrong my bad - use chain=dstnat action=dst-nat protocol=tcp dst-port=8000 dst-address-list=external_wan \ ***
to-addresses=192.168.88.9
*** Go to IP CLOUD and enable DDNS and copy the DDNS NAME.
Go to ip firewall address list and add a new list with name: external_wan and for address, PASTE the ddns name into the address entry block. DONE!
Thank for answer but not work
I create the list perfectly, then
add chain=srcnat action=masquerade src-address=192.168.88.0/24 dst-address=192.168.88.0/24
but when add the other rule it give me an error.
[mapet@MikroTik] /ip firewall nat> add chain=srcnat action=dst-nat protocol=tcp dst-port=8000 dst-address-list=external_wan to-addresses=192.168.88.9 failure: srcnat chain can not contain redirect/dnat actions
Yes of course that would give you an error, look at that rule you made more closely!!
/ip firewall nat>
add chain=srcnataction=dst-nat protocol=tcp dst-port=8000 dst-address-list=external_wan to-addresses=192.168.88.9
I went back and noticed that it was my error, my apologies!!! Should work now.
Obviously when making a destination nat rule, one uses the destination nat chain! Well when you are not getting paid help LOL…
