Access to server from internal LAN

RouterOS General
1

Hello, I have a problem with accessing my websites from internal LAN. Apache server is running on virtual machine (Hosting on a diagram), which is set up on physical server. There is also a vpn server running in docker container (on the physical server, not VM). Physical server is connected to LAN behind MikroTik router, all ports on router’s firewall are blocked, execept these configured in NAT. Below I have provided schema for network structure and screens from MikrotTik (firewall rules and NAT). Back to the problem, I try to connect to my websites on Apache from:

  1. internal LAN (e.g. 192.168.4.33) – I get error in the browser („This page is not available”) in wireshark I have found packet with [RST, ACK] flags returned from server as a result of TCP handshake try
  2. machine connected to VPN network (e.g. 192.168.255.10) – all works
  3. computer in external network – all works
    mikrotik_LAN.png
    mikrotikNAT.png
    mikrotikFirewall.png
2

If you are attempting to reach a webserver from within the same subnet (same LAN) but using your WANIP address (either its a fixed wanip or a dynamic via dyndns etc.) you need to setup Hairpin NAT.
Please provide a proper full config to see what is optimal in your case.
/export hide-sensitive file=anynameyouwish

3

Example of Hairpin NAT here https://wiki.mikrotik.com/wiki/Hairpin_NAT