Allow access from outside to internal web server!

RouterOS General
1

These rules below are the Nat rules i have to make my internal web server which has 83.229.56.6 as the ip address to make it visible on the internet,but all thesame it does not work. I got a post that after all these NAT RULES i have to still do the following on the web server (On your webserver, you have to put the two ips i.e 83.229.66.211 with the corresponding gateway and 83.229.56.6 with the corresponding gateway. metric can be 1 and 2) but i dont understand how to do it. I will really appreciate if i can have a quick response. Thanks.


/ip address add address=83.229.66.211/32 interface=Public

Add rule allowing access to the internal server from external networks:

/ip firewall nat add chain=dstnat dst-address=83.229.66.211 action=dst-nat
to-addresses=83.229.56.6

Add rule allowing the internal server to talk to the outer networks having its source address
translated to 83.229.66.211

/ip firewall nat add chain=srcnat src-address=83.229.56.6 action=src-nat
to-addresses=83.229.66.211

2

why you use /32 as subnet mask - are you sure you are using correct value?

what your IP provider saud about network? or you really have point-to-point link there?

3

it was a mistake, what i have there is the internal network range of my LAN ip. I’m still looking forward for your support. Thanks.

4

Both IP addresses posted are full routable addresses. (altough at this time they are not reachable)

Unless by mistake you are masquerading the internal addresses, you should not need NAT rules at all for redirecting any traffic, it should be already available.
OR, you should come with more precise information before the question.

5

dear all
i have the same problem of accessing local web server from outside.

i have configured srcnat and destnat to allow internat network access the web server with a port forwading public IP

now the problem is that i can’t acces the same server throught outside network , i add the two public adress on public interface and on outside i don’t ping the second public address add who are mapped to my local web server.

thank you very much if you can help me

6

Specific answers require specific questions. Please be more explicit in order to cleverly use your time and our time also. :wink:

7

please see example of hairpin nat in wiki.mikrotik.com

that will allow users from the local network reach your server and same outside users.