Cannot ping/trace NATed public ip

RouterOS Beginner Basics
1

Hello,

my problem - I cannot ping/trace my Public IP which is dst-nat’ed to my local network Windows machine from outside my network (I can ping this Public IP, if I am connected to my local network -192.168.0.xxx). After I disable given dst-nat rule I can ping/trace from outside without problems.


Public IP - 11.22.33.44/28 (WAN interface)
Private IP for Windows machine - 192.168.0.69

My NAT rule:

add action=dst-nat chain=dstnat dst-address=11.22.33.44 in-interface=WAN to-addresses=192.168.0.69

My route table:

 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 A S  0.0.0.0/0                          11.22.33.42             1
 8 ADC  11.22.33.41/28     11.22.33.43     WAN                     0

11.22.33.43 is other public IP which is working fine.


Would really help, if somebody could point me in right direction. Thanks!

2

add action=dst-nat chain=dstnat dst-address=11.22.33.44 in-interface=WAN to-addresses=192.168.0.69

add src-address=!, or exclude your public IP as a dst-address from your masquerade rule.

You can’t masq yourself out, and expect to come back in.