Connection Mark (or Packet Mark) Not Work In Firewall/NAT

RouterOS Beginner Basics
1

dear all

when user are going to send request to mail.abcde.com:80 , i want that user's request forward to mail.abcde.com:8080 directly.
in other word when domain is exactly 'mail.abcde.com' (not for other domain) this process to be happened.

i have done this issue in 3 step :

Step 1 : Create Layer7 Protocol :

NAME REGEXP

0 mail.abcde.com ^.+(mail.abcde.com).*$

STEP 2 : Create a Mangle
chain=prerouting action=mark-connection new-connection-mark=MailServerConnection passthrough=no layer7-protocol=mail.abcde.com protocol=tcp log=no log-prefix=""

STEP 3 : Create NAT
chain=dstnat action=dst-nat to-addresses=192.168.100.100 to-ports=8080 protocol=tcp dst-address=MY_PUBLIC_IP connection-mark=MailServerConnection dst-port=80 log=no log-prefix=""

Mangle are receiving packets when user are going to send request to mail.abcde.com:80 but NAT not working !

any idea?

2

any idea ???

3

It doesn’t work like this. See e.g. this thread about similar problem.

4

Thank you for your replay, so we don’t have any solution for this in mikrotik OS :frowning:

5

This is not a matter of “no solution in RouterOS”, what you want to do is simply impossible in networking!
You are trying to redirect a connection setup based on things you find in a running connection.
That requires “crystal ball” functionality.

6

Thank you pe1chl

7

Unless all you were really looking for was this.

https://wiki.mikrotik.com/wiki/Sync_Address_List_from_DNS_Lookup_Results_-_CNAME_and_A_Records

8

That is old and should probably be removed. Today, an address list can simply be set to a DNS name and it
will do what that script does. But, it is not at all related to the question asked in this topic…