Connection to WAN IP from inside nat network: connection refused

RouterOS General
1

Hello all. If I do something like this from a machine on the internet:

ssh -p user@host.domain (<- my WAN IP’s DynDNS domain)

It works.

If I do it from underneath my MikroTik router on my NAT network (192.168.0.0/24), I get this:

ssh: connect to host host.domain port : Connection refused

I did a Wireshark trace from the ssh client and it’s not very helpful. I just get a reset back from the WAN IP.

I was reading on hairpin NAT but it doesn’t seem like that’s the problem because the reply is coming back from the actual WAN IP.

What is happening?

Thanks!