CPE--->MT Bridge--->m0n0wall VLAN/Router dst-nat problem

RouterOS General
1

My customers are connected through a mikrotik bridge going to a m0n0wall router setup with 2 vlans.

CPE VLAN ID2—>port 1-9 MT Bridge—>m0n0wall VLAN/Router
10.0.1.2 |
|
port 10 192.168.254.0/24
|
splash page PC 192.168.254.254:80

The MT bridge has ports 1-9 bridged and port 10 has a separate subnet setup with a PC connected, giving out a splash page. This subnet is masqueraded to the bridge and the PC has internet access. The m0n0wall server has 3 dhcp servers running.

  1. LAN 10.0.0.0/24
  2. VLAN ID 2 10.0.1.0/24
  3. VLAN ID 3 10.0.2.0/24

The MT bridge has ip firewall enabled for VLANs. I have a NAT rule that does dst-nat from bridge to 192.168.254.254:80. This works fine for clients connected to 10.0.0.0/24 but for VLAN clients, they dont get the splash page. The browser just hangs for a long time. The rule counter goes up so the packets are being registered. I killed myself getting this far. Can anyone shed some light on this?

2

I do not understand completely all, but you must read this:
http://wiki.mikrotik.com/wiki/Hairpin_NAT
can be useful if is it your case.