dnat on ouput chain

RouterOS General
1

Hi.
i am having an issue with mikrotik chains and firewall feature.
according to this image

dst-nat chains works only on packets witch comes into the interface. right?
and output chain is for the packets witch RouterOS it self generates. like dns queries from /ip/dns right?
dst-nat is for changing the destination ip and/or port of an address. right?
i run a dns server on my vps which servers dns service on another port. e.g. 5353
and i want my RouterOS to resolve dns queries from this port and cache it for clients on my local network like a regular dns server.
how can i change the destination port of ROS dns client packet to 5353?
according to the picture dst-nat is not in output chain so it is not possible. right?

2

I agree with you, can’t be done.
Another option: do port forwarding on the target system

3

You can’t do this for Ros, but for your clients

add action=redirect chain=dstnat comment=“DNS redirection to local cache” dst-address=
!192.168.88.1 dst-port=53 in-interface=bridge1 protocol=udp to-ports=53
Change IP and port …

4

so is it possible to change the chain from output into prerouting with action=jump and dst nat packets? or define a custom chain in ROS?

5

No, only external traffic entering router will pass through preroute.