dst-nat change source ip address

RouterOS General
1

Hi,

is it posssible to to dst nat from outisde to some local ip but with changing public ip address to local, so that device on lan see that packet as not public ip? with classic port forward i must NAT public ip which came to mikrotik to private ip and send to local machine

I found that possibilty on Sonicwall so i am interesting can this be done on mikrotik

if source address is 1.2.3.4 (some outside computer) and came to mkt to port 555 port forward that to local ip e.g. 192.168.10.100 port 555 but not with source 1.2.3.4, instead that ip put the source e.g. 192.168.10.1

Thanks

2

Yes - you can SRC NAT the traffic to a specific IP or use Masquerade just as you would for traffic leaving an ISP facing interface on a NATed system. Use with caution - from a security standpoint it is a rather grubby practice.