Dst-Nat done but can't connect internally

RouterOS Beginner Basics
1

We have a DNS record of server.culligan.com which points to 207.100.99.32.

The web server for this is in our network behind a Mikrotik. The IP of the server in our internal network is 192.168.1.52.

We set up the following rules:

ip firewall nat add chain=dstnat dst-address=207.100.99.32 action=dst-nat to-addresses=192.168.1.52

and

ip firewall nat add chain=srcnat src-address=192.168.1.52 action=src-nat to-addresses=207.100.99.32

Everything is working fine from the outside world. We made sure to put these rules in front of our masquerade rule which is at the bottom. Everything seems to be working fine again from the outside. We can access the webserver by going to server.culligan.com and it goes to our internal webserver without an issue.

The issue we are having is we can’t access the webserver internally by domain name. So if I am internal on the network and try to access server.culligan.com it times out and can’t connect.

When I ping server.culligan.com it resolves the IP to 207.100.99.32 but I recieve replies from 192.168.1.52. I have tried everything to get this to work properly.

Does anyone have any insight.

Thanks in advance!!!

2

Try masquerading traffic coming from your LAN network (Src. address) and going to 192.168.1.52 (Dst. address).

3

That is exactly what I had to do. I just stuck it next to last in my chain. I then ran into database issues when trying to authenticate, due to IP restrictions. I then just added a not equal to the IP of the database server. After that everything worked perfectly. Thank you.