DST-NAT redirect action: To-dst-address dont work

RouterOS General
1

HI

I am trying to make a proxy-web server in a DMZ arquitectury, but not work the DST-NAT, redirect action, to-dst-addres option (mikrotik 2.8):

ip firewall dst-nat src-addres=networksubnet protocol=tcp dst-port=80 action=redirect to-dst-address=proxyip to-dst-port=defaultproxyport

networksubnet: 192.168.1.0/24
proxyip: 192.168.2.2

anterior post in this forum says (for example):

http://forum.mikrotik.com//viewtopic.php?t=628&highlight=squid

some solutions are:

enable parent-proxy

http://forum.mikrotik.com//viewtopic.php?t=304&highlight=squid

but this dont work to me for hardware limitations: (not suficient memory in mikrotik router to enable de proxy: is the error when a try to enable the proxy)…

I want to know if in the 2.9 mikrotik version the dst-nat redirect action to-dst-address option is working. (or the similar commands in mktk 2,9)

thanks in advance

Zaterio

2

What hardware do you use for Mikrotik?

3

yes, redirection works fine.
to redirect some traffic use following rule:
chain=dstnat protocol=tcp in-interface=ether1 dst-port=80 action=redirect
to-ports=8080

4

Ok in miktk 2.8 this option work fine (redirects the port 80 to the 8080 mikrotiks port), but when to this action I set to-dst-address option, the rules dont work (no redirecct to the target address),I want to know if in mktk 2.9 I put the dst-adrres option work the redirect to the web-proxy-dmz machine?

Mi Hardware:

Pentium I 250 Mhz, 60 Mb RAM, 4 NICs pci Dlink.

thanks in advance

Zaterio