dst-nat routing issues

[quote=NinoM4ster post_id=793257 time=1589417574 user_id=164025]
hello. I’ve been wanting to set this up for years now but was never able to.



what I want: be able to access a local service using a public domain (eg: myproject.net instead of 192.168.10.xx).

the problem: when I do this, I cannot access ANY external services on the same port. (eg: my app runs on port 1818. if I try accessing any external service on port 1818 it ends up redirecting to the local service instead. it even works if I use google.com:1818)



I tried specifying the LAN Bridge as the Out Interface, which should logically fix the problem, but for some reason it gives me the following error:



(maybe because[color=#0000FF] I am having a dumb moment[/color] and doesn’t know where the damn packets are going to? log says “in: LAN Bridge - out: (unknown 0)”)



it’s everything on the same network, so shouldn’t the log say something like "in: LAN Bridge - out: LAN Bridge "?



I even tried setting the Dst Address to the local subnet (192.168.10.0/24) and it did set, but didn’t affect the results, which does NOT make any sense whatsoever, since the log says “192.168.10.10:xxxx->yy.yy.yy.yy:1818” (yy.yy.yy.yy being my public, external IP and 192.168.10.10 being my workstation.)



some more info: I have a masquerade rule (ip>firewall>nat), on top of everything, with no conditions. every tutorial says to use the uplink interface on ‘In. Interface’, but if I do that, I can’t access the local stuff with an external domain, which is the main thing I’m trying to do.
[/quote]
Heh taking out your frustration on the router… fixed your text for ya ! :stuck_out_tongue_winking_eye:



Not unusual to have issues attempting to reach a server from the same subnet but wanting to use your external WANIP to do so (typically via a dyndns name).

This requires hairpin nat.



If you post your config

/export hide-sensitive file=anynameyouwish



Can help verify if indeed all is setup properly.