dstnat problem

RouterOS Beginner Basics
1

I have an rb133 which is working well except that I cannot get dstnat to work. The rb133 is running MikroTik RouterOS 2.9.38.

I have ether1 as the outside with ether2 as the dmz and ether3 as the main network. I have wlan1 also working fine.

I have had to put my mail and web servers on the outside ( I have iptables running on them so it is OK. )

I have for the dstnat section:

ip address add address=192.168.1.133/29 interface=ether1
ip route add dst-address=0.0.0.0 gateway=192.168.1.129
ip address add address=10.100.100.1/26 interface=ether2

ip firewall nat add chain=dstnat dst-address=192.168.1.133 protocol=tcp dst-port=22 action=dst-nat to-addresses=10.100.100.5 to-port=22 disabled=no
ip firewall nat add chain=srcnat src-address=10.100.100.5 action=src-nat to-addresses=192.168.1.133 disabled=no
ip firewall nat add chain=srcnat out-interface=ether1 action=masquerade

The srcnat part works fine. If I login to a friends machine from 10.100.100.5 It shows that I am on address 192.168.1.133. However, It will not connect to 192.168.1.133 from the outside.

Thanks for the help

Henryg

2

try defining ether1 as the interface for the dstnat rule

3

henryg -
There is no need to have

ip address add address=192.168.1.133/29 interface=ether1

on ether1. Once you do that now the MT has that IP address… Simply do the dst nat with the address you want to dst-nat from to and you’ll be fine.