I have RB450 with os version 3.31. My setup is three interface named eth0, eth1,eth3 and eth4 with eth0 going to other router and acts as default gw. Eth1 is connected to other ISP using static IP. eth4 going to local network. eth3 going to our internal server.
What i am trying to achieve is accepting incoming connection on eth1 from internet then forward it to our server
connected through eth3. All connection coming from local networkl(eth4) to internet is routed through eth0.
Currently, users from local network are already able to connect through internet through default gw(eth0). No problem at all. But connection from outside can’t be established, even pinging eth1 got dropped. I suspect this is firewall configuration problem.
This is what i have in nat table
0 chain=srcnat action=masquerade out-interface=eth1
1 chain=dstnat action=dst-nat to-addresses=192.168.70.2 to-ports=13000 dst-address=<my public ip> dst-port=13000
in mangle table
0 chain=prerouting action=mark-connection new-connection-mark=fromoutside passthrough=yes in-interface=eth1
1 chain=prerouting action=mark-routing new-routing-mark=tooutside passthrough=no connection-mark=fromoutside
/ip route > print
0 dst-address=0.0.0.0/0 gateway=192.168.100.1 interface=eth0
1 dst-address=0.0.0.0/0 gateway=<my public ip gw> interface=eth1 routing-mark=tooutside
...
/ip address> print
0 address=<my public ip> interface=eth1
1 address=<local network> interface=eth4
2 address=192.168.70.1/24 interface=eth3
3 address=192.168.100.2/29 interface=eth0
any hint?