Hi I have a bit of a problem with some firewall rules well one rule in particular. I am currently running 2.9.39 version of the router os and I have it set up so that I can use it in a hotspot so I have a private side and a public side of the network. The problem I have is that I want to forward all the port 80 traffic on the public network (this is the network that is being used as a hotspot) to port 8080 of my Squid proxy server with Dan’s Guardian for content filtering. The firewall accepts my rule but nothing seems to be forwarded to the squid server.
This is the current rule I am using
/ ip firewall nat
add chain=dstnat src-address=10.5.50.0/24 protocol=tcp dst-port=80
action=dst-nat to-addresses=10.0.0.162 to-ports=8080 comment=“nat to squid” disabled=no
The 10.5.50.0/24is the hotspot network that I need to be filtered and 10.0.0.162 is the squid server.
I have used a traffic monitoring program to watch the TCP traffic to see if it is being forwarded and it does not seem like it is. My first though was to change the rule but even doing some variation of the rule does not seem to work. My second guess was that the for some reason the traffic wasn’t meeting the requirements of the rule so I tried different variation including taking out all address requirements and port requirements except the destination address and port still web traffic was not filtered and yes the squid server and Dan’s guardian are both up and running because I have tested it by placing the 10.0.0.162 in the proxy setting in my web browser.