Hi…
I am using mikrotik to forward port 25 to my mail server.
0 chain=dstnat dst-address=85.114.xx.xx protocol=tcp dst-port=25
action=dst-nat to-addresses=192.168.1.2 to-ports=25
and for a while this was ok…
But this makes source of mail is mikrotik, 192.168.1.1…and that is bad for me because of a spamassasin…
how can I make that source of packets is not mikrotik, but original address…
thank you…
You have something else going on there… The problem is not your dst-nat rule. That is fine, and I have hundreds of them, all having the source address of the actual IP, not the MT IP…
Post all your nat and mangle rules and we shall see, perhaps
ops…sorry
this is my src-nat
2 chain=srcnat dst-address=85.114.xx.xx protocol=tcp dst-port=25
action=src-nat to-addresses=192.168.1.2 to-ports=25
You shouldn’t src-nat, use dst-nat and all will be fine… dst-nat → incoming, src-nat → outgoing.
The rule you posted first will work absolutely fine for mail coming in to 85.114.x.x and being sent to 192.168.1.2
yes…it works…
but the problem is that source of packes for my mail is 192.168.1.1 that is ip address of mikrotik, but not the original source address
that’s because you are masquerading - you did that, so it works as expected =) remove your src-nat rule that NATs SMTP connections, and all should be fine