Hairpin NAT Configuration, Need advice

RouterOS General
1

How do I access the server from my local network by its domain name over HTTPS with the following scenario?

MY CURRENT SCENARIO INFORMATION

  • RouterOS:v6.43.5
    Subnet: 192.168.1.0/24
    Server IP is 192.168.1.145, protocol tcp, port 80 & 443,
    WANIP=197.249.12.89 (static), domain name=www.erp.myserver.com


/ip firewall nat
add action=masquerade chain=srcnat comment="Hairpin NAT" disabled=no dst-address=192.168.1.0/24 src-address=192.168.1.0/24
add action=dst-nat chain=dstnat comment="Hairpin NAT" disabled=no dst-address=197.249.12.89 dst-address-type=local protocol=tcp to-addresses=192.168.1.145 to-ports=80
add action=dst-nat chain=dstnat comment="Hairpin NAT" disabled=no dst-address=197.249.12.89 dst-address-type=local protocol=tcp to-addresses=192.168.1.145 to-ports=443
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
add action=dst-nat chain=dstnat comment="ERP PORT 80 traffic" dst-address=197.249.12.89 dst-port=80 in-interface=ether1 protocol=tcp src-address-list="" to-addresses=192.168.1.145 to-ports=80
add action=dst-nat chain=dstnat comment="ERP PORT 443 traffic" dst-address=197.249.12.89 dst-port=443 in-interface=ether1 protocol=tcp to-addresses=192.168.1.145 to-ports=443
2

I had to do this once, and followed this guide successfully → http://forum.mikrotik.com/t/hairpin-nat-the-easy-way/146718/1

This is also the official docs on the subject: https://help.mikrotik.com/docs/display/ROS/NAT#NAT-HairpinNAT

3

Also note that RouterOS 6.43.5 is massively out of date and has some notable security issues. You really should update that.

4

Concur 100%, not even interested in helping until the firmware is updated to either 6.48.6 long-term stable or vers 7.4 stable.
Some light reading should get you fixed up!
https://forum.mikrotik.com/viewtopic.php?t=179343