Hairpin NAT, custom settings for a begginer

RouterOS Beginner Basics
1

Some simple thing i find time consuming to setup on RouterOS so is hope for a quick and correct answer here.

From my PC 192.168.1.100 i can access my server on 192.168.1.198:22
but from my PC 192.168.1.100 i can’t access 192.168.1.198:22 using wan DNS name host.dyndns.com:22

Yes, i read about Hairpin NAT but it seems i can’t make it to work :frowning:

Can you please help me with the correct settings.
Currently i have:

/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration" \
    out-interface=iSP to-addresses=0.0.0.0
add action=dst-nat chain=dstnat dst-port=22 in-interface=iSP protocol=tcp \
    to-addresses=192.168.1.198 to-ports=22

I’m running RouterOS_v6.15 on RB951-2n.

2

try this
/ip firewall nat
add action=dst-nat chain=dstnat comment=hairpin dst-address=xxx.xxx.xxx.xxx
dst-port=22 protocol=tcp to-addresses=192.168.1.198 to-ports=22
add action=masquerade chain=srcnat dst-address-list=LocalNet out-interface=
bridge-local src-address-list=LocalNet

where xxx.xxx.xxx is your external IP
create an address list called LocalNet and add 192.168.1.0/24

if your external IP address is not static then you can use a script to update your dst-nat rule with your current IP

Rob

3

Thank you fallenwrx. It worked.
One karma for you from my side.