i have config hairpin nat on my ccr1009 so that i can use ip pub to go to another device on my local network. The problem is that it only work for ip. If im using domain name it will result error page.
Here is my firewall config.
/ip firewall nat
0 chain=srcnat action=masquerade out-interface=WAN log=no log-prefix=“”
1 ;;; LAN-to-LAN
chain=srcnat action=masquerade src-address=10.0.6.0/23
dst-address=10.0.6.0/23 out-interface=bridge-local log=yes log-prefix=“”
2
chain=dstnat action=dst-nat to-addresses=10.0.7.70 to-ports=443
protocol=tcp dst-address=!10.0.6.0/23 dst-address-type=local dst-port=443
log=no log-prefix=“”
***ip 10.0.7.70 is my web server.
Any ideas is helpful.
Thanks in advance and sorry for my bad english.